$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/baf38e6a-d9fe-37b3-823c-aa7f115af507.roa File: baf38e6a-d9fe-37b3-823c-aa7f115af507.roa (raw, json) Hash identifier: Fbca+aicANL1BJFkZ797eCeVML8OabzEpInbCPa4xTM= Subject key identifier: CD:E0:34:BA:8A:5A:65:7F:AC:73:C0:D2:1C:41:1A:1D:6E:CD:C0:B9 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B5B0746E0B9043FB54F945C00 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/baf38e6a-d9fe-37b3-823c-aa7f115af507.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 11090 IP address blocks: 72.35.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:46:e0:b9:04:3f:b5:4f:94:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=2e389cf8-9b23-4731-9110-faf0d4b23c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:f5:31:ee:88:f9:8d:72:fe:c3:0b:88:33: 98:89:0b:24:33:80:0c:45:82:64:45:22:20:df:07: db:86:3d:b3:ec:bd:a3:be:7f:58:56:68:33:43:87: 46:30:f6:05:1b:11:9a:6e:0a:b2:4f:fe:6d:a5:5b: c2:1d:44:ff:f0:c7:07:4d:40:93:13:5e:e1:d8:51: 90:f6:d2:7e:b5:3b:8a:a4:0f:1f:b0:cd:d9:af:65: ee:ba:75:2c:ed:e0:32:df:89:c8:6f:a5:e2:72:19: b0:d1:42:b2:0c:8e:d3:30:46:af:44:0b:b8:c3:ca: b9:c2:13:76:19:70:6e:4e:8d:07:bf:1f:7f:f2:e7: 54:71:d1:95:fb:92:5d:6b:58:09:8b:2b:5f:4d:3f: f6:a0:79:b9:47:c2:7b:46:74:0d:40:11:bf:f7:f6: cd:11:e1:ab:17:c7:91:c8:c7:a3:d9:e4:11:6c:2f: ad:15:a5:77:d1:de:b5:6b:12:e6:1c:a0:bb:9d:b0: 61:50:1e:ec:e0:5a:1e:93:3e:1c:fb:20:82:ca:8f: 91:55:58:36:b5:44:24:9a:4d:2c:f7:55:44:39:79: 29:af:52:db:42:04:d1:41:99:37:75:8b:bc:df:60: a2:41:69:d1:81:cf:fd:5f:bd:a6:6f:b4:24:bd:9e: 2f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E0:34:BA:8A:5A:65:7F:AC:73:C0:D2:1C:41:1A:1D:6E:CD:C0:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/baf38e6a-d9fe-37b3-823c-aa7f115af507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:c6:f5:c8:e7:16:91:42:6e:88:4f:7a:5b:2e:d2:84:1b:6a: fa:37:17:b7:2a:66:55:96:aa:17:dd:a7:d1:e1:c1:0e:36:56: f2:53:bd:f8:6f:fa:a3:a5:0e:8c:1a:be:02:f5:bd:e7:ef:94: 82:d2:0b:b5:51:10:3e:5e:6c:3f:27:23:ea:1d:48:4b:61:78: 42:a7:8b:e4:3e:c1:ea:56:db:f5:e5:32:b7:fe:e3:28:03:5b: af:52:c4:a1:c2:1b:bf:57:7f:83:9b:83:c9:a5:e4:de:b4:08: 26:ab:10:c3:51:8f:03:60:0b:2f:46:16:8f:42:37:a7:8d:e7: 79:1e:18:da:50:0d:9e:3f:34:7d:1d:6b:aa:3a:a1:d8:3c:82: c9:06:ed:b7:69:11:bf:f7:66:14:b5:59:41:8c:ab:5a:d5:b9: 4d:25:a1:3e:43:fd:99:43:25:45:59:ad:58:e2:34:12:e5:e1: bc:c7:97:37:d8:c6:fd:94:3c:fc:0d:c6:8e:ec:e9:02:b2:ef: fb:66:9b:74:7a:16:2a:93:c5:4e:59:aa:6e:57:e1:9c:df:c2: 25:80:ce:48:44:8b:54:64:8c:42:1c:29:95:cf:3e:88:b6:fb: aa:d9:7c:76:97:f3:0e:a7:eb:ba:65:64:cd:5c:30:6b:f2:4d: 5a:69:ab:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0bguQQ/tU+UXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MmUzODljZjgtOWIyMy00NzMxLTkxMTAtZmFmMGQ0YjIzYzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT31Me6I+Y1y/sMLiDOYiQskM4AMRYJkRSIg 3wfbhj2z7L2jvn9YVmgzQ4dGMPYFGxGabgqyT/5tpVvCHUT/8McHTUCTE17h2FGQ 9tJ+tTuKpA8fsM3Zr2XuunUs7eAy34nIb6Xichmw0UKyDI7TMEavRAu4w8q5whN2 GXBuTo0Hvx9/8udUcdGV+5Jda1gJiytfTT/2oHm5R8J7RnQNQBG/9/bNEeGrF8eR yMej2eQRbC+tFaV30d61axLmHKC7nbBhUB7s4Foekz4c+yCCyo+RVVg2tUQkmk0s 91VEOXkpr1LbQgTRQZk3dYu832CiQWnRgc/9X72mb7QkvZ4v4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3gNLqKWmV/rHPA0hxBGh1uzcC5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYmFmMzhlNmEtZDlmZS0z N2IzLTgyM2MtYWE3ZjExNWFmNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnG9cjnFpFCbohPelsu0oQbavo3F7cqZlWWqhfdp9HhwQ42VvJTvfhv +qOlDowavgL1vefvlILSC7VRED5ebD8nI+odSEtheEKni+Q+wepW2/XlMrf+4ygD W69SxKHCG79Xf4Obg8ml5N60CCarEMNRjwNgCy9GFo9CN6eN53keGNpQDZ4/NH0d a6o6odg8gskG7bdpEb/3ZhS1WUGMq1rVuU0loT5D/ZlDJUVZrVjiNBLl4bzHlzfY xv2UPPwNxo7s6QKy7/tmm3R6FiqTxU5Zqm5X4ZzfwiWAzkhEi1RkjEIcKZXPPoi2 +6rZfHaX8w6n67plZM1cMGvyTVppq7E= -----END CERTIFICATE-----Generated at Tue Oct 21 07:01:05 2025 by rpki-client