$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa File: 38c40b45-912b-3d93-bf1f-297a8a0a2463.roa (raw, json) Hash identifier: NDkY0BTY5EpZzCs8F1kxEwztuc8gHhe1PMcs17iQVvs= Subject key identifier: 50:AF:3B:D1:82:7B:29:FC:BB:45:AB:A2:92:19:8B:91:18:88:64:BC Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584D95F00446DBEEDBBCDDC0A040 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 36511 IP address blocks: 209.35.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:04:46:db:ee:db:bc:dd:c0:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=0351c1ef-d081-4ce1-b055-ba303694b4ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:87:95:6b:a7:38:43:67:da:3f:14:3f:45:30: b6:56:d7:a3:14:0e:b5:9f:39:42:4b:61:56:94:cf: b2:ea:04:c0:d8:7d:30:91:6f:4e:d8:e6:79:70:a2: b9:9e:c0:bf:cf:da:17:ad:a8:62:40:89:69:70:04: 5b:24:0a:b3:ea:b1:ee:ac:b0:dc:07:6e:39:c9:e7: 18:29:b0:6e:70:ae:16:11:ec:18:06:c0:bd:8b:f9: 97:4f:14:6c:49:cf:2c:b9:44:9e:6e:6a:36:cf:6a: 30:e2:10:1f:5c:ef:b8:26:17:a7:21:1a:fc:b4:cb: 6f:f1:7c:ac:d9:fc:ee:b2:28:a2:33:b4:46:b8:71: c9:a3:e4:a6:69:9a:01:a7:e4:25:2b:d6:0f:f0:c3: 61:d7:60:f6:92:ad:e0:8f:9a:0c:2f:1a:ca:c6:99: a0:43:34:27:bc:6c:4f:62:68:d0:b3:73:81:33:17: 8b:9c:1c:2e:a0:d4:b5:c1:12:a4:1d:ad:19:de:db: 13:39:49:6f:14:b4:e2:61:22:24:fd:ba:7e:97:a5: 36:5f:ce:28:1e:e3:b0:79:f0:db:94:cb:e1:88:c0: 7a:90:df:5d:40:dd:3b:02:41:49:da:e1:c5:45:b6: 08:c2:44:31:3f:62:f7:7c:e6:17:0c:7e:13:b8:24: 41:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AF:3B:D1:82:7B:29:FC:BB:45:AB:A2:92:19:8B:91:18:88:64:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:b0:c8:b6:c7:4e:27:b0:96:fc:39:02:6d:4b:1c:76:31:70: 06:f3:df:58:4b:9f:4e:88:c7:4e:f5:2c:e1:ea:b4:fc:99:c5: cd:b2:53:1b:09:fb:0e:03:c5:a5:ac:59:c5:1d:f9:14:c9:c6: c4:0e:93:a5:21:0e:a4:5a:4d:74:f4:c3:82:22:32:07:62:15: c4:d1:6e:d5:30:0b:c3:aa:39:d1:71:50:52:42:d2:92:65:9c: 3c:2b:2c:22:0b:fa:41:99:5f:c6:13:5f:72:fa:19:2d:28:71: a4:e3:3f:da:ae:39:8c:fc:20:6d:95:7d:ca:fe:3d:ea:0f:45: 69:06:9f:6c:7a:a8:19:2c:1e:43:04:31:04:da:0a:f7:b4:b6: 1b:d5:1a:a0:a2:9f:30:d8:b6:93:12:a9:9c:98:cb:57:37:71: c9:4e:b3:a4:e4:db:18:fe:ef:a6:bf:a5:e4:cf:30:22:59:68: 0c:27:6b:46:c9:b9:9c:b2:0f:0c:59:fd:8a:85:21:fd:31:65: 4c:af:a0:07:25:0f:dc:62:28:e7:d6:6d:51:3d:5f:7d:2b:bb: 58:8f:3a:16:75:18:7e:9c:2f:c4:d4:7d:07:1f:67:0c:ee:1a: d3:79:86:6b:da:3e:4e:59:2d:98:12:c0:03:31:88:39:1f:4c: 25:9c:6c:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8ARG2+7bvN3AoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk MDM1MWMxZWYtZDA4MS00Y2UxLWIwNTUtYmEzMDM2OTRiNGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYeVa6c4Q2faPxQ/RTC2VtejFA61nzlCS2FW lM+y6gTA2H0wkW9O2OZ5cKK5nsC/z9oXrahiQIlpcARbJAqz6rHurLDcB245yecY KbBucK4WEewYBsC9i/mXTxRsSc8suUSebmo2z2ow4hAfXO+4JhenIRr8tMtv8Xys 2fzusiiiM7RGuHHJo+SmaZoBp+QlK9YP8MNh12D2kq3gj5oMLxrKxpmgQzQnvGxP YmjQs3OBMxeLnBwuoNS1wRKkHa0Z3tsTOUlvFLTiYSIk/bp+l6U2X84oHuOwefDb lMvhiMB6kN9dQN07AkFJ2uHFRbYIwkQxP2L3fOYXDH4TuCRBvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCvO9GCeyn8u0WropIZi5EYiGS8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMzhjNDBiNDUtOTEyYi0z ZDkzLWJmMWYtMjk3YThhMGEyNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6wyLbHTiewlvw5Am1LHHYxcAbz31hLn06Ix071LOHqtPyZxc2yUxsJ +w4DxaWsWcUd+RTJxsQOk6UhDqRaTXT0w4IiMgdiFcTRbtUwC8OqOdFxUFJC0pJl nDwrLCIL+kGZX8YTX3L6GS0ocaTjP9quOYz8IG2Vfcr+PeoPRWkGn2x6qBksHkME MQTaCve0thvVGqCinzDYtpMSqZyYy1c3cclOs6Tk2xj+76a/peTPMCJZaAwna0bJ uZyyDwxZ/YqFIf0xZUyvoAclD9xiKOfWbVE9X30ru1iPOhZ1GH6cL8TUfQcfZwzu GtN5hmvaPk5ZLZgSwAMxiDkfTCWcbBc= -----END CERTIFICATE-----Generated at Wed May 13 05:27:50 2026 by rpki-client