$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa File: 666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa (raw, json) Hash identifier: 3qr5mHZhh11dCY1HYccmsWnapCMQ3IAMETXB/FxM1IY= Subject key identifier: 73:2D:01:B7:AE:73:58:94:B3:F7:03:C6:70:17:A1:BD:99:90:BA:03 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584DFBD5EAF79F1043F10DAE4308 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 11090 IP address blocks: 72.35.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:ea:f7:9f:10:43:f1:0d:ae:43:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=7fa43d44-5f51-4501-a770-2841a9caff4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:64:85:b9:f7:81:91:7a:de:e6:fc:7b:b5:b0: 57:4d:2a:f5:db:1a:68:a5:59:e0:84:d2:6b:33:a1: 15:68:35:12:a0:95:b9:95:14:cf:a3:b5:18:88:d5: 20:80:be:2c:cc:79:68:96:c7:2a:ce:39:4b:17:fb: 1d:11:51:c5:12:a6:6c:b3:ca:a9:ce:15:31:7a:50: 51:34:f2:c2:44:ca:0d:aa:ca:73:86:99:48:5e:5a: 52:87:aa:c0:2a:56:0d:87:a2:2b:18:ba:93:d8:eb: 5e:de:99:2e:d6:a9:0e:ab:d7:f2:49:1f:06:26:25: 17:5b:2d:99:22:9e:13:1b:ff:94:a2:8c:64:97:78: e5:86:48:99:eb:22:7b:14:ac:e0:67:c1:76:0f:a9: 0f:b3:1f:fa:f4:7a:5e:32:00:fc:39:87:85:df:78: 65:94:5e:bd:7e:a0:97:8f:5c:87:5b:7c:95:ad:33: b3:ed:7e:f4:42:91:e9:5e:fc:3f:aa:c0:3d:ad:a6: 55:4f:30:61:94:a8:ad:0c:c9:40:a8:5b:1b:89:cc: 2a:c0:1a:b7:61:00:16:b5:2a:31:cf:fa:36:68:3c: f3:04:a1:ce:7e:0f:8e:98:8b:53:cb:82:8e:6a:67: 24:2e:3b:66:f0:77:13:85:8f:7a:b6:5d:3f:cf:cc: 82:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2D:01:B7:AE:73:58:94:B3:F7:03:C6:70:17:A1:BD:99:90:BA:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/666f5dd7-5a6d-3ac4-9571-b7e06bc9d2b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:c3:c3:4e:6c:f6:d4:35:57:cd:79:1a:4b:ad:29:cd:88:14: 92:1b:74:c6:95:ca:4e:a6:c5:b2:92:f4:df:d5:b8:7e:5c:82: 62:c6:a9:d1:57:b9:26:c9:b6:9e:18:20:5e:6f:05:1d:3f:e7: 53:bb:c1:1b:35:7c:e7:38:31:3c:f7:53:c2:c7:ae:57:75:dd: 51:63:b7:35:6f:49:f3:26:b7:d1:ec:4b:fa:59:00:74:bd:7a: f8:00:1c:19:39:22:31:6e:7a:13:a1:89:0b:55:fe:77:97:f3: 1c:3a:df:7d:0d:b4:00:c6:88:1a:50:78:6f:ac:fc:f2:1b:5e: e5:a3:d1:61:29:eb:fb:4a:1c:6f:35:dd:aa:c2:46:7e:dc:68: 42:be:fc:a1:b2:e9:06:21:77:d8:aa:47:3d:16:00:9a:79:eb: 57:7c:5a:b6:84:d5:27:e1:10:28:ee:be:70:2c:db:99:1f:0d: 69:7e:a3:38:a6:b4:2c:49:6b:53:a8:da:f8:16:ea:1d:57:fb: bf:9a:59:84:00:0b:cd:32:6d:79:d9:53:2e:ab:30:3d:d3:9d: 63:21:d8:47:0a:bb:33:1a:80:5f:15:45:76:d5:16:a3:69:67: 6b:8e:e2:61:66:c2:52:bf:6c:ad:6b:68:7c:d0:91:14:a5:a4: e4:be:f6:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371er3nxBD8Q2uQwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk N2ZhNDNkNDQtNWY1MS00NTAxLWE3NzAtMjg0MWE5Y2FmZjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmSFufeBkXre5vx7tbBXTSr12xpopVnghNJr M6EVaDUSoJW5lRTPo7UYiNUggL4szHlolscqzjlLF/sdEVHFEqZss8qpzhUxelBR NPLCRMoNqspzhplIXlpSh6rAKlYNh6IrGLqT2Ote3pku1qkOq9fySR8GJiUXWy2Z Ip4TG/+Uooxkl3jlhkiZ6yJ7FKzgZ8F2D6kPsx/69HpeMgD8OYeF33hllF69fqCX j1yHW3yVrTOz7X70QpHpXvw/qsA9raZVTzBhlKitDMlAqFsbicwqwBq3YQAWtSox z/o2aDzzBKHOfg+OmItTy4KOamckLjtm8HcThY96tl0/z8yCzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMtAbeuc1iUs/cDxnAXob2ZkLoDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNjY2ZjVkZDctNWE2ZC0z YWM0LTk1NzEtYjdlMDZiYzlkMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/Dw05s9tQ1V815GkutKc2IFJIbdMaVyk6mxbKS9N/VuH5cgmLGqdFX uSbJtp4YIF5vBR0/51O7wRs1fOc4MTz3U8LHrld13VFjtzVvSfMmt9HsS/pZAHS9 evgAHBk5IjFuehOhiQtV/neX8xw6330NtADGiBpQeG+s/PIbXuWj0WEp6/tKHG81 3arCRn7caEK+/KGy6QYhd9iqRz0WAJp561d8WraE1SfhECjuvnAs25kfDWl+ozim tCxJa1Oo2vgW6h1X+7+aWYQAC80ybXnZUy6rMD3TnWMh2EcKuzMagF8VRXbVFqNp Z2uO4mFmwlK/bK1raHzQkRSlpOS+9n4= -----END CERTIFICATE-----Generated at Sat Jun 13 15:22:07 2026 by rpki-client