$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa File: 3f21f936-baed-3e68-a983-e38e4550c9d3.roa (raw, json) Hash identifier: qkJZQXBXGUY+orE3Gal6EBJ+K3i9TYmX7K2kzyt/H2E= Subject key identifier: 77:36:CD:FA:E9:44:B4:A1:58:FF:64:8E:E4:E5:6F:00:C3:0C:CD:33 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584D98BAA5D1DB6EE7B7B8E03B00 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 36511 IP address blocks: 209.35.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a5:d1:db:6e:e7:b7:b8:e0:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=c603a9d8-aa26-4028-b417-b5105d79b0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:73:bd:d2:94:15:36:5c:10:7c:8e:d1:9f:65: e5:8b:91:f4:71:83:fb:bc:ca:c3:0e:d6:59:d3:5b: 2c:b6:6b:e8:b4:3c:f6:c2:d0:2c:dc:5b:aa:11:55: d0:4d:8c:92:3c:a0:dc:a9:51:14:2a:63:12:a4:c5: 87:9f:67:f8:cb:ad:44:78:3b:31:73:23:75:48:7e: 90:c4:81:ce:9e:8a:0e:f5:26:43:e8:39:7c:74:f2: 02:8d:ed:79:20:d4:08:87:4e:ee:29:f9:a8:17:09: 85:6c:37:89:19:1f:2b:d7:07:24:38:7e:2b:52:51: ef:80:13:47:10:9a:be:5a:d0:22:a7:12:f5:24:ea: bd:e9:10:5c:90:05:44:b3:d4:31:8f:8d:1e:22:92: 99:15:24:d8:fe:ac:2b:09:a6:ac:aa:b1:e3:0c:f7: 2f:3b:3c:52:36:b1:75:a8:ca:28:34:5a:d6:c5:64: 4c:47:49:c0:8d:25:27:87:36:9a:14:6a:9c:ee:80: 6d:3d:be:76:4f:57:f5:dc:e6:01:b0:9b:9c:6a:c6: 3e:db:f8:c2:58:ab:51:0f:58:b0:7e:d6:eb:2f:93: 39:55:37:b3:d7:e6:5b:42:c1:f0:ea:de:bc:88:25: 96:97:d0:66:1d:62:45:9d:8e:bd:87:bc:d6:68:68: 59:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:36:CD:FA:E9:44:B4:A1:58:FF:64:8E:E4:E5:6F:00:C3:0C:CD:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:5f:45:c8:37:5d:bc:c8:a5:c6:c3:72:41:b9:3c:00:8b:32: 09:05:0d:a9:d8:a2:ae:4a:27:ad:2f:c2:73:9f:61:1b:af:0b: a3:1f:ba:53:d2:7f:97:b2:b0:5e:fb:22:29:d2:a1:60:06:dc: 45:f9:67:e5:e1:85:99:94:6e:cb:01:ce:a7:88:8c:1c:94:84: 94:d3:bf:e4:75:83:ab:64:08:b2:cb:74:9a:63:81:41:11:84: 47:3c:86:da:38:ce:84:7b:17:5e:a7:7b:0e:c4:0e:a8:15:3d: 36:d2:5b:85:21:00:5b:80:7d:66:a9:e2:8d:19:26:29:98:ee: 23:19:16:d4:06:74:18:ac:37:50:f0:d0:16:12:7f:42:fd:99: a6:28:bf:1e:69:d0:3a:ed:88:da:65:07:78:c4:73:45:2d:1d: 43:e2:0c:42:48:5f:85:65:63:c1:6c:e6:43:fa:e3:9d:ca:36: b0:4c:d1:c9:2c:d4:d3:b6:26:21:d2:9d:5e:cc:a4:7d:86:e1: df:27:24:56:2b:a4:4e:7e:b8:b9:de:87:9f:95:b1:08:7d:12: 7e:a3:47:92:15:3a:8f:84:98:16:0c:a8:82:84:68:c9:a0:8b: 07:66:63:7f:91:e3:69:d2:76:f9:9e:ba:2a:c1:28:76:7a:39: 9f:eb:7e:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqXR227nt7jgOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk YzYwM2E5ZDgtYWEyNi00MDI4LWI0MTctYjUxMDVkNzliMGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHO90pQVNlwQfI7Rn2Xli5H0cYP7vMrDDtZZ 01sstmvotDz2wtAs3FuqEVXQTYySPKDcqVEUKmMSpMWHn2f4y61EeDsxcyN1SH6Q xIHOnooO9SZD6Dl8dPICje15INQIh07uKfmoFwmFbDeJGR8r1wckOH4rUlHvgBNH EJq+WtAipxL1JOq96RBckAVEs9Qxj40eIpKZFSTY/qwrCaasqrHjDPcvOzxSNrF1 qMooNFrWxWRMR0nAjSUnhzaaFGqc7oBtPb52T1f13OYBsJucasY+2/jCWKtRD1iw ftbrL5M5VTez1+ZbQsHw6t68iCWWl9BmHWJFnY69h7zWaGhZbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHc2zfrpRLShWP9kjuTlbwDDDM0zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvM2YyMWY5MzYtYmFlZC0z ZTY4LWE5ODMtZTM4ZTQ1NTBjOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0SMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhfRcg3XbzIpcbDckG5PACLMgkFDanYoq5KJ60vwnOfYRuvC6MfulPS f5eysF77IinSoWAG3EX5Z+XhhZmUbssBzqeIjByUhJTTv+R1g6tkCLLLdJpjgUER hEc8hto4zoR7F16new7EDqgVPTbSW4UhAFuAfWap4o0ZJimY7iMZFtQGdBisN1Dw 0BYSf0L9maYovx5p0DrtiNplB3jEc0UtHUPiDEJIX4VlY8Fs5kP6453KNrBM0cks 1NO2JiHSnV7MpH2G4d8nJFYrpE5+uLneh5+VsQh9En6jR5IVOo+EmBYMqIKEaMmg iwdmY3+R42nSdvmeuirBKHZ6OZ/rfs8= -----END CERTIFICATE-----Generated at Wed May 13 05:30:32 2026 by rpki-client