$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa File: b901d0b0-12e7-3431-9cd8-0764317e0506.roa (raw, json) Hash identifier: XNI7H0S34jo5Y/ihn4HpYNeDnxo8hZb+92TEW3o/L9I= Subject key identifier: 02:28:CB:28:B8:FA:9C:A6:5F:EB:5F:8B:94:2E:82:18:38:91:F1:4B Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584EA798E36E11A1CB7151932D80 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 11090 IP address blocks: 72.35.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:e3:6e:11:a1:cb:71:51:93:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1dfbd8cc-f00d-47b0-bc70-7c73cdd9b95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:49:6d:56:85:85:94:31:6d:10:c1:ed:e0:2d: f2:1e:30:b5:06:14:05:24:f2:84:ba:5d:92:e9:37: aa:2a:2e:d0:49:aa:32:9e:df:e6:01:33:25:3d:5b: 7f:9c:ae:fb:91:76:56:93:e6:f6:c1:a0:b3:14:66: 1b:eb:8a:b3:10:70:27:a1:51:d1:4a:33:90:42:89: 22:b6:35:75:9f:0e:d4:4a:4d:d5:1d:f3:30:e7:81: e3:5e:1b:ff:13:c3:03:8c:ef:90:9b:3b:9c:8d:17: 21:c6:52:ea:15:e4:ab:4c:74:63:83:ce:77:4d:b4: 92:20:b7:ef:4b:d7:e6:e1:8c:44:18:e0:be:a0:73: fa:37:92:45:e2:69:c7:2a:75:19:e5:dc:52:34:05: 6e:2c:86:bc:16:fa:8e:e3:ca:da:85:32:94:dd:12: 5d:c9:92:66:77:a2:26:32:53:ab:67:56:cc:2a:90: 28:49:76:af:18:9f:c7:fd:5a:61:8a:60:56:3e:23: 8e:19:37:7e:64:ab:d0:7f:68:b3:12:3e:1b:dc:77: dc:6c:83:c9:f0:1c:51:3d:fc:a7:7e:33:1f:ce:3d: 2e:00:3a:a8:94:fd:6d:27:61:51:10:14:1d:71:1c: 42:a2:7a:de:9d:f1:98:bc:ae:69:b7:1c:02:1a:9b: cc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:28:CB:28:B8:FA:9C:A6:5F:EB:5F:8B:94:2E:82:18:38:91:F1:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:c7:38:87:99:e8:7f:84:d1:7f:8e:a9:99:6a:93:ab:26:f5: 18:67:78:86:4b:35:87:27:9a:ec:bc:95:08:c7:0c:50:f0:1a: 63:6b:cd:46:27:48:58:19:ae:dc:da:9f:f1:b4:5d:07:bd:06: 12:21:60:22:ec:57:b2:b8:6b:a7:4d:fa:14:f8:96:02:2c:86: fc:6a:80:4c:2d:3b:53:de:4b:72:7e:a0:47:29:da:62:eb:07: 39:ec:b1:cc:f9:82:28:76:0c:a8:51:22:f4:e7:3f:fd:5d:a6: a9:c3:4e:03:79:3f:a6:72:95:c5:06:29:54:f9:2c:d4:c1:7b: c1:d7:11:e8:ac:b0:a7:85:f1:3d:79:29:23:eb:83:b5:1a:59: 96:ea:18:f1:ee:48:f5:40:f2:36:c2:88:47:31:a6:7f:71:5b: 18:3e:00:19:00:7b:0c:55:fc:c6:37:a5:14:d7:70:85:f4:48: e6:e2:6e:3f:b9:0d:0f:e1:a9:cc:68:f5:bf:02:db:d1:ec:5c: 46:a5:92:58:5c:1b:dc:64:88:e4:8c:3f:03:df:c5:20:9b:b0: 39:71:b5:91:fc:b0:54:7f:dd:d7:6d:33:b8:5d:fc:b3:60:5a: 3b:e6:50:dd:94:06:6f:07:38:ff:47:9f:81:7f:9d:6a:3c:c0: 40:82:c6:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmONuEaHLcVGTLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWRmYmQ4Y2MtZjAwZC00N2IwLWJjNzAtN2M3M2NkZDliOTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kltVoWFlDFtEMHt4C3yHjC1BhQFJPKEul2S 6TeqKi7QSaoynt/mATMlPVt/nK77kXZWk+b2waCzFGYb64qzEHAnoVHRSjOQQoki tjV1nw7USk3VHfMw54HjXhv/E8MDjO+QmzucjRchxlLqFeSrTHRjg853TbSSILfv S9fm4YxEGOC+oHP6N5JF4mnHKnUZ5dxSNAVuLIa8FvqO48rahTKU3RJdyZJmd6Im MlOrZ1bMKpAoSXavGJ/H/VphimBWPiOOGTd+ZKvQf2izEj4b3HfcbIPJ8BxRPfyn fjMfzj0uADqolP1tJ2FREBQdcRxConrenfGYvK5ptxwCGpvM2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIoyyi4+pymX+tfi5Qughg4kfFLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYjkwMWQwYjAtMTJlNy0z NDMxLTljZDgtMDc2NDMxN2UwNTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7HOIeZ6H+E0X+OqZlqk6sm9RhneIZLNYcnmuy8lQjHDFDwGmNrzUYn SFgZrtzan/G0XQe9BhIhYCLsV7K4a6dN+hT4lgIshvxqgEwtO1PeS3J+oEcp2mLr Bznsscz5gih2DKhRIvTnP/1dpqnDTgN5P6ZylcUGKVT5LNTBe8HXEeissKeF8T15 KSPrg7UaWZbqGPHuSPVA8jbCiEcxpn9xWxg+ABkAewxV/MY3pRTXcIX0SObibj+5 DQ/hqcxo9b8C29HsXEalklhcG9xkiOSMPwPfxSCbsDlxtZH8sFR/3ddtM7hd/LNg WjvmUN2UBm8HOP9Hn4F/nWo8wECCxjg= -----END CERTIFICATE-----Generated at Wed Jul 29 07:50:50 2026 by rpki-client