$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa File: 666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa (raw, json) Hash identifier: QU24cU6L8jFVDomTAh7ucZnQo0GcOH/J/0/qbRQhuN4= Subject key identifier: 71:F3:84:22:D8:41:7A:8D:B2:4A:A3:4C:B4:31:83:94:BC:66:E7:4E Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B5B07465C6F59A2A099C534C0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 11090 IP address blocks: 72.35.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:46:5c:6f:59:a2:a0:99:c5:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=9bb00b7d-3e2f-4c77-b9b0-2923bc932fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:09:da:72:18:e6:4e:7d:8d:d0:2f:c8:67:37: 71:8e:80:10:4c:f4:b7:24:1d:d3:34:72:da:ea:68: 83:75:f3:c9:f8:6d:09:76:7f:c4:3b:58:7c:85:8b: 40:18:fb:33:c8:b6:a7:e9:55:c5:d2:a5:3d:fc:c0: 89:3f:0e:00:5f:f4:e9:70:d1:ca:ad:13:c5:8a:d9: f9:ae:41:f2:f3:cb:15:55:03:2a:43:1b:b1:81:4a: 7b:b2:29:57:df:07:71:69:97:00:cd:3d:25:9d:2c: c5:b5:69:d0:06:76:e3:6c:9e:3f:c6:49:0f:14:f0: b5:be:d4:92:03:ef:29:8b:75:60:ce:9f:73:b6:8e: b8:6b:f2:be:5b:1a:c4:ee:10:64:dd:dd:87:b6:e0: c6:47:71:1e:1d:46:03:d2:64:4f:da:40:f7:b5:a4: 15:1d:fc:56:6b:98:45:52:92:ea:df:98:1d:69:41: 4c:75:60:ee:07:09:cd:ea:92:98:43:c1:20:14:5c: 47:29:c9:89:c4:79:86:cb:33:e8:1d:78:b4:46:9a: 8d:05:4f:a1:88:b0:9f:b0:05:a2:f1:a5:07:32:bb: d3:91:5c:78:63:3f:07:d9:23:81:48:32:85:00:32: 6d:4f:70:22:90:2d:08:1f:d9:8c:42:df:f5:52:d8: 8e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F3:84:22:D8:41:7A:8D:B2:4A:A3:4C:B4:31:83:94:BC:66:E7:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:1c:2a:cc:31:3b:55:74:c6:1a:9b:b1:fb:05:cc:70:67:11: 03:db:f0:8a:65:22:0d:82:e6:ca:dd:1d:88:ce:55:18:24:46: ea:63:ea:22:34:ad:2d:18:9b:36:ac:91:6a:28:cb:20:42:8b: 92:52:ec:af:a4:f1:57:05:5b:18:fc:bd:b9:10:ae:85:cd:2f: 26:0c:4c:55:c8:da:69:e3:d4:e7:b9:b0:83:ca:fd:e1:91:fd: 2a:e3:49:29:ee:8d:8d:6b:c3:aa:0f:44:f0:f0:53:e0:67:a3: e1:17:eb:b4:e6:e3:38:23:bb:13:6b:3d:c5:67:3f:c2:c6:99: 04:21:5b:10:39:fa:01:f2:99:e3:d0:de:96:a3:5b:2a:a4:09: 78:23:4e:d9:49:df:34:a7:b0:90:51:2e:e2:46:be:12:8c:e2: 06:65:72:a0:9b:67:29:40:76:9f:0b:b8:cd:e2:96:10:9b:f9: 94:6c:54:ae:e9:14:92:ec:64:43:2e:fe:f2:d3:6a:4c:75:c3: 19:c3:86:31:f1:2b:b2:e1:04:22:58:7d:a5:8e:ba:66:56:90: d3:3e:04:3f:85:0b:82:f7:da:e1:5f:b0:9a:1c:d0:3b:4d:02: ff:b5:d1:4d:58:44:c0:c7:47:86:86:aa:97:5e:90:44:a2:83: 32:d1:fe:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0Zcb1mioJnFNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk OWJiMDBiN2QtM2UyZi00Yzc3LWI5YjAtMjkyM2JjOTMyZmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwnachjmTn2N0C/IZzdxjoAQTPS3JB3TNHLa 6miDdfPJ+G0Jdn/EO1h8hYtAGPszyLan6VXF0qU9/MCJPw4AX/TpcNHKrRPFitn5 rkHy88sVVQMqQxuxgUp7silX3wdxaZcAzT0lnSzFtWnQBnbjbJ4/xkkPFPC1vtSS A+8pi3Vgzp9zto64a/K+WxrE7hBk3d2HtuDGR3EeHUYD0mRP2kD3taQVHfxWa5hF UpLq35gdaUFMdWDuBwnN6pKYQ8EgFFxHKcmJxHmGyzPoHXi0RpqNBU+hiLCfsAWi 8aUHMrvTkVx4Yz8H2SOBSDKFADJtT3AikC0IH9mMQt/1UtiOHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHzhCLYQXqNskqjTLQxg5S8ZudOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNjY2ZjVkZDctNWE2ZC0z YWM0LTk1NzEtYjdlMDZiYzlkMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0cKswxO1V0xhqbsfsFzHBnEQPb8IplIg2C5srdHYjOVRgkRupj6iI0 rS0YmzaskWooyyBCi5JS7K+k8VcFWxj8vbkQroXNLyYMTFXI2mnj1Oe5sIPK/eGR /SrjSSnujY1rw6oPRPDwU+Bno+EX67Tm4zgjuxNrPcVnP8LGmQQhWxA5+gHymePQ 3pajWyqkCXgjTtlJ3zSnsJBRLuJGvhKM4gZlcqCbZylAdp8LuM3ilhCb+ZRsVK7p FJLsZEMu/vLTakx1wxnDhjHxK7LhBCJYfaWOumZWkNM+BD+FC4L32uFfsJoc0DtN Av+10U1YRMDHR4aGqpdekESigzLR/k4= -----END CERTIFICATE-----Generated at Thu Nov 6 09:03:21 2025 by rpki-client