$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d95300ce-edc2-374f-9bbe-f66958b3ae81.roa File: d95300ce-edc2-374f-9bbe-f66958b3ae81.roa (raw, json) Hash identifier: RUkOc6TnMV/U4lvDW3qj94nnRGCjpi9Wt5E3UfcS+jU= Subject key identifier: 43:58:12:CD:A9:8F:5A:71:41:95:E1:6D:9F:DD:89:BD:87:46:56:EF Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584F49763F626842B62BCCA99540 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d95300ce-edc2-374f-9bbe-f66958b3ae81.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11090 IP address blocks: 72.35.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:3f:62:68:42:b6:2b:cc:a9:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=404418de-9c24-4d31-a9b9-fa4a4da108c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e8:72:34:60:8b:10:27:65:5f:4c:9c:6d:cd: 77:a6:4d:25:ee:ee:2c:72:89:28:7b:53:38:12:31: fb:3c:43:d2:70:f2:8d:f8:24:7e:60:a3:d3:3d:7d: 0d:ef:5c:22:79:ef:80:44:5f:d8:4f:3b:62:21:6b: cc:cb:39:b3:44:19:06:87:c7:94:5d:5c:ff:e8:f0: 37:8d:31:29:06:d7:bd:60:b5:51:dd:2a:b6:b9:03: 01:7d:e9:a9:46:7f:d9:5a:23:df:a5:26:a9:67:77: 2f:7e:7d:16:5a:aa:91:5c:53:46:a3:bd:96:97:7b: 5e:98:fa:81:25:e7:65:24:a6:e8:7a:9b:62:55:72: cb:db:69:f4:4b:05:da:a9:c2:62:25:a9:0c:6e:2c: 3f:2c:97:88:7d:55:9b:d9:04:f7:bf:99:f8:ee:cd: 0a:2e:7c:3f:eb:b4:47:93:bd:b0:34:22:e6:43:4b: a6:1e:fb:f7:dc:00:90:01:1d:29:c0:10:a4:86:db: 5f:dd:eb:1c:f3:e0:1c:9e:56:59:63:11:ec:55:2d: ef:9f:e4:2b:e1:c6:37:f6:0e:92:f4:e7:b5:3d:4c: d6:7c:f7:be:ec:18:4b:cf:82:c3:4c:d1:82:c0:4a: 9e:cb:45:3f:e3:9a:0b:39:81:fe:11:b0:c1:77:12: 93:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:58:12:CD:A9:8F:5A:71:41:95:E1:6D:9F:DD:89:BD:87:46:56:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/d95300ce-edc2-374f-9bbe-f66958b3ae81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:82:71:3a:1d:84:27:4b:de:3b:d0:cc:8d:2d:23:65:82:ac: 11:93:9f:fc:d8:bc:cb:73:39:f7:e5:4c:a3:10:42:67:3b:21: cc:97:7f:74:93:02:d5:13:c7:96:40:52:95:30:3c:6b:03:2f: 57:fd:27:ee:f6:41:60:68:13:84:a2:f6:0f:c4:1a:d8:6d:3a: 2a:97:f6:b1:f8:b8:93:1c:25:29:44:ee:cc:a2:db:42:3d:96: 7e:db:6a:ef:1f:7a:4b:25:a7:c0:f5:19:bc:e6:d9:c5:fc:36: 02:99:d2:cf:70:83:05:79:ec:2f:ba:c9:4c:23:2e:2e:35:fd: 65:1b:82:60:67:22:c4:3a:79:08:d4:49:26:0b:a4:e6:53:77: d9:85:22:f7:b6:e5:c0:ab:a5:57:cf:2a:14:db:36:d3:ec:83: 0f:0e:22:9a:b3:bd:61:b4:c0:e8:03:bd:69:59:36:6f:66:63: ff:72:83:e3:b9:69:67:4d:5d:3c:b0:33:e3:8c:cb:03:94:9c: c4:c5:e0:a5:e2:d5:1d:e9:a4:1e:cb:8c:e6:a8:4c:86:1b:06: b8:4b:ad:4e:40:9e:31:58:c6:1c:9d:f8:d7:2e:b7:4c:f6:5a: bf:b7:84:17:3e:78:0a:d2:0b:b9:ab:c2:a2:e8:da:42:f6:7d: 44:ce:b0:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdj9iaEK2K8yplUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDA0NDE4ZGUtOWMyNC00ZDMxLWE5YjktZmE0YTRkYTEwOGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuhyNGCLECdlX0ycbc13pk0l7u4scokoe1M4 EjH7PEPScPKN+CR+YKPTPX0N71wiee+ARF/YTztiIWvMyzmzRBkGh8eUXVz/6PA3 jTEpBte9YLVR3Sq2uQMBfempRn/ZWiPfpSapZ3cvfn0WWqqRXFNGo72Wl3temPqB JedlJKboeptiVXLL22n0SwXaqcJiJakMbiw/LJeIfVWb2QT3v5n47s0KLnw/67RH k72wNCLmQ0umHvv33ACQAR0pwBCkhttf3esc8+AcnlZZYxHsVS3vn+Qr4cY39g6S 9Oe1PUzWfPe+7BhLz4LDTNGCwEqey0U/45oLOYH+EbDBdxKTjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENYEs2pj1pxQZXhbZ/dib2HRlbvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZDk1MzAwY2UtZWRjMi0z NzRmLTliYmUtZjY2OTU4YjNhZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2CcTodhCdL3jvQzI0tI2WCrBGTn/zYvMtzOfflTKMQQmc7IcyXf3ST AtUTx5ZAUpUwPGsDL1f9J+72QWBoE4Si9g/EGthtOiqX9rH4uJMcJSlE7syi20I9 ln7bau8fekslp8D1Gbzm2cX8NgKZ0s9wgwV57C+6yUwjLi41/WUbgmBnIsQ6eQjU SSYLpOZTd9mFIve25cCrpVfPKhTbNtPsgw8OIpqzvWG0wOgDvWlZNm9mY/9yg+O5 aWdNXTywM+OMywOUnMTF4KXi1R3ppB7LjOaoTIYbBrhLrU5AnjFYxhyd+Ncut0z2 Wr+3hBc+eArSC7mrwqLo2kL2fUTOsJw= -----END CERTIFICATE-----Generated at Mon Sep 28 18:43:09 2026 by rpki-client