$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/fa004086-eea3-3f44-bf90-af38da3584cb.roa File: fa004086-eea3-3f44-bf90-af38da3584cb.roa (raw, json) Hash identifier: /zomk7jlXwEt67BWLESPT9U5slGpGDY2SAV2+WLwwv4= Subject key identifier: 41:6E:89:4B:11:F9:F8:95:1D:B3:6F:E4:D1:00:15:76:4A:B3:E2:5C Certificate issuer: /CN=3e5c42ff-624e-4419-832c-8d3b65c73dad Certificate serial: 010D0C9F4328584EA795C2AD44F0AF190D377B80 Authority key identifier: D2:99:03:42:E5:0B:F9:2A:F2:11:F6:9B:F5:1D:B5:87:2D:65:DB:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/fa004086-eea3-3f44-bf90-af38da3584cb.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 401965 IP address blocks: 72.35.208.0/20 maxlen: 24 192.231.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/3e5c42ff-624e-4419-832c-8d3b65c73dad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/3e5c42ff-624e-4419-832c-8d3b65c73dad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:c2:ad:44:f0:af:19:0d:37:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e5c42ff-624e-4419-832c-8d3b65c73dad Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1c109235-e5dc-48e4-ab9e-263e897422f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:65:4a:a6:27:52:2b:65:e5:57:ee:07:ae:82: fd:fd:b3:ae:92:64:52:75:ea:4d:c4:52:b8:dc:bf: 83:d6:c6:1f:95:37:d5:82:bf:08:63:58:e8:f9:bb: ac:da:d5:29:27:ab:6b:69:16:f1:31:91:97:7f:68: bb:2f:3e:77:8e:20:3b:6c:a8:2b:b2:c0:a9:31:e2: 09:82:b6:d9:4c:d9:21:53:40:d8:87:b6:3c:e9:31: 4b:46:70:c6:36:6e:5d:5f:dc:b8:72:0b:ab:24:55: 50:1e:74:7f:c9:5f:55:84:30:a6:c5:cf:1a:9f:20: 53:5d:54:a7:2f:cf:93:ec:cd:9a:c5:55:f3:d3:8c: ee:e6:e9:c1:6e:c2:22:55:76:22:e9:6c:6a:f2:16: f7:ee:e0:81:ee:cb:f5:a9:5e:17:f0:6f:cd:b1:cc: 72:65:0f:82:45:a5:9a:fc:63:8b:2a:07:68:16:f5: 51:e6:c1:f0:3c:f6:73:b0:af:a9:5c:cd:43:48:58: 48:59:61:87:e5:c2:7a:33:ee:2a:74:1d:db:e4:94: 53:8b:a2:c4:6a:56:9b:45:ec:12:3b:ef:8e:fe:5f: 95:36:5c:52:ed:28:5d:b6:1d:f3:2b:c6:38:cb:f7: d4:33:b1:31:38:56:70:e4:67:8b:33:09:42:01:59: c0:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6E:89:4B:11:F9:F8:95:1D:B3:6F:E4:D1:00:15:76:4A:B3:E2:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/fa004086-eea3-3f44-bf90-af38da3584cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad/3e5c42ff-624e-4419-832c-8d3b65c73dad.crl X509v3 Authority Key Identifier: keyid:D2:99:03:42:E5:0B:F9:2A:F2:11:F6:9B:F5:1D:B5:87:2D:65:DB:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3e5c42ff-624e-4419-832c-8d3b65c73dad.cer sbgp-ipAddrBlock: critical IPv4: 72.35.208.0/20 192.231.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:ed:bf:a9:75:ff:3b:0f:ac:40:b6:2e:7a:36:1b:b5:e8:d6: 74:a2:84:d0:18:65:49:a9:ec:a2:93:e5:d9:29:4c:48:2f:1e: 60:b7:ad:04:ce:6c:4d:3f:91:e3:7e:1c:de:3e:37:53:83:ef: 22:ae:01:02:5b:27:10:fd:4d:c6:c3:b2:52:f5:fa:20:71:02: b4:d5:9e:d5:87:33:b4:a6:2e:1d:99:7d:d4:db:03:26:21:55: 71:bc:66:8f:e7:d2:cd:8e:07:c9:97:9a:54:c7:b2:03:61:d5: 24:dd:75:58:2a:db:b4:4c:75:1b:3a:55:83:09:c8:b6:62:89: 1a:da:d8:7b:ae:7d:93:08:9c:35:55:34:8c:85:62:d7:d2:4b: 26:57:b9:92:95:03:e0:8d:ba:df:64:db:99:06:d3:1c:36:3e: 9a:4a:ac:ce:4b:25:28:51:7b:b6:05:89:83:69:98:47:7c:33: e7:94:df:2a:89:8d:f3:c0:8e:53:df:57:6f:c5:e0:5e:f9:ba: 80:71:53:e8:4e:0b:af:93:1e:28:00:ff:93:5a:eb:08:c4:bf: b7:53:8a:a3:b8:15:6d:eb:8f:d8:1b:90:46:1a:98:f8:26:42: f3:b0:81:f2:8b:29:60:8a:7d:c5:3e:68:63:3d:74:c5:ea:79: d6:85:48:f7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6nlcKtRPCvGQ03e4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U1YzQyZmYtNjI0ZS00NDE5LTgzMmMtOGQzYjY1Yzcz ZGFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWMxMDkyMzUtZTVkYy00OGU0LWFiOWUtMjYzZTg5NzQyMmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGVKpidSK2XlV+4HroL9/bOukmRSdepNxFK4 3L+D1sYflTfVgr8IY1jo+bus2tUpJ6traRbxMZGXf2i7Lz53jiA7bKgrssCpMeIJ grbZTNkhU0DYh7Y86TFLRnDGNm5dX9y4cgurJFVQHnR/yV9VhDCmxc8anyBTXVSn L8+T7M2axVXz04zu5unBbsIiVXYi6Wxq8hb37uCB7sv1qV4X8G/NscxyZQ+CRaWa /GOLKgdoFvVR5sHwPPZzsK+pXM1DSFhIWWGH5cJ6M+4qdB3b5JRTi6LEalabRewS O++O/l+VNlxS7Shdth3zK8Y4y/fUM7ExOFZw5GeLMwlCAVnAkQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEFuiUsR+fiVHbNv5NEAFXZKs+JcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZTVj NDJmZi02MjRlLTQ0MTktODMyYy04ZDNiNjVjNzNkYWQvZmEwMDQwODYtZWVhMy0z ZjQ0LWJmOTAtYWYzOGRhMzU4NGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2U1YzQyZmYtNjI0ZS00NDE5LTgz MmMtOGQzYjY1YzczZGFkLzNlNWM0MmZmLTYyNGUtNDQxOS04MzJjLThkM2I2NWM3 M2RhZC5jcmwwHwYDVR0jBBgwFoAU0pkDQuUL+SryEfab9R21hy1l29IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZTVjNDJmZi02MjRlLTQ0MTktODMyYy04ZDNi NjVjNzNkYWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQESCPQAwQA wOfVMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBANTtv6l1/zsPrEC2Lno2G7Xo1nSihNAYZUmp7KKT5dkpTEgv HmC3rQTObE0/keN+HN4+N1OD7yKuAQJbJxD9TcbDslL1+iBxArTVntWHM7SmLh2Z fdTbAyYhVXG8Zo/n0s2OB8mXmlTHsgNh1STddVgq27RMdRs6VYMJyLZiiRra2Huu fZMInDVVNIyFYtfSSyZXuZKVA+CNut9k25kG0xw2PppKrM5LJShRe7YFiYNpmEd8 M+eU3yqJjfPAjlPfV2/F4F75uoBxU+hOC6+THigA/5Na6wjEv7dTiqO4FW3rj9gb kEYamPgmQvOwgfKLKWCKfcU+aGM9dMXqedaFSPc= -----END CERTIFICATE-----Generated at Wed Jul 29 03:51:30 2026 by rpki-client