$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa File: 04a72bfb-6956-393f-affe-ff7db4804d88.roa (raw, json) Hash identifier: Uf7TCik3ZRA7AINjDj9fv4nRkH5p6+AsV3+upjqqusE= Subject key identifier: CB:32:52:31:8E:2C:6F:9D:0A:AC:3E:E5:D0:7F:CC:63:7F:0E:A6:4E Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584F23C25E61330EA50D3E890880 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 33392 IP address blocks: 209.35.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:5e:61:33:0e:a5:0d:3e:89:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=eac09846-5b56-46bf-9286-f9dcab0d8f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d9:a0:8b:be:56:29:7f:be:3e:f3:26:b2:c0: 01:a2:3b:cb:ad:ad:9b:bc:14:eb:e8:a7:d7:65:50: 58:6e:7a:c4:6d:36:8e:60:55:5b:a7:34:a5:29:0f: 2b:a3:ec:21:11:23:ca:db:6d:28:1d:8a:d4:12:bc: 74:4b:64:92:e1:07:74:bb:56:ad:81:59:09:bb:f5: 49:21:f3:ee:a1:2c:7f:3b:28:50:ac:9d:d7:9b:97: 55:61:67:15:c4:ff:25:48:9e:3c:6e:98:10:26:0a: 1c:3b:04:cf:a8:ab:e3:7e:ac:c8:66:16:a6:78:0a: f5:df:25:20:e9:e1:39:7e:fc:97:bb:e5:f8:0f:06: 2d:e2:b8:7e:fc:12:fb:bb:5f:81:31:2b:b8:69:52: 67:8f:4f:84:77:93:f7:8e:da:20:a8:28:f6:ed:65: c0:da:0e:d1:d0:2e:09:ca:d1:dd:31:2f:65:02:29: 73:53:b1:53:24:68:39:6b:f4:89:ac:9c:e4:f8:72: 33:a1:58:c8:49:06:f3:4c:57:29:c0:0f:bb:ae:a4: eb:5b:e3:e9:5b:65:85:45:b5:dd:3c:df:e0:4c:48: a4:e1:bc:ea:46:6d:3e:46:b4:22:3f:12:b6:3f:0d: fc:5c:b9:84:e7:cd:b9:d5:d0:f3:c5:d6:f4:2c:ee: 48:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:32:52:31:8E:2C:6F:9D:0A:AC:3E:E5:D0:7F:CC:63:7F:0E:A6:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/04a72bfb-6956-393f-affe-ff7db4804d88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:7e:ce:a2:3e:08:f9:e4:1d:3e:00:53:eb:ad:49:be:cc:1b: d0:69:7b:49:d3:d6:f1:11:0b:5b:37:18:3e:e6:41:06:3a:81: 93:03:c1:ad:cb:90:4d:2c:37:0f:ca:5c:60:bb:25:a8:a5:6c: 3c:08:6d:a6:a2:0e:a3:33:8f:37:e7:bf:af:9b:ae:5c:a5:cc: 10:14:d6:79:22:88:3d:f6:01:b0:e8:c4:45:32:10:21:24:fe: 86:b0:b1:59:50:0b:5d:07:31:7b:1c:e1:4c:f4:10:de:a6:a7: 4f:8c:df:f9:48:75:db:e8:e1:0f:15:1c:8d:37:3b:d3:63:b6: 8e:ce:66:2c:7d:8b:c9:df:1f:07:41:78:60:a3:24:67:6b:63: 58:44:44:0b:7d:58:4e:51:ff:aa:a2:0a:65:74:c4:d8:db:30: 76:3e:28:d5:49:41:a5:c3:75:0d:0f:27:3c:0e:51:7e:18:21: 94:3f:e3:9b:8e:5e:5d:bf:06:84:70:4f:65:22:06:41:17:16: 04:78:18:55:d4:12:4d:5c:c1:98:45:77:cf:3d:78:88:e3:d7: cb:32:c2:89:b2:c5:46:c5:9b:9b:0c:57:27:65:fa:b0:1a:2b: ee:75:5c:80:52:f0:3c:f5:09:7b:05:49:da:75:68:cf:4e:e2: 80:2c:ee:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwl5hMw6lDT6JCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk ZWFjMDk4NDYtNWI1Ni00NmJmLTkyODYtZjlkY2FiMGQ4Zjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNmgi75WKX++PvMmssABojvLra2bvBTr6KfX ZVBYbnrEbTaOYFVbpzSlKQ8ro+whESPK220oHYrUErx0S2SS4Qd0u1atgVkJu/VJ IfPuoSx/OyhQrJ3Xm5dVYWcVxP8lSJ48bpgQJgocOwTPqKvjfqzIZhameAr13yUg 6eE5fvyXu+X4DwYt4rh+/BL7u1+BMSu4aVJnj0+Ed5P3jtogqCj27WXA2g7R0C4J ytHdMS9lAilzU7FTJGg5a/SJrJzk+HIzoVjISQbzTFcpwA+7rqTrW+PpW2WFRbXd PN/gTEik4bzqRm0+RrQiPxK2Pw38XLmE58251dDzxdb0LO5IlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsyUjGOLG+dCqw+5dB/zGN/DqZOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMDRhNzJiZmItNjk1Ni0z OTNmLWFmZmUtZmY3ZGI0ODA0ZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0SMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHV+zqI+CPnkHT4AU+utSb7MG9Bpe0nT1vERC1s3GD7mQQY6gZMDwa3L kE0sNw/KXGC7JailbDwIbaaiDqMzjzfnv6+brlylzBAU1nkiiD32AbDoxEUyECEk /oawsVlQC10HMXsc4Uz0EN6mp0+M3/lIddvo4Q8VHI03O9Njto7OZix9i8nfHwdB eGCjJGdrY1hERAt9WE5R/6qiCmV0xNjbMHY+KNVJQaXDdQ0PJzwOUX4YIZQ/45uO Xl2/BoRwT2UiBkEXFgR4GFXUEk1cwZhFd889eIjj18sywomyxUbFm5sMVydl+rAa K+51XIBS8Dz1CXsFSdp1aM9O4oAs7qg= -----END CERTIFICATE-----Generated at Thu Sep 24 14:59:53 2026 by rpki-client