$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/66a219b1-9a85-3816-b306-827ed97596c0.roa File: 66a219b1-9a85-3816-b306-827ed97596c0.roa (raw, json) Hash identifier: 7+8Qsu90qaWUR6p215vPD4QHcaiJXo7yfGlEC55dTaY= Subject key identifier: 68:AC:13:09:56:46:F2:90:50:91:F8:7C:19:A8:4E:83:90:4B:47:79 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B5B07466F6A24DFE439D87780 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/66a219b1-9a85-3816-b306-827ed97596c0.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 11090 IP address blocks: 72.35.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:46:6f:6a:24:df:e4:39:d8:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=7e645bc5-4575-450e-82a8-ac9d288cc614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d3:f5:6e:c6:12:c3:83:fa:3f:5f:84:5d:09: b8:57:c6:83:b3:d8:a7:76:5e:da:92:6c:b5:05:fe: 0f:a9:b8:6a:c9:79:3b:7b:08:7e:fe:82:d1:e1:cb: 90:d7:f4:11:da:5c:5b:f6:ef:4a:39:08:f3:b9:00: 44:56:f7:36:e3:7d:e3:6e:db:78:6e:87:b7:bc:45: dc:59:e2:ef:83:f8:48:40:46:db:a8:9e:b0:96:1e: 22:77:eb:d7:73:ae:07:b2:85:a6:41:6f:ce:10:52: 66:a7:07:f1:72:4f:ac:ec:c3:71:d9:83:73:dd:08: be:76:86:0d:24:0a:f7:a0:48:f1:69:c3:b2:3a:b0: 84:9c:5d:2f:7f:25:3e:b3:fa:ef:21:16:26:c1:94: 57:60:99:60:6c:d2:76:20:09:39:79:06:8a:cf:aa: 7c:30:a8:ee:f3:d1:e7:8a:3c:a8:99:23:89:8e:49: 23:d5:66:ca:b8:a9:67:22:8b:a9:4a:aa:be:40:34: 5a:cc:74:3e:6c:19:42:a6:22:01:ee:9b:7a:c3:6c: 3a:84:4d:14:48:92:ec:db:6c:0b:07:b3:f9:c4:58: 99:e1:b6:ed:7b:24:21:35:f1:e7:dd:1b:3e:03:d8: 79:33:14:ea:b4:23:0a:7c:60:c3:2f:79:d2:76:b7: 81:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:AC:13:09:56:46:F2:90:50:91:F8:7C:19:A8:4E:83:90:4B:47:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/66a219b1-9a85-3816-b306-827ed97596c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a6:a6:b5:c3:bb:f2:66:b6:0f:7a:3e:d6:40:55:1c:33:3c: c5:03:66:68:2c:dd:c4:40:5c:f7:52:9b:db:11:b5:0c:28:78: 59:e1:bc:86:55:cd:ed:5d:d4:c2:37:38:6a:a6:9d:c8:7f:36: aa:19:f7:2b:b4:36:22:07:5d:c3:b9:86:dc:20:5e:3b:c6:1d: 59:48:0a:d6:64:b4:0e:83:60:f3:e6:22:8f:91:57:36:4b:bb: 12:2a:79:ce:21:ff:17:86:5a:ff:4a:ef:0d:90:c9:85:d3:db: 32:f4:dd:b4:df:cb:5b:83:35:a4:ce:7a:39:f5:3a:f6:6b:11: 52:04:9b:6e:2e:82:6d:21:02:92:ee:72:58:29:32:0d:3e:bc: 11:9b:d0:ed:5a:f4:cc:c5:74:0a:29:fc:d8:6e:24:ff:68:35: 61:89:34:8c:a7:cc:c8:40:3e:72:47:dc:07:eb:1a:06:c4:2b: 21:0e:be:e4:6a:97:47:dd:83:6f:49:80:85:74:2f:53:5f:f3: 0a:09:c9:06:83:bd:f4:a3:12:65:97:ff:e3:90:83:57:73:1b: 59:cd:33:e9:79:99:6c:23:41:62:fa:b3:f3:39:73:68:16:91: f3:b2:dc:1a:7a:61:cc:0c:83:98:37:14:e6:a8:ab:ec:70:7f: cd:fb:e3:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0ZvaiTf5DnYd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk N2U2NDViYzUtNDU3NS00NTBlLTgyYTgtYWM5ZDI4OGNjNjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdP1bsYSw4P6P1+EXQm4V8aDs9indl7akmy1 Bf4PqbhqyXk7ewh+/oLR4cuQ1/QR2lxb9u9KOQjzuQBEVvc2433jbtt4boe3vEXc WeLvg/hIQEbbqJ6wlh4id+vXc64HsoWmQW/OEFJmpwfxck+s7MNx2YNz3Qi+doYN JAr3oEjxacOyOrCEnF0vfyU+s/rvIRYmwZRXYJlgbNJ2IAk5eQaKz6p8MKju89Hn ijyomSOJjkkj1WbKuKlnIoupSqq+QDRazHQ+bBlCpiIB7pt6w2w6hE0USJLs22wL B7P5xFiZ4bbteyQhNfHn3Rs+A9h5MxTqtCMKfGDDL3nSdreBpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGisEwlWRvKQUJH4fBmoToOQS0d5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNjZhMjE5YjEtOWE4NS0z ODE2LWIzMDYtODI3ZWQ5NzU5NmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESCNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmmprXDu/Jmtg96PtZAVRwzPMUDZmgs3cRAXPdSm9sRtQwoeFnhvIZV ze1d1MI3OGqmnch/NqoZ9yu0NiIHXcO5htwgXjvGHVlICtZktA6DYPPmIo+RVzZL uxIqec4h/xeGWv9K7w2QyYXT2zL03bTfy1uDNaTOejn1OvZrEVIEm24ugm0hApLu clgpMg0+vBGb0O1a9MzFdAop/NhuJP9oNWGJNIynzMhAPnJH3AfrGgbEKyEOvuRq l0fdg29JgIV0L1Nf8woJyQaDvfSjEmWX/+OQg1dzG1nNM+l5mWwjQWL6s/M5c2gW kfOy3Bp6YcwMg5g3FOaoq+xwf8374/w= -----END CERTIFICATE-----Generated at Tue Oct 21 07:02:06 2025 by rpki-client