$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d95300ce-edc2-374f-9bbe-f66958b3ae81.roa File: d95300ce-edc2-374f-9bbe-f66958b3ae81.roa (raw, json) Hash identifier: n6NPFhokgkCFO0I3nMLBWCWCrXEcmXwavtq8wfHS1Xw= Subject key identifier: CE:46:4C:0F:6A:EA:B0:E6:E3:77:5C:0A:43:76:60:A3:A6:B3:71:AE Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584DFBD5EADE23F2569221C50DD3 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d95300ce-edc2-374f-9bbe-f66958b3ae81.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 11090 IP address blocks: 72.35.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:ea:de:23:f2:56:92:21:c5:0d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=389f65f0-b31b-4da1-b6ee-cc865cde1460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e6:e1:39:ff:4b:dd:ce:eb:a0:70:78:9f:ef: e1:99:ba:36:3b:d1:2c:d1:58:1a:e5:90:9b:6d:73: 10:75:3d:0a:d9:80:b9:1d:73:ae:b5:8d:9f:c7:08: 15:79:c1:27:d5:e6:a8:1f:4f:ab:dc:b6:16:dd:45: ea:93:d7:95:f6:04:0e:46:60:56:3b:4f:5d:72:6d: ae:95:c8:8c:6d:9f:56:c3:8c:a5:85:41:16:e5:49: a3:18:46:36:55:ed:91:1d:1f:99:b0:fd:1a:3c:39: de:3f:9b:4a:a1:87:ae:65:1b:f2:25:23:cb:d9:e8: 77:93:97:bf:98:ee:b2:92:8c:1f:44:b9:b8:09:49: 57:f0:e3:e7:78:c7:2b:ed:ce:ad:80:f9:7f:a4:85: 2d:50:e3:40:36:9e:97:ae:f1:ad:a1:76:44:96:b1: 00:c8:fd:76:0c:a9:77:78:43:f4:86:55:78:25:57: 45:cb:e3:6b:aa:18:53:db:6a:19:b1:29:7a:02:fe: d2:bc:52:83:40:3a:dd:88:d2:32:1b:37:fe:c0:a6: 6e:f6:9d:f5:28:ee:b5:5b:03:64:d0:e2:dd:92:be: d6:aa:dd:b7:80:9c:5d:d5:61:96:41:5c:0e:69:da: 0b:e6:e1:ac:3c:ae:2a:80:ed:09:a5:d7:38:83:28: dd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:46:4C:0F:6A:EA:B0:E6:E3:77:5C:0A:43:76:60:A3:A6:B3:71:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d95300ce-edc2-374f-9bbe-f66958b3ae81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:f5:96:e4:1e:99:5d:a6:21:e1:af:df:2a:ea:a8:90:94:a0: 0d:ca:ee:90:57:01:4d:43:a9:0e:f0:ee:48:64:88:3f:96:8a: 9e:e1:df:c4:ee:c1:9e:cb:b0:7b:7e:1c:d5:d8:95:0b:d1:14: 14:24:b7:63:de:28:29:4c:69:53:25:64:9b:6d:50:06:cb:e2: 09:66:63:c4:4c:84:bf:c8:c8:a7:52:95:23:41:05:6c:42:88: 0d:a8:9a:67:de:91:7f:95:a8:c7:e0:84:3e:12:9b:ea:40:f4: 29:c9:dd:23:18:a9:a4:dc:42:4f:01:c7:8d:92:b6:da:c9:e5: 17:18:5e:15:79:48:ac:63:8b:dd:51:29:7e:bf:67:da:ef:13: a6:7a:5c:b4:5e:f2:40:bf:6e:3f:ec:aa:df:13:17:c7:e0:1a: e4:f7:ad:a7:7c:81:97:ad:33:9b:5b:93:b1:8f:33:63:a4:6e: 29:e6:e8:b1:f0:a1:b6:55:49:ab:32:36:48:69:da:46:15:fd: 35:84:e6:15:4c:3a:9e:0c:87:43:74:3d:2a:bb:44:f7:99:ff: b6:f2:dc:18:ac:09:d9:2f:e2:c6:0a:52:df:26:6c:66:da:ce: 9f:9f:38:bb:c9:c6:b0:2e:a2:4d:4c:42:d0:39:92:7b:3c:27: c8:59:dd:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371ereI/JWkiHFDdMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk Mzg5ZjY1ZjAtYjMxYi00ZGExLWI2ZWUtY2M4NjVjZGUxNDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqebhOf9L3c7roHB4n+/hmbo2O9Es0Vga5ZCb bXMQdT0K2YC5HXOutY2fxwgVecEn1eaoH0+r3LYW3UXqk9eV9gQORmBWO09dcm2u lciMbZ9Ww4ylhUEW5UmjGEY2Ve2RHR+ZsP0aPDneP5tKoYeuZRvyJSPL2eh3k5e/ mO6ykowfRLm4CUlX8OPneMcr7c6tgPl/pIUtUONANp6XrvGtoXZElrEAyP12DKl3 eEP0hlV4JVdFy+NrqhhT22oZsSl6Av7SvFKDQDrdiNIyGzf+wKZu9p31KO61WwNk 0OLdkr7Wqt23gJxd1WGWQVwOadoL5uGsPK4qgO0Jpdc4gyjd0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5GTA9q6rDm43dcCkN2YKOms3GuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZDk1MzAwY2UtZWRjMi0z NzRmLTliYmUtZjY2OTU4YjNhZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALP1luQemV2mIeGv3yrqqJCUoA3K7pBXAU1DqQ7w7khkiD+Wip7h38Tu wZ7LsHt+HNXYlQvRFBQkt2PeKClMaVMlZJttUAbL4glmY8RMhL/IyKdSlSNBBWxC iA2ommfekX+VqMfghD4Sm+pA9CnJ3SMYqaTcQk8Bx42SttrJ5RcYXhV5SKxji91R KX6/Z9rvE6Z6XLRe8kC/bj/sqt8TF8fgGuT3rad8gZetM5tbk7GPM2Okbinm6LHw obZVSasyNkhp2kYV/TWE5hVMOp4Mh0N0PSq7RPeZ/7by3BisCdkv4sYKUt8mbGba zp+fOLvJxrAuok1MQtA5kns8J8hZ3XI= -----END CERTIFICATE-----Generated at Sat Jun 13 16:59:35 2026 by rpki-client