$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/79569488-5c69-30a4-ba69-3e3e08449c39.roa File: 79569488-5c69-30a4-ba69-3e3e08449c39.roa (raw, json) Hash identifier: khiHb00FSjYiiSAHgAD8WJTU4dY7LFzIfzIixQ028M0= Subject key identifier: D8:41:2F:D4:96:D7:4D:72:78:64:C7:B3:3F:F6:5F:E3:A3:63:67:EC Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584A14657257054E2556DD556B40 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/79569488-5c69-30a4-ba69-3e3e08449c39.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 36511 IP address blocks: 209.35.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:72:57:05:4e:25:56:dd:55:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=da39aeee-676d-4084-b6bf-4a5a430c7482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4b:1f:06:f2:88:e2:35:bb:7f:fd:d9:20:ec: 84:19:94:d6:2a:dc:99:ac:6b:14:1b:bf:b2:87:83: 48:62:28:52:09:49:97:7d:88:ef:37:a9:20:4a:e9: 41:ff:e5:44:d4:92:47:28:f0:c0:a4:66:a2:49:40: 51:0e:0c:d1:26:d1:32:23:6d:a1:d6:7a:d3:8c:90: d8:52:1e:a4:4e:56:80:7c:f8:a1:98:a6:b2:49:c9: 8a:fe:01:4b:e3:15:0f:a5:2f:b2:56:26:cf:b3:a0: b2:cc:1a:36:9f:3c:70:3a:8f:2a:53:1e:2f:18:9c: b1:46:2c:d6:7c:32:5f:6a:e9:78:6f:71:6d:79:38: e9:1d:12:66:ca:e1:39:bd:5e:dc:d2:0f:e4:6c:47: 94:3e:ae:6d:69:f4:5a:59:ee:87:f6:f5:61:02:32: 9b:ae:ed:b8:0c:9a:d1:e4:f4:63:aa:5d:f1:bd:52: 0c:d2:86:4f:ce:ef:b9:71:33:69:60:f3:bc:5e:e3: 7e:91:a3:f6:88:35:25:40:c7:81:4a:c2:d8:d6:45: e2:d6:47:0e:f9:61:74:df:9b:96:aa:3f:e4:f8:bf: 48:14:a0:4c:8f:44:8e:3b:86:2a:a0:66:a5:b9:6c: 15:12:db:37:4d:68:1f:dc:11:46:20:22:db:3d:9e: 76:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:41:2F:D4:96:D7:4D:72:78:64:C7:B3:3F:F6:5F:E3:A3:63:67:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/79569488-5c69-30a4-ba69-3e3e08449c39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:43:b4:a6:19:5b:4e:64:76:06:84:06:a9:b0:cf:e9:a5:b8: 23:15:fe:b3:e3:02:0a:a6:96:87:ef:84:97:67:44:d7:ea:a6: 47:59:b9:77:59:d6:94:d6:90:d9:2b:79:24:64:ae:96:18:b6: 18:dc:a5:c2:b1:a7:2a:02:3c:df:c3:7e:5e:da:84:6c:9e:e6: 6a:cf:e2:1a:b9:a6:34:23:10:b7:6e:92:68:ac:b7:d8:0c:5c: d8:58:52:e1:62:e9:76:22:f4:bf:74:39:ce:aa:71:28:58:6c: 8e:2a:a3:97:91:6f:6c:62:c2:54:d9:0a:dd:4d:90:fc:64:d9: fa:61:1a:68:cb:30:d0:ea:c8:0d:4f:a1:fe:5e:cc:41:51:3f: 77:6e:31:f1:47:c7:0b:5c:96:1d:e2:98:6e:ea:70:43:a5:46: 59:ec:54:94:5c:37:8f:e6:fe:79:91:a5:c9:2d:50:dd:e5:12: 32:2a:3b:4e:0d:e6:7c:67:0e:67:52:d3:15:34:62:bb:14:f3: 19:76:aa:43:ff:db:43:15:39:b3:f6:48:66:4e:0a:b2:28:23: 93:bd:66:8c:f6:90:ee:94:62:6c:72:88:49:6d:14:9f:78:30: 85:20:cf:5c:d7:bf:72:d1:39:e1:0c:d9:46:4a:09:ca:f5:66: 03:3c:e0:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXJXBU4lVt1Va0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ZGEzOWFlZWUtNjc2ZC00MDg0LWI2YmYtNGE1YTQzMGM3NDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqksfBvKI4jW7f/3ZIOyEGZTWKtyZrGsUG7+y h4NIYihSCUmXfYjvN6kgSulB/+VE1JJHKPDApGaiSUBRDgzRJtEyI22h1nrTjJDY Uh6kTlaAfPihmKayScmK/gFL4xUPpS+yVibPs6CyzBo2nzxwOo8qUx4vGJyxRizW fDJfaul4b3FteTjpHRJmyuE5vV7c0g/kbEeUPq5tafRaWe6H9vVhAjKbru24DJrR 5PRjql3xvVIM0oZPzu+5cTNpYPO8XuN+kaP2iDUlQMeBSsLY1kXi1kcO+WF035uW qj/k+L9IFKBMj0SOO4YqoGaluWwVEts3TWgf3BFGICLbPZ52BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhBL9SW101yeGTHsz/2X+OjY2fsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvNzk1Njk0ODgtNWM2OS0z MGE0LWJhNjktM2UzZTA4NDQ5YzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0SMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdDtKYZW05kdgaEBqmwz+mluCMV/rPjAgqmlofvhJdnRNfqpkdZuXdZ 1pTWkNkreSRkrpYYthjcpcKxpyoCPN/Dfl7ahGye5mrP4hq5pjQjELdukmist9gM XNhYUuFi6XYi9L90Oc6qcShYbI4qo5eRb2xiwlTZCt1NkPxk2fphGmjLMNDqyA1P of5ezEFRP3duMfFHxwtclh3imG7qcEOlRlnsVJRcN4/m/nmRpcktUN3lEjIqO04N 5nxnDmdS0xU0YrsU8xl2qkP/20MVObP2SGZOCrIoI5O9Zoz2kO6UYmxyiEltFJ94 MIUgz1zXv3LROeEM2UZKCcr1ZgM84Jw= -----END CERTIFICATE-----Generated at Mon Jun 30 01:11:35 2025 by rpki-client