$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f19facf1-4a12-311e-8e58-61e270fe2255.roa File: f19facf1-4a12-311e-8e58-61e270fe2255.roa (raw, json) Hash identifier: TRpJgzVuC6sBJuBxS3scuPr5Lm/3/hwqm/LKN8kCako= Subject key identifier: BD:A3:B9:B0:89:80:A6:6D:04:16:41:B5:36:A3:35:A7:94:D1:35:6B Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584D1B1A14A606406611C9F8E500 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f19facf1-4a12-311e-8e58-61e270fe2255.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 11090 IP address blocks: 72.35.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:14:a6:06:40:66:11:c9:f8:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=dfb5f00d-23ad-4a54-beb0-d7f6ccd0c78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:1e:1b:10:86:fb:85:98:f8:0d:51:01:c5: 1e:1e:da:2b:1c:1b:52:49:31:45:2d:c2:78:23:fc: 33:b8:d1:34:41:e8:d3:c9:35:d3:1a:2b:53:64:33: 9d:86:8c:64:b0:1a:18:fd:84:5e:45:89:0a:e1:ca: b9:8b:f8:ad:5c:c0:46:08:ef:c6:f9:41:77:17:06: 91:76:81:7d:e5:c6:37:62:8e:0d:b0:f2:04:7c:41: 01:1a:29:d8:bb:d8:83:ee:ed:0c:4e:2d:8c:a1:46: b2:e6:d3:0f:b0:7f:e3:bf:a1:94:0a:f6:e1:7e:bc: 48:13:39:1f:3d:0e:fd:9b:19:8f:63:22:24:6c:9d: 5c:d8:20:74:61:ee:63:6c:8d:dd:a6:0f:04:47:a2: dc:26:a3:1f:dd:ab:1b:91:9d:2b:4a:f9:43:79:7f: c1:91:83:27:68:2d:3c:af:20:77:2f:9c:81:fb:29: 40:58:c9:6b:7d:ca:dd:5f:ec:05:bb:3f:ea:5e:94: 5b:9f:0e:b6:61:cd:ff:76:1e:bb:3d:9c:4f:b5:29: 88:ac:ee:a3:8c:db:0b:1b:ef:83:ae:86:1a:b1:5d: 7f:4d:41:86:2b:57:b3:0f:bc:e5:f5:36:de:2b:21: 69:85:99:e4:41:d9:fb:eb:36:98:08:b7:e3:b8:4f: 53:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A3:B9:B0:89:80:A6:6D:04:16:41:B5:36:A3:35:A7:94:D1:35:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f19facf1-4a12-311e-8e58-61e270fe2255.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:dd:18:04:33:19:27:79:da:5f:ba:86:ea:0d:36:8a:9f:68: e2:01:cf:db:f4:f8:3e:a7:55:d0:d7:c5:0a:c9:d5:10:35:61: c2:26:2a:2a:6d:a7:7a:3a:d0:68:60:3b:0e:01:9c:0b:1c:bc: 33:86:27:4a:cb:7c:a8:34:01:96:6e:27:c6:77:20:d5:48:32: da:cd:4e:fb:28:45:99:cf:18:e6:78:61:40:0a:90:1f:2e:d4: 23:05:41:c2:62:a4:65:84:ad:49:bf:27:bd:4d:70:1c:4d:ae: a4:7a:0c:83:54:9b:d8:43:fd:85:51:21:2e:00:9f:f4:eb:a1: eb:96:be:d8:2a:f0:0f:0b:20:c9:fe:6a:a1:70:a0:58:92:49: 3f:18:61:6b:da:cf:ac:df:6a:a6:b5:34:1c:4d:ec:1b:e6:2c: 1f:23:58:40:f3:0a:a6:fd:f6:b4:24:60:ae:92:bf:c2:ff:e9: 7b:cf:0b:0d:0b:68:30:a5:73:ed:e3:f8:67:57:23:87:73:14: 57:47:c6:8c:0d:7d:94:2a:d6:43:5f:bb:fc:8a:63:67:84:d6: da:7c:b0:ff:53:b7:da:b3:5e:42:a8:53:5d:f8:4d:d7:a9:3e: 95:19:43:02:3a:aa:d0:08:97:b3:ca:4c:8e:5c:6f:4d:39:60: d9:3a:fc:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGhSmBkBmEcn45QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk ZGZiNWYwMGQtMjNhZC00YTU0LWJlYjAtZDdmNmNjZDBjNzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVseGxCG+4WY+A1RAcUeHtorHBtSSTFFLcJ4 I/wzuNE0QejTyTXTGitTZDOdhoxksBoY/YReRYkK4cq5i/itXMBGCO/G+UF3FwaR doF95cY3Yo4NsPIEfEEBGinYu9iD7u0MTi2MoUay5tMPsH/jv6GUCvbhfrxIEzkf PQ79mxmPYyIkbJ1c2CB0Ye5jbI3dpg8ER6LcJqMf3asbkZ0rSvlDeX/BkYMnaC08 ryB3L5yB+ylAWMlrfcrdX+wFuz/qXpRbnw62Yc3/dh67PZxPtSmIrO6jjNsLG++D roYasV1/TUGGK1ezD7zl9TbeKyFphZnkQdn76zaYCLfjuE9TXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL2jubCJgKZtBBZBtTajNaeU0TVrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZjE5ZmFjZjEtNGExMi0z MTFlLThlNTgtNjFlMjcwZmUyMjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCN0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/dGAQzGSd52l+6huoNNoqfaOIBz9v0+D6nVdDXxQrJ1RA1YcImKipt p3o60GhgOw4BnAscvDOGJ0rLfKg0AZZuJ8Z3INVIMtrNTvsoRZnPGOZ4YUAKkB8u 1CMFQcJipGWErUm/J71NcBxNrqR6DINUm9hD/YVRIS4An/TroeuWvtgq8A8LIMn+ aqFwoFiSST8YYWvaz6zfaqa1NBxN7BvmLB8jWEDzCqb99rQkYK6Sv8L/6XvPCw0L aDClc+3j+GdXI4dzFFdHxowNfZQq1kNfu/yKY2eE1tp8sP9Tt9qzXkKoU134Tdep PpUZQwI6qtAIl7PKTI5cb005YNk6/Es= -----END CERTIFICATE-----Generated at Fri Mar 13 10:53:50 2026 by rpki-client