$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa File: d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa (raw, json) Hash identifier: eHI4MkcHsVdx90BpPvBCMDHq8oMg9asB/rkislUfgDU= Subject key identifier: 17:63:A4:0D:8F:0F:3E:52:D5:30:C0:EE:0F:BF:8C:03:62:06:EF:62 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B5B0746BCE7AA1D7E0A9BC8E0 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 11090 IP address blocks: 72.35.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:46:bc:e7:aa:1d:7e:0a:9b:c8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=a29cf184-87e3-4cb4-b980-93c56d0252de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d8:14:28:bd:a9:e4:e1:a6:a6:76:3a:b0:28: ad:58:c9:df:c4:8c:a0:d2:3b:d7:0f:7d:c0:1c:db: 64:ac:72:fd:a5:ab:cb:7a:f8:8d:b8:f5:88:6f:b9: c0:b7:33:fd:e7:e0:a7:13:c7:c0:fe:63:4f:1e:b6: 60:5a:3b:03:d1:e4:54:98:5c:24:ee:a9:a4:89:75: 36:31:70:14:3b:58:e0:6b:c6:39:21:fe:fd:8a:2c: 3f:fe:50:a4:ac:4b:8a:b9:3d:72:7d:43:7b:11:78: 4e:a5:ed:b1:42:10:bc:fe:e8:a3:c1:0a:47:f7:cc: 38:68:29:63:80:c1:60:80:01:22:d8:da:57:78:53: bd:14:26:af:7b:34:1e:d6:4f:1e:56:55:4e:e3:23: 0d:27:61:cb:ab:63:db:41:24:af:af:29:6e:a7:e2: bf:e1:b7:71:95:7c:1b:c8:e4:59:e8:53:ea:ac:f1: 57:41:36:f9:63:04:44:3a:43:b2:ee:af:4b:b3:1e: fd:95:13:59:b0:24:30:07:e9:67:6c:6e:21:f9:48: 79:5c:42:40:37:6d:0f:f5:58:c3:a5:75:28:f8:b8: 8c:0d:2c:33:6e:16:2b:9d:70:ad:21:9a:c6:23:81: 86:a1:1b:a3:2e:b1:c1:17:1c:e9:c4:4d:60:4b:2d: 9e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:63:A4:0D:8F:0F:3E:52:D5:30:C0:EE:0F:BF:8C:03:62:06:EF:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d1a2c10d-cca0-3fa3-8712-e69273b46b4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:41:f6:f5:7d:0e:62:9f:f8:85:9e:c4:40:7b:3c:f0:ae:48: 6f:a2:31:35:ae:ba:6d:cb:30:15:49:81:e7:68:3c:ab:79:0f: 62:88:bf:77:de:51:65:97:05:df:52:4b:d5:65:56:ee:27:d4: 64:60:4b:8f:0b:11:3d:71:30:df:e2:90:46:07:c0:42:33:01: 80:47:a7:d0:0f:93:a0:6a:d2:cc:06:38:5b:2f:bc:4d:fb:7b: 42:99:1a:8c:64:fd:19:a2:d2:23:f4:db:b0:20:4c:b4:9f:22: e6:91:29:10:ed:38:8a:f3:5d:d7:00:c3:45:66:74:a6:db:f4: 60:80:b5:57:e2:58:41:f2:3c:34:42:66:4a:0f:f3:52:0a:0e: 9d:c3:b5:c9:b3:73:ab:cf:44:e6:c2:3a:4e:77:7d:4e:87:ad: 71:3f:0f:b9:6b:0c:59:58:b9:a2:bf:b4:7d:02:15:43:3a:d1: 23:3d:1f:60:e7:c9:e6:23:80:cf:a9:8f:26:bb:bd:c7:d2:23: c0:50:e7:52:ac:15:f5:3d:0d:c1:31:4c:46:2f:85:99:e0:83: 06:31:48:7d:c7:de:a3:5a:0a:b1:95:f0:0c:28:92:71:65:e0: 61:f4:3a:bf:38:9d:12:d3:22:88:3f:56:df:63:24:09:9c:2a: 11:e7:c8:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0a856odfgqbyOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk YTI5Y2YxODQtODdlMy00Y2I0LWI5ODAtOTNjNTZkMDI1MmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNgUKL2p5OGmpnY6sCitWMnfxIyg0jvXD33A HNtkrHL9pavLeviNuPWIb7nAtzP95+CnE8fA/mNPHrZgWjsD0eRUmFwk7qmkiXU2 MXAUO1jga8Y5If79iiw//lCkrEuKuT1yfUN7EXhOpe2xQhC8/uijwQpH98w4aClj gMFggAEi2NpXeFO9FCavezQe1k8eVlVO4yMNJ2HLq2PbQSSvrylup+K/4bdxlXwb yORZ6FPqrPFXQTb5YwREOkOy7q9Lsx79lRNZsCQwB+lnbG4h+Uh5XEJAN20P9VjD pXUo+LiMDSwzbhYrnXCtIZrGI4GGoRujLrHBFxzpxE1gSy2e2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdjpA2PDz5S1TDA7g+/jANiBu9iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZDFhMmMxMGQtY2NhMC0z ZmEzLTg3MTItZTY5MjczYjQ2YjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCNkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBB9vV9DmKf+IWexEB7PPCuSG+iMTWuum3LMBVJgedoPKt5D2KIv3fe UWWXBd9SS9VlVu4n1GRgS48LET1xMN/ikEYHwEIzAYBHp9APk6Bq0swGOFsvvE37 e0KZGoxk/Rmi0iP027AgTLSfIuaRKRDtOIrzXdcAw0VmdKbb9GCAtVfiWEHyPDRC ZkoP81IKDp3Dtcmzc6vPRObCOk53fU6HrXE/D7lrDFlYuaK/tH0CFUM60SM9H2Dn yeYjgM+pjya7vcfSI8BQ51KsFfU9DcExTEYvhZnggwYxSH3H3qNaCrGV8AwoknFl 4GH0Or84nRLTIog/Vt9jJAmcKhHnyHw= -----END CERTIFICATE-----Generated at Thu Nov 6 09:01:34 2025 by rpki-client