$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa File: 38c40b45-912b-3d93-bf1f-297a8a0a2463.roa (raw, json) Hash identifier: RRzB+KWs9jea2+FbimRE+Bp5ahjvbAA+B4Lpr8QpeJA= Subject key identifier: 06:3A:4E:CB:6D:11:02:F2:D6:0E:1E:2D:25:06:2B:86:A1:95:5B:3F Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584CB551EC83F1876949C802BD80 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa Signing time: Sat 31 Jan 2026 14:00:39 +0000 ROA not before: Sat 31 Jan 2026 14:00:39 +0000 ROA not after: Fri 01 May 2026 13:00:39 +0000 asID: 36511 IP address blocks: 209.35.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b5:51:ec:83:f1:87:69:49:c8:02:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Jan 31 14:00:39 2026 GMT Not After : May 1 13:00:39 2026 GMT Subject: CN=14530c91-8ba0-4874-87b2-aa592ec5ce31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5c:54:ce:90:1d:7b:65:3b:9f:8e:da:ec:0c: 3d:92:13:59:5a:8d:3e:f2:9a:5c:1a:2f:c4:5c:6f: 85:85:a8:02:be:9c:e9:0f:9a:b5:9d:53:57:ca:19: d0:0d:aa:36:9b:62:ac:02:3c:77:e7:cc:85:38:97: 1d:f5:c9:36:a3:c9:0a:85:d0:b7:f6:4e:e8:36:67: 31:01:ca:9a:94:fc:e7:d2:af:d2:fb:4d:b5:84:d4: eb:3b:20:c6:aa:d1:bb:4a:3b:85:6c:02:18:0d:6b: 2a:1d:41:0e:e5:69:e1:aa:8c:89:de:3c:64:c3:f1: 83:1b:83:c9:2c:f7:ab:52:cb:84:39:7a:15:e5:0e: 47:b6:84:22:de:0a:24:41:d6:03:47:bb:33:01:e6: bc:55:81:60:30:8f:70:7a:6b:72:27:b4:14:cd:f1: fa:5e:32:d1:c4:60:b2:6f:42:8b:1d:4e:7f:f3:85: 4f:6d:81:01:38:34:d6:23:1b:7c:e0:25:2b:8d:54: d4:fb:c0:60:b6:45:11:e4:d5:15:99:ae:6d:b5:37: 26:e3:b2:8b:4b:90:9f:eb:cf:f4:79:0a:6a:76:48: 86:52:ad:04:61:e3:0e:86:50:4b:05:3e:7f:bc:8f: d4:f5:02:84:96:44:22:70:16:9c:31:3f:c8:94:d3: 39:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3A:4E:CB:6D:11:02:F2:D6:0E:1E:2D:25:06:2B:86:A1:95:5B:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:07:34:61:95:83:cc:e3:41:cc:97:f1:5a:8c:bc:93:56:88: fc:68:1f:c6:94:39:a5:a5:2f:81:19:d6:f6:10:ba:98:25:d0: be:f5:e6:93:d6:13:a6:82:e5:c5:fb:b7:0f:60:d6:e2:6a:72: 18:c7:36:82:c0:37:c8:f6:6a:51:46:16:58:a6:9e:6a:58:c2: 46:17:2a:be:ef:eb:5c:2a:6c:8c:3f:c6:df:0f:66:ae:6a:37: 4d:49:c5:c3:5c:80:61:51:70:b0:4c:60:3a:0b:ac:d3:e5:47: 47:ca:83:51:8b:8b:af:4b:63:44:0d:8d:a9:98:8f:bd:04:8c: d0:dc:02:f5:4a:88:b3:71:c3:4c:d2:9d:da:c9:8b:6a:03:0c: 91:c8:a0:ce:d3:ea:0e:3e:df:30:33:e3:18:9d:90:0a:81:e8: 4b:79:18:df:4a:f4:ae:a9:6c:70:27:f2:b6:a6:66:83:38:10: 21:81:76:b8:fc:09:0e:70:c8:f3:7a:58:1c:54:41:44:34:b8: be:10:b6:e6:07:26:b1:d8:a4:3f:62:5c:6b:db:73:e1:01:cd: 44:56:74:59:61:06:7d:60:c5:0f:6b:22:1c:9a:97:84:40:01: ec:89:8e:ce:5d:c5:3d:ad:d3:0f:1d:57:79:ac:42:d5:15:04: 50:9b:17:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy1UeyD8YdpScgCvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDEzMTE0MDAzOVoXDTI2MDUwMTEzMDAzOVowLzEtMCsGA1UEAxMk MTQ1MzBjOTEtOGJhMC00ODc0LTg3YjItYWE1OTJlYzVjZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlxUzpAde2U7n47a7Aw9khNZWo0+8ppcGi/E XG+FhagCvpzpD5q1nVNXyhnQDao2m2KsAjx358yFOJcd9ck2o8kKhdC39k7oNmcx AcqalPzn0q/S+021hNTrOyDGqtG7SjuFbAIYDWsqHUEO5WnhqoyJ3jxkw/GDG4PJ LPerUsuEOXoV5Q5HtoQi3gokQdYDR7szAea8VYFgMI9wemtyJ7QUzfH6XjLRxGCy b0KLHU5/84VPbYEBODTWIxt84CUrjVTU+8BgtkUR5NUVma5ttTcm47KLS5Cf68/0 eQpqdkiGUq0EYeMOhlBLBT5/vI/U9QKElkQicBacMT/IlNM5GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAY6TsttEQLy1g4eLSUGK4ahlVs/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMzhjNDBiNDUtOTEyYi0z ZDkzLWJmMWYtMjk3YThhMGEyNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYHNGGVg8zjQcyX8VqMvJNWiPxoH8aUOaWlL4EZ1vYQupgl0L715pPW E6aC5cX7tw9g1uJqchjHNoLAN8j2alFGFlimnmpYwkYXKr7v61wqbIw/xt8PZq5q N01JxcNcgGFRcLBMYDoLrNPlR0fKg1GLi69LY0QNjamYj70EjNDcAvVKiLNxw0zS ndrJi2oDDJHIoM7T6g4+3zAz4xidkAqB6Et5GN9K9K6pbHAn8ramZoM4ECGBdrj8 CQ5wyPN6WBxUQUQ0uL4QtuYHJrHYpD9iXGvbc+EBzURWdFlhBn1gxQ9rIhyal4RA AeyJjs5dxT2t0w8dV3msQtUVBFCbF1k= -----END CERTIFICATE-----Generated at Wed Feb 18 20:26:44 2026 by rpki-client