$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa File: 3f21f936-baed-3e68-a983-e38e4550c9d3.roa (raw, json) Hash identifier: f7fZz06grzoa7iHntzMBwoZzZYWjpLnWAsDFnErIRCU= Subject key identifier: D2:72:A0:99:09:16:94:21:5B:44:29:CE:70:B4:CE:0F:1A:E2:33:2D Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584A173005B86E257D14FC422120 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa Signing time: Thu 05 Jun 2025 13:01:03 +0000 ROA not before: Thu 05 Jun 2025 13:01:03 +0000 ROA not after: Wed 03 Sep 2025 13:01:03 +0000 asID: 36511 IP address blocks: 209.35.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:17:30:05:b8:6e:25:7d:14:fc:42:21:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Jun 5 13:01:03 2025 GMT Not After : Sep 3 13:01:03 2025 GMT Subject: CN=e84ec9e9-85e0-4e6e-86bc-c00ab1380bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3e:95:7e:18:f0:9b:89:7d:ea:80:7c:92:22: aa:70:12:ac:ba:dd:fa:24:7d:4b:7b:3a:29:2c:3e: c5:a1:b0:51:80:7a:6f:46:5c:93:7e:bc:d2:9c:81: 26:7c:0b:b5:0b:7a:29:53:6a:28:3a:48:43:d5:65: b9:ae:8c:2f:6a:71:e4:7d:1e:d2:33:82:79:7e:02: f0:b7:97:ac:3f:a4:47:64:e5:51:d9:43:0f:86:0a: 3e:94:20:10:34:cf:46:1d:58:01:d9:d5:37:7f:2b: a8:1e:96:f3:5f:46:81:0a:d2:30:eb:26:21:17:d3: 1d:53:0f:d4:d3:1a:30:48:b8:f7:a0:f6:d1:e2:87: ca:48:9a:11:12:d5:ad:ae:ad:08:6a:77:99:32:9e: 56:d4:a7:a4:b1:34:7e:1a:bc:95:a7:9f:76:28:e1: b8:6b:38:90:a3:99:e4:55:12:2b:05:86:b2:36:b9: 72:22:05:1f:bc:16:b3:02:b9:91:85:55:43:d2:53: d7:60:07:93:02:b9:68:b8:9c:6a:2a:76:18:e4:bf: b6:eb:2a:6a:09:1b:71:18:2e:7c:f1:a4:ab:ed:8a: 92:7c:8c:32:4c:82:ea:1c:57:5f:c8:cb:c3:d6:6b: 0b:b3:8b:05:d5:f0:7e:2c:81:86:7f:ff:11:66:99: 25:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:72:A0:99:09:16:94:21:5B:44:29:CE:70:B4:CE:0F:1A:E2:33:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:69:1c:ff:13:b3:b7:a3:0d:22:b9:98:ab:ef:99:3f:0b:4d: 3d:2e:44:1b:25:8f:40:c9:43:03:3d:82:2d:ef:ba:77:aa:48: a0:9c:fd:97:ea:a8:5e:a8:7a:58:dd:56:84:80:3f:25:2c:d3: 1e:4f:20:aa:89:28:9b:cf:30:7b:e6:48:61:21:14:30:22:4f: 59:1c:50:fb:63:d0:4c:e1:32:fd:4d:8e:2f:64:2f:97:bf:a4: 94:7e:4b:f5:37:68:35:12:7f:7d:ad:e9:a6:e0:ac:36:44:56: 36:70:e3:0a:6d:22:e6:91:2a:b5:f5:a5:06:f8:c3:e9:a4:57: 3f:63:9d:6f:42:6e:54:98:62:2e:b9:91:28:9c:bd:56:69:32: e8:6c:72:4c:b4:e5:24:b0:31:65:a8:ea:91:6d:9d:a4:78:58: ed:95:92:98:a9:df:9f:f3:21:28:ab:f3:c2:1b:f1:b3:b4:b3: ff:d0:2b:c4:09:46:99:1e:df:31:99:94:6b:f3:77:5d:e0:ae: 01:87:43:60:71:c4:7c:1c:d4:00:db:3b:c5:52:57:cf:3f:b9: 35:9f:92:50:83:b8:96:76:0d:25:58:1c:b3:be:30:45:5d:51: c8:7f:45:34:97:e0:76:24:d7:96:9e:c0:94:e5:c1:91:81:86: 90:b3:f0:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAW4biV9FPxCISAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk ZTg0ZWM5ZTktODVlMC00ZTZlLTg2YmMtYzAwYWIxMzgwYmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT6Vfhjwm4l96oB8kiKqcBKsut36JH1Lezop LD7FobBRgHpvRlyTfrzSnIEmfAu1C3opU2ooOkhD1WW5rowvanHkfR7SM4J5fgLw t5esP6RHZOVR2UMPhgo+lCAQNM9GHVgB2dU3fyuoHpbzX0aBCtIw6yYhF9MdUw/U 0xowSLj3oPbR4ofKSJoREtWtrq0IaneZMp5W1KeksTR+GryVp592KOG4aziQo5nk VRIrBYayNrlyIgUfvBazArmRhVVD0lPXYAeTArlouJxqKnYY5L+26ypqCRtxGC58 8aSr7YqSfIwyTILqHFdfyMvD1msLs4sF1fB+LIGGf/8RZpklGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJyoJkJFpQhW0QpznC0zg8a4jMtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvM2YyMWY5MzYtYmFlZC0z ZTY4LWE5ODMtZTM4ZTQ1NTBjOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0SMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZpHP8Ts7ejDSK5mKvvmT8LTT0uRBslj0DJQwM9gi3vuneqSKCc/Zfq qF6oeljdVoSAPyUs0x5PIKqJKJvPMHvmSGEhFDAiT1kcUPtj0EzhMv1Nji9kL5e/ pJR+S/U3aDUSf32t6abgrDZEVjZw4wptIuaRKrX1pQb4w+mkVz9jnW9CblSYYi65 kSicvVZpMuhscky05SSwMWWo6pFtnaR4WO2Vkpip35/zISir88Ib8bO0s//QK8QJ Rpke3zGZlGvzd13grgGHQ2BxxHwc1ADbO8VSV88/uTWfklCDuJZ2DSVYHLO+MEVd Uch/RTSX4HYk15aewJTlwZGBhpCz8CA= -----END CERTIFICATE-----Generated at Sun Jun 15 22:35:15 2025 by rpki-client