$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa File: 3f21f936-baed-3e68-a983-e38e4550c9d3.roa (raw, json) Hash identifier: +okS04MQFTZCoHtO1R23908eiYXcYp1FMZ5fRPDZLAA= Subject key identifier: 89:45:0F:85:E8:2E:8B:07:DA:E2:A2:B7:E1:16:8E:EF:F4:21:BD:DB Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584E78FF7CBD9084C62A6D85CD00 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa Signing time: Sun 12 Jul 2026 09:00:11 +0000 ROA not before: Sun 12 Jul 2026 09:00:11 +0000 ROA not after: Sat 10 Oct 2026 09:00:11 +0000 asID: 36511 IP address blocks: 209.35.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:78:ff:7c:bd:90:84:c6:2a:6d:85:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Jul 12 09:00:11 2026 GMT Not After : Oct 10 09:00:11 2026 GMT Subject: CN=6334e3d3-9bb5-4ae5-b4c4-08ed4770c916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:85:9e:16:61:90:00:50:45:f7:d5:11:cb:af: e2:e7:e3:c4:a5:19:80:4e:26:73:d1:fa:ed:ca:f7: 63:cd:ac:8d:44:2b:61:73:ec:93:c2:fb:82:c8:7c: ae:c8:b4:a1:f5:98:32:b4:6b:0e:e5:1e:52:46:0d: 4d:b6:8b:fc:22:3f:39:2d:93:45:3a:29:bb:98:5f: 45:8b:c7:87:60:0c:09:fe:e3:57:39:c4:ee:53:34: 7d:b5:0a:69:fe:d6:f0:5d:0a:46:9a:09:86:a5:f9: 39:24:4d:a5:cc:7c:68:1a:aa:9b:f9:f7:8d:66:54: 46:1b:da:3e:01:c0:29:4a:78:39:18:a8:7c:78:0c: cd:12:57:cc:45:14:c1:80:78:41:ee:fb:d7:05:74: 30:d1:37:5e:ac:58:5a:3b:84:b3:db:3c:60:97:30: f6:be:7f:32:41:4c:71:19:dc:68:7c:c9:94:c3:0f: 3d:b5:3b:c1:88:24:5a:88:a0:fa:d1:70:cc:f4:7d: 8b:d6:52:e7:ae:06:c7:b2:c8:5a:3b:ef:82:25:d5: eb:30:6e:99:21:e7:1f:95:81:30:90:60:d3:c4:86: 57:aa:bf:47:0e:d1:06:d5:e3:4d:6b:af:8e:06:9e: 5e:ef:ad:e1:7c:9d:1e:1d:87:9c:dc:25:e0:4c:c1: 93:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:45:0F:85:E8:2E:8B:07:DA:E2:A2:B7:E1:16:8E:EF:F4:21:BD:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:cd:ca:d3:59:02:26:1e:ba:36:53:f3:a9:f7:8d:63:7f:bf: 2a:42:64:b4:4e:c0:98:72:cd:cd:1e:a3:88:0a:f4:23:52:4b: c7:d8:b0:98:e7:6f:15:c0:88:35:fb:74:70:56:b7:45:60:f4: 64:1f:30:93:00:5b:6f:f5:52:89:5d:f6:2e:37:c7:a0:8d:e1: e8:69:5e:2b:ab:40:cd:f4:ad:13:7a:e9:63:e1:1f:99:5d:24: b9:33:d6:aa:72:4d:41:20:a6:16:70:28:8b:61:3d:32:e5:98: c2:ca:13:be:5e:bc:b6:27:28:8e:34:fc:fd:5b:16:61:db:e9: d1:7d:5b:27:9f:99:f2:f1:18:15:0a:e2:e4:a1:07:25:c5:bf: ff:c0:5c:3b:02:0d:03:f0:30:d9:1c:b1:0f:1c:77:c4:df:91: 5c:f7:1b:e7:3e:6a:f5:35:c5:0d:9a:3d:fa:4d:84:26:17:0c: a2:ab:1f:29:4c:15:e3:45:4d:1d:d4:d2:3b:d5:d6:b7:1a:9a: ee:6d:d1:33:b4:54:49:b4:f8:d5:13:fd:b9:e4:57:86:3f:4b: 91:aa:ac:3f:fa:95:e8:b2:db:4c:65:08:39:fb:a2:df:09:1f: 93:1a:b2:c8:ee:82:37:e1:c8:cc:98:0c:e7:46:d4:69:1e:4b: 93:62:58:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE54/3y9kITGKm2FzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDcxMjA5MDAxMVoXDTI2MTAxMDA5MDAxMVowLzEtMCsGA1UEAxMk NjMzNGUzZDMtOWJiNS00YWU1LWI0YzQtMDhlZDQ3NzBjOTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYWeFmGQAFBF99URy6/i5+PEpRmATiZz0frt yvdjzayNRCthc+yTwvuCyHyuyLSh9ZgytGsO5R5SRg1Ntov8Ij85LZNFOim7mF9F i8eHYAwJ/uNXOcTuUzR9tQpp/tbwXQpGmgmGpfk5JE2lzHxoGqqb+feNZlRGG9o+ AcApSng5GKh8eAzNElfMRRTBgHhB7vvXBXQw0TderFhaO4Sz2zxglzD2vn8yQUxx GdxofMmUww89tTvBiCRaiKD60XDM9H2L1lLnrgbHsshaO++CJdXrMG6ZIecflYEw kGDTxIZXqr9HDtEG1eNNa6+OBp5e763hfJ0eHYec3CXgTMGTxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlFD4XoLosH2uKit+EWju/0Ib3bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvM2YyMWY5MzYtYmFlZC0z ZTY4LWE5ODMtZTM4ZTQ1NTBjOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0SMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvNytNZAiYeujZT86n3jWN/vypCZLROwJhyzc0eo4gK9CNSS8fYsJjn bxXAiDX7dHBWt0Vg9GQfMJMAW2/1Uold9i43x6CN4ehpXiurQM30rRN66WPhH5ld JLkz1qpyTUEgphZwKIthPTLlmMLKE75evLYnKI40/P1bFmHb6dF9WyefmfLxGBUK 4uShByXFv//AXDsCDQPwMNkcsQ8cd8TfkVz3G+c+avU1xQ2aPfpNhCYXDKKrHylM FeNFTR3U0jvV1rcamu5t0TO0VEm0+NUT/bnkV4Y/S5GqrD/6leiy20xlCDn7ot8J H5MassjugjfhyMyYDOdG1GkeS5NiWLc= -----END CERTIFICATE-----Generated at Sat Jul 18 05:04:39 2026 by rpki-client