$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa File: 38c40b45-912b-3d93-bf1f-297a8a0a2463.roa (raw, json) Hash identifier: TLDuiRqfvFdy+2IAtwCtobMqJd5/w0d/Q3zwG48ln+k= Subject key identifier: 71:88:A0:A4:D1:44:33:61:66:8B:D2:99:55:C0:C6:71:B7:AF:03:F9 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584F1897A6952708DBEBF3277A80 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 36511 IP address blocks: 209.35.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:a6:95:27:08:db:eb:f3:27:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=e59e5ba4-ee28-4b4b-9fa0-0a892c9baff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cf:b0:b3:3c:54:74:d9:ac:da:db:4d:ce:b1: 36:ad:ea:3e:7b:78:a5:96:e9:bc:7a:2e:92:33:f2: 2f:06:eb:b3:55:d7:14:e0:62:80:fa:7b:d0:b6:72: 27:47:9d:6b:04:fc:8b:52:65:ea:ce:3a:5b:7b:4c: 34:2d:38:60:94:b9:f1:be:6a:91:c4:33:47:68:5d: 28:bc:9d:49:8f:57:69:3f:01:b8:28:4b:0b:c0:84: 1b:9a:2f:0b:2a:94:ca:76:9b:75:2e:a0:6c:9e:cd: df:60:8c:ae:4d:30:c1:e6:f9:48:b3:34:82:c4:34: 6e:da:ce:5f:0e:dc:f4:87:93:db:60:8f:b3:31:37: 60:30:7e:fd:b0:11:63:91:54:90:48:23:2e:c3:4b: 89:4d:4a:5b:cb:ba:c3:96:ac:53:a7:ed:dd:0e:7d: 8f:8f:48:7f:3e:96:fe:3b:6b:8a:00:73:55:33:80: 51:69:f1:a4:8a:e7:9d:a9:4d:22:3d:c3:b0:b6:b4: f8:b5:96:b6:0a:a1:9d:73:a8:ba:b0:6a:d0:d6:3c: 6a:b0:fe:34:14:04:d6:2c:66:85:3a:1b:06:44:ab: ff:9b:33:3a:23:8b:6d:1f:49:36:12:3b:d3:99:f2: 32:9a:ee:29:5c:4e:2f:94:f3:f4:d4:2f:9b:70:9a: 7d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:88:A0:A4:D1:44:33:61:66:8B:D2:99:55:C0:C6:71:B7:AF:03:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/38c40b45-912b-3d93-bf1f-297a8a0a2463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:22:f5:50:c0:a6:15:6e:9b:c3:bf:e6:8e:b0:97:bc:d7:8f: 87:c9:bc:4e:6f:e8:28:9f:78:2a:b5:67:71:b3:14:aa:a2:56: 62:1b:8c:c8:73:e5:47:3b:63:b7:5f:ef:1a:da:83:92:69:5d: 11:c0:ab:29:b5:6e:1b:c8:e7:98:80:d0:a9:f3:d9:47:5e:d8: 88:21:5b:4d:a7:39:d4:14:a0:c4:ab:3f:b5:27:b8:7d:f0:a5: d4:6f:61:0d:aa:d0:a7:f8:6e:2d:a0:bd:c5:66:3a:db:7d:33: 82:ab:f7:47:d2:a6:0d:b7:35:39:50:36:c4:70:ab:df:f1:29: 47:bf:8b:e5:85:ee:00:39:90:d8:5b:09:83:2b:e1:f4:01:3e: d7:2b:12:4c:cd:ef:aa:c2:74:58:f4:32:31:29:53:ee:7a:ec: 11:e6:dd:60:61:04:cf:36:89:a1:b6:33:15:6d:17:5b:21:42: a8:c9:45:73:50:fd:d9:fd:6d:09:04:b8:24:bc:a8:fd:0f:28: b0:20:31:3b:c0:ba:bf:87:5e:46:15:7b:1c:6a:fd:56:45:62: 41:06:9d:66:ff:58:bb:b4:a9:3a:e1:4e:4a:4e:7c:93:f9:d1: 5b:34:dd:1b:b8:8e:0d:61:c8:1a:cc:d5:a7:59:20:a9:8a:e8: 41:f7:3c:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl6aVJwjb6/MneoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZTU5ZTViYTQtZWUyOC00YjRiLTlmYTAtMGE4OTJjOWJhZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8+wszxUdNms2ttNzrE2reo+e3illum8ei6S M/IvBuuzVdcU4GKA+nvQtnInR51rBPyLUmXqzjpbe0w0LThglLnxvmqRxDNHaF0o vJ1Jj1dpPwG4KEsLwIQbmi8LKpTKdpt1LqBsns3fYIyuTTDB5vlIszSCxDRu2s5f Dtz0h5PbYI+zMTdgMH79sBFjkVSQSCMuw0uJTUpby7rDlqxTp+3dDn2Pj0h/Ppb+ O2uKAHNVM4BRafGkiuedqU0iPcOwtrT4tZa2CqGdc6i6sGrQ1jxqsP40FATWLGaF OhsGRKv/mzM6I4ttH0k2EjvTmfIymu4pXE4vlPP01C+bcJp98wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGIoKTRRDNhZovSmVXAxnG3rwP5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMzhjNDBiNDUtOTEyYi0z ZDkzLWJmMWYtMjk3YThhMGEyNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAi9VDAphVum8O/5o6wl7zXj4fJvE5v6CifeCq1Z3GzFKqiVmIbjMhz 5Uc7Y7df7xrag5JpXRHAqym1bhvI55iA0Knz2Ude2IghW02nOdQUoMSrP7UnuH3w pdRvYQ2q0Kf4bi2gvcVmOtt9M4Kr90fSpg23NTlQNsRwq9/xKUe/i+WF7gA5kNhb CYMr4fQBPtcrEkzN76rCdFj0MjEpU+567BHm3WBhBM82iaG2MxVtF1shQqjJRXNQ /dn9bQkEuCS8qP0PKLAgMTvAur+HXkYVexxq/VZFYkEGnWb/WLu0qTrhTkpOfJP5 0Vs03Ru4jg1hyBrM1adZIKmK6EH3PBY= -----END CERTIFICATE-----Generated at Wed Sep 23 03:21:48 2026 by rpki-client