$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa File: 38c40b45-912b-3d93-bf1f-297a8a0a2463.roa (raw, json) Hash identifier: nrl0+YzdkpAtrcBYWHAK799ADDZu4xD3/izPpPpmk3w= Subject key identifier: 1A:99:2F:EF:F6:17:12:55:A6:1B:0B:A0:88:0E:38:3D:2A:59:FA:B1 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584A146572874804FD8136EDAE80 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 36511 IP address blocks: 209.35.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:72:87:48:04:fd:81:36:ed:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=59335ca5-6118-496e-bae4-8dfc2117be2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:15:a2:62:f4:05:91:af:26:9f:08:61:46:2c: 75:3a:14:ea:e4:e8:d9:45:7a:37:eb:49:8e:26:69: 5c:97:a8:b2:83:9c:55:48:ff:b1:8c:2c:5d:60:3b: a2:d7:c3:85:c4:2d:c1:ca:be:3f:50:d9:18:d2:e4: b7:f1:bd:e4:71:2c:6f:e9:4f:9e:cb:e5:3d:9b:69: 58:ff:87:71:de:c4:eb:af:0e:e3:e8:e4:b9:09:04: 51:c2:0e:64:aa:d6:9a:6d:c4:2f:c4:b8:a3:36:4d: 66:21:8c:8c:24:49:2e:3c:97:3f:38:df:27:ee:e2: 9c:aa:eb:ce:97:00:92:e6:ec:fb:76:0d:07:96:e2: 7d:5d:b6:d4:b8:ed:5e:f5:50:7c:30:c1:a1:7f:29: d9:0b:a7:10:82:a1:43:2e:fc:70:5b:5a:36:49:88: 80:12:44:0c:38:a7:0a:5f:e4:a8:11:04:d4:bd:f7: 5c:98:58:c7:f0:56:17:c4:3a:8c:39:40:f2:7e:5a: 45:1a:48:8e:fa:60:7d:e9:a3:68:3d:02:8d:6c:db: c5:d2:bb:02:49:6e:ab:e8:00:18:00:74:48:c3:2a: ac:38:d9:cf:2e:6e:47:a5:fd:a8:0f:77:0a:41:cb: 8f:5c:91:0e:71:85:47:35:6b:46:63:64:99:13:ad: dd:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:99:2F:EF:F6:17:12:55:A6:1B:0B:A0:88:0E:38:3D:2A:59:FA:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:fc:b7:1d:e0:22:06:db:19:6a:ac:41:5f:33:ec:4e:07:c6: 0e:54:8c:ec:0c:c9:79:57:9a:cc:25:aa:6c:f1:83:96:d7:6b: 3c:38:ce:a2:33:f7:3c:da:dc:64:94:dd:5b:a3:9b:b9:55:70: 94:12:b3:3c:27:2c:3b:88:98:a0:b6:54:dc:01:b3:65:31:57: 97:50:03:2c:6a:ca:1f:a8:0b:a8:47:85:cf:13:ee:b5:24:b4: e9:4c:3f:96:0d:f4:55:07:19:19:56:25:0c:7f:aa:c5:fc:37: 4e:a1:5b:86:c8:7e:73:c3:1c:28:c9:3a:41:b4:bb:91:5e:3a: cc:20:85:d8:c9:9c:86:f8:90:c3:2f:24:b6:88:b1:19:ab:50: 57:67:2c:11:ef:47:c7:a9:b7:d2:e9:b3:a9:f6:e6:9a:f0:70: cb:0f:d8:48:5e:4d:c3:31:ad:17:9c:88:36:6d:c2:f4:2f:4d: 03:d5:91:e0:b8:c5:9d:d6:11:5a:eb:65:0a:30:91:5b:28:8c: 35:6c:5f:bd:5c:61:5a:82:1d:cf:7b:1e:52:21:44:ae:7a:f6: 7c:dc:0c:c8:70:4b:e0:50:ba:96:7e:cd:0e:63:a0:04:46:f2: f2:45:97:9f:72:8b:2f:3b:eb:3e:8d:b6:94:b2:77:48:c0:55: 96:64:0e:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXKHSAT9gTbtroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk NTkzMzVjYTUtNjExOC00OTZlLWJhZTQtOGRmYzIxMTdiZTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhWiYvQFka8mnwhhRix1OhTq5OjZRXo360mO Jmlcl6iyg5xVSP+xjCxdYDui18OFxC3Byr4/UNkY0uS38b3kcSxv6U+ey+U9m2lY /4dx3sTrrw7j6OS5CQRRwg5kqtaabcQvxLijNk1mIYyMJEkuPJc/ON8n7uKcquvO lwCS5uz7dg0HluJ9XbbUuO1e9VB8MMGhfynZC6cQgqFDLvxwW1o2SYiAEkQMOKcK X+SoEQTUvfdcmFjH8FYXxDqMOUDyflpFGkiO+mB96aNoPQKNbNvF0rsCSW6r6AAY AHRIwyqsONnPLm5Hpf2oD3cKQcuPXJEOcYVHNWtGY2SZE63dgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqZL+/2FxJVphsLoIgOOD0qWfqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMzhjNDBiNDUtOTEyYi0z ZDkzLWJmMWYtMjk3YThhMGEyNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABL8tx3gIgbbGWqsQV8z7E4Hxg5UjOwMyXlXmswlqmzxg5bXazw4zqIz 9zza3GSU3Vujm7lVcJQSszwnLDuImKC2VNwBs2UxV5dQAyxqyh+oC6hHhc8T7rUk tOlMP5YN9FUHGRlWJQx/qsX8N06hW4bIfnPDHCjJOkG0u5FeOswghdjJnIb4kMMv JLaIsRmrUFdnLBHvR8ept9Lps6n25prwcMsP2EheTcMxrReciDZtwvQvTQPVkeC4 xZ3WEVrrZQowkVsojDVsX71cYVqCHc97HlIhRK569nzcDMhwS+BQupZ+zQ5joARG 8vJFl59yiy876z6NtpSyd0jAVZZkDug= -----END CERTIFICATE-----Generated at Mon Jun 30 00:56:13 2025 by rpki-client