$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/03dc55df-9ce0-3afe-a7b3-21389792cc78.roa File: 03dc55df-9ce0-3afe-a7b3-21389792cc78.roa (raw, json) Hash identifier: T+KuSff7SmIyM9rFbkKngSCDCcyWS2N6YaJiOqOyhzg= Subject key identifier: 23:84:C4:55:04:F4:82:95:4A:F6:CE:AF:AD:54:14:64:8B:F5:47:47 Certificate issuer: /CN=baebde37-2461-4409-96e1-a720edbe80a7 Certificate serial: 010D0C9F4328584AADF102AD1A1CD9C2A79CE100 Authority key identifier: 50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/03dc55df-9ce0-3afe-a7b3-21389792cc78.roa Signing time: Tue 29 Jul 2025 13:01:04 +0000 ROA not before: Tue 29 Jul 2025 13:01:04 +0000 ROA not after: Mon 27 Oct 2025 13:01:04 +0000 asID: 23760 IP address blocks: 142.75.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ad:f1:02:ad:1a:1c:d9:c2:a7:9c:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baebde37-2461-4409-96e1-a720edbe80a7 Validity Not Before: Jul 29 13:01:04 2025 GMT Not After : Oct 27 13:01:04 2025 GMT Subject: CN=3ef13e14-8ea1-4b15-a771-273623cc9330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:23:66:d6:04:6e:0d:2f:4a:8a:40:be:3c:02: 65:62:39:f1:4b:02:e0:bf:9c:23:92:b4:cb:df:58: fb:57:e5:a2:93:f2:c0:3f:bc:4e:30:3d:89:a2:44: e4:44:5a:3d:a7:a6:02:a9:84:36:5c:e4:3e:24:dc: 8f:1e:53:1d:1a:87:f9:79:7c:98:c5:88:fe:87:2f: e1:10:23:c7:0d:53:af:d5:c9:00:ad:31:c6:1f:8c: d5:4e:46:2d:eb:e5:a1:fd:9f:83:f4:6d:3c:37:f0: cd:e3:b9:db:37:d4:ed:62:9b:13:44:7a:1f:eb:5a: 49:29:63:e2:eb:2a:35:f0:de:58:83:09:04:1d:20: 8d:1c:a4:d3:31:7e:16:a6:97:af:b8:aa:b4:c4:01: 8c:ce:e1:9c:3c:8f:d7:4c:f7:c9:86:8c:df:be:ff: 35:76:d3:3a:29:37:90:d4:f9:1b:37:25:26:c7:22: 07:5a:65:c2:26:df:cd:b9:02:86:d8:c6:08:7e:21: 0d:a6:c1:a0:96:32:34:9a:db:fb:69:92:39:5d:86: ee:eb:72:6c:30:8b:9f:3a:50:1c:15:e3:a3:95:c7: b3:a8:69:93:11:a1:89:d4:00:4e:d4:d9:55:62:f2: 24:8a:c1:50:4d:7a:fc:85:ec:29:e0:ce:bb:64:d0: 71:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:84:C4:55:04:F4:82:95:4A:F6:CE:AF:AD:54:14:64:8B:F5:47:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/03dc55df-9ce0-3afe-a7b3-21389792cc78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl X509v3 Authority Key Identifier: keyid:50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer sbgp-ipAddrBlock: critical IPv4: 142.75.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:aa:47:24:e5:d4:53:96:62:af:ed:fe:b2:5e:b1:10:e4:8c: 77:21:bc:1b:57:cb:33:33:e8:76:14:7e:1e:58:48:92:2d:a1: 02:6b:46:9c:1f:f4:7a:31:6d:b6:1e:3e:5e:9f:1d:a5:3c:c1: a3:1f:47:43:18:ea:f3:3a:0c:de:56:c0:a3:3c:cc:33:c5:34: 5e:e6:02:04:c0:4c:1c:6f:f0:8d:e1:8e:4f:b4:7b:0d:c5:73: 3c:52:ad:f2:34:00:91:ff:b5:f2:3f:54:1f:e0:b0:15:15:0c: 7b:f4:d3:d4:af:13:55:c7:d0:46:ab:75:a8:71:40:82:18:7d: 45:27:68:51:2b:97:eb:41:a2:d7:ff:28:67:b5:6f:86:cc:c2: dc:a2:55:af:83:28:c9:76:b4:48:d5:db:c7:2e:05:d4:65:27: e0:2f:d4:6d:a3:63:83:dd:7e:45:0f:8d:1f:ec:a9:aa:86:ad: 5b:eb:68:04:8f:21:c7:3d:db:91:28:63:97:89:16:e2:ab:86: 68:40:38:a1:d8:e8:88:53:9d:79:af:6e:b7:ec:00:92:8b:90: ef:ef:43:2b:cb:32:73:7c:63:9b:f1:04:b4:2e:ad:65:dd:bc: 32:b9:b9:df:01:48:49:7c:c1:25:bf:3b:06:e0:91:be:4a:90: 99:d1:5d:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8QKtGhzZwqec4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFlYmRlMzctMjQ2MS00NDA5LTk2ZTEtYTcyMGVkYmU4 MGE3MB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk M2VmMTNlMTQtOGVhMS00YjE1LWE3NzEtMjczNjIzY2M5MzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCNm1gRuDS9KikC+PAJlYjnxSwLgv5wjkrTL 31j7V+Wik/LAP7xOMD2JokTkRFo9p6YCqYQ2XOQ+JNyPHlMdGof5eXyYxYj+hy/h ECPHDVOv1ckArTHGH4zVTkYt6+Wh/Z+D9G08N/DN47nbN9TtYpsTRHof61pJKWPi 6yo18N5YgwkEHSCNHKTTMX4WppevuKq0xAGMzuGcPI/XTPfJhozfvv81dtM6KTeQ 1PkbNyUmxyIHWmXCJt/NuQKG2MYIfiENpsGgljI0mtv7aZI5XYbu63JsMIufOlAc FeOjlcezqGmTEaGJ1ABO1NlVYvIkisFQTXr8hewp4M67ZNBxmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOExFUE9IKVSvbOr61UFGSL9UdHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYWVi ZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIwZWRiZTgwYTcvMDNkYzU1ZGYtOWNlMC0z YWZlLWE3YjMtMjEzODk3OTJjYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmFlYmRlMzctMjQ2MS00NDA5LTk2 ZTEtYTcyMGVkYmU4MGE3L2JhZWJkZTM3LTI0NjEtNDQwOS05NmUxLWE3MjBlZGJl ODBhNy5jcmwwHwYDVR0jBBgwFoAUUDZNFsS1qHZodij63f6yFPBDAOEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYWViZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIw ZWRiZTgwYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjksYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWqRyTl1FOWYq/t/rJesRDkjHchvBtXyzMz6HYUfh5YSJItoQJrRpwf 9HoxbbYePl6fHaU8waMfR0MY6vM6DN5WwKM8zDPFNF7mAgTATBxv8I3hjk+0ew3F czxSrfI0AJH/tfI/VB/gsBUVDHv009SvE1XH0EardahxQIIYfUUnaFErl+tBotf/ KGe1b4bMwtyiVa+DKMl2tEjV28cuBdRlJ+Av1G2jY4PdfkUPjR/sqaqGrVvraASP Icc925EoY5eJFuKrhmhAOKHY6IhTnXmvbrfsAJKLkO/vQyvLMnN8Y5vxBLQurWXd vDK5ud8BSEl8wSW/Owbgkb5KkJnRXXw= -----END CERTIFICATE-----Generated at Thu Aug 7 14:48:21 2025 by rpki-client