$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/2cda7570-a5a8-3633-a18c-92ee982e5a67.roa File: 2cda7570-a5a8-3633-a18c-92ee982e5a67.roa (raw, json) Hash identifier: 3kzQRjggqoRrJUMz3InSQOIeEQTW+UGou4o3ml6/9L4= Subject key identifier: 4A:A6:A7:19:73:BD:B0:E7:4A:18:A1:BA:C2:62:00:5B:46:95:E2:DB Certificate issuer: /CN=baebde37-2461-4409-96e1-a720edbe80a7 Certificate serial: 010D0C9F4328584EA793556B16BDC39AAA932B00 Authority key identifier: 50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/2cda7570-a5a8-3633-a18c-92ee982e5a67.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 27495 IP address blocks: 137.236.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:55:6b:16:bd:c3:9a:aa:93:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baebde37-2461-4409-96e1-a720edbe80a7 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=dbb3363b-5b69-4864-bdc5-1d109e55b5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9c:2e:f3:08:97:14:cd:50:c4:e1:5f:bd:48: c1:d5:0a:f1:67:9d:04:10:0a:17:a2:03:fe:de:9e: 61:9e:10:a2:6d:f5:e7:a5:fd:dc:29:56:97:2e:a0: 37:7a:05:c1:27:98:20:c3:24:ba:48:6b:4c:56:91: 19:1e:12:1d:05:83:c3:bd:df:a5:f8:83:73:be:f3: 0a:6e:e4:be:ad:79:32:61:1b:ed:73:5c:e7:90:89: c0:e1:d3:5c:95:81:b2:e6:d8:b9:6a:96:37:ea:0d: 84:be:ab:9a:22:9a:12:4b:e4:e8:75:0e:a6:39:c0: ea:06:b6:ef:f7:80:c6:38:06:68:30:d3:72:a2:68: 55:94:ac:57:a0:10:5b:e7:c5:a2:e8:26:13:c3:cf: 1c:78:51:fc:b8:ae:2c:9a:fd:a5:13:3f:86:15:72: e9:26:63:f0:b8:8a:0c:29:c7:de:23:4f:80:5e:f7: 2f:63:43:9c:71:db:b0:78:8c:ea:00:76:8e:b7:df: 41:8c:61:a2:ab:a8:a3:21:51:ca:88:4a:8c:82:2a: 92:ee:59:58:f1:93:32:3c:d8:40:38:b2:5e:3b:ab: 27:1c:48:46:ed:36:db:6a:36:1a:a9:ad:77:68:78: 28:ee:a2:fa:33:2a:a2:b4:9d:ad:ac:19:55:46:42: 81:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A6:A7:19:73:BD:B0:E7:4A:18:A1:BA:C2:62:00:5B:46:95:E2:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/2cda7570-a5a8-3633-a18c-92ee982e5a67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl X509v3 Authority Key Identifier: keyid:50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer sbgp-ipAddrBlock: critical IPv4: 137.236.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:1b:df:61:da:e6:ed:6b:c2:32:c0:d9:c7:d4:56:75:71:49: 97:d7:db:a9:89:20:15:f9:7c:93:ec:1f:79:cf:ce:4c:05:b9: 2c:12:a8:b9:bb:d5:44:08:ff:a4:6e:48:c0:98:f8:15:2f:dc: 51:42:21:d5:37:a4:ed:1b:05:a3:1f:bd:a0:6e:16:b9:bf:1f: a1:10:cb:1f:93:58:5d:31:3c:00:96:a6:ab:24:23:bf:86:8d: e1:92:36:db:db:0f:9a:e0:65:bd:b9:c7:b7:7e:2a:9b:01:d7: e8:32:31:d3:71:9b:6a:e5:7b:8f:9f:2a:9b:97:ff:be:fe:a2: 14:c2:2d:b1:db:a4:fa:39:53:c6:58:e8:3a:e2:b5:16:9a:b1: df:b1:75:a5:01:78:9d:c4:8f:cc:e4:9d:f0:c3:76:85:8f:f7: 69:3a:63:24:fc:53:91:dc:ce:c8:fd:9e:76:32:fe:fb:dc:17: 4f:08:bc:3e:59:97:0c:38:4c:7e:17:94:8b:66:4e:7c:8e:9e: 7d:1c:45:03:80:34:4e:ac:9f:3c:aa:5e:e9:ae:10:ae:fa:7f: e9:76:c1:d6:b2:d7:a3:23:06:c8:eb:f5:f3:9c:55:90:1c:7d: 3c:3a:91:b5:3a:31:67:b0:09:85:54:f6:44:c0:d4:fc:ee:8d: e9:2c:10:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk1VrFr3DmqqTKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFlYmRlMzctMjQ2MS00NDA5LTk2ZTEtYTcyMGVkYmU4 MGE3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGJiMzM2M2ItNWI2OS00ODY0LWJkYzUtMWQxMDllNTViNWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpwu8wiXFM1QxOFfvUjB1QrxZ50EEAoXogP+ 3p5hnhCibfXnpf3cKVaXLqA3egXBJ5ggwyS6SGtMVpEZHhIdBYPDvd+l+INzvvMK buS+rXkyYRvtc1znkInA4dNclYGy5ti5apY36g2EvquaIpoSS+TodQ6mOcDqBrbv 94DGOAZoMNNyomhVlKxXoBBb58Wi6CYTw88ceFH8uK4smv2lEz+GFXLpJmPwuIoM KcfeI0+AXvcvY0OccduweIzqAHaOt99BjGGiq6ijIVHKiEqMgiqS7llY8ZMyPNhA OLJeO6snHEhG7TbbajYaqa13aHgo7qL6MyqitJ2trBlVRkKBDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqmpxlzvbDnShihusJiAFtGleLbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYWVi ZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIwZWRiZTgwYTcvMmNkYTc1NzAtYTVhOC0z NjMzLWExOGMtOTJlZTk4MmU1YTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmFlYmRlMzctMjQ2MS00NDA5LTk2 ZTEtYTcyMGVkYmU4MGE3L2JhZWJkZTM3LTI0NjEtNDQwOS05NmUxLWE3MjBlZGJl ODBhNy5jcmwwHwYDVR0jBBgwFoAUUDZNFsS1qHZodij63f6yFPBDAOEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYWViZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIw ZWRiZTgwYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBieyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0b32Ha5u1rwjLA2cfUVnVxSZfX26mJIBX5fJPsH3nPzkwFuSwSqLm7 1UQI/6RuSMCY+BUv3FFCIdU3pO0bBaMfvaBuFrm/H6EQyx+TWF0xPACWpqskI7+G jeGSNtvbD5rgZb25x7d+KpsB1+gyMdNxm2rle4+fKpuX/77+ohTCLbHbpPo5U8ZY 6DritRaasd+xdaUBeJ3Ej8zknfDDdoWP92k6YyT8U5Hczsj9nnYy/vvcF08IvD5Z lww4TH4XlItmTnyOnn0cRQOANE6snzyqXumuEK76f+l2wday16MjBsjr9fOcVZAc fTw6kbU6MWewCYVU9kTA1PzujeksELg= -----END CERTIFICATE-----Generated at Thu Aug 6 23:18:42 2026 by rpki-client