$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa File: 04a72bfb-6956-393f-affe-ff7db4804d88.roa (raw, json) Hash identifier: Lvf3YU6HFb5GEjMFaOc3IMZ6QYhyNLedpxKkO3UOGsk= Subject key identifier: BE:83:A6:C2:BC:C5:D2:3A:06:FF:76:6E:7A:19:3A:B0:09:63:B0:9F Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584DA11ABFEFBC277E98D616C280 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 33392 IP address blocks: 209.35.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:bf:ef:bc:27:7e:98:d6:16:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=16f03f98-24af-4f4a-945f-c0707e10a90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4b:ce:24:6e:4e:64:d9:1b:14:c2:44:fe:1e: 9f:a7:e5:72:70:06:2d:ca:aa:b3:01:ec:14:a1:c0: ad:7e:00:4d:ee:bb:30:d1:6a:0c:b6:d1:a1:11:b5: 6d:f5:29:ee:f4:8d:ca:13:6a:58:dc:e4:91:a5:df: 8d:77:2b:d3:84:5d:1b:52:00:60:4d:18:f0:81:8d: 69:06:f7:a3:20:b2:6c:9c:5f:6d:54:da:94:bb:c7: e6:99:5c:7b:04:32:79:23:7a:34:0a:e4:4e:52:03: 3c:da:2b:84:2c:ad:42:e1:d5:b4:e8:b2:7f:e6:b0: d0:2f:b4:f5:f3:e2:20:cc:73:5c:81:05:d5:93:e3: 04:02:78:a8:09:b3:3d:98:df:cc:16:4c:8a:5d:b1: fa:24:34:dd:30:cd:f7:1f:72:db:78:d1:db:a1:96: f5:8a:d6:f9:a8:f9:ec:54:44:05:75:54:6f:a8:94: 79:af:22:8d:aa:25:e9:a0:d1:c1:ac:0e:d5:58:06: ab:15:30:04:4d:5d:00:87:fc:68:95:8f:61:c5:52: 9b:09:5e:67:70:75:98:ba:e9:c0:a9:59:d8:c3:ce: dc:8a:ea:8c:21:e2:06:42:62:51:47:86:f5:81:c2: 32:e9:ef:ef:bc:5f:c4:dc:cf:66:f5:08:32:fa:52: 72:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:83:A6:C2:BC:C5:D2:3A:06:FF:76:6E:7A:19:3A:B0:09:63:B0:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:fc:df:9e:b0:53:2b:e1:94:e0:f0:a6:cc:60:ea:b0:6f:24: 61:2b:e9:3d:96:76:e3:ad:e8:31:ef:89:ab:ab:21:43:46:5f: d5:f4:5e:d4:fe:3c:9c:37:c1:b4:19:cc:fd:01:0b:d7:b8:23: 05:7b:a4:c9:84:8a:d3:7e:c0:9b:1a:9a:9c:ed:63:9c:23:63: ea:53:dd:24:0f:de:a7:b7:ca:51:87:ab:90:a5:d6:dd:b2:20: 69:78:df:a2:9c:83:d8:ad:04:84:ec:fe:51:9f:cb:32:4a:6c: 38:2e:da:20:b8:3c:e2:42:c9:aa:55:60:4c:61:a6:74:85:7f: 79:5a:13:0d:a9:da:11:77:ed:1b:fa:d9:6f:85:be:13:97:b6: b8:df:fa:6d:b5:df:24:35:d5:e8:e6:eb:f7:67:dc:10:3f:73: e9:fd:4a:28:2a:fc:92:08:15:ab:07:7c:bd:4f:0e:5c:e4:77: 10:cf:ab:de:ca:23:78:0d:74:dc:23:52:e4:b7:51:79:82:1b: 8f:3f:a3:35:ad:7a:9a:ea:89:74:d7:fe:57:59:7e:39:b9:7c: 2a:5c:78:8b:c1:13:cb:5d:c9:66:71:02:3d:a6:e6:28:77:a7: 0e:1b:55:c3:e3:fd:df:cd:09:b4:28:1d:4d:77:cc:f6:93:56: ad:68:6b:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGr/vvCd+mNYWwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk MTZmMDNmOTgtMjRhZi00ZjRhLTk0NWYtYzA3MDdlMTBhOTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkvOJG5OZNkbFMJE/h6fp+VycAYtyqqzAewU ocCtfgBN7rsw0WoMttGhEbVt9Snu9I3KE2pY3OSRpd+NdyvThF0bUgBgTRjwgY1p BvejILJsnF9tVNqUu8fmmVx7BDJ5I3o0CuROUgM82iuELK1C4dW06LJ/5rDQL7T1 8+IgzHNcgQXVk+MEAnioCbM9mN/MFkyKXbH6JDTdMM33H3LbeNHboZb1itb5qPns VEQFdVRvqJR5ryKNqiXpoNHBrA7VWAarFTAETV0Ah/xolY9hxVKbCV5ncHWYuunA qVnYw87ciuqMIeIGQmJRR4b1gcIy6e/vvF/E3M9m9Qgy+lJy+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6DpsK8xdI6Bv92bnoZOrAJY7CfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMDRhNzJiZmItNjk1Ni0z OTNmLWFmZmUtZmY3ZGI0ODA0ZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0SMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFf8356wUyvhlODwpsxg6rBvJGEr6T2WduOt6DHviaurIUNGX9X0XtT+ PJw3wbQZzP0BC9e4IwV7pMmEitN+wJsampztY5wjY+pT3SQP3qe3ylGHq5Cl1t2y IGl436Kcg9itBITs/lGfyzJKbDgu2iC4POJCyapVYExhpnSFf3laEw2p2hF37Rv6 2W+FvhOXtrjf+m213yQ11ejm6/dn3BA/c+n9Sigq/JIIFasHfL1PDlzkdxDPq97K I3gNdNwjUuS3UXmCG48/ozWteprqiXTX/ldZfjm5fCpceIvBE8tdyWZxAj2m5ih3 pw4bVcPj/d/NCbQoHU13zPaTVq1oa8Q= -----END CERTIFICATE-----Generated at Wed May 13 05:34:13 2026 by rpki-client