$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa File: 38c40b45-912b-3d93-bf1f-297a8a0a2463.roa (raw, json) Hash identifier: sQCAEUsGGR3DDGH8Av3LZU9QAedn/y/7DFR/Ltz740Y= Subject key identifier: BC:D2:25:00:0D:16:5C:EE:D8:EE:43:A0:30:F8:19:13:F7:E7:F7:87 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584E7634DB5993DD9F64CC648300 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 36511 IP address blocks: 209.35.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:db:59:93:dd:9f:64:cc:64:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=bfc52cea-2918-41d2-a7f5-597b6e744b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c2:50:96:71:1f:77:42:b0:4e:a6:1d:29:37: 08:e0:d0:a5:fc:11:1d:b1:92:2f:73:8a:bf:57:9f: 0d:d8:44:d0:4b:ad:66:4e:2e:df:6c:7e:fb:1d:f2: 18:a8:9b:a9:5e:81:a1:9c:80:cd:a0:95:86:56:f2: 39:c1:4c:90:98:40:a8:39:7f:a3:36:87:fa:83:36: 40:a2:9c:26:74:be:c5:00:2d:7a:3b:6c:ee:f7:2f: f1:e2:56:7c:65:76:5c:00:2c:46:78:88:0c:5e:96: 50:49:4f:75:6e:89:3b:91:47:21:6b:21:40:8d:b0: 01:c0:10:e3:81:3d:5d:d0:5c:61:bc:68:7e:d6:c2: be:7d:55:16:1a:9a:17:41:e7:71:2a:b7:d4:da:e1: 5a:89:2e:df:31:7f:96:88:95:52:fc:18:e9:54:ee: 5f:a5:4d:fb:11:cd:05:d2:25:f2:71:fb:a0:4c:b3: df:f7:b1:50:cd:98:1f:e4:8f:43:10:15:7b:e9:d5: b8:b9:c6:35:db:48:83:00:2c:25:71:c5:df:de:f0: de:a1:c3:64:e5:63:00:f7:a8:22:34:93:30:8f:f2: ff:db:29:ca:ba:22:e9:2b:8a:a2:32:44:7a:d7:40: a4:d6:1b:fa:06:ea:87:10:10:c7:51:8a:30:54:2c: 1f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D2:25:00:0D:16:5C:EE:D8:EE:43:A0:30:F8:19:13:F7:E7:F7:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:3d:99:a8:f3:cd:07:f8:9f:bb:f2:f3:01:17:09:f2:f7:b4: b9:96:36:7b:fc:e6:d1:21:bb:fa:14:0a:98:7c:77:fe:13:11: 06:9f:b6:1f:b1:c6:38:2a:87:52:b3:7f:80:0c:46:91:76:10: 7a:b9:b9:06:5b:26:2b:e2:ed:1a:02:c3:e2:da:cd:13:83:50: 68:28:70:71:bd:8a:93:6e:4b:07:43:aa:83:a9:1d:06:84:6a: 24:45:fd:97:f1:a0:28:3c:30:af:89:cc:d1:c9:be:c1:e4:29: e0:32:a7:2e:96:14:e2:8a:44:9f:0d:ea:a4:99:b9:9e:b3:1a: 72:2e:16:c2:66:fc:e0:81:0f:8e:af:20:28:fa:63:6c:bd:fe: 6b:50:48:bf:f3:c4:a4:6d:34:c3:3f:c7:50:75:09:27:3e:a1: b7:7d:4a:20:f6:db:6a:fb:e5:f6:dc:fd:48:e1:0d:a7:35:7f: dd:72:a3:c9:ae:93:ea:61:f3:0b:52:b7:83:42:3c:5b:be:45: ab:20:78:77:05:46:23:62:29:fa:1d:4e:9a:5a:08:3d:53:5d: c1:82:6e:1e:91:07:be:64:12:97:2d:26:23:90:06:0b:25:8e: 16:97:8a:5c:38:02:88:d0:b2:16:5e:f7:3e:b0:d2:a2:46:bf: c1:a1:e5:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NNtZk92fZMxkgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk YmZjNTJjZWEtMjkxOC00MWQyLWE3ZjUtNTk3YjZlNzQ0YjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMJQlnEfd0KwTqYdKTcI4NCl/BEdsZIvc4q/ V58N2ETQS61mTi7fbH77HfIYqJupXoGhnIDNoJWGVvI5wUyQmECoOX+jNof6gzZA opwmdL7FAC16O2zu9y/x4lZ8ZXZcACxGeIgMXpZQSU91bok7kUchayFAjbABwBDj gT1d0FxhvGh+1sK+fVUWGpoXQedxKrfU2uFaiS7fMX+WiJVS/BjpVO5fpU37Ec0F 0iXycfugTLPf97FQzZgf5I9DEBV76dW4ucY120iDACwlccXf3vDeocNk5WMA96gi NJMwj/L/2ynKuiLpK4qiMkR610Ck1hv6BuqHEBDHUYowVCwfwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzSJQANFlzu2O5DoDD4GRP35/eHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMzhjNDBiNDUtOTEyYi0z ZDkzLWJmMWYtMjk3YThhMGEyNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU9majzzQf4n7vy8wEXCfL3tLmWNnv85tEhu/oUCph8d/4TEQafth+x xjgqh1Kzf4AMRpF2EHq5uQZbJivi7RoCw+LazRODUGgocHG9ipNuSwdDqoOpHQaE aiRF/ZfxoCg8MK+JzNHJvsHkKeAypy6WFOKKRJ8N6qSZuZ6zGnIuFsJm/OCBD46v ICj6Y2y9/mtQSL/zxKRtNMM/x1B1CSc+obd9SiD222r75fbc/UjhDac1f91yo8mu k+ph8wtSt4NCPFu+RasgeHcFRiNiKfodTppaCD1TXcGCbh6RB75kEpctJiOQBgsl jhaXilw4AojQshZe9z6w0qJGv8Gh5Vs= -----END CERTIFICATE-----Generated at Sat Jul 18 05:06:11 2026 by rpki-client