$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/2cda7570-a5a8-3633-a18c-92ee982e5a67.roa File: 2cda7570-a5a8-3633-a18c-92ee982e5a67.roa (raw, json) Hash identifier: G0rYdWuuVDVOIkRuo1ie4QuBCEh1t46CeAi55kGsR5M= Subject key identifier: 09:82:96:6C:05:F7:42:80:92:72:11:8B:21:E7:C5:F5:39:1D:66:FC Certificate issuer: /CN=baebde37-2461-4409-96e1-a720edbe80a7 Certificate serial: 010D0C9F4328584B4A47206560831A14967F1D80 Authority key identifier: 50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/2cda7570-a5a8-3633-a18c-92ee982e5a67.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 27495 IP address blocks: 137.236.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:20:65:60:83:1a:14:96:7f:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baebde37-2461-4409-96e1-a720edbe80a7 Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=e9eaf828-edd3-410a-b112-73dc7477393d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:60:5a:f5:a4:71:28:4e:7e:1d:cb:4d:60:b1: 77:82:02:1a:26:d3:60:3a:f3:3f:9d:3c:eb:b7:bb: 7a:ab:84:f3:4b:94:66:13:03:bb:22:10:86:e7:b6: 1f:37:45:8b:f6:b3:32:65:9c:a6:53:c4:bd:1a:bb: 49:4f:ec:bd:4b:e0:86:97:18:38:89:81:19:23:8b: 34:91:e2:a4:8d:1d:10:02:43:bc:f6:6e:e3:99:e2: 0d:17:a5:e8:43:3e:37:53:d2:7e:7f:01:cf:55:78: 23:12:4b:1f:96:5a:03:78:05:fc:74:c9:53:80:cd: 6e:14:1c:68:d5:69:88:d6:df:08:fb:1b:9d:9a:64: f3:86:20:1e:04:3b:e6:f0:4c:55:21:82:fc:9d:96: 41:aa:25:3d:97:ea:84:13:c3:d7:99:bf:9d:72:5a: 41:20:75:6c:2f:72:5f:13:17:db:2e:a1:63:c0:66: 55:c9:65:4e:c8:0d:1c:24:23:9f:5c:92:82:70:8a: 03:cd:0e:db:e5:46:2a:43:d4:01:a7:1f:d9:23:4f: 28:2c:d2:de:be:ab:b8:90:85:45:a6:73:bc:4d:57: 18:45:97:1d:d9:f9:4e:03:b0:c9:17:d4:45:fc:77: b6:51:aa:bf:dd:02:45:92:c4:fa:be:93:ba:53:91: 48:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:82:96:6C:05:F7:42:80:92:72:11:8B:21:E7:C5:F5:39:1D:66:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/2cda7570-a5a8-3633-a18c-92ee982e5a67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl X509v3 Authority Key Identifier: keyid:50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer sbgp-ipAddrBlock: critical IPv4: 137.236.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:8e:52:03:45:18:50:d4:fa:2a:4c:88:b5:7a:a0:da:77:d3: 06:19:42:b0:e4:cb:ed:64:9e:68:01:cb:7a:ec:ed:45:6d:87: 4b:1b:90:08:80:c7:29:83:e8:6a:e1:0f:db:30:7b:6d:f8:2d: 63:04:3e:a8:3e:03:93:d2:aa:c9:b3:ec:9a:ef:96:82:45:62: 07:a3:dc:61:77:b8:d9:53:71:9e:a0:65:bf:a2:96:8e:23:c7: 53:24:bf:d2:1b:b5:a6:d2:1c:f3:c0:30:16:4d:2a:05:42:0d: d8:df:0a:51:bb:39:5c:df:ed:0c:ca:d6:7f:e2:77:6d:df:74: 80:0b:cd:af:a4:70:dc:06:8e:69:04:54:0d:05:3d:09:fa:fc: 8a:63:b5:3a:73:7e:ea:cf:c6:10:91:35:17:79:a3:98:bc:90: d4:77:bf:09:0c:0a:84:bd:62:0e:12:77:11:ca:6d:22:ee:82: d9:2e:4b:50:87:9d:f6:56:d8:33:be:53:24:03:bb:a6:31:e4: a1:a7:3a:b3:61:9c:33:ba:46:02:eb:c0:7b:2d:4d:10:ee:6d: b2:df:05:d9:86:ff:4b:08:09:3f:d7:5d:79:b3:99:98:f3:03: 31:6a:62:ae:14:eb:c3:99:59:81:cf:ae:ee:7e:5f:53:8c:6d: 07:4d:74:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRyBlYIMaFJZ/HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFlYmRlMzctMjQ2MS00NDA5LTk2ZTEtYTcyMGVkYmU4 MGE3MB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk ZTllYWY4MjgtZWRkMy00MTBhLWIxMTItNzNkYzc0NzczOTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WBa9aRxKE5+HctNYLF3ggIaJtNgOvM/nTzr t7t6q4TzS5RmEwO7IhCG57YfN0WL9rMyZZymU8S9GrtJT+y9S+CGlxg4iYEZI4s0 keKkjR0QAkO89m7jmeINF6XoQz43U9J+fwHPVXgjEksflloDeAX8dMlTgM1uFBxo 1WmI1t8I+xudmmTzhiAeBDvm8ExVIYL8nZZBqiU9l+qEE8PXmb+dclpBIHVsL3Jf ExfbLqFjwGZVyWVOyA0cJCOfXJKCcIoDzQ7b5UYqQ9QBpx/ZI08oLNLevqu4kIVF pnO8TVcYRZcd2flOA7DJF9RF/He2Uaq/3QJFksT6vpO6U5FIAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmClmwF90KAknIRiyHnxfU5HWb8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYWVi ZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIwZWRiZTgwYTcvMmNkYTc1NzAtYTVhOC0z NjMzLWExOGMtOTJlZTk4MmU1YTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmFlYmRlMzctMjQ2MS00NDA5LTk2 ZTEtYTcyMGVkYmU4MGE3L2JhZWJkZTM3LTI0NjEtNDQwOS05NmUxLWE3MjBlZGJl ODBhNy5jcmwwHwYDVR0jBBgwFoAUUDZNFsS1qHZodij63f6yFPBDAOEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYWViZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIw ZWRiZTgwYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBieyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuOUgNFGFDU+ipMiLV6oNp30wYZQrDky+1knmgBy3rs7UVth0sbkAiA xymD6GrhD9swe234LWMEPqg+A5PSqsmz7JrvloJFYgej3GF3uNlTcZ6gZb+ilo4j x1Mkv9IbtabSHPPAMBZNKgVCDdjfClG7OVzf7QzK1n/id23fdIALza+kcNwGjmkE VA0FPQn6/IpjtTpzfurPxhCRNRd5o5i8kNR3vwkMCoS9Yg4SdxHKbSLugtkuS1CH nfZW2DO+UyQDu6Yx5KGnOrNhnDO6RgLrwHstTRDubbLfBdmG/0sICT/XXXmzmZjz AzFqYq4U68OZWYHPru5+X1OMbQdNdBE= -----END CERTIFICATE-----Generated at Wed Nov 5 15:10:34 2025 by rpki-client