$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa File: 3f21f936-baed-3e68-a983-e38e4550c9d3.roa (raw, json) Hash identifier: whEPXaN1pmD06FqeZVCZf2FUexNmAbKGNwvMHeFBHyU= Subject key identifier: 49:59:40:86:08:70:BE:AE:95:C2:57:FA:96:65:BD:FE:79:97:DA:56 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584AF7EBD52F448A9B81DD6F7D80 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 36511 IP address blocks: 209.35.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d5:2f:44:8a:9b:81:dd:6f:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=34a149be-18e0-405e-8ded-bc3631a9b3b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:13:d2:26:c1:d4:2b:43:ed:75:dd:a3:85: 02:9c:74:91:86:4c:dc:5e:0f:4d:72:9e:69:f5:49: 97:ea:f3:4d:22:b0:35:ff:98:b5:9e:5a:61:41:d1: f6:dd:ba:a5:a4:ee:b9:8f:e4:5f:a1:d5:03:b9:8a: df:91:23:d4:79:88:18:c5:de:8f:61:53:69:d3:0a: 19:98:fb:8e:3a:c6:79:1e:e9:55:90:08:9e:74:05: c5:6c:e0:75:9d:1a:b2:dc:35:e7:88:83:d1:06:a9: ba:cf:08:49:4d:23:25:5f:63:35:d8:2c:35:61:97: 59:87:23:00:1a:07:14:d9:ea:8b:8b:82:21:07:2a: 5f:ec:91:8b:a8:8f:42:93:cf:0e:4e:ac:ae:15:87: 14:f5:46:06:3c:eb:61:a9:cd:5d:76:fb:9c:44:96: 33:8a:9f:39:f6:d8:3d:7f:43:cf:bc:7c:61:59:4b: d2:88:81:3e:90:b7:52:82:08:b0:e8:7d:43:60:81: 88:34:ca:90:91:8a:8c:85:9d:86:82:ae:ab:36:5a: 41:c2:19:3b:9c:f1:7f:6d:46:a9:b5:46:ae:ca:fb: 45:9c:a1:00:29:60:1c:e9:87:04:e1:60:bf:8d:96: 56:0a:53:52:de:c2:4c:3f:21:b5:12:86:25:d9:6d: 80:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:59:40:86:08:70:BE:AE:95:C2:57:FA:96:65:BD:FE:79:97:DA:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:c8:42:eb:68:5a:b5:6d:ff:90:ef:c7:98:d1:b6:d0:07:de: c0:b2:86:d0:14:39:bb:e3:a3:68:d4:83:3c:27:0b:f7:92:f9: 7f:0f:07:49:92:2e:9f:f6:ed:f6:56:30:d9:82:86:53:97:31: b3:9f:4b:08:f2:45:2b:4e:28:cc:df:3e:0a:40:38:9b:df:e8: 4c:db:f2:ff:d0:80:22:72:7d:e2:ef:19:3a:25:68:02:95:65: 56:d1:8d:70:35:8f:1b:e6:d6:4d:93:8e:a4:9f:a6:08:c4:f4: a9:b4:8f:df:6e:a4:18:c0:d6:f8:7c:7b:ec:6f:9a:bb:6c:e4: 1a:37:e3:b5:2b:fa:12:f9:a2:22:35:9d:39:8b:f0:b7:8e:18: 84:66:ac:7f:90:40:b7:f0:2d:d7:53:15:d1:96:55:1f:9b:42: 82:e8:7f:13:4e:82:98:f2:7a:57:77:04:46:94:dc:3a:b5:69: e5:0e:45:2e:62:cf:3d:12:51:91:9a:b4:ee:b7:64:05:06:1c: 6b:20:c7:3a:48:74:42:b7:67:19:de:7d:20:de:14:89:4b:0a: 35:04:aa:1f:1c:11:13:05:28:e4:b6:ab:96:9e:8a:e2:30:ec: d4:c6:7e:06:cb:32:c3:72:2d:d2:21:0e:49:16:03:25:6a:8e: 9d:b6:1e:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369UvRIqbgd1vfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk MzRhMTQ5YmUtMThlMC00MDVlLThkZWQtYmMzNjMxYTliM2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbcT0ibB1CtD7XXdo4UCnHSRhkzcXg9Ncp5p 9UmX6vNNIrA1/5i1nlphQdH23bqlpO65j+RfodUDuYrfkSPUeYgYxd6PYVNp0woZ mPuOOsZ5HulVkAiedAXFbOB1nRqy3DXniIPRBqm6zwhJTSMlX2M12Cw1YZdZhyMA GgcU2eqLi4IhBypf7JGLqI9Ck88OTqyuFYcU9UYGPOthqc1ddvucRJYzip859tg9 f0PPvHxhWUvSiIE+kLdSggiw6H1DYIGINMqQkYqMhZ2Ggq6rNlpBwhk7nPF/bUap tUauyvtFnKEAKWAc6YcE4WC/jZZWClNS3sJMPyG1EoYl2W2APQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElZQIYIcL6ulcJX+pZlvf55l9pWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvM2YyMWY5MzYtYmFlZC0z ZTY4LWE5ODMtZTM4ZTQ1NTBjOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0SMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETIQutoWrVt/5Dvx5jRttAH3sCyhtAUObvjo2jUgzwnC/eS+X8PB0mS Lp/27fZWMNmChlOXMbOfSwjyRStOKMzfPgpAOJvf6Ezb8v/QgCJyfeLvGTolaAKV ZVbRjXA1jxvm1k2TjqSfpgjE9Km0j99upBjA1vh8e+xvmrts5Bo347Ur+hL5oiI1 nTmL8LeOGIRmrH+QQLfwLddTFdGWVR+bQoLofxNOgpjyeld3BEaU3Dq1aeUORS5i zz0SUZGatO63ZAUGHGsgxzpIdEK3ZxnefSDeFIlLCjUEqh8cERMFKOS2q5aeiuIw 7NTGfgbLMsNyLdIhDkkWAyVqjp22Ho8= -----END CERTIFICATE-----Generated at Fri Sep 19 05:03:08 2025 by rpki-client