$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa File: 3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa (raw, json) Hash identifier: BDNvQkpo6g0k8gtvVyIgyv5B8BrPxahE6pQqUA5RPWo= Subject key identifier: D7:62:B5:02:BF:C1:30:B5:0A:E4:C3:E0:DC:AF:0E:D4:4D:0A:E0:25 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584A146572674C782D2BFF07E200 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 33392 IP address blocks: 209.35.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:72:67:4c:78:2d:2b:ff:07:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=938693d7-dba8-4a1c-85a9-b4e93d12918b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1c:23:ea:e4:37:23:ed:07:ae:69:63:cb:e5: 60:e9:8f:e7:84:a9:ec:b4:51:91:f6:3f:bd:d6:b9: 22:83:c2:0b:70:6a:d8:96:01:34:3b:65:c9:5d:db: e5:1f:1f:f4:bb:97:55:ae:77:d2:08:69:c3:32:fa: a3:a6:ee:a3:57:98:5d:b0:00:4a:71:e6:e3:ea:72: 25:11:05:55:1f:f9:17:4c:15:46:82:cc:b9:1d:7c: ee:89:09:7a:6d:09:86:7e:80:46:25:cf:09:c4:f9: 16:0b:2e:65:e3:97:5d:35:ec:26:47:41:c8:3a:73: 44:af:8c:07:fc:94:02:05:ea:26:ce:45:69:18:da: 1c:d5:5d:56:8c:6a:21:ae:8b:62:6c:a7:18:e3:24: 3f:fd:41:be:4b:d6:d7:af:e4:dd:db:3c:2e:c2:e6: e0:e8:f5:16:c1:6a:78:ab:90:98:5e:94:4b:42:fd: a7:df:4f:34:bb:54:90:54:8e:32:87:b7:4c:88:42: 75:6e:f2:5f:bb:dc:63:c7:04:d5:63:88:00:07:4f: f5:13:06:d8:a8:36:e6:72:ed:29:59:ee:16:57:98: a7:7b:9d:fb:be:b9:21:d6:b1:fe:d0:03:20:42:91: 9d:87:6a:d9:11:bc:7c:14:27:86:dc:57:3c:ad:f8: 50:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:62:B5:02:BF:C1:30:B5:0A:E4:C3:E0:DC:AF:0E:D4:4D:0A:E0:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:dd:8b:2d:7f:78:b0:9c:b5:79:9f:b9:f5:d4:78:0a:0f:a6: 03:b6:e4:ac:ae:b6:ea:d8:ba:ea:b8:10:d2:e5:0e:a5:fb:b7: f5:12:d5:82:8e:47:7c:39:64:7e:3e:69:71:16:83:b2:5d:cd: fc:30:89:ce:f4:61:02:80:1b:50:d1:51:a5:d2:18:7a:e3:44: 4b:47:2b:e6:9b:4a:75:8b:96:07:ab:9f:d3:ce:a8:f7:dd:0e: 43:6c:84:a2:e8:0f:b9:f7:45:30:63:ac:94:d9:b2:36:bb:0f: 4d:a3:0d:ec:b7:73:ca:43:0d:84:03:31:50:04:e0:3e:40:ff: fb:3b:69:20:7a:cc:5a:31:27:28:35:ec:28:3a:d6:f0:e2:de: ec:d5:ed:55:60:f9:f7:07:e0:56:c1:29:b2:68:94:97:74:5c: e6:65:d7:d1:dc:7d:b4:31:d5:21:1c:fa:49:6d:d7:ca:ea:92: 5d:54:3a:fc:69:d7:30:0d:5f:0e:c7:15:9e:d5:1b:aa:64:88: 32:3f:fc:68:6d:0e:d2:b7:f4:29:5f:55:2d:de:c8:7a:44:dd: 99:f7:09:25:e0:0c:a4:cf:a2:d6:5f:7f:f4:05:22:e3:bc:84: d8:bf:12:1e:e1:54:50:5d:ea:f8:93:4e:66:0d:85:3b:2c:32: 78:a8:dc:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXJnTHgtK/8H4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk OTM4NjkzZDctZGJhOC00YTFjLTg1YTktYjRlOTNkMTI5MThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxwj6uQ3I+0Hrmljy+Vg6Y/nhKnstFGR9j+9 1rkig8ILcGrYlgE0O2XJXdvlHx/0u5dVrnfSCGnDMvqjpu6jV5hdsABKcebj6nIl EQVVH/kXTBVGgsy5HXzuiQl6bQmGfoBGJc8JxPkWCy5l45ddNewmR0HIOnNEr4wH /JQCBeomzkVpGNoc1V1WjGohrotibKcY4yQ//UG+S9bXr+Td2zwuwubg6PUWwWp4 q5CYXpRLQv2n3080u1SQVI4yh7dMiEJ1bvJfu9xjxwTVY4gAB0/1EwbYqDbmcu0p We4WV5ine537vrkh1rH+0AMgQpGdh2rZEbx8FCeG3Fc8rfhQKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNditQK/wTC1CuTD4NyvDtRNCuAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvM2YwODI1ZTctZTgwZi0z ZWIyLTgxYzctNzVkNzk4OTQ3M2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0SMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzdiy1/eLCctXmfufXUeAoPpgO25KyuturYuuq4ENLlDqX7t/US1YKO R3w5ZH4+aXEWg7Jdzfwwic70YQKAG1DRUaXSGHrjREtHK+abSnWLlgern9POqPfd DkNshKLoD7n3RTBjrJTZsja7D02jDey3c8pDDYQDMVAE4D5A//s7aSB6zFoxJyg1 7Cg61vDi3uzV7VVg+fcH4FbBKbJolJd0XOZl19HcfbQx1SEc+klt18rqkl1UOvxp 1zANXw7HFZ7VG6pkiDI//GhtDtK39ClfVS3eyHpE3Zn3CSXgDKTPotZff/QFIuO8 hNi/Eh7hVFBd6viTTmYNhTssMnio3PY= -----END CERTIFICATE-----Generated at Sat Jun 7 10:14:01 2025 by rpki-client