$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa File: b901d0b0-12e7-3431-9cd8-0764317e0506.roa (raw, json) Hash identifier: LF2aYOeRZ8PGK+j5YJwq2BLPKLKgoOiB+XfLH/w9Zh0= Subject key identifier: 5C:C1:0F:EA:87:A9:34:F7:70:A7:56:BB:0F:87:5A:75:1A:4A:6C:3A Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584A7A4B490DAE42C4F869DA9000 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 11090 IP address blocks: 72.35.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:49:0d:ae:42:c4:f8:69:da:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=2e96f115-00a3-41a4-a01c-5a49a6445534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4f:28:37:94:ea:0c:79:fe:83:60:4c:50:2c: 26:5b:03:58:3c:d0:fe:08:e3:d3:a7:a2:8e:24:c7: cf:10:e0:3f:99:8c:e3:19:e6:d0:16:78:b3:c8:2a: ad:f8:2a:61:14:82:19:68:f1:f5:d1:30:97:31:55: 50:f0:63:45:12:06:d2:6b:e9:b2:4c:f1:de:50:fb: f2:e8:e1:df:74:f7:02:11:78:48:de:b8:ce:06:80: 5c:4e:7b:2f:b8:32:29:c5:7e:46:eb:17:7f:c6:6a: 3f:9f:3f:5a:c9:0b:9a:43:b5:73:52:44:f6:b8:32: 5d:b7:03:3d:2a:c7:19:f3:67:ef:b3:a6:24:fb:45: 75:7d:77:3c:9b:ab:9d:5d:09:ef:31:b4:c7:af:c3: 09:d1:61:cf:59:a4:a8:12:e2:43:8b:0b:be:49:dc: 54:e0:70:9d:d2:20:59:8e:9f:ab:be:72:c6:7c:8d: 87:0e:64:55:5e:a7:c6:89:70:4f:53:ef:31:81:1a: bc:b8:3d:fd:6a:be:b0:62:4f:d9:5e:08:8a:7b:4d: c9:06:4f:c4:cc:b1:19:2a:59:c4:51:59:6b:5e:bd: ba:a9:53:fe:db:d7:bb:07:2e:67:9a:92:9b:16:7d: 5b:31:b6:95:98:d3:4c:da:84:f6:f7:9a:0a:3d:a3: 70:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C1:0F:EA:87:A9:34:F7:70:A7:56:BB:0F:87:5A:75:1A:4A:6C:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b901d0b0-12e7-3431-9cd8-0764317e0506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:7e:14:a1:2c:cb:b9:58:8e:de:6d:7c:9b:2a:c6:fb:0c:ac: 86:4b:8a:ce:6a:f2:91:d5:20:5a:55:ba:57:83:76:b2:74:b5: 5b:6f:a7:bc:15:8d:74:a8:2a:23:4a:1e:1b:02:3e:c8:c1:d9: 2f:df:0f:ab:d0:9b:ef:a7:f8:73:6e:b9:c2:56:dc:8a:29:c7: 90:96:ce:7b:81:db:70:7d:48:54:32:8e:55:bf:c8:ac:d5:cb: de:0f:7c:06:c5:6a:a6:a8:d4:0e:10:52:e9:d7:41:2b:50:1e: ad:08:41:a4:75:74:3b:af:d6:a4:04:00:60:9a:9c:3c:b6:a2: c6:9b:4a:63:29:2f:8b:10:d3:95:8c:bf:31:a3:e4:62:7a:51: b2:b8:bb:49:10:ea:4a:87:e3:e8:ee:b6:8a:04:9b:d8:6c:cf: 43:07:c9:48:7a:f7:9e:18:6f:9a:8e:38:87:b7:3a:6d:39:fe: 66:f1:7f:eb:41:8f:f2:41:2b:2f:59:d6:33:07:39:70:be:76: 8b:7d:37:38:96:09:3d:78:c3:0e:7c:c7:2b:69:03:dc:e2:8c: 1b:cc:90:e6:a7:5f:7a:20:5a:e6:2b:27:81:bc:8c:61:b4:67: f4:13:3d:55:fc:d1:f3:03:a0:f6:32:a7:ba:0c:12:dc:20:05: 84:7e:82:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0kNrkLE+GnakAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk MmU5NmYxMTUtMDBhMy00MWE0LWEwMWMtNWE0OWE2NDQ1NTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE8oN5TqDHn+g2BMUCwmWwNYPND+COPTp6KO JMfPEOA/mYzjGebQFnizyCqt+CphFIIZaPH10TCXMVVQ8GNFEgbSa+myTPHeUPvy 6OHfdPcCEXhI3rjOBoBcTnsvuDIpxX5G6xd/xmo/nz9ayQuaQ7VzUkT2uDJdtwM9 KscZ82fvs6Yk+0V1fXc8m6udXQnvMbTHr8MJ0WHPWaSoEuJDiwu+SdxU4HCd0iBZ jp+rvnLGfI2HDmRVXqfGiXBPU+8xgRq8uD39ar6wYk/ZXgiKe03JBk/EzLEZKlnE UVlrXr26qVP+29e7By5nmpKbFn1bMbaVmNNM2oT295oKPaNw1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzBD+qHqTT3cKdWuw+HWnUaSmw6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYjkwMWQwYjAtMTJlNy0z NDMxLTljZDgtMDc2NDMxN2UwNTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1+FKEsy7lYjt5tfJsqxvsMrIZLis5q8pHVIFpVuleDdrJ0tVtvp7wV jXSoKiNKHhsCPsjB2S/fD6vQm++n+HNuucJW3Iopx5CWznuB23B9SFQyjlW/yKzV y94PfAbFaqao1A4QUunXQStQHq0IQaR1dDuv1qQEAGCanDy2osabSmMpL4sQ05WM vzGj5GJ6UbK4u0kQ6kqH4+jutooEm9hsz0MHyUh6954Yb5qOOIe3Om05/mbxf+tB j/JBKy9Z1jMHOXC+dot9NziWCT14ww58xytpA9zijBvMkOanX3ogWuYrJ4G8jGG0 Z/QTPVX80fMDoPYyp7oMEtwgBYR+gvo= -----END CERTIFICATE-----Generated at Mon Aug 4 22:17:28 2025 by rpki-client