$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa File: d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa (raw, json) Hash identifier: /qRyufy9RDaNhdkkt/xrrymBk127KKqIl9i0LjTJJAw= Subject key identifier: 89:FC:5A:24:FD:06:85:74:94:DB:68:36:FD:77:F9:E7:10:AE:F1:13 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D1B1A1512777F826E8D553E00 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 11090 IP address blocks: 72.35.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:15:12:77:7f:82:6e:8d:55:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=c407a22d-5ce3-4654-aae7-5581d87f974f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:01:6b:62:49:af:ae:b3:c1:26:86:d7:9d:5e: 25:18:9d:47:59:76:fe:d3:2c:53:8d:01:5d:9a:76: 05:11:0a:79:89:7b:b4:7a:e3:44:b6:87:ce:54:21: bb:54:df:9c:c2:e1:3b:e7:88:0d:49:4a:e4:21:52: 35:38:7a:3c:38:60:cf:39:f9:35:0c:74:d9:c7:a0: ac:54:46:57:3d:58:84:21:ba:11:12:84:77:fa:3a: bc:15:24:e0:c4:d2:f7:5c:0d:2d:f5:45:07:d7:1d: 29:e2:47:e4:8b:cc:35:b9:8f:33:6f:50:94:32:73: 3c:5f:40:fc:3a:62:1b:a4:bd:4a:22:88:00:24:18: 32:d3:aa:fb:68:8f:99:7e:e1:cd:6e:44:db:b2:00: bf:d8:5e:3c:f2:b3:88:80:ff:aa:f3:21:b0:f0:28: 6b:b8:2b:2b:fd:f3:96:58:94:ab:4c:f2:8b:69:4d: d5:a5:30:dd:7c:13:67:8f:3d:03:4d:d1:1b:9b:ba: 6c:ee:1a:02:8d:2e:fb:2f:a9:76:9b:01:43:91:a0: 5a:bf:32:61:dd:74:5d:07:5e:83:84:92:e5:e3:56: 29:e8:a6:e7:c4:42:1c:25:fa:12:df:5b:86:00:17: 14:d6:10:16:2d:47:fd:c0:de:2d:14:95:73:47:bb: 92:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FC:5A:24:FD:06:85:74:94:DB:68:36:FD:77:F9:E7:10:AE:F1:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:67:1a:34:31:72:98:33:a7:0c:c4:e4:48:08:66:42:cc:fb: aa:a0:c7:d2:95:2a:c4:56:62:4a:80:58:bb:fd:9d:d8:fd:a3: 74:d7:cf:70:9e:20:de:fd:96:f8:8f:c4:d0:80:7a:7a:63:d1: ec:40:ab:f8:1a:d6:23:a9:3b:a4:c7:af:1a:80:6d:8e:84:0b: fc:e4:01:06:a7:65:32:14:c3:3a:ff:ae:2d:65:c2:0a:5f:b0: 3b:94:55:8b:17:09:6a:c4:a8:f4:28:ef:3e:a9:bc:92:17:65: c7:f5:e3:34:ed:0d:cc:46:da:2c:45:e5:1d:d7:92:e9:3b:26: 82:a9:39:24:fd:28:e3:d4:2e:ca:c0:80:99:81:41:71:1d:38: 0a:4c:a9:44:f5:69:41:3d:84:cf:ea:e3:69:f4:1b:7a:9a:8d: 7a:35:36:11:fd:f6:d4:2b:b5:92:4e:d5:38:aa:72:02:e3:bb: 06:b4:7b:58:8c:e0:6e:da:a9:5f:71:07:7a:7e:3b:5a:81:7f: 0c:30:d0:12:4e:4c:c5:f1:72:20:be:9d:12:4a:99:9f:0d:0b: de:d7:1a:84:3f:03:ee:8e:94:d3:d5:77:64:7c:ca:e1:77:c3: d7:53:a8:e0:e1:f6:65:36:f8:20:61:61:c8:1c:32:6b:37:b8: 5a:70:3a:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGhUSd3+Cbo1VPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YzQwN2EyMmQtNWNlMy00NjU0LWFhZTctNTU4MWQ4N2Y5NzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAFrYkmvrrPBJobXnV4lGJ1HWXb+0yxTjQFd mnYFEQp5iXu0euNEtofOVCG7VN+cwuE754gNSUrkIVI1OHo8OGDPOfk1DHTZx6Cs VEZXPViEIboREoR3+jq8FSTgxNL3XA0t9UUH1x0p4kfki8w1uY8zb1CUMnM8X0D8 OmIbpL1KIogAJBgy06r7aI+ZfuHNbkTbsgC/2F488rOIgP+q8yGw8ChruCsr/fOW WJSrTPKLaU3VpTDdfBNnjz0DTdEbm7ps7hoCjS77L6l2mwFDkaBavzJh3XRdB16D hJLl41Yp6KbnxEIcJfoS31uGABcU1hAWLUf9wN4tFJVzR7uSywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIn8WiT9BoV0lNtoNv13+ecQrvETMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZDFhMmMxMGQtY2NhMC0z ZmEzLTg3MTItZTY5MjczYjQ2YjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9nGjQxcpgzpwzE5EgIZkLM+6qgx9KVKsRWYkqAWLv9ndj9o3TXz3Ce IN79lviPxNCAenpj0exAq/ga1iOpO6THrxqAbY6EC/zkAQanZTIUwzr/ri1lwgpf sDuUVYsXCWrEqPQo7z6pvJIXZcf14zTtDcxG2ixF5R3Xkuk7JoKpOST9KOPULsrA gJmBQXEdOApMqUT1aUE9hM/q42n0G3qajXo1NhH99tQrtZJO1TiqcgLjuwa0e1iM 4G7aqV9xB3p+O1qBfwww0BJOTMXxciC+nRJKmZ8NC97XGoQ/A+6OlNPVd2R8yuF3 w9dTqODh9mU2+CBhYcgcMms3uFpwOpQ= -----END CERTIFICATE-----Generated at Fri Mar 13 10:53:06 2026 by rpki-client