$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/81d6b96a-7721-30b3-82ef-3b63ce834b3a.roa File: 81d6b96a-7721-30b3-82ef-3b63ce834b3a.roa (raw, json) Hash identifier: ecFrJVF6W0GEvGTcbKy9JW37mT3DtEwhtVdWN5d4R/8= Subject key identifier: 4C:4C:39:86:0F:38:AB:78:8E:35:E3:58:22:9C:EE:F0:41:6A:BE:E6 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B5B0746A8E3A6BB2C8126AA00 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/81d6b96a-7721-30b3-82ef-3b63ce834b3a.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 11090 IP address blocks: 72.35.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:46:a8:e3:a6:bb:2c:81:26:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=9f55c7c6-124e-4c07-8c6f-b919bb942e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:45:f3:f2:59:68:b4:96:9c:7c:60:3b:be:56: 94:8f:e5:35:fe:c8:ea:46:46:64:28:04:94:6f:c8: 36:59:91:7f:b6:92:c1:f5:83:cf:76:85:e0:a2:19: 0b:d6:bc:12:11:8a:74:5f:c5:2b:10:57:66:d3:29: f2:5c:d9:4e:93:2a:f3:95:88:c3:92:14:0b:21:d7: b5:6d:f8:83:ac:c2:b0:a5:19:9c:51:f7:1c:df:eb: 96:3b:a0:32:54:92:9a:c5:80:44:d4:d1:66:50:f2: 94:84:98:44:f9:6d:06:41:e5:7e:26:b7:2c:6b:57: 3f:be:1c:78:33:fd:45:de:04:47:61:ba:04:12:cc: cd:6f:fd:b9:87:04:96:cb:4a:32:bc:4d:f7:58:cd: c8:2e:23:24:dc:46:9a:f3:0e:5e:c4:7c:dc:37:f9: 03:8d:0f:86:85:57:76:d9:a5:4a:2d:36:ad:29:ce: 6e:c7:c0:21:29:6e:b3:4c:ba:ff:73:c9:7d:53:b0: 66:30:f3:63:09:54:46:15:8f:ac:ba:6f:8a:45:f2: e7:07:85:26:3b:4a:f7:0e:f0:e3:41:13:c5:99:82: fa:db:36:63:84:08:fd:0c:35:6f:b2:b6:7a:fb:e5: 48:16:60:b4:7e:3c:bd:4d:ef:3c:bc:55:ab:a5:b2: ba:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4C:39:86:0F:38:AB:78:8E:35:E3:58:22:9C:EE:F0:41:6A:BE:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/81d6b96a-7721-30b3-82ef-3b63ce834b3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:e4:c8:60:7c:b0:dd:26:41:a1:b4:b4:bb:2c:20:6b:91:81: 24:29:f4:99:1d:4b:5d:60:5c:a1:c4:ff:cc:5d:16:17:8c:73: db:06:55:16:35:e1:08:59:1d:91:e2:86:b5:66:25:c0:2e:e9: 82:98:14:6b:af:85:d0:cd:78:b8:a0:f7:89:ca:76:32:43:75: e8:5b:ef:dc:16:94:b6:02:e0:4c:0b:6f:21:2f:24:c5:8d:c8: e7:8e:45:2d:11:9a:48:82:af:87:58:93:08:89:39:9f:55:9f: 20:b4:1c:54:c6:85:8f:76:20:35:cb:8f:75:5c:63:40:27:fb: c5:25:6f:c8:3f:5b:94:48:35:eb:d4:c2:0c:9c:5d:ac:30:83: 3a:21:14:69:31:05:a5:21:d2:6b:01:45:f3:e1:a2:3d:f5:03: 1c:89:c3:de:9e:87:91:a7:bf:01:bd:0e:0a:55:ea:82:04:d6: 17:c1:21:5a:fc:13:47:7b:54:11:8d:b1:89:56:43:d7:c7:f0: 98:77:0c:e1:df:32:83:73:c4:6d:be:7d:c2:7c:cb:9b:61:89: 6a:7a:80:1e:2a:dc:bb:e1:90:cc:52:d7:c4:f3:cc:1d:d5:dd: 51:07:b6:a0:d0:0b:5f:d9:f7:9c:a3:7c:60:f6:6c:dd:fd:b7: 3c:04:1b:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0ao46a7LIEmqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk OWY1NWM3YzYtMTI0ZS00YzA3LThjNmYtYjkxOWJiOTQyZTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUXz8llotJacfGA7vlaUj+U1/sjqRkZkKASU b8g2WZF/tpLB9YPPdoXgohkL1rwSEYp0X8UrEFdm0ynyXNlOkyrzlYjDkhQLIde1 bfiDrMKwpRmcUfcc3+uWO6AyVJKaxYBE1NFmUPKUhJhE+W0GQeV+Jrcsa1c/vhx4 M/1F3gRHYboEEszNb/25hwSWy0oyvE33WM3ILiMk3Eaa8w5exHzcN/kDjQ+GhVd2 2aVKLTatKc5ux8AhKW6zTLr/c8l9U7BmMPNjCVRGFY+sum+KRfLnB4UmO0r3DvDj QRPFmYL62zZjhAj9DDVvsrZ6++VIFmC0fjy9Te88vFWrpbK6uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExMOYYPOKt4jjXjWCKc7vBBar7mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvODFkNmI5NmEtNzcyMS0z MGIzLTgyZWYtM2I2M2NlODM0YjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSCNkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnkyGB8sN0mQaG0tLssIGuRgSQp9JkdS11gXKHE/8xdFheMc9sGVRY1 4QhZHZHihrVmJcAu6YKYFGuvhdDNeLig94nKdjJDdehb79wWlLYC4EwLbyEvJMWN yOeORS0RmkiCr4dYkwiJOZ9VnyC0HFTGhY92IDXLj3VcY0An+8Ulb8g/W5RINevU wgycXawwgzohFGkxBaUh0msBRfPhoj31AxyJw96eh5GnvwG9DgpV6oIE1hfBIVr8 E0d7VBGNsYlWQ9fH8Jh3DOHfMoNzxG2+fcJ8y5thiWp6gB4q3LvhkMxS18TzzB3V 3VEHtqDQC1/Z95yjfGD2bN39tzwEG6A= -----END CERTIFICATE-----Generated at Thu Nov 6 09:03:21 2025 by rpki-client