$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/10161777-f08a-3671-aa2b-fae57dafad53.roa File: 10161777-f08a-3671-aa2b-fae57dafad53.roa (raw, json) Hash identifier: vMuQ1AsfZuDMooufmQTljbvlaKQHvTEiIgkY9VS8LLc= Subject key identifier: F8:6C:F2:DB:0F:14:33:87:C1:55:59:87:D0:AF:CC:D7:F6:2B:3D:70 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584A14657297027FF9E6620F4A80 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/10161777-f08a-3671-aa2b-fae57dafad53.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 33392 IP address blocks: 209.35.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:72:97:02:7f:f9:e6:62:0f:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=3de15cac-b736-4ac3-8c74-d1759708a3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ad:67:40:14:88:fa:25:e2:b1:b0:ea:7f:74: 54:ee:6e:41:89:cf:79:23:1e:14:5e:05:30:0d:20: 48:78:9d:3f:c7:98:43:da:7e:63:cf:e6:84:f8:2e: 65:e2:43:ce:0b:1f:31:a6:13:26:d5:59:7c:86:a2: 53:05:27:93:94:6c:b9:15:23:a6:1b:2b:08:78:19: 9b:68:0d:33:32:a7:aa:db:77:cb:1c:27:6d:5f:01: 8b:a5:18:c7:5d:1d:d8:5d:e1:23:24:d5:ed:d1:42: af:12:e7:05:fb:24:a5:2c:7e:20:14:e1:77:f5:27: d3:b2:8a:c6:4d:bc:18:78:eb:14:97:22:ba:c9:8c: 2a:0d:99:4c:ad:8e:82:81:3f:2d:24:da:ea:e2:74: 1b:5c:e8:3b:ab:2e:07:87:33:92:7b:91:7a:d5:04: 96:e7:9e:d5:4d:fa:03:f6:e0:f3:67:37:8d:81:7c: 9b:97:b7:e5:a5:73:a1:69:ca:5e:7b:0e:8a:4b:38: a5:18:8d:15:99:a1:86:26:71:3d:fc:7d:5c:85:1f: 64:16:7c:9c:14:a3:a8:14:99:ac:50:8f:de:04:04: b9:5a:07:09:36:fa:4b:77:5c:d0:cb:ee:f8:5b:53: 2a:a5:8c:55:a9:11:32:df:4c:57:dc:2a:b0:b5:36: 9e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6C:F2:DB:0F:14:33:87:C1:55:59:87:D0:AF:CC:D7:F6:2B:3D:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/10161777-f08a-3671-aa2b-fae57dafad53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:90:2d:bd:6a:0a:07:fe:d6:e9:d7:bb:38:a1:da:d6:dc:d8: 7d:a0:dc:85:dc:0d:16:88:27:8f:46:e3:6b:65:d5:ff:e5:33: 88:df:d2:12:b5:0c:0a:7b:8d:9c:0a:18:ce:3c:1b:0e:25:1d: 9c:65:9c:6f:45:1f:3d:88:8e:56:15:82:27:dc:b2:ac:f5:6b: fc:d8:65:7a:60:06:bf:26:47:0f:5a:1a:f0:93:ad:91:9f:55: b3:28:65:f4:74:32:b2:f3:55:db:1a:9a:0b:cd:40:83:b8:71: 4a:65:60:dc:d3:a2:08:fc:ae:03:08:0a:26:44:0e:83:95:0e: 70:2a:a2:61:5e:f8:8f:6d:e1:19:3b:d6:90:05:05:30:d2:89: 0a:72:9d:d6:72:7b:ed:4e:93:16:0e:59:9d:e3:e7:54:c0:d4: 6d:0c:ce:55:05:cd:0a:ae:3d:74:fb:a9:85:91:8c:10:45:d7: 5f:5a:2a:d7:74:1e:90:49:1a:f8:57:bd:38:f7:85:ea:9b:e4: be:95:65:fb:09:b7:14:d9:fc:85:5c:eb:76:9d:ce:85:b7:45: 10:b4:fa:72:1c:5e:a6:0d:84:73:81:0d:9f:77:73:08:3f:fc: b3:1d:7c:4d:56:e1:fb:1d:a4:27:39:e3:d9:16:f3:2f:ab:a1: ed:5e:0f:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXKXAn/55mIPSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk M2RlMTVjYWMtYjczNi00YWMzLThjNzQtZDE3NTk3MDhhM2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh61nQBSI+iXisbDqf3RU7m5Bic95Ix4UXgUw DSBIeJ0/x5hD2n5jz+aE+C5l4kPOCx8xphMm1Vl8hqJTBSeTlGy5FSOmGysIeBmb aA0zMqeq23fLHCdtXwGLpRjHXR3YXeEjJNXt0UKvEucF+ySlLH4gFOF39SfTsorG TbwYeOsUlyK6yYwqDZlMrY6CgT8tJNrq4nQbXOg7qy4HhzOSe5F61QSW557VTfoD 9uDzZzeNgXybl7flpXOhacpeew6KSzilGI0VmaGGJnE9/H1chR9kFnycFKOoFJms UI/eBAS5WgcJNvpLd1zQy+74W1MqpYxVqREy30xX3CqwtTaeAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhs8tsPFDOHwVVZh9CvzNf2Kz1wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMTAxNjE3NzctZjA4YS0z NjcxLWFhMmItZmFlNTdkYWZhZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaQLb1qCgf+1unXuzih2tbc2H2g3IXcDRaIJ49G42tl1f/lM4jf0hK1 DAp7jZwKGM48Gw4lHZxlnG9FHz2IjlYVgifcsqz1a/zYZXpgBr8mRw9aGvCTrZGf VbMoZfR0MrLzVdsamgvNQIO4cUplYNzTogj8rgMICiZEDoOVDnAqomFe+I9t4Rk7 1pAFBTDSiQpyndZye+1OkxYOWZ3j51TA1G0MzlUFzQquPXT7qYWRjBBF119aKtd0 HpBJGvhXvTj3heqb5L6VZfsJtxTZ/IVc63adzoW3RRC0+nIcXqYNhHOBDZ93cwg/ /LMdfE1W4fsdpCc549kW8y+roe1eD18= -----END CERTIFICATE-----Generated at Tue Jun 17 19:10:29 2025 by rpki-client