$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa File: 3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa (raw, json) Hash identifier: KJmZYUd1FSzWSTsGDY8wKJOG9KlX7Hgxh3ozyT0B05I= Subject key identifier: 05:4D:13:F6:54:38:AD:87:B9:8D:F6:2D:C1:8E:B4:CE:A5:6C:9B:4C Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584E7634DB435D2A8B3DF7686000 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 33392 IP address blocks: 209.35.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:db:43:5d:2a:8b:3d:f7:68:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=2f7ce354-9238-4897-9dfc-eae8ce6935a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8a:47:c8:91:8c:73:b9:fe:23:cc:31:89:52: b8:86:e1:9b:18:c7:92:41:1c:60:b1:4e:e0:ce:4d: 18:b4:b8:79:21:20:c7:1a:ee:13:ad:d9:d2:eb:ce: 13:cc:c0:c5:0b:cd:70:61:5d:78:71:8a:48:4b:f7: 9c:64:55:7e:cd:34:62:b2:b5:48:c5:c8:67:22:e9: a8:4f:68:a3:33:97:9a:5c:ef:75:db:e8:dd:37:eb: a6:28:05:9e:b7:bc:c8:03:30:d4:bf:4a:96:51:94: b3:f1:06:e5:f1:09:77:58:3d:19:90:3c:3e:de:50: d1:e1:1c:31:20:a1:c9:5d:91:b3:12:31:23:3a:06: b8:46:75:8d:e4:de:19:9c:62:8c:09:20:73:9b:6f: 92:ab:b3:d1:a3:a4:d2:8e:8f:59:0a:b7:f7:92:c6: c1:fa:c2:a2:2c:b0:02:27:43:8e:cf:65:91:e2:e8: 21:45:98:3d:d7:bc:9c:94:99:19:1f:3a:32:e5:79: 4b:7d:de:e0:94:e2:93:ab:a6:5f:81:8b:e3:4b:c5: ba:fd:e5:df:4f:94:9a:90:01:85:d0:4a:36:fe:f5: 0a:48:e5:99:af:18:5d:7f:62:bb:e8:f2:31:24:26: 35:3b:1f:8e:d6:ef:9e:81:c1:db:c7:b9:fc:f6:11: 3b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4D:13:F6:54:38:AD:87:B9:8D:F6:2D:C1:8E:B4:CE:A5:6C:9B:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:73:13:4f:35:05:fc:64:eb:dc:f2:2e:f5:9b:d1:6f:4c:10: 3d:1b:ed:3d:c3:ed:2d:1e:98:88:69:3d:6e:f2:32:f8:f4:ab: bf:f9:bb:9f:61:a9:18:ea:8c:95:fb:f0:2e:41:78:0f:92:64: 1a:7a:ed:93:b6:25:25:3e:d4:2c:2a:b0:5b:3c:d6:cf:1b:52: 42:4e:c8:7e:e1:5f:03:ce:86:8d:64:00:69:e1:8f:5c:8b:27: a3:f4:1e:08:1a:b6:05:7a:89:99:73:a4:d4:8c:1a:d6:9e:86: 34:cd:b7:ab:13:a0:86:67:de:2a:9d:5f:5b:5a:84:16:e7:b0: 83:d1:4a:98:f0:18:52:f9:06:e9:b7:20:fb:7f:ac:ca:c3:26: 56:02:89:8d:7f:6b:02:3e:a2:39:df:1c:bb:79:d7:3b:52:1f: 6c:6b:a4:93:ac:c9:a8:f8:7e:01:95:5e:9f:d4:86:a4:30:38: f8:75:0b:94:e3:f3:58:35:73:49:bc:c1:df:b0:ef:a1:86:7b: 6e:15:f1:0a:ce:a3:6b:a4:48:ce:87:24:37:0f:c2:31:fc:8a: 9a:68:3e:09:b3:62:39:9a:97:5e:f9:a4:7d:9b:fa:1a:31:d0: b6:33:3d:40:8c:45:89:8c:ab:c8:41:c0:63:10:dc:9f:23:a0: d1:ca:cf:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NNtDXSqLPfdoYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk MmY3Y2UzNTQtOTIzOC00ODk3LTlkZmMtZWFlOGNlNjkzNWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIpHyJGMc7n+I8wxiVK4huGbGMeSQRxgsU7g zk0YtLh5ISDHGu4TrdnS684TzMDFC81wYV14cYpIS/ecZFV+zTRisrVIxchnIumo T2ijM5eaXO912+jdN+umKAWet7zIAzDUv0qWUZSz8Qbl8Ql3WD0ZkDw+3lDR4Rwx IKHJXZGzEjEjOga4RnWN5N4ZnGKMCSBzm2+Sq7PRo6TSjo9ZCrf3ksbB+sKiLLAC J0OOz2WR4ughRZg917yclJkZHzoy5XlLfd7glOKTq6ZfgYvjS8W6/eXfT5SakAGF 0Eo2/vUKSOWZrxhdf2K76PIxJCY1Ox+O1u+egcHbx7n89hE7NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVNE/ZUOK2HuY32LcGOtM6lbJtMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvM2YwODI1ZTctZTgwZi0z ZWIyLTgxYzctNzVkNzk4OTQ3M2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0SMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBzE081Bfxk69zyLvWb0W9MED0b7T3D7S0emIhpPW7yMvj0q7/5u59h qRjqjJX78C5BeA+SZBp67ZO2JSU+1CwqsFs81s8bUkJOyH7hXwPOho1kAGnhj1yL J6P0HggatgV6iZlzpNSMGtaehjTNt6sToIZn3iqdX1tahBbnsIPRSpjwGFL5Bum3 IPt/rMrDJlYCiY1/awI+ojnfHLt51ztSH2xrpJOsyaj4fgGVXp/UhqQwOPh1C5Tj 81g1c0m8wd+w76GGe24V8QrOo2ukSM6HJDcPwjH8ippoPgmzYjmal175pH2b+hox 0LYzPUCMRYmMq8hBwGMQ3J8joNHKzys= -----END CERTIFICATE-----Generated at Sat Jul 18 05:04:39 2026 by rpki-client