$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa File: 04a72bfb-6956-393f-affe-ff7db4804d88.roa (raw, json) Hash identifier: WTO9oUgKyPu9z7AsKqpvBKlcbDqsZGkGO4YEeHropyI= Subject key identifier: B1:94:3B:35:8A:7C:4F:7D:09:26:29:EC:AB:E3:FD:16:40:B5:FB:3B Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584E815F978EE0125D9716284180 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa Signing time: Wed 15 Jul 2026 09:00:13 +0000 ROA not before: Wed 15 Jul 2026 09:00:13 +0000 ROA not after: Tue 13 Oct 2026 09:00:13 +0000 asID: 33392 IP address blocks: 209.35.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:5f:97:8e:e0:12:5d:97:16:28:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Jul 15 09:00:13 2026 GMT Not After : Oct 13 09:00:13 2026 GMT Subject: CN=06de6640-b489-432c-876b-2c00c8970e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6d:7b:b5:70:af:bf:0b:70:b0:64:43:c7:9f: c3:bd:b5:84:ef:f4:cf:2d:58:7b:07:cb:4b:62:19: 98:9c:38:60:d1:aa:7b:af:8c:d6:01:55:3c:38:8e: 11:6d:69:97:40:8c:9b:f4:fa:9d:35:2d:63:6c:d4: 5d:28:14:c4:3a:d9:59:91:aa:fd:a6:68:27:e7:55: 35:5e:48:2b:d8:a6:18:7f:47:66:6b:bc:33:a7:08: 79:4e:29:67:51:8e:bd:1f:36:cf:b7:e8:01:44:1e: d4:8a:55:10:20:48:5e:37:d2:87:2f:8b:b9:f8:16: bd:d3:0d:a0:03:ed:fd:d0:2a:c1:cf:93:a2:15:31: 0b:8e:cf:13:70:83:e9:1a:3c:7c:a3:0c:43:73:3e: 57:08:de:55:9a:98:47:bd:23:8e:e8:fd:1c:f6:43: ad:74:8b:6c:84:ba:af:f1:09:12:ab:8b:7d:43:3d: 08:a4:43:52:69:5d:af:33:29:f5:56:98:0f:3d:8f: 05:29:c4:a7:5b:3b:ec:4d:c3:ef:db:6e:25:7f:5b: 15:d8:bd:39:e4:b0:c2:fd:5d:d4:76:5f:ea:fc:0e: c3:71:a2:4f:90:f1:18:ac:f4:92:84:bc:85:68:09: 05:99:df:36:74:cb:c4:8b:24:60:18:a4:5e:01:62: ae:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:94:3B:35:8A:7C:4F:7D:09:26:29:EC:AB:E3:FD:16:40:B5:FB:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:72:62:a9:20:80:e3:56:4c:20:da:22:61:69:52:d6:ba:2f: 40:ee:74:f5:f1:41:85:0b:e8:3c:18:d3:d6:bd:1a:a1:9d:ee: fc:60:43:f6:0d:b9:7c:5c:02:af:64:db:a6:14:26:ee:ba:74: 91:76:b7:ee:92:e4:73:c4:4d:29:18:90:0c:38:19:f2:0b:c9: b1:99:2c:d3:25:cb:af:9d:18:db:af:d1:4f:94:ee:cf:6c:ca: 89:58:69:66:3b:e6:8f:67:17:31:6d:7d:e2:39:4a:47:15:5b: 39:13:ee:0b:5f:b9:db:28:aa:d0:0b:a3:91:48:5c:48:90:c9: 91:fc:5d:a3:cd:55:bb:66:ec:f5:20:82:a6:eb:dc:47:e0:da: 05:e4:3e:fd:95:76:b7:48:8c:b2:12:2e:71:5f:b7:fa:df:9a: ee:9f:d9:46:c7:b6:e1:10:38:81:38:22:60:4c:2e:75:9c:cb: 86:27:a8:17:28:a9:41:65:96:47:59:34:7a:30:15:f2:55:6c: 06:4b:7b:7a:43:56:9e:3d:bb:b6:f4:3e:6e:db:5a:27:07:7a: 06:54:c1:53:18:74:64:f3:8e:a0:fc:35:47:9b:8c:05:ee:af: 32:ed:83:19:a0:88:f1:77:34:47:4e:7c:0b:52:e2:0c:7a:08: 2b:b1:d2:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX5eO4BJdlxYoQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk MDZkZTY2NDAtYjQ4OS00MzJjLTg3NmItMmMwMGM4OTcwZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo217tXCvvwtwsGRDx5/DvbWE7/TPLVh7B8tL YhmYnDhg0ap7r4zWAVU8OI4RbWmXQIyb9PqdNS1jbNRdKBTEOtlZkar9pmgn51U1 Xkgr2KYYf0dma7wzpwh5TilnUY69HzbPt+gBRB7UilUQIEheN9KHL4u5+Ba90w2g A+390CrBz5OiFTELjs8TcIPpGjx8owxDcz5XCN5VmphHvSOO6P0c9kOtdItshLqv 8QkSq4t9Qz0IpENSaV2vMyn1VpgPPY8FKcSnWzvsTcPv224lf1sV2L055LDC/V3U dl/q/A7DcaJPkPEYrPSShLyFaAkFmd82dMvEiyRgGKReAWKuLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGUOzWKfE99CSYp7Kvj/RZAtfs7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMDRhNzJiZmItNjk1Ni0z OTNmLWFmZmUtZmY3ZGI0ODA0ZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0SMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNyYqkggONWTCDaImFpUta6L0DudPXxQYUL6DwY09a9GqGd7vxgQ/YN uXxcAq9k26YUJu66dJF2t+6S5HPETSkYkAw4GfILybGZLNMly6+dGNuv0U+U7s9s yolYaWY75o9nFzFtfeI5SkcVWzkT7gtfudsoqtALo5FIXEiQyZH8XaPNVbtm7PUg gqbr3Efg2gXkPv2VdrdIjLISLnFft/rfmu6f2UbHtuEQOIE4ImBMLnWcy4YnqBco qUFllkdZNHowFfJVbAZLe3pDVp49u7b0Pm7bWicHegZUwVMYdGTzjqD8NUebjAXu rzLtgxmgiPF3NEdOfAtS4gx6CCux0m4= -----END CERTIFICATE-----Generated at Sat Jul 18 05:04:47 2026 by rpki-client