$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/baf38e6a-d9fe-37b3-823c-aa7f115af507.roa File: baf38e6a-d9fe-37b3-823c-aa7f115af507.roa (raw, json) Hash identifier: CipYUA/7kHq4Ur4yfs6g+rRRxnBayS/86dFgDh5i7vo= Subject key identifier: 34:81:4C:B3:24:F1:0F:1A:B3:5B:F1:39:B8:3F:C7:58:32:04:28:84 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584A7A4B4950E7ACB0D957BC9600 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/baf38e6a-d9fe-37b3-823c-aa7f115af507.roa Signing time: Fri 11 Jul 2025 01:00:51 +0000 ROA not before: Fri 11 Jul 2025 01:00:51 +0000 ROA not after: Thu 09 Oct 2025 01:00:51 +0000 asID: 11090 IP address blocks: 72.35.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7a:4b:49:50:e7:ac:b0:d9:57:bc:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Jul 11 01:00:51 2025 GMT Not After : Oct 9 01:00:51 2025 GMT Subject: CN=bfa70b68-26b8-4f57-aa40-fadbfd7339d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:35:cd:7b:f4:ef:a9:39:7c:7c:d2:27:48:69: 20:74:db:28:26:dc:1e:47:38:cc:4b:f6:44:2e:e8: a4:db:26:b7:2f:97:11:03:86:7f:a6:6e:95:48:12: 99:3a:bf:ba:c1:b6:69:f3:cf:4c:51:b0:ed:1b:02: d2:12:2b:3f:5b:12:92:26:2e:7c:89:e2:00:14:78: d4:85:04:bb:d5:6f:ca:6e:20:f7:34:36:33:2c:84: 55:19:ab:66:b5:2a:68:41:37:0c:02:b5:a5:7c:ff: dd:0f:ad:e6:aa:0f:46:88:a0:b5:ec:7b:2e:26:61: ab:d7:1f:a3:6b:a1:0f:ba:92:16:eb:f4:c3:26:77: 1a:57:53:b5:0d:61:8f:43:20:92:74:c5:39:34:a6: c0:fc:cf:cd:cc:08:c5:27:b3:83:c1:46:f6:31:09: 4e:3a:a9:c1:bd:ba:37:76:e3:82:56:2f:36:4c:3b: 27:05:63:f6:45:f7:e9:19:29:52:95:e2:8a:56:79: ba:47:82:8a:2e:5e:a5:53:59:82:33:cb:93:b2:9c: 88:a8:3e:fd:85:04:4e:7d:c0:9a:83:c6:8a:d8:7b: 30:65:5e:a1:66:49:30:3e:8d:df:22:f1:52:68:94: 0e:2a:4a:5c:75:fe:fd:c3:dd:2e:1b:c9:1e:8e:57: 21:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:81:4C:B3:24:F1:0F:1A:B3:5B:F1:39:B8:3F:C7:58:32:04:28:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/baf38e6a-d9fe-37b3-823c-aa7f115af507.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:22:b7:c3:88:d8:70:9c:34:f2:dd:13:57:d6:80:26:fe:28: b1:d4:56:c4:4f:29:c5:06:a3:7f:f1:56:57:a1:04:c9:df:64: fb:bf:42:66:af:51:c4:64:c3:7e:b2:39:86:01:7f:4d:c0:91: b6:09:73:b0:1f:ed:bc:9c:f9:1f:c6:4d:68:5f:56:62:91:d8: 9e:72:11:36:33:d7:0c:2f:1d:f1:3f:b8:74:50:ba:ad:87:46: 67:00:58:62:55:4a:03:9d:2a:48:0f:44:42:f0:e9:fe:c6:55: be:f2:7f:3f:18:0f:8d:6c:2c:f8:6a:ec:ba:ba:f3:9d:4c:87: 9e:f3:4b:bc:66:c7:6a:e3:b0:c9:12:5c:89:c8:5f:31:e4:89: f8:08:86:96:ed:eb:86:ff:c2:20:c1:88:80:b9:d2:95:87:23: 1d:3f:81:ad:c2:1d:e2:d7:0b:98:40:fe:fc:c6:48:f8:50:65: 65:07:77:71:69:2f:dc:93:a0:e3:3e:25:a1:5e:cb:2a:53:c5: 84:1c:43:62:f5:36:e5:d3:2e:43:dc:2b:bf:b5:fb:51:37:74: 88:ac:18:bf:fe:0f:1c:f1:9f:49:2d:c5:b4:cd:26:b5:76:5c: 54:d3:c5:a3:22:8a:1b:13:d4:ae:fd:70:23:58:d3:f8:1f:98: 96:72:81:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp6S0lQ56yw2Ve8lgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk YmZhNzBiNjgtMjZiOC00ZjU3LWFhNDAtZmFkYmZkNzMzOWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljXNe/TvqTl8fNInSGkgdNsoJtweRzjMS/ZE Luik2ya3L5cRA4Z/pm6VSBKZOr+6wbZp889MUbDtGwLSEis/WxKSJi58ieIAFHjU hQS71W/KbiD3NDYzLIRVGatmtSpoQTcMArWlfP/dD63mqg9GiKC17HsuJmGr1x+j a6EPupIW6/TDJncaV1O1DWGPQyCSdMU5NKbA/M/NzAjFJ7ODwUb2MQlOOqnBvbo3 duOCVi82TDsnBWP2RffpGSlSleKKVnm6R4KKLl6lU1mCM8uTspyIqD79hQROfcCa g8aK2HswZV6hZkkwPo3fIvFSaJQOKkpcdf79w90uG8kejlchVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSBTLMk8Q8as1vxObg/x1gyBCiEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYmFmMzhlNmEtZDlmZS0z N2IzLTgyM2MtYWE3ZjExNWFmNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAit8OI2HCcNPLdE1fWgCb+KLHUVsRPKcUGo3/xVlehBMnfZPu/Qmav UcRkw36yOYYBf03AkbYJc7Af7byc+R/GTWhfVmKR2J5yETYz1wwvHfE/uHRQuq2H RmcAWGJVSgOdKkgPRELw6f7GVb7yfz8YD41sLPhq7Lq6851Mh57zS7xmx2rjsMkS XInIXzHkifgIhpbt64b/wiDBiIC50pWHIx0/ga3CHeLXC5hA/vzGSPhQZWUHd3Fp L9yToOM+JaFeyypTxYQcQ2L1NuXTLkPcK7+1+1E3dIisGL/+Dxzxn0ktxbTNJrV2 XFTTxaMiihsT1K79cCNY0/gfmJZygUY= -----END CERTIFICATE-----Generated at Mon Aug 4 21:47:56 2025 by rpki-client