$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa File: 7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa (raw, json) Hash identifier: spt5lI6hTJL9DjgeIjZjpHpi5YITO0er1+XyqhMrO/M= Subject key identifier: BC:69:9D:5E:4D:3B:9D:41:A6:FA:41:C1:1F:88:A3:C1:70:2D:43:8A Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584A7A4B4943544EAE01D9E8A080 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 11090 IP address blocks: 72.35.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:49:43:54:4e:ae:01:d9:e8:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=e9550b51-c418-4428-b0e3-a9a288fe44a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1e:1d:2c:40:01:c4:f2:20:03:bc:aa:92:36: eb:5f:20:b8:e2:e0:64:e2:3f:5f:a4:3f:ed:a0:f2: d5:cd:27:08:30:28:b6:b7:60:a4:88:5c:54:3d:ea: 92:37:5e:eb:15:42:4f:66:92:2e:7f:9d:ca:91:02: 0b:c8:89:e8:97:2a:8f:8a:27:a0:a0:6e:5b:7f:a0: f2:44:3b:b0:9f:72:a1:8a:79:e4:20:ba:3b:bb:15: 0d:9c:70:95:3c:bd:b4:75:05:47:af:20:fd:76:ca: a5:4a:78:b2:2f:3e:87:d9:43:0d:92:2d:72:92:41: ad:da:7e:b4:c5:dd:87:05:20:01:d2:e1:b8:fc:cd: 5a:56:46:36:78:e0:b2:02:73:38:ac:19:97:aa:ce: 4b:ee:2d:de:d0:9b:1f:d4:41:b2:9d:39:41:35:c6: 66:fb:d8:64:ad:6c:ee:ef:5c:50:c4:90:fc:68:ba: 99:23:2c:f3:51:f3:7a:c6:3e:22:1f:ba:aa:00:6f: b1:85:89:f1:1e:03:11:52:eb:fc:ac:47:29:a0:f0: b2:6e:ab:00:6d:48:64:16:f9:bd:52:56:23:6b:56: e8:ca:36:5d:47:3a:32:45:7e:ea:3c:06:a5:f3:d0: 47:ab:ee:08:6b:f6:a4:87:05:ff:07:34:18:5f:c1: 14:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:69:9D:5E:4D:3B:9D:41:A6:FA:41:C1:1F:88:A3:C1:70:2D:43:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:3e:b9:db:fe:56:07:66:e1:fc:ee:ed:14:d3:70:2c:94:1a: 5d:22:ca:af:34:19:25:f8:d7:fb:a1:ba:05:6e:40:e5:7c:a1: a7:90:f2:84:b3:aa:e3:57:06:e3:e6:d1:fd:c4:66:b0:67:5a: a1:83:22:c6:e6:f7:6c:87:ca:9e:cd:8b:8d:4d:ca:fd:69:28: 6f:ac:da:77:35:72:e7:3b:47:06:b1:84:93:da:1d:8b:2a:ba: e5:c2:eb:83:b3:11:c3:d7:0a:67:c2:03:ad:01:09:c4:d6:87: f3:88:01:3f:30:c1:58:56:c4:cb:ab:68:07:f8:8f:a3:e8:ba: 74:b1:90:1b:6c:bb:ca:23:59:20:1e:cc:b8:18:12:3c:38:95: 06:54:69:fc:46:f3:c3:dc:51:95:ff:54:00:5a:78:94:12:c2: 07:8d:45:3a:00:8c:a2:0f:a8:10:01:2f:74:10:5a:7a:50:de: 69:7c:cb:ec:95:6d:4a:53:9c:42:32:b2:a0:74:19:3c:21:6f: b9:33:38:53:7f:94:4b:f8:03:76:66:30:1a:42:a5:0c:a8:e4: 3b:e7:03:4f:24:d8:e4:0d:9e:4e:94:67:e6:21:9e:6a:65:5a: 58:f6:19:4d:8c:6f:4c:35:44:97:34:c9:aa:be:46:60:86:6a: 6c:7a:ff:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0lDVE6uAdnooIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk ZTk1NTBiNTEtYzQxOC00NDI4LWIwZTMtYTlhMjg4ZmU0NGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR4dLEABxPIgA7yqkjbrXyC44uBk4j9fpD/t oPLVzScIMCi2t2CkiFxUPeqSN17rFUJPZpIuf53KkQILyInolyqPiiegoG5bf6Dy RDuwn3KhinnkILo7uxUNnHCVPL20dQVHryD9dsqlSniyLz6H2UMNki1ykkGt2n60 xd2HBSAB0uG4/M1aVkY2eOCyAnM4rBmXqs5L7i3e0Jsf1EGynTlBNcZm+9hkrWzu 71xQxJD8aLqZIyzzUfN6xj4iH7qqAG+xhYnxHgMRUuv8rEcpoPCybqsAbUhkFvm9 UlYja1boyjZdRzoyRX7qPAal89BHq+4Ia/akhwX/BzQYX8EUWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxpnV5NO51BpvpBwR+Io8FwLUOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvN2UyN2QwM2EtYWFmMC0z MjViLWIxNTAtMzAwYzFhMDFiN2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSCNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHg+udv+Vgdm4fzu7RTTcCyUGl0iyq80GSX41/uhugVuQOV8oaeQ8oSz quNXBuPm0f3EZrBnWqGDIsbm92yHyp7Ni41Nyv1pKG+s2nc1cuc7RwaxhJPaHYsq uuXC64OzEcPXCmfCA60BCcTWh/OIAT8wwVhWxMuraAf4j6PounSxkBtsu8ojWSAe zLgYEjw4lQZUafxG88PcUZX/VABaeJQSwgeNRToAjKIPqBABL3QQWnpQ3ml8y+yV bUpTnEIysqB0GTwhb7kzOFN/lEv4A3ZmMBpCpQyo5DvnA08k2OQNnk6UZ+Yhnmpl Wlj2GU2Mb0w1RJc0yaq+RmCGamx6/5Q= -----END CERTIFICATE-----Generated at Tue Aug 5 17:18:49 2025 by rpki-client