$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa File: 7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa (raw, json) Hash identifier: ZbLyU4WnNClSR7k13uP9dA1Y/YDi2bxli/ncP4q/Pa0= Subject key identifier: 2F:A9:DB:CA:E7:B4:38:23:21:15:A2:9E:80:53:77:7A:5C:E6:26:3A Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F4976406F52BC00C09A5DF400 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11090 IP address blocks: 72.35.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:40:6f:52:bc:00:c0:9a:5d:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c8c448a0-13d5-4910-bad7-803140b5fa24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0d:92:8e:aa:35:f9:73:4f:1d:c6:21:08:67: f6:20:c2:d9:52:a0:d1:98:12:9b:07:26:23:62:8a: 2d:e2:e6:5c:a3:dd:e7:d4:4b:40:a8:5b:8c:50:b6: db:e1:f7:9e:6c:f4:49:64:97:fc:ff:3a:2d:13:e4: f6:de:3d:c7:2a:7c:b4:af:06:de:14:53:3a:79:db: 69:d6:0b:be:2c:fa:3c:0d:ab:72:d4:c5:12:fa:34: a7:7d:5a:08:93:4f:b6:f3:40:d9:75:1c:8f:0e:2d: c9:14:0c:3f:2a:58:7f:50:8e:8f:4a:27:10:44:6b: ea:28:6d:d5:8d:96:4b:3f:3e:94:ae:cb:cf:01:9d: 2a:b2:c6:31:78:13:11:5c:ca:1e:fe:7b:14:1d:f4: 28:43:20:05:d3:b0:b8:cf:ec:c7:56:d8:5a:d3:8e: 56:65:05:90:cc:90:00:70:d3:cd:39:f4:aa:3e:4c: 92:7b:44:ff:aa:b2:04:ab:4a:89:64:da:41:55:aa: a7:b2:2c:73:c9:4b:f0:a0:66:46:09:47:59:67:af: d6:d7:87:29:82:52:1b:0a:e4:92:ff:2c:e4:33:15: 7e:f1:b1:c0:8d:e3:d9:8e:3a:6f:2c:8c:9f:0d:db: 7f:ae:06:d1:25:87:38:a7:55:27:1c:e8:85:c3:51: 58:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A9:DB:CA:E7:B4:38:23:21:15:A2:9E:80:53:77:7A:5C:E6:26:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/7e27d03a-aaf0-325b-b150-300c1a01b7d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:84:b8:83:f3:ff:5a:ed:18:89:39:ba:83:20:f6:55:bb:15: d2:33:96:b3:c3:c9:21:fc:98:0e:7b:f0:cc:54:a7:30:fa:a6: 30:02:38:e7:0a:e5:c1:4c:a4:98:81:e3:a3:d6:53:e0:a8:d8: 16:0b:fd:8a:2e:60:eb:6f:94:ac:b0:46:60:f4:73:f8:d6:c7: ac:69:61:f3:dc:94:db:6a:a7:75:05:6a:57:10:5b:f0:9b:27: b9:4f:c0:d1:d4:cd:04:33:9f:83:69:c2:6d:26:a5:37:99:ac: dc:15:51:c3:8e:91:41:43:3a:6a:ef:fa:8b:9d:97:6e:87:63: 24:6b:ac:9d:b6:96:e9:d0:7c:df:c4:d0:0c:7b:1e:4c:3f:36: e1:e3:cd:cc:94:3f:5a:71:7e:a1:b6:e0:79:5d:39:2d:a2:c7: 98:25:4e:59:d7:13:3b:e5:f2:78:7d:c9:e4:e8:43:3d:84:8f: b7:42:aa:fc:05:65:0c:ab:35:54:2b:53:9f:3b:80:dd:f9:6a: bb:6c:0a:98:23:05:26:92:3e:47:49:26:a4:6d:e2:8e:0e:90: de:14:31:a5:38:af:c2:91:f5:e5:d9:7f:1c:69:00:85:b5:58: 58:67:39:f4:a0:24:fc:3e:3a:e7:97:7f:42:9c:79:17:f4:89: 0a:08:4d:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdkBvUrwAwJpd9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzhjNDQ4YTAtMTNkNS00OTEwLWJhZDctODAzMTQwYjVmYTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ2Sjqo1+XNPHcYhCGf2IMLZUqDRmBKbByYj Yoot4uZco93n1EtAqFuMULbb4feebPRJZJf8/zotE+T23j3HKny0rwbeFFM6edtp 1gu+LPo8Daty1MUS+jSnfVoIk0+280DZdRyPDi3JFAw/Klh/UI6PSicQRGvqKG3V jZZLPz6UrsvPAZ0qssYxeBMRXMoe/nsUHfQoQyAF07C4z+zHVtha045WZQWQzJAA cNPNOfSqPkySe0T/qrIEq0qJZNpBVaqnsixzyUvwoGZGCUdZZ6/W14cpglIbCuSS /yzkMxV+8bHAjePZjjpvLIyfDdt/rgbRJYc4p1UnHOiFw1FY4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+p28rntDgjIRWinoBTd3pc5iY6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvN2UyN2QwM2EtYWFmMC0z MjViLWIxNTAtMzAwYzFhMDFiN2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSCNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6EuIPz/1rtGIk5uoMg9lW7FdIzlrPDySH8mA578MxUpzD6pjACOOcK 5cFMpJiB46PWU+Co2BYL/YouYOtvlKywRmD0c/jWx6xpYfPclNtqp3UFalcQW/Cb J7lPwNHUzQQzn4Npwm0mpTeZrNwVUcOOkUFDOmrv+oudl26HYyRrrJ22lunQfN/E 0Ax7Hkw/NuHjzcyUP1pxfqG24HldOS2ix5glTlnXEzvl8nh9yeToQz2Ej7dCqvwF ZQyrNVQrU587gN35artsCpgjBSaSPkdJJqRt4o4OkN4UMaU4r8KR9eXZfxxpAIW1 WFhnOfSgJPw+OueXf0KceRf0iQoITTM= -----END CERTIFICATE-----Generated at Fri Sep 25 04:53:52 2026 by rpki-client