$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/17ce7101-25e6-3b86-8cb7-e748ae8f9be8.roa File: 17ce7101-25e6-3b86-8cb7-e748ae8f9be8.roa (raw, json) Hash identifier: bucaOIy7eE9GB9tD1zjgvQUhii+Qkipg6e0sU0NlomI= Subject key identifier: 47:EB:3E:8B:75:97:24:C2:58:26:5B:98:EB:44:EA:A6:5F:D8:B9:7F Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B5B07470841CC664504C38680 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/17ce7101-25e6-3b86-8cb7-e748ae8f9be8.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 11090 IP address blocks: 72.35.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:47:08:41:cc:66:45:04:c3:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=7a543a77-bf54-46d1-b0f8-00e45022bd1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e3:ea:23:57:c8:e7:c8:43:7a:43:5d:17:58: 70:94:06:70:6f:78:8c:7a:60:6a:55:58:72:b7:56: eb:fb:05:9b:4b:0a:89:47:1a:f5:b8:bb:1f:49:35: 6a:b0:0c:e7:e9:7f:20:84:67:b4:5c:39:d4:9c:da: 2d:e5:fa:ed:b3:03:52:a8:a8:24:2c:9b:0a:d0:0b: aa:ec:9b:47:af:b8:d1:19:46:bd:b2:81:9b:46:5a: 5e:c9:55:f7:a2:ff:f3:cd:3c:96:9a:b8:21:62:e0: 6d:bb:c5:ae:57:f6:69:33:98:f0:6e:7c:e8:bf:2c: 14:ee:49:b2:7a:fb:79:47:5c:58:d7:84:51:f0:9a: 8a:51:78:f1:e9:d8:8d:ba:29:e1:3a:a3:47:c8:84: b9:4e:00:b2:0c:27:7e:d7:75:62:1c:76:b4:66:3b: a3:b8:ac:28:61:1b:9c:f6:06:67:16:72:ad:04:f8: ba:7a:16:bd:64:17:bb:dc:e9:1a:42:56:20:a3:11: 44:07:bd:3a:2c:87:6b:1e:e0:d5:18:5d:69:2e:4d: 80:1a:5a:2a:f6:9d:f9:88:15:86:bf:09:17:2f:58: 5d:ac:69:5e:11:c3:fc:46:6c:68:15:89:51:00:b7: 11:e0:38:79:2e:1e:c8:87:a3:1f:83:da:e8:c4:f1: fd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:EB:3E:8B:75:97:24:C2:58:26:5B:98:EB:44:EA:A6:5F:D8:B9:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/17ce7101-25e6-3b86-8cb7-e748ae8f9be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.102.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:2a:24:d8:5b:ad:10:3c:ef:65:7d:c8:1c:5a:c5:35:45:35: fd:d8:50:d9:2b:78:25:61:0b:7c:f3:99:fc:c5:ef:af:57:01: fe:7e:fe:51:ef:a8:05:4f:63:1b:e8:6a:ba:77:de:92:af:6f: 3e:1c:67:0f:7a:97:bd:71:b4:df:cf:4c:94:8c:df:d7:d2:68: 86:15:df:27:8b:05:87:c6:b1:fe:30:a5:eb:e0:6b:42:4a:73: 6a:ef:e2:2d:f3:04:b7:ba:9c:dd:ce:1e:d0:bf:3d:ae:96:1b: af:68:46:2d:87:3f:39:56:90:e1:ea:85:89:0a:88:3e:58:8f: 87:a0:3e:d4:ab:7e:03:85:55:59:20:3b:6b:15:c9:9a:cf:49: c3:88:72:1b:ac:d4:b8:a0:ed:15:32:19:c3:fc:5d:c8:01:31: 16:67:af:f1:a7:3b:d6:33:4b:89:48:b5:f2:01:9e:c5:a4:42: 72:3d:9e:13:9e:89:9d:c6:07:c9:af:2f:b9:28:68:eb:7f:8b: de:54:41:de:8a:49:f3:fd:00:b3:d3:b4:74:d6:43:e6:89:1d: a1:95:0c:8f:2c:53:bd:de:22:91:47:9b:1c:2d:94:cd:fb:82: 7d:3d:5d:0f:62:49:b6:b8:8b:d4:4b:c9:ae:9c:95:6b:6d:74: 0d:7d:fb:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0cIQcxmRQTDhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk N2E1NDNhNzctYmY1NC00NmQxLWIwZjgtMDBlNDUwMjJiZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmePqI1fI58hDekNdF1hwlAZwb3iMemBqVVhy t1br+wWbSwqJRxr1uLsfSTVqsAzn6X8ghGe0XDnUnNot5frtswNSqKgkLJsK0Auq 7JtHr7jRGUa9soGbRlpeyVX3ov/zzTyWmrghYuBtu8WuV/ZpM5jwbnzovywU7kmy evt5R1xY14RR8JqKUXjx6diNuinhOqNHyIS5TgCyDCd+13ViHHa0ZjujuKwoYRuc 9gZnFnKtBPi6eha9ZBe73OkaQlYgoxFEB706LIdrHuDVGF1pLk2AGloq9p35iBWG vwkXL1hdrGleEcP8RmxoFYlRALcR4Dh5Lh7Ih6Mfg9roxPH93wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfrPot1lyTCWCZbmOtE6qZf2Ll/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMTdjZTcxMDEtMjVlNi0z Yjg2LThjYjctZTc0OGFlOGY5YmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSCNmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALkqJNhbrRA872V9yBxaxTVFNf3YUNkreCVhC3zzmfzF769XAf5+/lHv qAVPYxvoarp33pKvbz4cZw96l71xtN/PTJSM39fSaIYV3yeLBYfGsf4wpevga0JK c2rv4i3zBLe6nN3OHtC/Pa6WG69oRi2HPzlWkOHqhYkKiD5Yj4egPtSrfgOFVVkg O2sVyZrPScOIchus1Lig7RUyGcP8XcgBMRZnr/GnO9YzS4lItfIBnsWkQnI9nhOe iZ3GB8mvL7koaOt/i95UQd6KSfP9ALPTtHTWQ+aJHaGVDI8sU73eIpFHmxwtlM37 gn09XQ9iSba4i9RLya6clWttdA19+/M= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:43 2025 by rpki-client