$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa File: 666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa (raw, json) Hash identifier: kV8T83uFtFS5f8v+H31+J3F1HjImeDsYWNby4PvS+8A= Subject key identifier: A0:97:FA:82:2E:D4:E9:D9:8A:B7:24:D8:1D:90:F5:D3:DD:11:71:85 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F49763FC851DDF975A70B0440 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11090 IP address blocks: 72.35.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:3f:c8:51:dd:f9:75:a7:0b:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c25e1810-64e5-44c6-bd01-347cc5580091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:52:af:2c:58:3a:0a:d6:a8:10:fa:be:fa:9f: b0:a2:e9:fe:34:cc:cb:99:b6:94:48:5b:ac:c3:b1: fa:f6:49:72:e5:13:72:40:c9:4f:14:02:7d:ce:1a: c6:af:36:d7:2d:2d:27:88:b6:ba:00:3e:7f:55:33: 69:f3:34:53:a4:94:93:00:3a:a7:1e:03:54:1b:e2: 36:83:66:04:5b:0a:75:68:ed:40:28:bb:1f:09:bf: 50:f7:b8:3a:57:bc:d3:ac:2b:b1:68:07:6e:39:e3: 46:a8:5a:73:5d:46:14:01:08:75:5c:aa:5e:40:c6: 10:a3:3c:ed:74:17:af:1b:4f:f1:3e:e3:e6:d3:c0: 87:34:a3:3c:69:ea:c0:4e:fb:c5:19:38:1f:f7:cd: 48:08:68:77:47:76:63:e4:96:4b:4b:16:df:a1:84: cc:ac:41:3d:44:cd:c1:f7:3d:8a:fb:55:d0:a3:a2: 1a:8f:90:ac:1c:11:9c:db:e1:73:24:58:78:cb:da: 8f:48:ff:b5:bf:24:a5:c8:7f:94:a1:da:25:dd:44: 27:ed:de:e1:f2:6f:4f:4a:f8:6c:c4:ff:51:8b:50: bf:e8:1f:96:c4:d6:53:60:8c:57:25:fb:94:96:a6: aa:ab:0e:df:c3:47:d5:8c:81:1e:ce:d1:a7:6f:09: 34:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:97:FA:82:2E:D4:E9:D9:8A:B7:24:D8:1D:90:F5:D3:DD:11:71:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:51:36:63:79:35:63:34:03:2d:b8:2b:33:5e:6b:56:fc:d0: 56:a4:bf:77:8f:0d:29:41:d4:ca:9b:6a:be:ce:c7:45:13:8c: 97:2b:ff:dc:bd:c8:94:08:d9:2f:3d:35:89:11:ce:85:99:fb: d6:75:c8:14:08:45:58:91:e5:ae:19:5a:fa:59:6b:91:c6:5c: 76:da:c9:ef:7a:f5:75:31:8e:da:e1:0b:2f:03:f8:0f:c1:0f: 2d:97:bd:7e:41:12:89:12:94:bb:c9:93:34:8a:6c:25:58:94: 34:a9:79:f3:9d:7d:70:6b:55:80:d3:1d:cb:4e:a3:37:a5:c3: f6:82:86:87:0e:a5:2e:d6:07:88:db:78:cf:38:50:33:89:03: e1:c3:a3:1a:b9:f1:2e:30:a1:08:1c:af:df:c2:a6:94:d1:44: 5f:53:dd:2a:73:c4:21:13:88:8a:ba:e0:8b:c9:fb:e2:8f:b8: 36:30:c0:02:d7:90:b3:92:74:17:77:06:4b:3e:5d:15:af:c4: a1:cf:3e:91:d1:bc:a2:c9:80:cc:98:a0:ab:5e:4e:96:bf:97: 2a:ca:71:a8:94:54:f2:86:8b:a7:d1:1a:d4:3b:7a:d8:5b:21: 5a:e6:b9:eb:7d:70:c6:24:a5:10:73:34:2e:11:c0:e3:b1:72: b8:8f:36:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdj/IUd35dacLBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzI1ZTE4MTAtNjRlNS00NGM2LWJkMDEtMzQ3Y2M1NTgwMDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFKvLFg6CtaoEPq++p+woun+NMzLmbaUSFus w7H69kly5RNyQMlPFAJ9zhrGrzbXLS0niLa6AD5/VTNp8zRTpJSTADqnHgNUG+I2 g2YEWwp1aO1AKLsfCb9Q97g6V7zTrCuxaAduOeNGqFpzXUYUAQh1XKpeQMYQozzt dBevG0/xPuPm08CHNKM8aerATvvFGTgf981ICGh3R3Zj5JZLSxbfoYTMrEE9RM3B 9z2K+1XQo6Iaj5CsHBGc2+FzJFh4y9qPSP+1vySlyH+Uodol3UQn7d7h8m9PSvhs xP9Ri1C/6B+WxNZTYIxXJfuUlqaqqw7fw0fVjIEeztGnbwk05wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCX+oIu1OnZirck2B2Q9dPdEXGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNjY2ZjVkZDctNWE2ZC0z YWM0LTk1NzEtYjdlMDZiYzlkMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNRNmN5NWM0Ay24KzNea1b80Fakv3ePDSlB1Mqbar7Ox0UTjJcr/9y9 yJQI2S89NYkRzoWZ+9Z1yBQIRViR5a4ZWvpZa5HGXHbaye969XUxjtrhCy8D+A/B Dy2XvX5BEokSlLvJkzSKbCVYlDSpefOdfXBrVYDTHctOozelw/aChocOpS7WB4jb eM84UDOJA+HDoxq58S4woQgcr9/CppTRRF9T3SpzxCETiIq64IvJ++KPuDYwwALX kLOSdBd3Bks+XRWvxKHPPpHRvKLJgMyYoKteTpa/lyrKcaiUVPKGi6fRGtQ7ethb IVrmuet9cMYkpRBzNC4RwOOxcriPNkA= -----END CERTIFICATE-----Generated at Fri Sep 25 12:40:54 2026 by rpki-client