$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa File: 3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa (raw, json) Hash identifier: knqx+FY5EVvY7dxTD8qgiwlbObL6/JMwq+t9ii0LzPY= Subject key identifier: 70:5C:AD:54:42:50:18:83:31:47:18:F0:86:E6:9B:7E:56:A1:74:9D Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584D95F0042AA7BCC0750DC99A20 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 33392 IP address blocks: 209.35.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:04:2a:a7:bc:c0:75:0d:c9:9a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=10c7357a-1edb-483e-9fb3-1d3fcc6fe15a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2b:de:d0:20:d9:d3:90:f2:71:2f:23:80:c7: e3:b8:99:44:07:20:01:d2:3e:73:5a:5e:16:57:c9: 7a:07:36:37:cf:a6:2f:e5:81:1f:cb:9f:41:3f:34: 65:65:6b:72:d3:42:7a:33:cf:69:a2:98:15:2c:e9: 2d:6f:db:4a:77:74:73:c2:e9:af:8a:f8:c5:1f:82: 57:49:b0:73:f4:63:47:0a:6f:9e:48:81:17:17:7f: 7f:f3:2b:60:3d:2b:50:5a:6b:92:41:51:87:98:2c: 52:89:e9:a8:99:15:b4:46:1e:79:e7:ce:7e:77:0c: 79:13:a1:31:4c:b3:cc:67:0c:e2:0c:9f:d4:f3:bd: d1:00:91:7c:d3:23:ff:7b:18:a8:d1:e3:09:ff:c7: 51:38:3e:7c:49:6f:4e:e0:76:8b:b9:86:fd:b5:3f: d4:8b:ef:f2:4e:ab:52:c9:3e:7a:28:96:33:89:d8: 3d:a1:9a:48:4c:a1:0d:73:a9:5c:b1:97:9c:9e:b0: bd:03:aa:54:ef:f5:1f:dd:c9:00:c0:0c:82:de:da: bc:50:4d:8b:a5:5a:52:8b:af:97:7a:c5:5e:87:7d: 00:50:67:83:cb:a9:2b:72:eb:58:60:f7:a0:e5:17: 7b:72:12:f3:24:93:b7:4c:0c:1a:c8:6e:7a:30:ce: 52:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5C:AD:54:42:50:18:83:31:47:18:F0:86:E6:9B:7E:56:A1:74:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:fa:ab:83:1f:3d:7f:a0:cd:70:73:08:68:46:3b:7d:82:72: 1d:ad:dd:1b:2a:8e:68:86:21:f4:2f:77:5b:f5:59:23:67:16: 61:47:24:9e:0e:33:2c:a9:b4:33:3d:37:22:4c:7b:5d:32:7e: 30:a8:55:42:c3:7a:0e:01:b0:ee:f5:13:60:58:4b:f8:d8:8a: 56:a4:9f:00:bf:6a:4e:cf:1a:e3:2c:37:91:96:1c:97:33:a6: fb:84:dd:b3:65:32:84:fb:cb:8c:a4:34:3c:1b:6f:a1:b4:df: 31:dc:36:c9:c2:c6:22:39:e3:02:93:8f:2c:60:06:58:aa:ba: ba:f9:13:9f:44:bc:a2:9f:ea:62:55:58:23:39:a0:d8:3b:65: c0:8c:f0:4d:48:af:ce:8a:7e:ca:4d:98:5e:17:eb:c1:7d:27: 57:5b:11:5e:6a:c1:ff:bb:ca:15:23:cf:78:78:ef:0a:28:9f: 08:13:36:60:04:07:1b:10:7e:14:1a:88:fa:83:e5:e4:1a:43: 50:ac:64:2a:dd:3e:bc:dd:45:61:f0:0a:da:34:f3:71:c2:9b: 60:1a:a7:76:ca:ad:6b:95:67:0a:c6:18:a4:95:6e:36:03:8a: 64:8c:e5:55:bb:e5:09:b9:13:e9:51:11:37:e4:b4:74:50:22: 9e:f6:56:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8AQqp7zAdQ3JmiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk MTBjNzM1N2EtMWVkYi00ODNlLTlmYjMtMWQzZmNjNmZlMTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSve0CDZ05DycS8jgMfjuJlEByAB0j5zWl4W V8l6BzY3z6Yv5YEfy59BPzRlZWty00J6M89popgVLOktb9tKd3RzwumvivjFH4JX SbBz9GNHCm+eSIEXF39/8ytgPStQWmuSQVGHmCxSiemomRW0Rh55585+dwx5E6Ex TLPMZwziDJ/U873RAJF80yP/exio0eMJ/8dROD58SW9O4HaLuYb9tT/Ui+/yTqtS yT56KJYzidg9oZpITKENc6lcsZecnrC9A6pU7/Uf3ckAwAyC3tq8UE2LpVpSi6+X esVeh30AUGeDy6krcutYYPeg5Rd7chLzJJO3TAwayG56MM5SIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBcrVRCUBiDMUcY8Ibmm35WoXSdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvM2YwODI1ZTctZTgwZi0z ZWIyLTgxYzctNzVkNzk4OTQ3M2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0SMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD6q4MfPX+gzXBzCGhGO32Cch2t3RsqjmiGIfQvd1v1WSNnFmFHJJ4O MyyptDM9NyJMe10yfjCoVULDeg4BsO71E2BYS/jYilaknwC/ak7PGuMsN5GWHJcz pvuE3bNlMoT7y4ykNDwbb6G03zHcNsnCxiI54wKTjyxgBliqurr5E59EvKKf6mJV WCM5oNg7ZcCM8E1Ir86KfspNmF4X68F9J1dbEV5qwf+7yhUjz3h47woonwgTNmAE BxsQfhQaiPqD5eQaQ1CsZCrdPrzdRWHwCto083HCm2Aap3bKrWuVZwrGGKSVbjYD imSM5VW75Qm5E+lRETfktHRQIp72Vqg= -----END CERTIFICATE-----Generated at Wed May 13 05:13:27 2026 by rpki-client