$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa File: 012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa (raw, json) Hash identifier: xo0rl2brTGlA1LUX6NpDYDvbPuJLN8p/++sBHvEKiNg= Subject key identifier: 89:E2:D9:ED:3B:6B:87:58:CB:69:15:F0:BB:39:EA:CC:50:81:0D:46 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584A225AC92E6EED4A8B85F25480 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa Signing time: Mon 09 Jun 2025 13:01:01 +0000 ROA not before: Mon 09 Jun 2025 13:01:01 +0000 ROA not after: Sun 07 Sep 2025 13:01:01 +0000 asID: 33392 IP address blocks: 209.35.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:22:5a:c9:2e:6e:ed:4a:8b:85:f2:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Jun 9 13:01:01 2025 GMT Not After : Sep 7 13:01:01 2025 GMT Subject: CN=c343d76f-6e32-4eb3-b48e-e5ed7a0ac013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c3:39:28:c9:41:4a:f2:2c:ff:35:14:ce:19: 0c:a2:85:f5:15:7f:76:db:9b:40:54:c7:b4:10:3c: 05:90:3a:eb:df:1b:1b:3e:eb:35:05:54:2d:0c:7a: 4a:63:fc:71:4c:f1:bc:54:c6:9e:8d:86:f3:27:52: 75:c2:ef:fe:0e:cd:d0:5d:85:88:9a:99:c1:73:a2: fd:a6:99:8b:02:d5:6d:11:7d:59:3c:f8:a4:00:d2: 06:1f:b5:53:10:93:c3:83:ee:3e:be:02:7b:a0:c5: 46:ef:ce:5e:76:e3:75:5c:7c:b6:1b:ea:2c:c6:7d: 51:a2:bb:45:99:6b:dc:77:e7:51:c3:29:db:a2:71: ad:40:eb:79:d3:b7:8f:0a:08:1d:6e:8f:4b:69:36: e6:b0:2b:8f:9f:0b:0c:fb:f1:ff:83:57:1c:a0:e1: 1a:ce:0f:20:bc:f6:f2:5e:75:83:ce:1d:af:66:07: d7:85:7e:0b:57:2c:80:24:b9:da:eb:07:8a:6b:43: 85:bb:e4:3f:29:1d:b8:fd:6e:81:5e:55:83:56:3f: 3c:65:f6:5c:c9:fc:9f:2d:2e:0f:2b:2d:e2:51:9e: b6:df:58:c6:6e:cf:4a:47:6d:da:17:c8:b0:76:58: bf:2d:e1:c9:70:f6:b2:77:b6:73:fc:53:ac:b6:39: 89:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E2:D9:ED:3B:6B:87:58:CB:69:15:F0:BB:39:EA:CC:50:81:0D:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/012f21bd-8e8e-32d7-8a7b-3738f38c3063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:5f:42:03:bc:4d:63:c0:d7:9d:fa:1e:6c:6e:71:10:48:2d: 01:ce:2f:e9:c2:09:14:bf:26:8b:ca:56:ee:cb:f9:f9:4f:34: 1f:3c:26:8c:a3:4e:eb:8f:b1:12:b7:ac:65:42:37:de:8d:42: 6f:8a:9d:77:9f:0a:61:c5:49:af:13:c9:1c:70:80:e9:9b:de: f7:df:e1:b1:cd:c7:a6:72:04:a1:a3:b1:f9:ad:d7:07:48:e6: af:68:dd:8f:24:cf:f9:12:e7:e5:79:77:d4:20:2a:4b:07:6e: 55:2a:71:97:20:67:9a:15:5d:71:4f:10:c1:be:36:ad:8c:26: d6:4b:7f:c2:0a:7a:8a:19:3e:42:24:18:14:19:f6:75:23:fb: 14:91:01:a8:9d:89:49:5f:44:f2:f9:78:84:a1:6e:49:72:3a: 30:73:aa:c7:fc:a9:0c:85:91:a2:c0:d5:f4:39:cd:6c:8e:7c: 70:c3:9c:14:c2:80:5f:04:f2:44:23:ba:b5:de:f5:77:36:4e: 04:24:4a:05:4d:f3:99:95:6b:58:a2:20:5d:d5:d7:f2:48:7e: 3b:c1:1e:e6:cf:a9:d0:59:c5:96:64:dc:3e:2e:82:1b:b8:0d: 39:fd:76:ac:cf:af:fa:f3:70:2e:de:29:f9:cb:6a:85:8e:89: 9b:95:46:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoiWskubu1Ki4XyVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDYwOTEzMDEwMVoXDTI1MDkwNzEzMDEwMVowLzEtMCsGA1UEAxMk YzM0M2Q3NmYtNmUzMi00ZWIzLWI0OGUtZTVlZDdhMGFjMDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcM5KMlBSvIs/zUUzhkMooX1FX9225tAVMe0 EDwFkDrr3xsbPus1BVQtDHpKY/xxTPG8VMaejYbzJ1J1wu/+Ds3QXYWImpnBc6L9 ppmLAtVtEX1ZPPikANIGH7VTEJPDg+4+vgJ7oMVG785eduN1XHy2G+osxn1RortF mWvcd+dRwynbonGtQOt507ePCggdbo9LaTbmsCuPnwsM+/H/g1ccoOEazg8gvPby XnWDzh2vZgfXhX4LVyyAJLna6weKa0OFu+Q/KR24/W6BXlWDVj88ZfZcyfyfLS4P Ky3iUZ6231jGbs9KR23aF8iwdli/LeHJcPayd7Zz/FOstjmJvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIni2e07a4dYy2kV8Ls56sxQgQ1GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMDEyZjIxYmQtOGU4ZS0z MmQ3LThhN2ItMzczOGYzOGMzMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdfQgO8TWPA1536HmxucRBILQHOL+nCCRS/JovKVu7L+flPNB88Joyj TuuPsRK3rGVCN96NQm+KnXefCmHFSa8TyRxwgOmb3vff4bHNx6ZyBKGjsfmt1wdI 5q9o3Y8kz/kS5+V5d9QgKksHblUqcZcgZ5oVXXFPEMG+Nq2MJtZLf8IKeooZPkIk GBQZ9nUj+xSRAaidiUlfRPL5eIShbklyOjBzqsf8qQyFkaLA1fQ5zWyOfHDDnBTC gF8E8kQjurXe9Xc2TgQkSgVN85mVa1iiIF3V1/JIfjvBHubPqdBZxZZk3D4ughu4 DTn9dqzPr/rzcC7eKfnLaoWOiZuVRpk= -----END CERTIFICATE-----Generated at Tue Jun 17 08:26:02 2025 by rpki-client