$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa File: 012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa (raw, json) Hash identifier: I8Z99PYPoSzyjpnfad+RFn+soMn0sYGSTX2Y/G1DebA= Subject key identifier: EF:D0:C1:5C:01:81:2B:28:1E:F4:07:1C:13:8A:92:8C:7F:60:8E:9A Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584F268D0859B8BF94BC1225A068 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 33392 IP address blocks: 209.35.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8d:08:59:b8:bf:94:bc:12:25:a0:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=4636fc58-bfa3-45b7-ab58-cb57d72504ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:20:62:8e:1b:fc:51:9f:c5:73:39:11:7e:e1: 6c:1d:96:89:31:e4:ea:2a:60:07:00:42:6a:ec:64: 64:6e:fd:af:f0:b4:69:21:da:a5:bd:e4:a4:20:8d: dd:3f:3b:e1:23:81:10:46:54:d4:64:8d:6a:7b:45: 9a:ac:f5:87:e1:39:08:65:e9:99:2d:9e:1a:f3:52: 97:d1:fe:38:6d:84:78:a7:73:88:22:97:a9:e0:1c: 22:41:2d:03:83:f1:c4:84:27:6d:e7:5f:e9:92:fc: 4e:12:17:22:13:fe:5d:af:99:91:dd:66:cd:78:82: 02:75:ac:5f:39:6e:9b:1d:97:29:4b:c1:ef:b9:ba: 39:f7:3d:d3:4f:28:2e:b4:80:d1:10:4b:3c:9b:da: 03:2f:c6:69:25:99:ba:0f:02:5c:45:f6:97:0a:b5: c1:4a:87:26:52:fb:29:50:c0:9b:16:d1:af:a1:41: 53:14:bf:3e:d0:94:77:90:0d:d0:aa:59:e0:2c:b9: 2a:a5:4a:fe:12:60:f9:ed:29:b2:22:42:1e:b6:f2: 34:1b:be:7e:8f:df:d0:c9:cf:b1:f8:81:4b:78:ae: 9d:8a:db:70:9a:39:28:30:fe:46:00:b7:b2:72:89: 25:03:d2:d5:5c:60:53:a8:37:ad:72:d7:39:b9:7d: 29:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D0:C1:5C:01:81:2B:28:1E:F4:07:1C:13:8A:92:8C:7F:60:8E:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:9b:8d:0e:1f:61:b2:62:72:b5:02:e5:35:8d:bc:27:b8:9a: 36:7e:26:3d:db:80:fc:fa:ee:7f:c8:a2:e8:70:53:7d:98:db: 28:87:8b:bb:d5:75:71:3c:2c:32:93:de:8b:e7:8c:d5:b7:76: 38:8f:ce:6f:1e:ea:68:39:ce:38:4e:eb:29:78:73:0b:ac:0d: c7:4a:f9:12:32:7b:5a:85:60:07:20:dd:8f:b0:00:e3:80:5e: 6a:5c:89:a1:63:cb:68:ff:65:14:c0:7e:94:14:a4:eb:b7:89: 68:5f:69:5b:8a:c6:fc:ca:56:a2:01:8c:5c:e3:23:87:61:a3: ee:ab:9d:df:90:32:83:9c:77:c6:46:90:b1:e5:ff:25:cb:22: 90:cc:c3:5a:38:6b:62:73:23:1d:ed:03:c4:d5:72:80:80:e3: 0e:7f:a1:c2:2f:63:cc:77:5c:8d:cd:0a:b1:e2:fb:fd:b8:a7: cb:40:39:90:c1:41:d7:e2:62:c8:b5:55:db:84:fe:8e:0e:c4: 50:60:84:8b:f2:91:71:cb:05:47:8c:42:32:9e:d3:58:8a:af: 04:7f:ef:56:60:dd:c6:2a:b8:6b:b0:25:c8:03:dc:af:53:15: 54:a3:3a:54:1b:8b:d0:f2:db:4b:c9:f3:08:fb:57:dd:2c:c4: 4c:28:fd:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjQhZuL+UvBIloGgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk NDYzNmZjNTgtYmZhMy00NWI3LWFiNTgtY2I1N2Q3MjUwNGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCBijhv8UZ/FczkRfuFsHZaJMeTqKmAHAEJq 7GRkbv2v8LRpIdqlveSkII3dPzvhI4EQRlTUZI1qe0WarPWH4TkIZemZLZ4a81KX 0f44bYR4p3OIIpep4BwiQS0Dg/HEhCdt51/pkvxOEhciE/5dr5mR3WbNeIICdaxf OW6bHZcpS8Hvubo59z3TTygutIDREEs8m9oDL8ZpJZm6DwJcRfaXCrXBSocmUvsp UMCbFtGvoUFTFL8+0JR3kA3QqlngLLkqpUr+EmD57SmyIkIetvI0G75+j9/Qyc+x +IFLeK6dittwmjkoMP5GALeycoklA9LVXGBTqDetctc5uX0pNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/QwVwBgSsoHvQHHBOKkox/YI6aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMDEyZjIxYmQtOGU4ZS0z MmQ3LThhN2ItMzczOGYzOGMzMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqbjQ4fYbJicrUC5TWNvCe4mjZ+Jj3bgPz67n/IouhwU32Y2yiHi7vV dXE8LDKT3ovnjNW3djiPzm8e6mg5zjhO6yl4cwusDcdK+RIye1qFYAcg3Y+wAOOA XmpciaFjy2j/ZRTAfpQUpOu3iWhfaVuKxvzKVqIBjFzjI4dho+6rnd+QMoOcd8ZG kLHl/yXLIpDMw1o4a2JzIx3tA8TVcoCA4w5/ocIvY8x3XI3NCrHi+/24p8tAOZDB QdfiYsi1VduE/o4OxFBghIvykXHLBUeMQjKe01iKrwR/71Zg3cYquGuwJcgD3K9T FVSjOlQbi9Dy20vJ8wj7V90sxEwo/bg= -----END CERTIFICATE-----Generated at Wed Sep 23 04:35:43 2026 by rpki-client