$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa File: acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa (raw, json) Hash identifier: jjMx27jEE7y/lvsp6GBRKT3yHALPNjuoMhpW5N3DXF8= Subject key identifier: 2E:30:95:C9:79:4F:91:E7:8C:D3:05:82:80:9D:3F:F8:7D:C5:A3:D7 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584AF52147DE76E9B2E915936180 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 36511 IP address blocks: 209.35.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:47:de:76:e9:b2:e9:15:93:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=b88c522a-8ba6-43e0-9619-c0b11d5e801f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0c:56:1b:7e:08:8b:35:58:0f:1a:c2:b9:2f: 6b:35:00:9f:45:a1:b5:af:88:c1:57:da:8a:5d:6d: 31:5a:5e:37:5d:37:d4:d2:96:56:9e:93:bb:7a:45: 2c:05:35:c1:d6:f2:1e:f9:ea:01:5f:bc:6e:c9:64: 22:b0:21:07:f3:fe:52:03:1c:0e:09:66:e7:cb:57: 8f:09:ee:46:12:3c:0c:30:35:70:9c:9d:6c:b7:26: 9c:56:fe:1d:82:d7:b3:06:98:e8:03:a5:bf:f1:d7: 69:21:f8:34:37:f0:e7:3f:66:b1:64:44:51:e6:39: f1:9b:2f:ad:9a:6c:d8:f0:4f:8a:bf:9b:d9:86:c4: 66:0b:ee:51:54:48:ac:dc:6f:b2:73:34:19:66:d6: 86:be:b5:84:be:72:ca:73:39:12:54:01:de:49:3a: 4d:a3:6a:1d:e6:2e:7b:34:7c:28:31:1c:11:11:8e: 05:80:2a:d8:ee:0d:b0:13:42:78:59:ad:85:16:59: 20:f1:5f:02:0f:47:74:ed:9a:8e:77:0a:05:4c:66: a9:1a:bb:5a:bc:4f:41:30:0f:52:d9:47:46:f9:f7: 3f:ae:3b:f4:be:e0:6e:1a:48:f8:11:44:4f:dd:40: df:38:3c:bc:24:d8:7a:1b:a6:ea:0e:89:64:50:e9: 9a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:30:95:C9:79:4F:91:E7:8C:D3:05:82:80:9D:3F:F8:7D:C5:A3:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:8b:58:ac:e6:8c:af:85:7a:40:69:d2:0b:46:1a:54:72:a5: 42:55:54:5a:71:af:5b:8c:09:53:ee:d1:45:39:9c:82:ef:98: 0c:75:ad:f0:17:ad:4a:82:5b:82:48:a2:3f:9d:fa:ac:14:a6: 89:9f:4b:3f:63:17:66:30:40:39:33:a6:23:5b:73:bd:1b:76: cf:b0:d7:76:17:fe:26:cf:22:75:90:7f:2d:a0:c4:04:a8:81: 39:1e:80:b3:8e:d8:dd:61:39:4e:a3:d2:9f:74:ce:ee:f7:dc: 87:ed:68:85:6b:be:c0:d3:92:99:ca:c9:42:88:28:5c:fb:3a: 2d:35:4d:43:7d:4f:af:d4:1d:5b:6a:5e:46:bb:a2:0c:d4:56: a2:c3:dc:54:a9:02:a1:85:cf:5b:91:f2:e1:2c:ff:ea:13:b9: ec:08:9d:96:20:5d:6f:c1:2d:cb:7c:bc:95:c7:53:af:b7:3a: b6:69:76:d6:71:df:d1:75:41:05:4c:72:e4:aa:15:ac:46:f7: 1e:0d:af:e3:16:76:4d:8c:c8:52:78:5a:60:96:2e:f1:55:6b: 01:97:95:96:d9:d6:03:40:11:d8:cf:76:34:a0:9e:87:9a:26: 7f:c4:ed:8d:01:80:5e:a5:2e:ac:ad:61:b1:67:cc:96:9d:17: 4c:60:11:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IUfedumy6RWTYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk Yjg4YzUyMmEtOGJhNi00M2UwLTk2MTktYzBiMTFkNWU4MDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAxWG34IizVYDxrCuS9rNQCfRaG1r4jBV9qK XW0xWl43XTfU0pZWnpO7ekUsBTXB1vIe+eoBX7xuyWQisCEH8/5SAxwOCWbny1eP Ce5GEjwMMDVwnJ1styacVv4dgtezBpjoA6W/8ddpIfg0N/DnP2axZERR5jnxmy+t mmzY8E+Kv5vZhsRmC+5RVEis3G+yczQZZtaGvrWEvnLKczkSVAHeSTpNo2od5i57 NHwoMRwREY4FgCrY7g2wE0J4Wa2FFlkg8V8CD0d07ZqOdwoFTGapGrtavE9BMA9S 2UdG+fc/rjv0vuBuGkj4EURP3UDfODy8JNh6G6bqDolkUOmaewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4wlcl5T5HnjNMFgoCdP/h9xaPXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvYWNkYjM5NDMtMWZlMC0z NDNmLWI1ZmYtYzc5OGU5ZmQ0MDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKLWKzmjK+FekBp0gtGGlRypUJVVFpxr1uMCVPu0UU5nILvmAx1rfAX rUqCW4JIoj+d+qwUpomfSz9jF2YwQDkzpiNbc70bds+w13YX/ibPInWQfy2gxASo gTkegLOO2N1hOU6j0p90zu733IftaIVrvsDTkpnKyUKIKFz7Oi01TUN9T6/UHVtq Xka7ogzUVqLD3FSpAqGFz1uR8uEs/+oTuewInZYgXW/BLct8vJXHU6+3OrZpdtZx 39F1QQVMcuSqFaxG9x4Nr+MWdk2MyFJ4WmCWLvFVawGXlZbZ1gNAEdjPdjSgnoea Jn/E7Y0BgF6lLqytYbFnzJadF0xgEdU= -----END CERTIFICATE-----Generated at Sun Aug 24 02:52:27 2025 by rpki-client