$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/25b10e5c-852c-3501-b71d-be7d75acec57.roa File: 25b10e5c-852c-3501-b71d-be7d75acec57.roa (raw, json) Hash identifier: pKc2TZUYlgXYjCgMqUAmz3PohGd1r5dz7peGmTpX8jk= Subject key identifier: F4:FC:77:7E:54:B8:AA:91:93:00:E4:15:4C:8F:39:43:8F:D9:25:BF Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584DFBD5EB5B69517B966FB1F100 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/25b10e5c-852c-3501-b71d-be7d75acec57.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 11090 IP address blocks: 72.35.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:eb:5b:69:51:7b:96:6f:b1:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=c203ccf8-0ff7-4962-bcfc-8baa4bac469d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c7:a7:a0:05:d9:1e:44:f3:1d:d6:98:fe:60: 70:b3:2a:81:bb:9e:5f:c0:38:0e:62:d5:7c:0b:cd: e9:82:62:5d:ef:95:3d:3c:7c:4e:96:03:14:d0:b2: d9:6c:0b:bc:8a:cf:60:39:98:be:29:d8:7a:f9:57: 9e:42:cf:a4:b7:20:cc:24:21:28:9b:0c:f7:3e:89: 8b:23:1a:04:c5:94:2c:64:25:3c:f9:f6:82:51:dc: b2:bc:6a:d4:29:5d:1f:7f:ba:ee:cc:1b:3e:34:db: 93:b8:5d:e9:89:cc:08:33:02:7b:3f:b7:81:9f:47: 61:73:b6:93:ba:ab:43:14:09:1b:27:d8:12:4c:52: 34:41:ae:68:82:47:9c:11:25:0e:32:8d:e1:b6:f2: 0b:df:58:c5:56:e7:c9:b2:d0:d0:78:bf:7c:7f:2f: 0a:f1:63:39:2d:7f:5e:c0:c7:ec:99:5d:88:96:f4: 73:d3:82:15:6b:66:fa:de:c5:08:49:2a:73:1a:d6: 53:da:30:f8:cc:4d:a7:04:fc:9c:76:8a:ae:3f:08: a1:a4:24:69:d3:51:05:11:1d:19:26:d0:d3:fb:20: d1:8e:60:d1:e8:a2:15:85:d3:08:bc:33:31:25:5c: 35:5d:e3:6a:b2:29:dd:df:85:20:29:03:ff:c6:0d: 87:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FC:77:7E:54:B8:AA:91:93:00:E4:15:4C:8F:39:43:8F:D9:25:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/25b10e5c-852c-3501-b71d-be7d75acec57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:3d:7f:4a:82:a3:62:57:8d:bf:b8:d2:c2:76:86:73:f6:50: 80:94:fe:fc:c9:1a:81:6d:fc:06:ff:87:7c:72:f1:a5:18:2d: e3:73:dd:be:27:2d:25:9d:4f:f6:67:f5:07:d2:ee:44:b8:b8: e5:a0:08:70:cc:84:6f:1a:31:cc:bd:83:90:22:c7:1f:cc:24: 18:be:1a:9d:ed:6c:2f:6a:55:d6:ff:24:f5:e3:e5:4b:65:37: 86:2b:41:1c:bf:9a:db:0c:cd:fd:68:12:f2:ab:b5:ff:33:7f: cb:92:3c:ca:05:43:7b:64:11:e8:6c:08:5b:c1:5b:73:b5:d1: ec:e8:35:10:07:bf:57:61:5b:7f:30:85:af:6c:d9:b3:d5:89: 1a:e8:29:35:1f:a2:63:a1:da:c9:d8:50:b4:25:78:23:bc:d7: c6:85:35:f5:23:c9:43:da:ae:37:df:79:49:b5:66:28:ae:c5: e9:19:d4:f5:c6:4f:9c:37:f0:a7:11:35:98:37:c3:6d:32:b0: f0:1f:8f:05:e8:af:28:25:b7:80:14:e4:c7:73:88:27:fe:91: a3:17:11:1a:f3:cc:79:c1:68:6b:a4:a8:74:9f:bf:97:49:96: 6f:0f:f1:f8:ef:81:eb:73:8a:03:22:d2:5c:75:b0:6b:39:02: 2a:15:32:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371etbaVF7lm+x8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk YzIwM2NjZjgtMGZmNy00OTYyLWJjZmMtOGJhYTRiYWM0NjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8enoAXZHkTzHdaY/mBwsyqBu55fwDgOYtV8 C83pgmJd75U9PHxOlgMU0LLZbAu8is9gOZi+Kdh6+VeeQs+ktyDMJCEomwz3PomL IxoExZQsZCU8+faCUdyyvGrUKV0ff7ruzBs+NNuTuF3picwIMwJ7P7eBn0dhc7aT uqtDFAkbJ9gSTFI0Qa5ogkecESUOMo3htvIL31jFVufJstDQeL98fy8K8WM5LX9e wMfsmV2IlvRz04IVa2b63sUISSpzGtZT2jD4zE2nBPycdoquPwihpCRp01EFER0Z JtDT+yDRjmDR6KIVhdMIvDMxJVw1XeNqsind34UgKQP/xg2H/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPT8d35UuKqRkwDkFUyPOUOP2SW/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvMjViMTBlNWMtODUyYy0z NTAxLWI3MWQtYmU3ZDc1YWNlYzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFSCNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALM9f0qCo2JXjb+40sJ2hnP2UICU/vzJGoFt/Ab/h3xy8aUYLeNz3b4n LSWdT/Zn9QfS7kS4uOWgCHDMhG8aMcy9g5Aixx/MJBi+Gp3tbC9qVdb/JPXj5Utl N4YrQRy/mtsMzf1oEvKrtf8zf8uSPMoFQ3tkEehsCFvBW3O10ezoNRAHv1dhW38w ha9s2bPViRroKTUfomOh2snYULQleCO818aFNfUjyUParjffeUm1ZiiuxekZ1PXG T5w38KcRNZg3w20ysPAfjwXoryglt4AU5MdziCf+kaMXERrzzHnBaGukqHSfv5dJ lm8P8fjvgetzigMi0lx1sGs5AioVMqo= -----END CERTIFICATE-----Generated at Sat Jun 13 14:26:07 2026 by rpki-client