$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baba0dac-331b-3027-9ddc-06e0a9f9e1c4.roa File: baba0dac-331b-3027-9ddc-06e0a9f9e1c4.roa (raw, json) Hash identifier: x+AK5gHnlCUWxLR/xfPN4ffAQLtftxEvECVAIu9E7NM= Subject key identifier: AF:3F:7F:A6:D0:71:BC:D3:0D:73:2C:24:12:2B:91:C4:C3:57:49:18 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584A7085F0147495F3549AB15B00 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baba0dac-331b-3027-9ddc-06e0a9f9e1c4.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 3356 IP address blocks: 75.156.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:85:f0:14:74:95:f3:54:9a:b1:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=c88451c3-20cf-4994-a800-5a56f2bd29ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f3:5b:95:21:22:2c:db:cf:b7:18:30:81:36: f4:67:51:f7:b5:3c:fa:89:e8:2e:e2:8e:64:f6:7c: 45:e1:3c:53:b1:3e:5b:01:8e:80:31:de:12:06:76: 85:04:f6:3a:3d:78:95:7d:cb:f1:27:42:31:b0:63: 16:d8:67:9a:44:89:50:0f:4f:16:63:e8:a9:65:da: 06:1e:eb:5e:2d:78:33:c8:1b:67:bf:f2:4f:69:33: 84:ba:2f:47:6e:3e:10:4f:3f:69:6e:51:e8:3e:55: bd:19:f3:79:5c:1a:8d:99:d3:a0:db:5a:23:eb:b6: 51:04:f9:6f:4b:ae:92:38:23:3d:ba:50:38:f5:ae: 7f:2c:d5:56:00:75:08:05:c8:e7:bf:84:d2:f8:41: da:34:75:28:eb:20:74:09:95:06:58:ca:b0:60:0a: a8:43:54:91:14:73:c7:4c:b9:6e:e0:d0:f9:d0:89: 3b:88:19:58:4c:ac:f4:75:dd:44:8d:b4:74:1f:aa: 14:e1:b2:b2:44:73:18:b4:3c:10:e2:d6:19:08:98: 9a:38:ef:a8:f6:60:11:32:b2:80:5f:ae:26:22:ae: 87:6a:db:f1:84:a1:d3:f4:46:f0:e4:eb:26:ce:07: 67:64:e9:6a:7e:d7:cb:3e:42:87:6f:01:db:71:eb: dd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3F:7F:A6:D0:71:BC:D3:0D:73:2C:24:12:2B:91:C4:C3:57:49:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/baba0dac-331b-3027-9ddc-06e0a9f9e1c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 75.156.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:6a:43:10:b3:23:36:6c:d0:b9:4f:08:d2:fb:b1:73:c4:dd: ae:ff:e7:55:1d:73:ad:ee:2d:1b:b1:26:09:66:f5:5c:03:fd: db:37:af:de:33:c6:32:48:16:52:f4:8f:e6:f1:25:07:56:52: 56:91:87:e7:a2:90:aa:19:6f:55:ef:a1:55:f7:f0:d8:a0:53: fd:22:05:6c:dd:14:93:72:21:e7:70:ea:eb:8b:8a:f4:e8:fa: c1:d9:ba:17:72:7f:9f:f1:05:21:c1:ec:b7:67:ed:45:a1:c6: db:68:85:40:3e:24:f1:4d:75:af:7f:33:29:35:75:03:9d:f6: 72:a6:6d:2b:d6:7b:6c:7c:40:f1:19:af:db:68:9a:72:fa:df: 4e:2e:c1:48:a3:cb:8c:0a:e3:26:d1:78:aa:67:bc:cd:49:74: 53:1f:84:c6:db:b6:ab:40:3c:79:b8:a3:17:bb:1f:91:ad:76: 88:c4:84:b1:81:64:14:dd:3e:ec:42:b4:84:79:19:43:09:55: a6:60:89:81:a1:19:a9:b3:a7:9a:5c:e8:26:ad:7a:d7:c2:39: 1b:bf:dd:0e:43:bb:ce:19:13:96:66:45:0d:cb:16:2f:a2:f9: 69:69:6d:e4:9c:3a:71:f7:86:eb:56:4c:ba:9d:6f:b0:a5:cf: bf:0a:5d:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpwhfAUdJXzVJqxWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk Yzg4NDUxYzMtMjBjZi00OTk0LWE4MDAtNWE1NmYyYmQyOWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPNblSEiLNvPtxgwgTb0Z1H3tTz6iegu4o5k 9nxF4TxTsT5bAY6AMd4SBnaFBPY6PXiVfcvxJ0IxsGMW2GeaRIlQD08WY+ipZdoG HuteLXgzyBtnv/JPaTOEui9Hbj4QTz9pblHoPlW9GfN5XBqNmdOg21oj67ZRBPlv S66SOCM9ulA49a5/LNVWAHUIBcjnv4TS+EHaNHUo6yB0CZUGWMqwYAqoQ1SRFHPH TLlu4ND50Ik7iBlYTKz0dd1EjbR0H6oU4bKyRHMYtDwQ4tYZCJiaOO+o9mARMrKA X64mIq6HatvxhKHT9Ebw5OsmzgdnZOlqftfLPkKHbwHbcevdVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8/f6bQcbzTDXMsJBIrkcTDV0kYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYmFiYTBkYWMtMzMxYi0z MDI3LTlkZGMtMDZlMGE5ZjllMWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS5zzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdqQxCzIzZs0LlPCNL7sXPE3a7/51Udc63uLRuxJglm9VwD/ds3r94z xjJIFlL0j+bxJQdWUlaRh+eikKoZb1XvoVX38NigU/0iBWzdFJNyIedw6uuLivTo +sHZuhdyf5/xBSHB7Ldn7UWhxttohUA+JPFNda9/Myk1dQOd9nKmbSvWe2x8QPEZ r9tomnL6304uwUijy4wK4ybReKpnvM1JdFMfhMbbtqtAPHm4oxe7H5GtdojEhLGB ZBTdPuxCtIR5GUMJVaZgiYGhGamzp5pc6CatetfCORu/3Q5Du84ZE5ZmRQ3LFi+i +WlpbeScOnH3hutWTLqdb7Clz78KXUs= -----END CERTIFICATE-----Generated at Fri Jul 25 19:27:18 2025 by rpki-client