$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa File: 666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa (raw, json) Hash identifier: TxGNiWEjUMqTrzHP38ipkKUXS2jGD6y+tsoTRIf98MQ= Subject key identifier: DD:5D:45:98:F4:3D:D2:C4:19:0B:F9:93:AF:48:EA:CF:95:53:17:15 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584A7A4B48EA7503C4BE17A78280 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 11090 IP address blocks: 72.35.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:48:ea:75:03:c4:be:17:a7:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=27e5e093-8e58-45e2-aa9e-a317171ffbe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:27:71:79:17:9d:d6:88:61:ab:c7:2f:3e:1e: 98:73:30:b1:70:e7:d7:88:b1:a6:81:f5:91:d0:83: 01:d8:e1:c6:3b:5f:74:b6:97:c7:9d:7e:72:47:1d: 8d:34:6a:39:83:39:47:0c:20:44:8f:d2:99:34:17: 2d:bc:12:2e:2a:ea:f9:da:12:1a:ca:47:66:07:3b: e5:f2:bf:e5:81:4b:b2:0d:ee:a9:6d:06:17:73:3d: c8:7e:a5:5e:fc:e8:4b:df:df:a6:b5:94:49:32:0b: bd:2d:0a:45:87:e5:b9:7d:a7:12:4b:2b:dd:a6:ba: 10:65:66:e9:02:fa:54:5c:f5:c1:50:40:c3:01:fe: ce:3f:1d:c1:81:d4:22:cc:cb:ed:e4:0c:48:38:38: ec:bd:e8:cb:50:4f:e6:53:c6:2e:49:56:b9:06:3e: 36:2f:5a:94:f4:44:7c:e3:2d:7c:15:d6:2f:4d:c3: e7:02:d3:3b:51:10:71:eb:5a:67:be:5c:7f:a9:47: 1e:0f:76:fb:6b:d1:c8:c5:4e:cd:60:81:7d:c9:cb: 58:2a:7b:d4:e2:39:bb:30:15:66:55:7e:fe:31:41: c8:74:34:79:15:bf:ed:94:b0:46:4f:c8:fa:8d:43: 92:9e:05:90:11:7c:60:9c:dd:83:0e:02:f9:b0:e7: 90:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5D:45:98:F4:3D:D2:C4:19:0B:F9:93:AF:48:EA:CF:95:53:17:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:60:ff:45:c8:24:c6:d4:f6:e3:29:b5:54:5e:3b:dd:b1:75: 8d:d3:d6:fa:48:30:15:30:b3:15:2e:da:30:a9:d5:2e:ea:a8: 7d:ad:03:1d:25:04:78:e1:1a:f8:08:1b:db:20:65:0b:30:a4: 6d:bb:fb:68:ff:78:85:1a:29:07:69:81:d6:bc:e0:d0:89:64: 5e:b3:65:11:b5:46:82:38:f8:73:30:17:c6:2d:34:82:ab:f0: c9:90:6a:86:2e:e0:34:33:56:01:03:7a:7b:96:e8:4a:03:6e: d6:16:b5:e9:bb:b7:d4:3e:c0:90:c5:58:ef:40:d8:de:87:fb: 9b:8e:ca:07:e4:63:1b:06:d2:32:99:34:12:55:87:d8:62:47: 66:c1:7a:d2:ed:26:d8:f4:ce:c7:28:14:35:34:23:85:91:6b: 0d:33:84:3b:c3:f6:43:50:86:95:c5:e0:5a:29:00:02:29:e5: d4:82:26:3c:b0:05:19:3b:e8:c8:18:7c:f8:6e:a1:90:bc:15: f2:a9:70:72:7a:2a:e2:ce:f1:33:78:e5:4e:2a:f4:cd:3f:e4: fe:be:1d:3d:c3:0e:dd:74:54:d6:0f:d7:9f:53:7e:7d:0b:43: 55:85:c8:c4:62:55:03:91:97:07:a7:d6:e4:2c:2b:d0:e1:e4: 53:18:b1:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0jqdQPEvhengoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk MjdlNWUwOTMtOGU1OC00NWUyLWFhOWUtYTMxNzE3MWZmYmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSdxeRed1ohhq8cvPh6YczCxcOfXiLGmgfWR 0IMB2OHGO190tpfHnX5yRx2NNGo5gzlHDCBEj9KZNBctvBIuKur52hIaykdmBzvl 8r/lgUuyDe6pbQYXcz3IfqVe/OhL39+mtZRJMgu9LQpFh+W5facSSyvdproQZWbp AvpUXPXBUEDDAf7OPx3BgdQizMvt5AxIODjsvejLUE/mU8YuSVa5Bj42L1qU9ER8 4y18FdYvTcPnAtM7URBx61pnvlx/qUceD3b7a9HIxU7NYIF9yctYKnvU4jm7MBVm VX7+MUHIdDR5Fb/tlLBGT8j6jUOSngWQEXxgnN2DDgL5sOeQtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1dRZj0PdLEGQv5k69I6s+VUxcVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNjY2ZjVkZDctNWE2ZC0z YWM0LTk1NzEtYjdlMDZiYzlkMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJg/0XIJMbU9uMptVReO92xdY3T1vpIMBUwsxUu2jCp1S7qqH2tAx0l BHjhGvgIG9sgZQswpG27+2j/eIUaKQdpgda84NCJZF6zZRG1RoI4+HMwF8YtNIKr 8MmQaoYu4DQzVgEDenuW6EoDbtYWtem7t9Q+wJDFWO9A2N6H+5uOygfkYxsG0jKZ NBJVh9hiR2bBetLtJtj0zscoFDU0I4WRaw0zhDvD9kNQhpXF4FopAAIp5dSCJjyw BRk76MgYfPhuoZC8FfKpcHJ6KuLO8TN45U4q9M0/5P6+HT3DDt10VNYP159Tfn0L Q1WFyMRiVQORlwen1uQsK9Dh5FMYsXo= -----END CERTIFICATE-----Generated at Mon Aug 4 22:15:26 2025 by rpki-client