$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/25b10e5c-852c-3501-b71d-be7d75acec57.roa File: 25b10e5c-852c-3501-b71d-be7d75acec57.roa (raw, json) Hash identifier: F5+bgS4j858okEX3rwEaymPM6L/QJxdkwCIhrTgcRW0= Subject key identifier: 5F:56:59:D8:A1:0A:BE:D0:46:8D:77:AE:CD:07:0F:B3:8F:48:92:F6 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B5B0746F664FD7869688F5F80 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/25b10e5c-852c-3501-b71d-be7d75acec57.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 11090 IP address blocks: 72.35.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:46:f6:64:fd:78:69:68:8f:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=e4f74a5c-9e32-4a9c-aac1-6ac45abf61b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c6:30:49:2c:5e:02:f7:dd:49:9c:0d:c7:2e: 04:4e:99:68:b3:76:0c:17:b8:dc:56:54:3a:ff:49: 94:a7:f0:b2:a5:df:d0:96:d8:f2:77:0a:9f:3b:37: e2:b4:6c:b7:e0:78:39:d4:73:5a:62:0f:45:bf:bb: 00:cd:85:e3:39:3d:fd:56:7f:6d:73:67:20:27:04: d1:55:7d:fc:9d:24:8e:b7:7b:2f:6f:db:7f:60:37: fa:09:75:34:c8:78:fa:da:01:f5:4f:7d:5c:da:85: 61:06:3c:67:40:f3:69:60:ec:d4:42:19:e4:71:10: e3:61:ae:de:9b:47:12:34:81:b8:b5:c5:41:2a:1c: 29:cb:5e:e6:ca:28:e2:eb:b8:13:c1:01:52:75:58: 80:9c:fd:ec:7a:ca:cb:03:35:22:df:17:34:7f:f3: b1:27:cf:8f:15:1f:fe:d2:06:01:bf:88:9d:1c:93: f6:b9:b5:d1:a1:e2:5a:f8:df:e0:4c:0c:c6:b8:ec: bd:5f:7b:89:fa:3e:05:48:17:37:0e:5e:c5:94:0c: 86:a8:6c:7c:f1:cc:2a:c4:ed:e5:49:fe:60:c3:e0: 88:3b:01:1d:3d:bf:ee:1c:97:84:f3:73:c8:76:70: 57:c9:72:a2:ac:51:51:17:4a:07:56:59:89:ad:22: b7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:56:59:D8:A1:0A:BE:D0:46:8D:77:AE:CD:07:0F:B3:8F:48:92:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/25b10e5c-852c-3501-b71d-be7d75acec57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:b8:c6:93:2e:9a:c4:04:85:45:82:78:08:ed:84:3c:48:1f: 4a:53:a6:5e:c2:65:cd:6c:f4:56:db:cc:d6:d4:eb:d2:4b:32: ba:cf:68:24:32:51:dd:e0:c9:d3:81:1a:0d:62:2b:20:eb:78: b6:8b:c7:f3:3e:e9:0f:f2:25:33:89:31:56:a2:04:04:ec:e7: cd:ce:bb:9c:73:9d:79:a4:69:41:22:63:2b:01:ff:12:a4:41: 85:87:89:3c:a5:32:c2:42:7f:50:c0:23:ef:9d:d5:a3:4f:db: 85:1f:43:c8:4a:94:3f:3e:96:37:3b:26:3b:58:b1:7b:67:23: 38:84:28:f3:92:6d:db:94:1e:a2:c0:a3:14:93:73:8d:59:67: 62:d6:da:08:8c:20:94:cc:eb:fa:4a:c6:4b:7b:d6:91:08:e4: ed:c1:ec:57:2e:82:fe:9b:2e:09:e6:51:61:2e:4e:19:61:6e: 4f:f0:56:3c:7f:f1:9b:6f:b6:5b:45:c9:18:1a:88:52:c5:2c: ce:6b:7f:59:e2:0b:0b:3a:c2:10:0a:4a:7a:d9:54:16:e8:7d: ba:19:b0:d3:44:50:58:ab:2f:8f:db:7c:22:8d:9f:e3:fa:c1: 93:b8:fc:9f:76:d8:17:37:33:c6:f9:da:25:1a:8a:7c:34:94: d6:25:51:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0b2ZP14aWiPX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk ZTRmNzRhNWMtOWUzMi00YTljLWFhYzEtNmFjNDVhYmY2MWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28YwSSxeAvfdSZwNxy4ETplos3YMF7jcVlQ6 /0mUp/Cypd/QltjydwqfOzfitGy34Hg51HNaYg9Fv7sAzYXjOT39Vn9tc2cgJwTR VX38nSSOt3svb9t/YDf6CXU0yHj62gH1T31c2oVhBjxnQPNpYOzUQhnkcRDjYa7e m0cSNIG4tcVBKhwpy17myiji67gTwQFSdViAnP3sesrLAzUi3xc0f/OxJ8+PFR/+ 0gYBv4idHJP2ubXRoeJa+N/gTAzGuOy9X3uJ+j4FSBc3Dl7FlAyGqGx88cwqxO3l Sf5gw+CIOwEdPb/uHJeE83PIdnBXyXKirFFRF0oHVlmJrSK3ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9WWdihCr7QRo13rs0HD7OPSJL2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMjViMTBlNWMtODUyYy0z NTAxLWI3MWQtYmU3ZDc1YWNlYzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSCNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJW4xpMumsQEhUWCeAjthDxIH0pTpl7CZc1s9FbbzNbU69JLMrrPaCQy Ud3gydOBGg1iKyDreLaLx/M+6Q/yJTOJMVaiBATs583Ou5xznXmkaUEiYysB/xKk QYWHiTylMsJCf1DAI++d1aNP24UfQ8hKlD8+ljc7JjtYsXtnIziEKPOSbduUHqLA oxSTc41ZZ2LW2giMIJTM6/pKxkt71pEI5O3B7Fcugv6bLgnmUWEuThlhbk/wVjx/ 8ZtvtltFyRgaiFLFLM5rf1niCws6whAKSnrZVBbofboZsNNEUFirL4/bfCKNn+P6 wZO4/J922Bc3M8b52iUainw0lNYlUb0= -----END CERTIFICATE-----Generated at Tue Oct 21 07:01:07 2025 by rpki-client