$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/10161777-f08a-3671-aa2b-fae57dafad53.roa File: 10161777-f08a-3671-aa2b-fae57dafad53.roa (raw, json) Hash identifier: GXhGB7sSz+420wFmcBDgEDAjx3PCOGR/0iH7Syhym5c= Subject key identifier: 09:35:8A:0D:08:8F:A1:59:DF:65:9C:71:25:B6:A6:9D:8A:71:FF:C2 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584E7634DB64F8A365FA10868740 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/10161777-f08a-3671-aa2b-fae57dafad53.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 33392 IP address blocks: 209.35.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:db:64:f8:a3:65:fa:10:86:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=3d4943b9-65e2-47df-aa53-f5e845f5ead2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:53:a1:b1:57:7b:7f:b7:0b:90:00:26:c6:a2: e6:10:c3:dc:cf:93:7f:8d:b8:36:07:34:58:d1:bc: 47:c5:aa:5b:a0:99:d5:b2:ff:1b:e2:e7:44:1d:f8: fe:c1:0a:70:d9:55:84:a8:f4:2d:d2:85:21:ed:ae: c1:4c:f7:f0:bf:74:81:74:4b:b8:f8:d4:13:5d:f6: 57:4f:e6:f9:52:c8:fe:8d:30:2c:b1:df:f6:06:37: af:83:51:65:d6:b0:c8:32:12:09:8f:7b:93:57:81: 60:c8:d3:c7:48:60:85:96:42:7b:e2:ca:a1:d8:0b: 23:78:7c:98:65:45:5e:b2:04:78:56:fd:cf:10:42: 9d:11:9e:86:0b:ca:ef:89:f0:bc:ba:60:a2:7c:5d: 61:a2:85:56:44:24:c6:82:a8:bb:7f:61:ae:4a:e8: 2e:a9:bf:f5:0e:1f:e7:1b:ce:ba:fb:e1:2f:af:cd: 1d:eb:e9:57:b3:c2:c8:c4:3b:32:08:6b:c8:a6:14: fd:31:79:7f:c5:4a:4e:d6:0f:6a:2e:61:95:f7:4d: 95:13:a5:1c:26:16:42:0a:98:cd:18:c4:7e:ca:78: a7:62:1e:80:23:6a:21:40:0e:6d:cb:1c:79:b9:c3: e9:ec:28:10:39:bb:54:f0:eb:d4:29:38:45:01:cb: 1f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:35:8A:0D:08:8F:A1:59:DF:65:9C:71:25:B6:A6:9D:8A:71:FF:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/10161777-f08a-3671-aa2b-fae57dafad53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:75:c9:79:69:f8:a2:78:d3:78:ad:16:be:35:95:b2:db:58: 9a:e4:ee:c6:f7:98:f5:61:9b:52:b5:f7:e3:dd:ae:ac:15:ca: 1d:85:97:86:a8:33:3d:cb:6c:2b:82:35:7a:4d:eb:32:a1:77: 8c:03:5d:1f:99:5e:48:36:97:38:8e:23:04:4b:f2:0e:89:44: ba:55:e9:d5:dd:1b:a0:06:99:e8:ee:35:02:aa:e2:e0:d0:f0: fe:3d:14:f2:21:fe:c8:cf:0e:6d:b3:5c:6e:01:ef:04:08:f2: b4:d5:71:a6:f2:61:a4:f7:18:b0:57:11:eb:93:44:78:35:14: 42:f8:f3:5f:b2:ff:77:81:37:8a:ba:22:ac:e3:db:b5:af:e2: f3:56:23:fd:62:4a:cf:4a:dc:a4:3a:a2:a1:0d:2a:b1:40:29: f0:ba:46:43:ec:2e:2f:4f:49:b9:b1:8f:09:0e:8f:b4:9b:1b: 66:1f:3d:7f:97:8a:a5:35:5e:8b:a8:18:4c:35:2a:01:7c:e8: d1:2c:1a:47:2a:d0:67:a3:8a:bf:8c:60:d6:50:cb:60:68:b4: 0e:94:52:d8:f6:01:17:71:23:f3:09:56:d6:ce:0d:4b:0d:6c: c9:d9:8b:9a:79:7d:5c:a5:38:30:bd:b2:a4:81:5a:a2:a3:41: 08:24:f8:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NNtk+KNl+hCGh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk M2Q0OTQzYjktNjVlMi00N2RmLWFhNTMtZjVlODQ1ZjVlYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVOhsVd7f7cLkAAmxqLmEMPcz5N/jbg2BzRY 0bxHxapboJnVsv8b4udEHfj+wQpw2VWEqPQt0oUh7a7BTPfwv3SBdEu4+NQTXfZX T+b5Usj+jTAssd/2Bjevg1Fl1rDIMhIJj3uTV4FgyNPHSGCFlkJ74sqh2AsjeHyY ZUVesgR4Vv3PEEKdEZ6GC8rvifC8umCifF1hooVWRCTGgqi7f2GuSuguqb/1Dh/n G866++Evr80d6+lXs8LIxDsyCGvIphT9MXl/xUpO1g9qLmGV902VE6UcJhZCCpjN GMR+yninYh6AI2ohQA5tyxx5ucPp7CgQObtU8OvUKThFAcsfvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAk1ig0Ij6FZ32WccSW2pp2Kcf/CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMTAxNjE3NzctZjA4YS0z NjcxLWFhMmItZmFlNTdkYWZhZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFt1yXlp+KJ403itFr41lbLbWJrk7sb3mPVhm1K19+PdrqwVyh2Fl4ao Mz3LbCuCNXpN6zKhd4wDXR+ZXkg2lziOIwRL8g6JRLpV6dXdG6AGmejuNQKq4uDQ 8P49FPIh/sjPDm2zXG4B7wQI8rTVcabyYaT3GLBXEeuTRHg1FEL481+y/3eBN4q6 Iqzj27Wv4vNWI/1iSs9K3KQ6oqENKrFAKfC6RkPsLi9PSbmxjwkOj7SbG2YfPX+X iqU1XouoGEw1KgF86NEsGkcq0Gejir+MYNZQy2BotA6UUtj2ARdxI/MJVtbODUsN bMnZi5p5fVylODC9sqSBWqKjQQgk+KE= -----END CERTIFICATE-----Generated at Sat Jul 18 05:06:43 2026 by rpki-client