$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa File: 7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa (raw, json) Hash identifier: M8cZVtQ+Ry23aCsmqkVbvFCVqe1MeslBkcrPh+kB3RE= Subject key identifier: 32:A4:81:EF:4B:CB:D9:77:EB:9E:E0:5C:DC:A5:4B:F7:40:6F:55:89 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B5B0746CE41234D64661280F0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 11090 IP address blocks: 72.35.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:46:ce:41:23:4d:64:66:12:80:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=aff37a07-4ce6-486b-94fc-2bf2ef2390a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fb:c9:93:51:08:82:65:fb:f5:7b:71:f4:7b: 06:6c:b8:3b:5f:7f:4d:16:a2:01:94:74:26:05:e7: dd:9a:dd:bd:e0:20:75:4a:e9:3f:25:e8:ca:3d:b4: ab:b8:85:65:71:48:d7:f7:71:e5:df:47:0d:7e:a2: 78:34:47:ed:a5:e2:dd:9f:03:94:f3:6c:7a:da:c6: 9e:9d:93:a9:79:b9:50:46:21:60:9e:6c:e8:19:92: 76:88:84:5a:cf:c4:7a:3b:a7:4e:a1:51:3d:85:f0: 78:47:41:2b:69:53:f7:d1:6a:3e:f7:3f:f8:1f:8e: 67:24:4e:c3:f0:96:41:da:8a:1f:65:10:86:bd:5d: 75:34:97:fb:6d:8c:55:93:66:3e:ac:4c:1f:8a:3c: db:ca:1b:5f:2a:4e:5c:f4:5f:aa:78:33:3d:a7:80: f0:b9:ef:df:3a:87:bc:9e:95:23:43:e6:c3:79:ac: 14:e2:c1:2d:55:5c:fc:4c:e4:1f:92:be:7b:b3:98: cf:ba:e8:75:2a:65:10:1e:99:70:65:ea:61:6a:55: 39:d8:f9:7f:a0:19:08:ee:39:f5:62:68:52:b2:88: 6d:23:94:cc:f3:24:1a:95:87:8b:a7:a1:de:cd:a2: 6e:c0:ab:a6:e6:74:9b:bb:7d:9b:7d:a9:f9:35:c0: 2b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A4:81:EF:4B:CB:D9:77:EB:9E:E0:5C:DC:A5:4B:F7:40:6F:55:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:8a:9d:ab:84:02:5e:8e:1f:5f:fb:0a:bc:05:38:1e:51:96: e6:07:bf:41:c3:19:59:2b:59:f9:31:d4:f0:88:bf:86:8d:2e: 1c:19:50:c0:4a:8a:13:a0:b0:dd:35:cc:ef:0c:9e:2a:bd:60: 53:6e:0d:65:f0:98:b9:1e:92:61:ad:dd:87:7c:09:d3:88:ef: b1:51:d1:05:ad:2a:92:04:9b:82:37:08:eb:d9:c1:20:ed:0e: c3:3c:37:ef:c1:b5:e4:f4:23:b7:c1:bb:a0:5e:ef:ac:7e:bd: 3c:e1:16:e7:e9:44:55:8b:9d:08:66:0b:7f:6e:9a:70:bd:db: de:e9:ec:47:6e:f8:f2:a0:61:51:a5:df:34:53:95:37:a2:7b: cf:2f:ee:50:16:f1:39:08:29:10:db:3a:b6:57:5d:3f:8e:46: ae:d4:21:4c:46:7d:a1:f2:9d:09:db:73:62:e8:13:9e:6f:21: ea:3a:91:be:04:29:de:4a:7e:31:b2:b6:90:4a:63:9f:f1:bc: 4f:3d:54:a0:27:7b:0c:58:6c:66:55:88:59:d5:f7:a7:d8:3f: 1d:3a:c3:59:7e:eb:89:57:2e:7e:13:03:d6:63:d9:ee:ae:5e: 10:26:fa:5a:56:02:30:74:ba:8b:5c:53:81:a2:ba:ee:51:f3: b1:b5:9d:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0bOQSNNZGYSgPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YWZmMzdhMDctNGNlNi00ODZiLTk0ZmMtMmJmMmVmMjM5MGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfvJk1EIgmX79Xtx9HsGbLg7X39NFqIBlHQm Befdmt294CB1Suk/JejKPbSruIVlcUjX93Hl30cNfqJ4NEftpeLdnwOU82x62sae nZOpeblQRiFgnmzoGZJ2iIRaz8R6O6dOoVE9hfB4R0EraVP30Wo+9z/4H45nJE7D 8JZB2oofZRCGvV11NJf7bYxVk2Y+rEwfijzbyhtfKk5c9F+qeDM9p4Dwue/fOoe8 npUjQ+bDeawU4sEtVVz8TOQfkr57s5jPuuh1KmUQHplwZephalU52Pl/oBkI7jn1 YmhSsohtI5TM8yQalYeLp6HezaJuwKum5nSbu32bfan5NcArYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKkge9Ly9l3657gXNylS/dAb1WJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvN2UyN2QwM2EtYWFmMC0z MjViLWIxNTAtMzAwYzFhMDFiN2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSCNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiKnauEAl6OH1/7CrwFOB5RluYHv0HDGVkrWfkx1PCIv4aNLhwZUMBK ihOgsN01zO8Mniq9YFNuDWXwmLkekmGt3Yd8CdOI77FR0QWtKpIEm4I3COvZwSDt DsM8N+/BteT0I7fBu6Be76x+vTzhFufpRFWLnQhmC39umnC9297p7Edu+PKgYVGl 3zRTlTeie88v7lAW8TkIKRDbOrZXXT+ORq7UIUxGfaHynQnbc2LoE55vIeo6kb4E Kd5KfjGytpBKY5/xvE89VKAnewxYbGZViFnV96fYPx06w1l+64lXLn4TA9Zj2e6u XhAm+lpWAjB0uotcU4Giuu5R87G1nQw= -----END CERTIFICATE-----Generated at Tue Oct 21 04:44:19 2025 by rpki-client