$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa File: 38c40b45-912b-3d93-bf1f-297a8a0a2463.roa (raw, json) Hash identifier: pY+NhqWlprt8yuz++WcPOJLLSFuU33Qh1HCQs4BJoeY= Subject key identifier: E9:93:AE:CF:50:25:77:0F:34:F8:13:AE:A9:B6:A2:2D:83:26:49:FF Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584AF52147F168DB989E4301AEC0 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 36511 IP address blocks: 209.35.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:47:f1:68:db:98:9e:43:01:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=1482e79b-4348-4c77-b65a-d6d93e827fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0b:ee:36:47:c7:13:3d:f7:2c:e7:9f:84:04: a1:3c:ee:3e:f1:91:fd:24:ab:e0:67:1c:f5:75:33: 11:35:89:a5:78:77:2f:81:e4:b5:f2:36:02:57:a9: 81:37:e5:bf:f5:2f:93:17:cd:71:93:ae:71:65:e7: a3:06:3a:83:7f:a6:b5:b5:b3:5b:e2:d9:f7:a1:55: a1:c1:f0:c4:3f:d9:fb:79:f4:da:14:53:4c:ba:b0: 90:14:0e:91:30:4b:70:aa:d3:e6:33:12:3d:16:8c: c5:cf:79:f4:10:2d:34:3e:c9:7f:f4:9c:32:9d:f8: 4c:4e:27:6e:71:00:d8:66:1a:16:3b:d2:b2:37:2a: e5:5b:34:6e:61:2a:ff:14:6b:95:01:6a:eb:b8:0c: 17:fd:b7:e0:66:3f:73:0c:a2:6b:86:88:fe:5b:15: f2:4d:4d:c4:66:fa:c8:de:65:6c:5a:e3:bb:b8:33: ab:2d:53:cf:ac:8d:15:54:67:5a:e4:ee:7d:f7:1a: 6f:72:36:d8:76:f4:2f:1d:10:b6:cb:17:51:1e:a6: 79:95:8b:04:d2:23:3f:a5:1f:8d:e1:39:45:7b:c2: 98:a6:41:e5:a1:6d:b7:bc:00:d6:75:94:b3:27:a2: 97:43:17:90:51:b4:9b:0b:3f:bf:a4:cf:76:47:ab: b9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:93:AE:CF:50:25:77:0F:34:F8:13:AE:A9:B6:A2:2D:83:26:49:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:b7:25:ae:2d:86:2b:32:b2:74:51:e8:05:8e:57:44:d5:12: 7f:6b:d1:88:cf:c2:d1:e8:26:83:1e:ff:2b:c0:95:3e:4d:54: 90:b5:af:a4:08:5c:89:a7:a1:48:db:d2:1f:8e:0c:fb:8b:63: ad:56:10:5a:29:81:7f:05:0b:9d:61:52:33:95:ef:f6:ee:f7: 12:b4:c2:fe:93:4e:20:dd:c3:0c:a8:c7:55:b9:c4:ef:90:5d: 21:68:03:af:1f:0b:20:61:1e:30:0b:bf:8a:92:4a:c6:43:cd: c4:3f:45:4f:2b:ee:39:8c:c1:6b:50:9d:2d:8f:85:d3:e5:e1: 47:2a:94:f6:09:4b:05:f4:48:bf:b3:c8:49:31:b8:41:23:56: 91:a1:13:84:59:a9:83:53:98:9f:24:c2:58:66:7b:77:bf:1b: e9:17:08:74:7e:4b:07:af:0b:14:98:18:c0:e1:7e:53:ff:7c: 4d:8c:00:aa:64:53:6b:ac:b0:84:bc:4c:30:42:bf:79:df:b3: 99:dc:4b:fe:ab:ef:69:c8:ee:e6:44:7e:f0:45:99:93:ab:4f: 6c:f4:18:a2:ff:05:fb:3e:74:b4:d1:2a:43:c9:9e:61:e2:15: 75:00:6e:3f:56:9f:23:3f:8a:8f:25:c7:53:9c:64:58:45:98: fd:aa:14:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUfxaNuYnkMBrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MTQ4MmU3OWItNDM0OC00Yzc3LWI2NWEtZDZkOTNlODI3ZmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwvuNkfHEz33LOefhAShPO4+8ZH9JKvgZxz1 dTMRNYmleHcvgeS18jYCV6mBN+W/9S+TF81xk65xZeejBjqDf6a1tbNb4tn3oVWh wfDEP9n7efTaFFNMurCQFA6RMEtwqtPmMxI9FozFz3n0EC00Psl/9JwynfhMTidu cQDYZhoWO9KyNyrlWzRuYSr/FGuVAWrruAwX/bfgZj9zDKJrhoj+WxXyTU3EZvrI 3mVsWuO7uDOrLVPPrI0VVGda5O599xpvcjbYdvQvHRC2yxdRHqZ5lYsE0iM/pR+N 4TlFe8KYpkHloW23vADWdZSzJ6KXQxeQUbSbCz+/pM92R6u57wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmTrs9QJXcPNPgTrqm2oi2DJkn/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMzhjNDBiNDUtOTEyYi0z ZDkzLWJmMWYtMjk3YThhMGEyNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIu3Ja4thisysnRR6AWOV0TVEn9r0YjPwtHoJoMe/yvAlT5NVJC1r6QI XImnoUjb0h+ODPuLY61WEFopgX8FC51hUjOV7/bu9xK0wv6TTiDdwwyox1W5xO+Q XSFoA68fCyBhHjALv4qSSsZDzcQ/RU8r7jmMwWtQnS2PhdPl4UcqlPYJSwX0SL+z yEkxuEEjVpGhE4RZqYNTmJ8kwlhme3e/G+kXCHR+SwevCxSYGMDhflP/fE2MAKpk U2ussIS8TDBCv3nfs5ncS/6r72nI7uZEfvBFmZOrT2z0GKL/Bfs+dLTRKkPJnmHi FXUAbj9WnyM/io8lx1OcZFhFmP2qFGY= -----END CERTIFICATE-----Generated at Sun Aug 24 02:52:58 2025 by rpki-client