$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9859d862-4d98-35a1-89c4-8fbd5124fac9.roa File: 9859d862-4d98-35a1-89c4-8fbd5124fac9.roa (raw, json) Hash identifier: 1YnWXBNujrV+KiZ8PXUARvcvzcytRrcKoid84ziVfBM= Subject key identifier: EF:C1:22:F8:B1:1D:20:84:F5:93:13:0F:26:C2:E2:42:23:C0:B7:35 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B5B07469557669BB490CBD680 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9859d862-4d98-35a1-89c4-8fbd5124fac9.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 11090 IP address blocks: 72.35.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:46:95:57:66:9b:b4:90:cb:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=8ba2f8e0-b990-41ee-b221-2db1d56e1027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:17:ee:c1:ac:4a:3e:26:6b:c1:04:9a:ff:f2: a1:63:65:8c:12:d3:64:8e:6a:8a:92:8a:b9:8a:28: a3:6d:4f:91:f0:09:99:06:9c:1a:76:c9:a3:24:14: 8b:eb:ec:63:a1:29:41:81:9d:ed:4b:e9:7b:cd:33: 1f:17:59:c1:39:41:73:bc:1d:d1:04:ac:71:d5:c1: 36:14:81:18:9b:6f:b9:a1:4d:5e:c5:9a:06:f4:7b: 56:9f:e9:3a:8f:10:a2:e6:cb:a2:64:05:5d:33:62: 19:6e:bf:85:e4:9c:53:2e:47:78:06:d6:88:b1:26: 0f:c2:fc:b8:46:70:bd:8f:3c:67:da:5b:ac:5a:7e: db:82:39:b4:4f:e4:be:f7:ff:4f:fa:27:3c:e7:5f: 14:7b:1b:ce:83:6f:6b:74:64:b4:a3:72:0a:7f:09: 11:28:f0:1d:e4:1d:14:bf:30:71:69:24:e9:57:9b: d5:2c:8a:31:c9:c5:c2:c2:85:68:33:16:0c:a4:a5: a5:7f:68:06:aa:cf:2a:a2:b9:d9:60:40:91:57:0b: df:c3:a8:12:84:40:22:d9:ff:44:bb:f6:bf:66:9c: bf:50:70:fa:8d:40:4b:b4:f4:c4:de:68:99:18:bc: 5c:bb:42:ad:25:75:37:48:0b:24:5d:34:78:68:72: 8e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C1:22:F8:B1:1D:20:84:F5:93:13:0F:26:C2:E2:42:23:C0:B7:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9859d862-4d98-35a1-89c4-8fbd5124fac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:86:cf:e3:60:9e:42:55:9e:5a:45:a7:9d:bc:98:bf:5d:04: 88:6a:1f:5a:48:6f:34:41:e7:8c:4b:14:1e:87:e0:d3:cf:dc: 1b:52:6b:fd:33:dc:65:a0:80:49:2b:47:b7:70:dc:42:2b:14: 66:f2:6e:3e:e1:5a:3a:3c:44:13:e4:40:81:47:1a:9f:3f:6b: 29:6a:ee:db:52:4d:97:ba:b3:e6:73:1f:40:64:0b:30:31:68: cc:62:20:5b:44:45:4a:c9:a8:25:08:9a:c7:ec:76:68:49:80: aa:fc:d0:06:bd:00:b3:a9:21:ea:71:7f:dd:77:05:d4:f0:be: fc:16:13:ec:9a:1a:dd:8d:f9:e8:a6:dd:f1:50:e7:82:e9:0b: 7d:67:5b:97:bd:28:87:b9:d1:29:8b:43:91:70:60:3b:2d:fe: a1:3e:27:d0:d8:34:b1:a8:68:fa:e2:d9:15:53:5a:2f:b2:3c: 6e:21:12:6e:72:b0:03:cc:f8:71:b4:d2:3c:7f:8a:33:ae:92: c9:14:6c:ff:07:24:af:65:34:68:6d:91:a4:c4:f1:d1:8d:45: e7:28:34:51:a6:5b:d4:90:ae:ea:20:0b:01:2a:6c:4a:60:09: 37:4c:d9:4f:85:68:a0:00:35:77:b9:cf:27:c6:2c:80:8e:70: 41:ae:a5:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0aVV2abtJDL1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk OGJhMmY4ZTAtYjk5MC00MWVlLWIyMjEtMmRiMWQ1NmUxMDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthfuwaxKPiZrwQSa//KhY2WMEtNkjmqKkoq5 iiijbU+R8AmZBpwadsmjJBSL6+xjoSlBgZ3tS+l7zTMfF1nBOUFzvB3RBKxx1cE2 FIEYm2+5oU1exZoG9HtWn+k6jxCi5suiZAVdM2IZbr+F5JxTLkd4BtaIsSYPwvy4 RnC9jzxn2lusWn7bgjm0T+S+9/9P+ic8518UexvOg29rdGS0o3IKfwkRKPAd5B0U vzBxaSTpV5vVLIoxycXCwoVoMxYMpKWlf2gGqs8qornZYECRVwvfw6gShEAi2f9E u/a/Zpy/UHD6jUBLtPTE3miZGLxcu0KtJXU3SAskXTR4aHKOuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/BIvixHSCE9ZMTDybC4kIjwLc1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvOTg1OWQ4NjItNGQ5OC0z NWExLTg5YzQtOGZiZDUxMjRmYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+Gz+NgnkJVnlpFp528mL9dBIhqH1pIbzRB54xLFB6H4NPP3BtSa/0z 3GWggEkrR7dw3EIrFGbybj7hWjo8RBPkQIFHGp8/aylq7ttSTZe6s+ZzH0BkCzAx aMxiIFtERUrJqCUImsfsdmhJgKr80Aa9ALOpIepxf913BdTwvvwWE+yaGt2N+eim 3fFQ54LpC31nW5e9KIe50SmLQ5FwYDst/qE+J9DYNLGoaPri2RVTWi+yPG4hEm5y sAPM+HG00jx/ijOukskUbP8HJK9lNGhtkaTE8dGNRecoNFGmW9SQruogCwEqbEpg CTdM2U+FaKAANXe5zyfGLICOcEGupaM= -----END CERTIFICATE-----Generated at Tue Oct 21 02:14:28 2025 by rpki-client