$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa File: b901d0b0-12e7-3431-9cd8-0764317e0506.roa (raw, json) Hash identifier: pjpwvLVXLIM/v3IE6Io9pwFL/0Z83y/6NwEURKiUbMQ= Subject key identifier: 42:A7:8E:9E:8A:03:0D:57:FC:1A:5F:89:52:CF:4A:10:1A:10:78:A1 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B5B074680C2ED8B2F51400D00 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 11090 IP address blocks: 72.35.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:46:80:c2:ed:8b:2f:51:40:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=9c54a250-8d86-42fa-9721-29e6c51fc2d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9d:6c:10:40:5d:d9:d2:1e:e8:e4:ca:67:eb: 8c:8d:40:08:23:5b:f6:66:e2:1d:63:cb:28:c4:f5: e7:8f:af:19:b6:f4:19:ad:8b:1d:b1:0c:e3:ea:1d: 62:66:dd:b0:46:e1:1e:8b:72:55:cd:4f:83:06:bc: 5e:93:bb:41:c7:43:7a:06:02:1f:0e:da:f6:a7:ac: 7e:5c:75:dd:14:c0:47:bf:82:66:37:04:38:8b:44: 66:ce:ee:e7:54:dc:d8:2b:95:00:2d:38:70:ee:c7: 1d:ba:82:d9:59:4b:af:55:53:c9:63:d5:aa:e2:0f: 61:f7:4d:3d:48:c5:96:de:9b:19:04:f2:2f:29:29: 2f:00:94:97:f3:1d:71:c0:4a:c5:7d:de:28:7b:96: fe:63:f3:2f:16:92:f4:2b:27:9d:1f:d3:37:54:82: 06:6c:64:67:40:81:c9:05:15:bf:8e:7d:74:a9:a7: 01:d9:c4:41:83:7a:49:b0:23:aa:55:35:8b:80:fa: a8:7b:d4:76:57:c2:f2:69:72:6a:41:e5:84:75:e3: 65:a2:6f:1f:77:80:53:78:8c:0d:dd:5e:13:4e:49: 56:e1:20:25:82:d8:ad:40:21:bb:76:62:af:72:f3: d1:ca:be:33:37:2b:ce:f2:3d:ec:90:57:69:03:de: a9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A7:8E:9E:8A:03:0D:57:FC:1A:5F:89:52:CF:4A:10:1A:10:78:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:1e:d8:12:ba:b1:9b:a5:c2:16:93:68:dc:36:10:40:54:cb: 9a:07:21:3f:31:31:92:ef:ad:03:a6:f1:af:9e:30:2a:b5:65: 1a:82:80:23:b8:96:f7:2c:b8:6c:5b:37:71:dc:8d:41:b1:5e: e6:b6:bc:3c:a6:99:e6:11:e1:46:8f:ee:34:84:cc:98:71:0a: 85:6f:73:40:19:36:03:0f:96:87:a3:f2:66:f0:dc:0c:44:22: 6f:14:6a:22:68:8f:f3:c5:26:2c:02:c4:1a:4e:5d:60:4d:3a: 31:6a:e6:bd:73:c0:c1:c6:a4:4d:92:ce:ad:42:1f:43:0b:e2: 03:38:c5:c0:61:54:ec:25:4f:9b:b9:55:f5:ee:63:f4:2b:a3: 26:de:8b:03:08:49:53:ee:10:da:ad:13:40:92:94:7f:f1:ca: e9:34:31:06:ca:1a:88:b2:1e:8d:51:b3:b0:59:13:fa:a3:75: 1d:ef:3a:77:c1:6d:2a:56:31:d7:82:60:1b:2f:69:2a:df:6c: 46:de:5f:f7:0b:22:cc:bb:e8:d9:c7:79:f8:fb:62:8d:99:68: e7:e6:2f:17:d2:29:ad:17:84:ed:8b:c6:ce:fd:37:12:ec:42: 3b:05:ba:16:02:b8:89:c8:66:6e:18:32:e5:8c:d0:a2:30:26: 16:2d:4a:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0aAwu2LL1FADQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk OWM1NGEyNTAtOGQ4Ni00MmZhLTk3MjEtMjllNmM1MWZjMmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ1sEEBd2dIe6OTKZ+uMjUAII1v2ZuIdY8so xPXnj68ZtvQZrYsdsQzj6h1iZt2wRuEei3JVzU+DBrxek7tBx0N6BgIfDtr2p6x+ XHXdFMBHv4JmNwQ4i0Rmzu7nVNzYK5UALThw7scduoLZWUuvVVPJY9Wq4g9h9009 SMWW3psZBPIvKSkvAJSX8x1xwErFfd4oe5b+Y/MvFpL0KyedH9M3VIIGbGRnQIHJ BRW/jn10qacB2cRBg3pJsCOqVTWLgPqoe9R2V8LyaXJqQeWEdeNlom8fd4BTeIwN 3V4TTklW4SAlgtitQCG7dmKvcvPRyr4zNyvO8j3skFdpA96pKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKnjp6KAw1X/BpfiVLPShAaEHihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYjkwMWQwYjAtMTJlNy0z NDMxLTljZDgtMDc2NDMxN2UwNTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAe2BK6sZulwhaTaNw2EEBUy5oHIT8xMZLvrQOm8a+eMCq1ZRqCgCO4 lvcsuGxbN3HcjUGxXua2vDymmeYR4UaP7jSEzJhxCoVvc0AZNgMPloej8mbw3AxE Im8UaiJoj/PFJiwCxBpOXWBNOjFq5r1zwMHGpE2Szq1CH0ML4gM4xcBhVOwlT5u5 VfXuY/QroybeiwMISVPuENqtE0CSlH/xyuk0MQbKGoiyHo1Rs7BZE/qjdR3vOnfB bSpWMdeCYBsvaSrfbEbeX/cLIsy76NnHefj7Yo2ZaOfmLxfSKa0XhO2Lxs79NxLs QjsFuhYCuInIZm4YMuWM0KIwJhYtSjE= -----END CERTIFICATE-----Generated at Tue Oct 21 06:55:33 2025 by rpki-client