$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa File: 3f21f936-baed-3e68-a983-e38e4550c9d3.roa (raw, json) Hash identifier: ojAtMJd1YDWPRQEXeVri7QdQsxDwAVGS2TLBImjrDQI= Subject key identifier: 7D:41:5F:32:F2:F8:BA:11:F7:08:43:1B:11:44:E3:CC:1C:B6:DD:FF Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584CB81C86580DFF172A2B3AB100 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 36511 IP address blocks: 209.35.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:86:58:0d:ff:17:2a:2b:3a:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=fd102531-3825-464b-9c5f-5b648d3aad20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a4:c7:90:3f:85:c3:75:c6:5f:13:4e:3e:85: ee:6c:3a:03:66:af:c5:ce:bd:5c:c1:61:15:15:e7: 6e:0f:95:f9:a7:fa:91:37:30:87:60:36:f5:91:77: 2d:b5:f8:b8:71:25:9b:49:90:d6:d0:4c:6e:b4:67: 15:ed:70:b9:54:a0:68:77:7d:ff:45:bb:1a:fa:71: ed:9e:9c:d8:a6:01:56:08:68:3b:b0:88:cf:0a:b6: 61:53:72:a8:99:a1:ac:dd:57:10:55:05:7d:8a:da: 3c:3d:c0:8b:9c:a3:d4:31:51:79:10:86:5b:e7:a2: 39:b2:25:a8:ea:7b:72:2d:0f:22:7c:dc:b4:ca:db: c6:3f:a0:56:ce:54:ac:a2:58:b7:34:a5:a4:dd:4b: fd:fb:9c:16:a8:b9:74:b3:36:08:25:35:6b:46:be: 82:f9:4d:d2:a0:c0:a2:f3:f0:16:49:8f:bf:c1:70: c4:2d:ed:79:e8:33:d5:49:65:ed:ba:22:70:30:e1: 1a:41:9d:1b:bf:28:a5:8f:00:d2:40:2d:76:6b:16: 6f:c2:5a:c1:b5:af:7c:a9:88:aa:9a:bb:8a:fe:ce: 80:e3:47:33:da:84:f9:77:ea:76:85:14:6f:c4:82: a5:58:14:ad:01:39:06:fa:c8:77:4f:5f:d9:52:ba: 21:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:41:5F:32:F2:F8:BA:11:F7:08:43:1B:11:44:E3:CC:1C:B6:DD:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:13:7c:9c:2f:46:26:61:54:80:01:d6:8f:84:13:1b:fa:55: de:9b:7c:0e:fb:4e:86:56:33:4e:20:b8:4c:20:07:84:97:47: fd:e3:fc:9e:be:5f:e1:14:72:c6:10:5e:6d:16:22:2a:da:f6: 61:dd:21:2a:98:3d:4f:c7:78:8f:74:08:80:bc:ab:1c:71:be: 38:54:77:69:3c:ed:ac:98:5a:a7:b9:48:31:d4:5f:aa:e4:ef: 00:a2:6b:2e:56:53:88:c9:7e:43:4b:19:b9:b7:bd:b5:d3:7f: 40:84:62:be:2d:f4:84:52:b4:0e:5d:8e:af:4b:b3:ee:f9:a0: c5:20:59:3a:5b:52:94:e1:ac:b7:65:98:6f:b1:a5:07:6c:72: dd:f9:60:67:9d:dd:1d:65:54:f0:ff:c5:c5:2b:d7:0d:ec:3e: d3:52:94:3c:87:63:27:cd:0c:e7:d1:bc:9a:bb:c2:dd:9f:c0: 75:cd:88:1e:05:1c:cb:78:75:99:ab:3e:13:8a:41:f4:bc:2e: 0e:30:c7:bf:e5:d0:cf:d9:b3:15:46:a2:7e:ad:60:f2:6a:87: f3:ec:d1:7f:d8:b7:a6:74:23:17:35:56:36:4e:37:77:32:68: 39:42:9f:04:62:bd:77:93:53:9b:0e:58:79:6b:1b:1a:05:2a: 6e:40:7e:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HIZYDf8XKis6sQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk ZmQxMDI1MzEtMzgyNS00NjRiLTljNWYtNWI2NDhkM2FhZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqTHkD+Fw3XGXxNOPoXubDoDZq/Fzr1cwWEV FeduD5X5p/qRNzCHYDb1kXcttfi4cSWbSZDW0ExutGcV7XC5VKBod33/Rbsa+nHt npzYpgFWCGg7sIjPCrZhU3KomaGs3VcQVQV9ito8PcCLnKPUMVF5EIZb56I5siWo 6ntyLQ8ifNy0ytvGP6BWzlSsoli3NKWk3Uv9+5wWqLl0szYIJTVrRr6C+U3SoMCi 8/AWSY+/wXDELe156DPVSWXtuiJwMOEaQZ0bvyiljwDSQC12axZvwlrBta98qYiq mruK/s6A40cz2oT5d+p2hRRvxIKlWBStATkG+sh3T1/ZUrohWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1BXzLy+LoR9whDGxFE48wctt3/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvM2YyMWY5MzYtYmFlZC0z ZTY4LWE5ODMtZTM4ZTQ1NTBjOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0SMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4TfJwvRiZhVIAB1o+EExv6Vd6bfA77ToZWM04guEwgB4SXR/3j/J6+ X+EUcsYQXm0WIira9mHdISqYPU/HeI90CIC8qxxxvjhUd2k87ayYWqe5SDHUX6rk 7wCiay5WU4jJfkNLGbm3vbXTf0CEYr4t9IRStA5djq9Ls+75oMUgWTpbUpThrLdl mG+xpQdsct35YGed3R1lVPD/xcUr1w3sPtNSlDyHYyfNDOfRvJq7wt2fwHXNiB4F HMt4dZmrPhOKQfS8Lg4wx7/l0M/ZsxVGon6tYPJqh/Ps0X/Yt6Z0Ixc1VjZON3cy aDlCnwRivXeTU5sOWHlrGxoFKm5AfqA= -----END CERTIFICATE-----Generated at Wed Feb 18 20:26:23 2026 by rpki-client