$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f19facf1-4a12-311e-8e58-61e270fe2255.roa File: f19facf1-4a12-311e-8e58-61e270fe2255.roa (raw, json) Hash identifier: 8MWvp9kUvP9V7Yf5IDHgjevtJTUJPljhgGXpPyUEiB0= Subject key identifier: AF:7F:B9:3A:C9:4D:8A:E6:9A:7B:3F:8A:2B:FC:5E:B2:F3:FD:F6:29 Certificate issuer: /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Certificate serial: 010D0C9F4328584B5B0746474961915CFBE95580 Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f19facf1-4a12-311e-8e58-61e270fe2255.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 11090 IP address blocks: 72.35.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:46:47:49:61:91:5c:fb:e9:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=53ebef7b-bc76-4f58-ac1b-658be6d5c7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:64:d1:91:07:8b:eb:ab:c8:60:81:7f:5b:02: f7:a6:c3:8b:b5:c7:51:ad:f7:0e:3d:71:36:62:88: dd:c5:b8:50:02:fe:6d:89:6b:25:0c:e5:d2:13:8a: 63:35:ad:d5:38:b0:2a:09:5d:9b:44:06:39:13:a9: 62:a3:14:3e:f6:b0:d3:46:36:e0:c1:15:7b:c2:73: 0b:a6:46:9a:05:68:87:29:f9:ee:19:92:d9:0d:de: 35:64:86:dd:31:ff:32:21:10:fd:f4:ab:8e:d5:81: d7:d8:1a:d0:71:b0:93:db:11:aa:6e:60:db:8b:e9: 24:a6:44:41:b9:46:34:92:ff:63:a7:0b:d9:e1:00: b3:62:f8:7e:bd:ae:c1:93:aa:1c:26:e3:33:fd:75: 1f:98:34:25:d6:04:dc:0f:94:1f:eb:50:ad:54:ec: ff:ea:23:fd:e0:58:2f:44:92:0d:53:84:12:d9:e4: a5:86:84:40:c2:5e:2d:ce:e8:52:aa:92:e6:96:c7: f0:60:a4:4d:01:f2:b9:1d:8a:db:ca:45:c6:67:02: fc:02:58:b6:54:13:6c:23:51:b4:95:30:29:1d:7f: 5f:5a:da:1c:15:22:1d:12:9f:59:a6:07:b4:d2:90: 4d:81:e6:52:54:ee:be:04:b2:27:41:aa:4b:77:ab: fc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7F:B9:3A:C9:4D:8A:E6:9A:7B:3F:8A:2B:FC:5E:B2:F3:FD:F6:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/f19facf1-4a12-311e-8e58-61e270fe2255.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl X509v3 Authority Key Identifier: keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer sbgp-ipAddrBlock: critical IPv4: 72.35.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a7:49:74:bb:ba:b5:a3:22:8c:1c:a9:82:53:6d:1a:fa:7d: 08:99:92:74:f7:e7:8a:28:41:c4:6c:7c:61:c1:1f:4f:d1:e8: cf:cd:ae:aa:10:32:ca:7d:02:70:e4:d7:c1:a8:5a:bd:74:cb: 5b:8a:a3:c1:51:84:f7:f4:a6:dd:c0:de:40:a9:bc:e4:70:09: e0:9d:60:6e:95:b2:7e:e7:12:59:6b:39:6a:89:cb:b5:b3:56: f6:d3:43:15:b2:36:68:52:17:6a:81:79:d6:43:2c:5f:98:08: 77:8c:b6:e5:d6:1a:59:12:d0:d9:37:80:1d:5b:c3:e4:fa:1f: 5d:32:aa:5c:85:79:dd:b5:55:99:b6:5f:bf:34:65:78:f1:1a: 65:f3:e1:2f:94:c3:a3:88:ba:44:c7:77:69:70:4b:00:3b:a5: ab:2f:eb:62:3b:b3:d7:60:f5:14:85:6f:d5:5b:08:f4:53:19: 1d:07:1d:a5:df:d2:b6:20:1c:bf:e3:64:bb:a1:6d:e5:1d:93: dd:63:9d:b5:40:c2:ea:d2:8c:41:ad:f1:8d:a4:5b:32:2d:fd: 3f:be:49:e1:b4:0f:ce:99:c0:b8:68:88:7d:14:22:c5:b6:f7: e8:d1:41:76:1c:57:91:cf:2f:f5:2e:5d:8c:74:0c:e7:61:e4: d0:9e:2e:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB0ZHSWGRXPvpVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2 OWQxMB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk NTNlYmVmN2ItYmM3Ni00ZjU4LWFjMWItNjU4YmU2ZDVjN2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWTRkQeL66vIYIF/WwL3psOLtcdRrfcOPXE2 YojdxbhQAv5tiWslDOXSE4pjNa3VOLAqCV2bRAY5E6lioxQ+9rDTRjbgwRV7wnML pkaaBWiHKfnuGZLZDd41ZIbdMf8yIRD99KuO1YHX2BrQcbCT2xGqbmDbi+kkpkRB uUY0kv9jpwvZ4QCzYvh+va7Bk6ocJuMz/XUfmDQl1gTcD5Qf61CtVOz/6iP94Fgv RJINU4QS2eSlhoRAwl4tzuhSqpLmlsfwYKRNAfK5HYrbykXGZwL8Ali2VBNsI1G0 lTApHX9fWtocFSIdEp9Zpge00pBNgeZSVO6+BLInQapLd6v8DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9/uTrJTYrmmns/iiv8XrLz/fYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZjE5ZmFjZjEtNGExMi0z MTFlLThlNTgtNjFlMjcwZmUyMjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0 M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSCN0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6nSXS7urWjIowcqYJTbRr6fQiZknT354ooQcRsfGHBH0/R6M/NrqoQ Msp9AnDk18GoWr10y1uKo8FRhPf0pt3A3kCpvORwCeCdYG6Vsn7nEllrOWqJy7Wz VvbTQxWyNmhSF2qBedZDLF+YCHeMtuXWGlkS0Nk3gB1bw+T6H10yqlyFed21VZm2 X780ZXjxGmXz4S+Uw6OIukTHd2lwSwA7pasv62I7s9dg9RSFb9VbCPRTGR0HHaXf 0rYgHL/jZLuhbeUdk91jnbVAwurSjEGt8Y2kWzIt/T++SeG0D86ZwLhoiH0UIsW2 9+jRQXYcV5HPL/UuXYx0DOdh5NCeLoU= -----END CERTIFICATE-----Generated at Thu Nov 6 09:01:33 2025 by rpki-client