$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa File: 3f21f936-baed-3e68-a983-e38e4550c9d3.roa (raw, json) Hash identifier: XfKBGqpZwE+i3mt3utLPeFRmdKyQj6n9r3m4NO9DWOY= Subject key identifier: A4:0E:6D:CA:61:CA:8C:E7:2B:8F:BB:26:A5:C1:F2:A3:DA:89:4B:46 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584F1B624959FC5F0103B1BA8D00 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 36511 IP address blocks: 209.35.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:49:59:fc:5f:01:03:b1:ba:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=7b9776e3-6399-40ce-8191-38daba5d9d8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f8:c1:c2:a3:ed:e1:ca:a3:e7:26:c6:47:d6: 88:84:5f:d4:1c:b6:06:7c:b6:85:1f:ca:57:60:21: a0:97:3d:d5:0e:1e:3c:05:14:24:ca:49:17:ef:a3: 74:d8:3b:6f:49:ee:47:01:a7:d6:61:60:17:75:3c: 14:10:fd:a1:de:5c:95:4b:4f:20:56:6c:c1:1b:89: 27:08:65:3f:a3:fe:2b:ea:f7:2f:22:1b:26:1c:e2: 84:17:0b:57:57:34:e6:19:b5:76:fb:de:5e:67:27: 68:a7:de:1c:07:6e:3a:aa:20:e9:e9:7e:c2:7c:07: 7a:6d:42:3f:b9:c8:f9:a0:ae:67:dd:be:85:16:ab: 30:74:6a:83:b9:9a:ed:55:00:ee:18:cd:9f:a9:d2: d5:02:2d:82:3f:d7:fb:d7:db:5c:e1:98:31:28:a7: 15:0b:cb:79:9d:c1:8c:84:78:ba:74:11:be:1d:61: ea:1c:5f:35:aa:f0:ff:88:6b:4d:7e:d9:5d:6b:7b: ec:c8:f8:08:df:0a:e4:25:6d:f3:2e:80:0f:69:46: af:5e:c9:47:fc:70:40:33:2a:04:8f:2d:46:b5:27: a1:6c:15:03:b0:b9:cd:de:0b:24:10:ae:8e:52:80: ac:a3:0b:83:29:91:47:34:fc:ef:43:d1:6c:db:31: d8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0E:6D:CA:61:CA:8C:E7:2B:8F:BB:26:A5:C1:F2:A3:DA:89:4B:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f21f936-baed-3e68-a983-e38e4550c9d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f6:46:05:33:d5:b0:ff:58:05:82:2e:e1:0f:07:6b:79:a6: 98:c5:22:87:d2:30:b5:af:77:31:86:28:f1:01:e5:72:42:8e: 10:72:c8:c1:9f:c7:77:9e:db:ae:3c:06:80:3c:e8:22:dd:0a: a9:d7:5f:ed:f6:22:f7:83:a8:aa:8b:1d:64:1b:af:1f:1f:56: 5b:44:b6:62:c7:e7:09:70:c3:f9:ab:8f:09:2e:1b:de:b7:95: 68:b4:05:7f:ce:6a:05:93:72:9d:96:59:74:75:f3:be:b1:01: 87:28:66:b8:5d:ec:8a:70:f8:fc:b6:00:8a:f9:b9:5b:b2:6b: ab:84:86:90:21:20:ae:f4:4b:6d:24:55:62:c4:30:7d:2e:6f: ef:47:4b:98:e1:05:29:74:13:3c:30:d2:f9:52:61:73:1e:46: fa:eb:9a:57:12:59:df:c5:a1:a3:df:a9:17:42:6f:ef:b0:69: bb:b3:05:62:42:bb:8c:ba:c7:78:51:99:2f:99:61:e7:81:0a: 0b:eb:a6:da:1f:ea:3b:92:ff:02:0a:78:56:34:ab:65:83:25: cd:c1:6f:0e:3c:5c:e5:63:9f:49:57:b0:25:43:45:9b:34:1f: c2:d8:1c:06:76:25:f1:f2:86:8c:af:c7:55:54:5f:82:d3:1b: d7:e8:0a:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYklZ/F8BA7G6jQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk N2I5Nzc2ZTMtNjM5OS00MGNlLTgxOTEtMzhkYWJhNWQ5ZDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/jBwqPt4cqj5ybGR9aIhF/UHLYGfLaFH8pX YCGglz3VDh48BRQkykkX76N02DtvSe5HAafWYWAXdTwUEP2h3lyVS08gVmzBG4kn CGU/o/4r6vcvIhsmHOKEFwtXVzTmGbV2+95eZydop94cB246qiDp6X7CfAd6bUI/ ucj5oK5n3b6FFqswdGqDuZrtVQDuGM2fqdLVAi2CP9f719tc4ZgxKKcVC8t5ncGM hHi6dBG+HWHqHF81qvD/iGtNftlda3vsyPgI3wrkJW3zLoAPaUavXslH/HBAMyoE jy1GtSehbBUDsLnN3gskEK6OUoCsowuDKZFHNPzvQ9Fs2zHYxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQObcphyoznK4+7JqXB8qPaiUtGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvM2YyMWY5MzYtYmFlZC0z ZTY4LWE5ODMtZTM4ZTQ1NTBjOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0SMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAD2RgUz1bD/WAWCLuEPB2t5ppjFIofSMLWvdzGGKPEB5XJCjhByyMGf x3ee2648BoA86CLdCqnXX+32IveDqKqLHWQbrx8fVltEtmLH5wlww/mrjwkuG963 lWi0BX/OagWTcp2WWXR1876xAYcoZrhd7Ipw+Py2AIr5uVuya6uEhpAhIK70S20k VWLEMH0ub+9HS5jhBSl0Ezww0vlSYXMeRvrrmlcSWd/FoaPfqRdCb++wabuzBWJC u4y6x3hRmS+ZYeeBCgvrptof6juS/wIKeFY0q2WDJc3Bbw48XOVjn0lXsCVDRZs0 H8LYHAZ2JfHyhoyvx1VUX4LTG9foCuE= -----END CERTIFICATE-----Generated at Tue Sep 22 22:25:04 2026 by rpki-client