$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa File: 3f21f936-baed-3e68-a983-e38e4550c9d3.roa (raw, json) Hash identifier: 8PMaHCOOhaK/+6OMtHGUZKdGVumd5v1UK5xaVBApfbU= Subject key identifier: D7:EB:19:82:BF:42:CB:0E:6A:10:51:54:5F:8F:F9:EC:00:2E:20:62 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584FBD6BC3DB6E40938A63BF60C0 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa Signing time: Thu 05 Nov 2026 14:00:14 +0000 ROA not before: Thu 05 Nov 2026 14:00:14 +0000 ROA not after: Wed 03 Feb 2027 14:00:14 +0000 asID: 36511 IP address blocks: 209.35.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:bd:6b:c3:db:6e:40:93:8a:63:bf:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Nov 5 14:00:14 2026 GMT Not After : Feb 3 14:00:14 2027 GMT Subject: CN=4cea3901-9725-42b9-a3d0-11a6b9deabff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1b:0f:2c:28:15:16:2f:b8:88:66:08:42:0e: b4:5a:01:c4:8b:c0:87:b2:c6:85:5d:1d:c3:46:1a: 8f:f4:1a:1b:6f:af:2f:5c:e6:b4:a0:b7:96:2a:54: b4:7f:57:d9:df:e5:ee:44:f3:98:da:2f:37:db:33: 7e:be:1e:aa:ac:29:43:96:80:0e:6d:5f:78:e0:c5: 82:2a:e4:57:a9:91:a3:b8:8d:c4:49:ab:6d:27:db: ca:c8:b9:d5:53:f1:69:c0:40:eb:b5:31:b7:9c:56: 6a:85:17:fa:ea:53:18:33:21:8f:ca:b3:a6:ae:32: 60:9b:e5:75:d4:09:be:13:14:b0:3b:27:b1:ff:3c: 13:d7:63:ec:5b:7d:7e:32:ee:23:2e:d8:df:36:46: d1:67:3e:b6:93:36:e4:b0:32:25:db:10:c0:e1:ea: 78:00:bf:cd:de:8a:de:17:0a:3c:68:af:61:93:4c: fa:19:e7:6d:ee:c7:06:23:ce:7c:6b:83:20:93:ce: 0a:ce:82:d6:a4:11:0c:1c:76:d8:4c:a7:2f:90:54: ce:64:b4:85:e2:51:2c:55:b7:3e:c2:ad:03:0a:59: 72:13:f4:d6:1f:31:6d:87:7f:0a:e9:7a:1d:c0:64: d6:f1:b2:d3:fd:59:09:c4:b1:a6:e1:5a:70:65:eb: fe:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EB:19:82:BF:42:CB:0E:6A:10:51:54:5F:8F:F9:EC:00:2E:20:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:bc:38:0d:08:75:75:47:23:e2:42:c4:b4:da:96:16:71:cb: 36:c3:92:ca:7e:33:05:38:64:8c:1d:c6:83:d2:06:e7:6f:81: 26:bf:a8:8f:f1:39:f0:87:90:fc:90:e0:35:db:66:71:31:95: 6b:eb:5c:0f:ec:16:5a:00:ef:96:b2:08:12:30:4b:33:23:b5: 8f:35:1a:62:08:5b:e2:0f:b1:0e:18:43:2a:d9:34:1c:75:eb: 40:52:16:1a:09:64:53:46:55:20:d8:6f:bd:4a:8f:5e:6c:58: d7:1c:01:89:37:bf:f0:6c:4d:76:30:19:f4:f0:52:9e:96:7f: c3:3a:d6:83:aa:33:8b:51:a3:04:48:33:38:5f:ed:9c:83:70: 52:4b:bd:6f:01:da:44:2e:ff:fd:a5:50:61:5b:03:48:c0:6d: cd:29:22:12:97:ea:98:f0:24:d0:f1:4e:d9:07:61:15:5b:17: b5:d1:01:56:69:37:2d:65:35:61:87:3b:f9:d6:c1:97:0e:e2: de:ff:35:1b:03:ad:21:2d:68:1c:c2:18:2f:df:12:8f:ba:26: a2:80:05:33:f1:96:62:29:5c:1d:72:66:b3:10:34:3c:27:15: 90:cd:c4:a5:15:b7:d9:89:d8:00:a6:98:21:f7:a6:a5:27:50: 66:8e:60:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+9a8PbbkCTimO/YMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MTEwNTE0MDAxNFoXDTI3MDIwMzE0MDAxNFowLzEtMCsGA1UEAxMk NGNlYTM5MDEtOTcyNS00MmI5LWEzZDAtMTFhNmI5ZGVhYmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRsPLCgVFi+4iGYIQg60WgHEi8CHssaFXR3D RhqP9Bobb68vXOa0oLeWKlS0f1fZ3+XuRPOY2i832zN+vh6qrClDloAObV944MWC KuRXqZGjuI3ESattJ9vKyLnVU/FpwEDrtTG3nFZqhRf66lMYMyGPyrOmrjJgm+V1 1Am+ExSwOyex/zwT12PsW31+Mu4jLtjfNkbRZz62kzbksDIl2xDA4ep4AL/N3ore Fwo8aK9hk0z6Gedt7scGI858a4Mgk84KzoLWpBEMHHbYTKcvkFTOZLSF4lEsVbc+ wq0DCllyE/TWHzFth38K6XodwGTW8bLT/VkJxLGm4VpwZev+UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfrGYK/QssOahBRVF+P+ewALiBiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvM2YyMWY5MzYtYmFlZC0z ZTY4LWE5ODMtZTM4ZTQ1NTBjOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0SMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGq8OA0IdXVHI+JCxLTalhZxyzbDksp+MwU4ZIwdxoPSBudvgSa/qI/x OfCHkPyQ4DXbZnExlWvrXA/sFloA75ayCBIwSzMjtY81GmIIW+IPsQ4YQyrZNBx1 60BSFhoJZFNGVSDYb71Kj15sWNccAYk3v/BsTXYwGfTwUp6Wf8M61oOqM4tRowRI Mzhf7ZyDcFJLvW8B2kQu//2lUGFbA0jAbc0pIhKX6pjwJNDxTtkHYRVbF7XRAVZp Ny1lNWGHO/nWwZcO4t7/NRsDrSEtaBzCGC/fEo+6JqKABTPxlmIpXB1yZrMQNDwn FZDNxKUVt9mJ2ACmmCH3pqUnUGaOYJE= -----END CERTIFICATE-----Generated at Sun Nov 15 14:13:19 2026 by rpki-client