$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/2cda7570-a5a8-3633-a18c-92ee982e5a67.roa File: 2cda7570-a5a8-3633-a18c-92ee982e5a67.roa (raw, json) Hash identifier: Swi+OMn4LYXEA0yynxx3ag/b16E7Ve2SUVjyl4vPmXU= Subject key identifier: 3F:7F:4E:0C:21:EE:6F:DB:2B:1E:E3:04:72:43:FC:65:32:87:50:8B Certificate issuer: /CN=baebde37-2461-4409-96e1-a720edbe80a7 Certificate serial: 010D0C9F4328584A698B2514B6B926D70AA10F00 Authority key identifier: 50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/2cda7570-a5a8-3633-a18c-92ee982e5a67.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 27495 IP address blocks: 137.236.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:25:14:b6:b9:26:d7:0a:a1:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baebde37-2461-4409-96e1-a720edbe80a7 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=91a766c6-4850-4c7c-b2ce-fb42e0865fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:74:6b:e3:81:3f:e6:7f:3f:12:4d:ab:4f: 70:9e:5c:76:44:5b:f7:61:9c:08:6f:0b:6c:a0:ef: 2a:1c:60:a8:87:d1:f2:f4:fd:ef:48:7a:93:7f:86: fb:96:5b:a1:f8:6d:5b:4b:6e:64:3a:f4:76:c3:f5: 8d:ec:d5:a7:72:63:b2:4a:89:33:1d:f1:de:40:8c: 42:67:a2:0c:f8:9e:0b:77:93:c1:03:3c:e7:5d:96: 3e:a4:91:55:76:f2:f4:0b:3b:45:1c:76:de:2a:11: f5:1b:ea:21:8b:cf:42:48:fb:33:51:84:33:a3:1d: ed:5f:a7:62:b0:1b:f0:fc:06:c9:b1:e7:88:af:1e: a7:ba:0c:2d:f1:fd:31:7d:5f:84:f1:eb:8d:19:f8: ee:d6:5b:1e:4d:a9:ba:b6:9e:77:24:35:94:56:8b: 5d:4b:55:8d:3a:8d:74:22:d5:b6:6b:f6:21:a7:48: 7e:9e:e2:72:34:cd:31:ca:ff:72:1f:16:8c:90:48: ce:04:9c:a7:ae:76:60:01:ac:66:99:21:dc:ed:9c: 8a:be:72:65:46:44:d2:8a:15:e4:59:4f:94:5c:54: 33:94:29:25:f3:f6:1f:b9:14:5e:dd:5b:db:db:38: 85:66:30:62:5b:6a:e2:51:9b:79:bb:db:f8:25:66: c7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7F:4E:0C:21:EE:6F:DB:2B:1E:E3:04:72:43:FC:65:32:87:50:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/2cda7570-a5a8-3633-a18c-92ee982e5a67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl X509v3 Authority Key Identifier: keyid:50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer sbgp-ipAddrBlock: critical IPv4: 137.236.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:71:ed:b8:dd:8a:ac:ea:fd:ff:ac:a6:07:2d:fc:74:ab:4e: 24:56:12:4f:80:4a:36:b9:2d:d4:48:2a:1c:4a:02:21:a3:f0: ab:97:1f:c6:2d:26:c7:76:49:fb:a3:e5:0a:60:ff:78:8f:25: b0:42:1e:de:1c:10:56:94:fb:9f:c2:61:d1:8f:00:f2:9c:e4: 90:63:28:2a:8b:79:f5:52:98:5e:dc:64:8f:1f:fb:51:fd:91: c9:ea:32:21:4a:38:ac:a3:79:b7:0c:35:4e:e3:d9:e1:85:0f: d0:2c:04:b7:bb:db:88:65:6a:36:5f:00:37:98:da:e1:9d:b1: 19:c1:ce:1a:9f:4b:fb:71:cc:f4:85:25:69:3c:2d:a5:d3:2d: 9d:4f:9d:e1:82:f4:a5:65:9d:03:dc:57:a5:79:0e:97:10:c2: ec:db:9c:3a:50:9e:5c:09:0b:29:3b:f7:7b:45:a6:ab:41:da: 22:26:9c:32:2e:4e:6f:5f:16:5e:aa:9f:2a:ce:4e:22:75:11: e3:f7:03:48:1b:e4:59:ba:18:31:63:5b:7c:c1:7e:67:1d:ea: ae:14:a4:2e:d3:67:22:c8:4e:ff:e0:10:9b:41:08:01:70:36: f8:b0:18:19:38:a2:6a:a0:5b:51:42:67:e1:ed:29:9d:51:fb: f8:9f:e6:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppiyUUtrkm1wqhDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFlYmRlMzctMjQ2MS00NDA5LTk2ZTEtYTcyMGVkYmU4 MGE3MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk OTFhNzY2YzYtNDg1MC00YzdjLWIyY2UtZmI0MmUwODY1ZmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunN0a+OBP+Z/PxJNq09wnlx2RFv3YZwIbwts oO8qHGCoh9Hy9P3vSHqTf4b7lluh+G1bS25kOvR2w/WN7NWncmOySokzHfHeQIxC Z6IM+J4Ld5PBAzznXZY+pJFVdvL0CztFHHbeKhH1G+ohi89CSPszUYQzox3tX6di sBvw/AbJseeIrx6nugwt8f0xfV+E8euNGfju1lseTam6tp53JDWUVotdS1WNOo10 ItW2a/Yhp0h+nuJyNM0xyv9yHxaMkEjOBJynrnZgAaxmmSHc7ZyKvnJlRkTSihXk WU+UXFQzlCkl8/YfuRRe3Vvb2ziFZjBiW2riUZt5u9v4JWbH0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9/Tgwh7m/bKx7jBHJD/GUyh1CLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYWVi ZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIwZWRiZTgwYTcvMmNkYTc1NzAtYTVhOC0z NjMzLWExOGMtOTJlZTk4MmU1YTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmFlYmRlMzctMjQ2MS00NDA5LTk2 ZTEtYTcyMGVkYmU4MGE3L2JhZWJkZTM3LTI0NjEtNDQwOS05NmUxLWE3MjBlZGJl ODBhNy5jcmwwHwYDVR0jBBgwFoAUUDZNFsS1qHZodij63f6yFPBDAOEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYWViZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIw ZWRiZTgwYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBieyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMZx7bjdiqzq/f+spgct/HSrTiRWEk+ASja5LdRIKhxKAiGj8KuXH8Yt Jsd2Sfuj5Qpg/3iPJbBCHt4cEFaU+5/CYdGPAPKc5JBjKCqLefVSmF7cZI8f+1H9 kcnqMiFKOKyjebcMNU7j2eGFD9AsBLe724hlajZfADeY2uGdsRnBzhqfS/txzPSF JWk8LaXTLZ1PneGC9KVlnQPcV6V5DpcQwuzbnDpQnlwJCyk793tFpqtB2iImnDIu Tm9fFl6qnyrOTiJ1EeP3A0gb5Fm6GDFjW3zBfmcd6q4UpC7TZyLITv/gEJtBCAFw NviwGBk4omqgW1FCZ+HtKZ1R+/if5mk= -----END CERTIFICATE-----Generated at Wed Jul 23 17:12:20 2025 by rpki-client