$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa File: acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa (raw, json) Hash identifier: vX+26hJQQYyeu++e+wDAGEkmys5MuOaayl8CwQHlkrw= Subject key identifier: F8:30:25:04:D4:CE:EF:4E:0E:84:B4:25:18:CD:28:D5:89:50:A4:14 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584A146572792E5D56A46F965D00 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 36511 IP address blocks: 209.35.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:72:79:2e:5d:56:a4:6f:96:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=874c3320-28dd-442e-92b5-497d9ee93474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d4:36:5c:db:2b:f1:2c:81:72:75:47:bb:3b: da:b5:9b:b0:b9:da:a4:19:31:ec:ce:af:ef:ca:36: fa:ef:0a:b0:05:f6:b0:1b:2e:0a:4f:6c:a9:fd:69: b7:c4:d4:b2:a1:a6:03:16:7f:29:eb:22:8e:90:5f: 9c:9c:f8:4f:9c:e4:53:a8:23:91:27:bf:86:1f:95: a0:da:2a:a8:91:81:84:6e:70:25:a4:a0:9a:b3:a7: d9:9d:a1:5f:c7:0c:7e:a5:82:e2:f9:11:8d:23:31: 3a:5c:68:1f:b0:62:b1:b9:89:16:d0:9a:dc:11:21: cd:e8:5d:ff:0e:4a:eb:5b:82:76:94:d1:67:68:d6: 87:10:45:7f:d4:41:39:e7:53:54:e0:c7:fd:28:17: 4a:8c:53:44:2b:44:b0:d3:22:af:a9:eb:d7:5f:6b: 47:b4:6c:1a:43:1f:a6:00:86:11:d3:19:8b:81:ed: 93:9b:79:bc:1e:9c:74:04:4b:00:03:13:53:de:f6: 9b:f5:d0:70:98:ba:47:32:57:c9:d9:b5:6c:e9:8a: aa:96:4d:ca:47:ed:60:98:9a:c6:91:22:3d:6f:fc: 58:1f:93:57:07:6c:3c:16:9a:36:0a:eb:7c:95:8f: 29:97:f1:cc:04:ad:3b:81:f8:e0:5b:8d:4d:fa:fd: 50:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:30:25:04:D4:CE:EF:4E:0E:84:B4:25:18:CD:28:D5:89:50:A4:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:d2:01:c4:bb:af:fa:c5:d3:f6:e6:14:5b:90:ae:56:73:e3: f5:cf:73:27:8f:41:8a:cf:73:1f:54:8f:cc:51:73:7e:77:17: f2:dd:4f:95:53:66:e5:58:7a:0b:36:7d:a7:9b:45:9b:f9:a8: cf:04:25:5b:6e:ed:ce:bb:94:fc:05:7f:29:0d:cf:44:db:06: 35:49:2b:be:09:06:8f:48:8d:01:53:8a:6d:a2:ea:38:05:8c: 45:6e:6a:dd:74:38:50:e5:74:f9:e0:09:be:0e:ae:fd:a2:48: f9:f0:01:b5:7e:a0:03:21:3a:cc:9d:56:b5:86:56:1c:f8:f4: bb:ae:e4:e4:96:1a:bd:fd:fe:93:62:c1:eb:df:ab:2a:73:de: 6e:ae:49:05:ab:69:56:8d:49:3c:74:b2:aa:0f:80:d2:1d:50: e5:61:8e:e7:3e:4c:d3:6e:f8:53:20:22:b4:b9:54:ab:d9:07: 0f:7d:8e:fb:bf:7b:e8:09:e4:b6:69:52:e1:0d:b0:76:e8:9c: 8f:a7:8e:8c:47:f8:7a:d5:82:58:d1:25:66:54:6e:0a:4a:a1: 95:22:0f:a1:44:4a:89:8d:b7:51:8d:8b:71:39:14:f9:49:dd: 5e:c3:d6:81:5e:49:76:1b:73:bd:e5:24:29:28:95:59:95:71: 47:76:32:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXJ5Ll1WpG+WXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk ODc0YzMzMjAtMjhkZC00NDJlLTkyYjUtNDk3ZDllZTkzNDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9Q2XNsr8SyBcnVHuzvatZuwudqkGTHszq/v yjb67wqwBfawGy4KT2yp/Wm3xNSyoaYDFn8p6yKOkF+cnPhPnORTqCORJ7+GH5Wg 2iqokYGEbnAlpKCas6fZnaFfxwx+pYLi+RGNIzE6XGgfsGKxuYkW0JrcESHN6F3/ DkrrW4J2lNFnaNaHEEV/1EE551NU4Mf9KBdKjFNEK0Sw0yKvqevXX2tHtGwaQx+m AIYR0xmLge2Tm3m8Hpx0BEsAAxNT3vab9dBwmLpHMlfJ2bVs6Yqqlk3KR+1gmJrG kSI9b/xYH5NXB2w8Fpo2Cut8lY8pl/HMBK07gfjgW41N+v1QPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgwJQTUzu9ODoS0JRjNKNWJUKQUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvYWNkYjM5NDMtMWZlMC0z NDNmLWI1ZmYtYzc5OGU5ZmQ0MDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnSAcS7r/rF0/bmFFuQrlZz4/XPcyePQYrPcx9Uj8xRc353F/LdT5VT ZuVYegs2faebRZv5qM8EJVtu7c67lPwFfykNz0TbBjVJK74JBo9IjQFTim2i6jgF jEVuat10OFDldPngCb4Orv2iSPnwAbV+oAMhOsydVrWGVhz49Luu5OSWGr39/pNi wevfqypz3m6uSQWraVaNSTx0sqoPgNIdUOVhjuc+TNNu+FMgIrS5VKvZBw99jvu/ e+gJ5LZpUuENsHbonI+njoxH+HrVgljRJWZUbgpKoZUiD6FESomNt1GNi3E5FPlJ 3V7D1oFeSXYbc73lJCkolVmVcUd2Mlc= -----END CERTIFICATE-----Generated at Sun Jun 15 22:34:04 2025 by rpki-client