$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/007f1617-e313-3e2f-97b8-0dcc7c385c83.roa File: 007f1617-e313-3e2f-97b8-0dcc7c385c83.roa (raw, json) Hash identifier: 40U5O86tmp8aXeKe6StIk6lRnws8UL45OYMTeA/eAws= Subject key identifier: A1:1D:49:CA:86:EF:D7:0F:8B:C0:23:66:B6:3D:38:BC:F5:7E:E1:79 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584DFBD5EACE707C2C9C45BB0B80 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/007f1617-e313-3e2f-97b8-0dcc7c385c83.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 11090 IP address blocks: 72.35.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:ea:ce:70:7c:2c:9c:45:bb:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=53f09472-b867-4162-8fc7-e06c2b71c03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:ad:3c:7a:b2:7e:d2:a9:ee:59:b2:bc:74: 37:3d:50:de:b4:b3:74:bc:28:36:c0:d0:2c:7d:9a: 14:b5:86:5c:8a:31:6a:9b:d0:7b:81:c8:d1:96:66: 91:76:7f:e0:2f:cc:70:e9:34:34:9c:27:1b:cb:9e: 72:e4:c7:bd:9c:32:d2:4b:83:e9:f1:19:34:a1:d4: b1:4d:cd:94:ee:17:0d:3a:e7:52:a8:18:95:72:f3: 84:b0:f0:bc:96:a4:5b:3e:bb:43:bb:e1:e5:ee:46: be:06:96:36:4e:92:d8:2a:60:20:73:2e:72:7e:cf: 24:86:de:1c:48:68:e9:7a:7c:e9:06:0e:32:7c:f5: 9f:53:7c:3e:d0:d6:9d:1e:c0:00:4e:a2:0d:84:fd: fa:14:8b:d4:25:ab:3e:61:5f:e0:e3:2e:4c:96:95: 5f:85:3c:9e:45:df:b0:2a:91:81:43:e1:6c:ef:88: bc:92:bf:bd:22:92:3b:1d:9f:26:22:62:c0:6a:c1: 01:87:33:6d:f4:d8:3d:23:31:45:54:ad:40:5d:60: d0:b2:37:2c:fc:7b:e8:0d:d1:26:6a:f6:46:55:fd: 7f:8d:60:e2:55:a9:10:0b:7a:15:f1:8f:0f:0e:65: 53:ea:ac:d8:1b:32:84:0d:33:d5:bf:04:67:82:40: 83:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:1D:49:CA:86:EF:D7:0F:8B:C0:23:66:B6:3D:38:BC:F5:7E:E1:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/007f1617-e313-3e2f-97b8-0dcc7c385c83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:cf:be:20:7e:c5:da:8a:6e:26:1c:23:63:95:d8:08:5d:00: 94:1e:6d:45:c6:a4:47:4b:6c:ce:ed:8d:af:2a:2d:4e:e1:56: 9a:c5:38:4d:fb:d6:24:68:d9:83:e6:16:99:8c:6e:85:12:f1: b9:bf:f9:bc:d3:7a:92:38:01:2a:44:72:b9:2d:31:71:ce:6a: 9f:2f:ac:ee:b5:46:c8:b2:77:de:a2:b9:31:a4:ac:2b:da:8c: 1a:88:c9:13:fb:a0:25:b8:89:b0:aa:49:00:8c:89:5b:43:91: f7:c8:86:92:64:ca:84:a1:45:90:10:ec:92:31:3d:97:fc:fa: d9:ee:98:78:92:d3:23:49:54:06:e9:47:17:b2:bf:7a:e0:c0: 77:0c:3a:c6:70:01:8a:9a:c7:53:bf:19:b7:4e:76:9e:23:4e: 50:1c:8d:8e:ae:2c:9c:db:a1:4d:45:5f:d7:1c:ad:b4:3e:7c: 5e:6a:39:d6:68:6e:18:0d:dd:36:f4:1c:c2:3a:31:b7:16:db: 0e:a2:30:2e:cb:40:be:7f:89:85:4b:4b:38:da:b1:26:ce:5c: 2a:45:fb:14:f0:52:76:89:c0:eb:6b:a9:e4:c6:67:bb:35:de: ad:e9:2f:79:55:9d:9a:cc:b5:b0:12:b1:92:b0:27:b8:89:e4: 12:ba:72:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371erOcHwsnEW7C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk NTNmMDk0NzItYjg2Ny00MTYyLThmYzctZTA2YzJiNzFjMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8KtPHqyftKp7lmyvHQ3PVDetLN0vCg2wNAs fZoUtYZcijFqm9B7gcjRlmaRdn/gL8xw6TQ0nCcby55y5Me9nDLSS4Pp8Rk0odSx Tc2U7hcNOudSqBiVcvOEsPC8lqRbPrtDu+Hl7ka+BpY2TpLYKmAgcy5yfs8kht4c SGjpenzpBg4yfPWfU3w+0NadHsAATqINhP36FIvUJas+YV/g4y5MlpVfhTyeRd+w KpGBQ+Fs74i8kr+9IpI7HZ8mImLAasEBhzNt9Ng9IzFFVK1AXWDQsjcs/HvoDdEm avZGVf1/jWDiVakQC3oV8Y8PDmVT6qzYGzKEDTPVvwRngkCDWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKEdScqG79cPi8AjZrY9OLz1fuF5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMDA3ZjE2MTctZTMxMy0z ZTJmLTk3YjgtMGRjYzdjMzg1YzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCN8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPPviB+xdqKbiYcI2OV2AhdAJQebUXGpEdLbM7tja8qLU7hVprFOE37 1iRo2YPmFpmMboUS8bm/+bzTepI4ASpEcrktMXHOap8vrO61Rsiyd96iuTGkrCva jBqIyRP7oCW4ibCqSQCMiVtDkffIhpJkyoShRZAQ7JIxPZf8+tnumHiS0yNJVAbp Rxeyv3rgwHcMOsZwAYqax1O/GbdOdp4jTlAcjY6uLJzboU1FX9ccrbQ+fF5qOdZo bhgN3Tb0HMI6MbcW2w6iMC7LQL5/iYVLSzjasSbOXCpF+xTwUnaJwOtrqeTGZ7s1 3q3pL3lVnZrMtbASsZKwJ7iJ5BK6cjA= -----END CERTIFICATE-----Generated at Sat Jun 13 12:59:48 2026 by rpki-client