$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa File: 3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa (raw, json) Hash identifier: cIpT8HO6FZGEfouYgHPs1PV9xsvgPPjHcAi129s1rvk= Subject key identifier: 68:47:A5:24:BD:AA:1B:AD:92:48:9D:D5:E4:F0:7D:18:67:04:CF:C5 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584FBAA11FB6C599887F40D61980 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa Signing time: Wed 04 Nov 2026 14:00:13 +0000 ROA not before: Wed 04 Nov 2026 14:00:13 +0000 ROA not after: Tue 02 Feb 2027 14:00:13 +0000 asID: 33392 IP address blocks: 209.35.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ba:a1:1f:b6:c5:99:88:7f:40:d6:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Nov 4 14:00:13 2026 GMT Not After : Feb 2 14:00:13 2027 GMT Subject: CN=9eb1bba0-dcf1-4624-a52e-197fcced0279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a1:1e:2c:91:51:5e:05:b9:01:c2:7e:86:ab: 44:28:12:7a:16:87:85:80:56:26:03:b7:d4:4f:9d: 30:4b:43:8f:77:54:8b:34:cc:8d:16:92:2a:4f:80: 7f:85:9e:8e:10:35:72:b5:ef:53:96:8a:d7:7c:a6: 48:8b:95:1c:48:53:f7:7c:59:7a:b4:b2:e2:0a:8b: 09:1e:c2:ff:34:51:6f:c4:dd:f6:f4:26:00:a6:68: 89:c1:fe:85:8e:f8:c1:8e:7e:a2:4f:51:68:3a:e6: 45:33:f1:e4:a8:da:76:21:c3:12:75:30:61:bf:d7: a8:16:7c:79:d7:00:d6:ef:45:ca:47:a8:ff:18:14: f9:f3:a7:34:88:84:1e:32:a6:b5:73:21:dc:0e:6e: f5:99:c9:e5:1b:12:7b:ab:1b:22:c2:ab:8c:6e:e1: 6d:04:2d:96:05:30:3d:be:c8:af:95:9a:cc:92:56: 60:b8:78:ad:5d:03:f2:48:6b:97:b2:5c:18:f2:17: 66:f7:22:96:57:56:9e:15:13:71:db:28:3c:17:c1: 77:f0:a9:41:14:b1:2d:e2:39:88:2a:5a:28:9d:98: da:d2:0f:a0:39:c4:61:ea:95:9d:25:88:e2:40:f5: 05:2b:79:2d:e5:28:8a:b0:7e:8a:43:bf:e7:7a:27: b3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:47:A5:24:BD:AA:1B:AD:92:48:9D:D5:E4:F0:7D:18:67:04:CF:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ea:ee:fe:3f:5a:85:f6:47:fa:16:5f:34:63:5c:71:9c:de: 98:f2:af:aa:b4:61:29:eb:ae:34:02:bb:3c:23:32:5d:f0:ea: a4:5f:da:46:d2:7f:ca:1e:4a:d0:46:53:14:db:f4:bf:71:da: 7a:70:b3:bc:53:a3:dd:e5:79:f9:44:c6:0e:13:bd:d5:1b:e9: 4f:bd:65:ba:d2:33:be:25:66:88:ec:39:99:5b:b1:b6:91:c1: 56:eb:d7:07:02:5c:a5:c0:0c:32:1f:45:2f:d7:fd:72:16:61: b4:49:9b:a8:3e:28:e8:a8:8f:a3:f8:5d:5e:5a:8f:07:ec:1c: 7d:0d:a2:a0:39:1d:aa:19:57:d1:d4:17:4a:cc:7c:52:bc:0d: 43:6c:94:d1:23:3d:9f:27:32:28:8e:1e:ed:f5:f6:f8:af:29: 07:85:98:b5:a1:c7:17:84:5f:16:e9:29:d8:3a:b9:a5:6f:a1: 55:63:64:77:cd:8c:a6:70:d6:82:b9:24:fe:86:de:d0:65:d7: 9b:e4:f5:26:ba:f0:fa:ce:c2:a5:c1:df:18:f7:ad:57:e7:fa: 39:70:c9:e7:08:40:dc:b1:f9:f2:2b:57:9d:bd:aa:8c:49:5c: 0e:c8:2b:01:c6:c7:3e:84:3b:fd:b1:5a:d7:88:10:d0:57:be: 1e:83:91:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+6oR+2xZmIf0DWGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MTEwNDE0MDAxM1oXDTI3MDIwMjE0MDAxM1owLzEtMCsGA1UEAxMk OWViMWJiYTAtZGNmMS00NjI0LWE1MmUtMTk3ZmNjZWQwMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6EeLJFRXgW5AcJ+hqtEKBJ6FoeFgFYmA7fU T50wS0OPd1SLNMyNFpIqT4B/hZ6OEDVyte9TlorXfKZIi5UcSFP3fFl6tLLiCosJ HsL/NFFvxN329CYApmiJwf6FjvjBjn6iT1FoOuZFM/HkqNp2IcMSdTBhv9eoFnx5 1wDW70XKR6j/GBT586c0iIQeMqa1cyHcDm71mcnlGxJ7qxsiwquMbuFtBC2WBTA9 vsivlZrMklZguHitXQPySGuXslwY8hdm9yKWV1aeFRNx2yg8F8F38KlBFLEt4jmI KloonZja0g+gOcRh6pWdJYjiQPUFK3kt5SiKsH6KQ7/neiezsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhHpSS9qhutkkid1eTwfRhnBM/FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvM2YwODI1ZTctZTgwZi0z ZWIyLTgxYzctNzVkNzk4OTQ3M2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0SMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXq7v4/WoX2R/oWXzRjXHGc3pjyr6q0YSnrrjQCuzwjMl3w6qRf2kbS f8oeStBGUxTb9L9x2npws7xTo93leflExg4TvdUb6U+9ZbrSM74lZojsOZlbsbaR wVbr1wcCXKXADDIfRS/X/XIWYbRJm6g+KOioj6P4XV5ajwfsHH0NoqA5HaoZV9HU F0rMfFK8DUNslNEjPZ8nMiiOHu319vivKQeFmLWhxxeEXxbpKdg6uaVvoVVjZHfN jKZw1oK5JP6G3tBl15vk9Sa68PrOwqXB3xj3rVfn+jlwyecIQNyx+fIrV529qoxJ XA7IKwHGxz6EO/2xWteIENBXvh6DkYM= -----END CERTIFICATE-----Generated at Sun Nov 15 13:37:17 2026 by rpki-client