$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/2cda7570-a5a8-3633-a18c-92ee982e5a67.roa File: 2cda7570-a5a8-3633-a18c-92ee982e5a67.roa (raw, json) Hash identifier: R1RvS4XtxYLilvLUy08K42Rr4AzcgAhN/7ptZMrHJhI= Subject key identifier: 46:F9:7B:85:EC:C9:F4:C8:4F:24:31:30:4F:50:24:E7:0F:D1:97:F3 Certificate issuer: /CN=baebde37-2461-4409-96e1-a720edbe80a7 Certificate serial: 010D0C9F432858498A3464E5471B00E3A6442180 Authority key identifier: 50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/2cda7570-a5a8-3633-a18c-92ee982e5a67.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 27495 IP address blocks: 137.236.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:64:e5:47:1b:00:e3:a6:44:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baebde37-2461-4409-96e1-a720edbe80a7 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=787a9d68-acf8-45e5-9d05-d1ec908dd905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7a:76:f8:1b:5f:e1:82:cc:ac:68:4c:cd:8d: 0b:ca:18:18:e6:3f:1a:6a:e1:cb:6f:a2:32:cd:16: dd:fd:9f:04:0c:8a:f1:5d:9c:67:11:55:cf:fe:c0: 3b:57:bf:a8:b5:d9:ba:25:bb:1c:fb:43:c2:e0:d0: 19:80:f3:89:70:3a:3f:eb:ed:07:33:33:08:c3:49: 67:5e:14:bb:c4:c9:0d:dc:91:fd:3f:8d:f7:f8:a6: e4:06:c7:bb:99:73:e6:89:3a:71:d7:ff:72:ee:6b: cc:68:ba:2d:80:2f:a0:ea:9f:30:bb:60:7f:80:8e: 2a:db:a0:51:be:d0:be:68:a0:09:ca:ab:cc:19:ad: 2f:0c:9c:87:5c:e4:8c:fa:3a:fc:89:62:25:4f:89: e2:23:46:9d:34:27:2a:62:d5:cb:fd:26:78:4b:e5: 0b:69:38:bd:d5:ea:d8:21:88:c5:63:e3:1a:73:95: 10:a6:01:8a:ea:73:71:6e:7a:fc:a1:4a:cf:9b:31: 78:d8:56:f2:b3:7d:7b:be:90:7d:2e:03:b0:14:c0: 5b:2b:b8:78:3e:67:ce:aa:92:59:6c:52:d7:58:72: 21:01:30:34:05:8e:ae:98:54:e4:d3:91:0e:01:c3: 4e:95:5d:03:cc:5a:6f:46:cb:13:fc:57:4d:89:57: eb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F9:7B:85:EC:C9:F4:C8:4F:24:31:30:4F:50:24:E7:0F:D1:97:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/2cda7570-a5a8-3633-a18c-92ee982e5a67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl X509v3 Authority Key Identifier: keyid:50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer sbgp-ipAddrBlock: critical IPv4: 137.236.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:7c:8c:a5:78:07:89:64:cc:c7:b3:6e:45:b9:cf:5b:f6:c2: b6:7c:d2:cc:a9:cc:31:3d:04:c4:60:97:cb:24:be:b3:20:34: 23:60:6a:43:23:15:02:6e:54:1c:ff:a4:f6:06:57:03:49:72: f6:b5:db:2c:b9:96:4e:02:37:20:87:dc:a8:39:e4:c7:ce:47: 94:31:62:50:e8:a7:45:ca:e0:ce:7b:7d:1f:e5:55:f8:d6:05: b3:e3:bc:71:e9:f9:bd:34:1a:a6:1e:93:f3:a4:ef:1f:4b:e0: ef:30:68:17:6d:f5:e3:e3:7f:ef:99:d3:05:84:3a:23:47:cf: 5c:04:00:ab:01:17:66:17:c5:e4:86:a9:d9:e0:8b:9a:0b:8a: 2f:29:d2:bf:28:97:46:46:58:c7:97:80:6b:52:6c:2d:9c:65: 6a:ee:17:8f:52:8c:c9:23:db:42:6a:5b:48:3c:79:02:7f:74: fc:68:a7:b4:13:92:82:fb:79:36:62:41:dd:5f:87:d1:c3:8a: 27:3c:98:31:6d:d8:cc:9c:d9:fd:0f:5a:c0:04:61:12:19:b1: d0:57:73:85:a4:65:7e:32:64:af:3c:17:ac:59:53:f1:85:70: 62:6a:13:a1:2e:99:8e:54:6c:5e:11:58:9f:89:f5:4c:6f:43: ff:38:a4:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNGTlRxsA46ZEIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFlYmRlMzctMjQ2MS00NDA5LTk2ZTEtYTcyMGVkYmU4 MGE3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk Nzg3YTlkNjgtYWNmOC00NWU1LTlkMDUtZDFlYzkwOGRkOTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHp2+Btf4YLMrGhMzY0LyhgY5j8aauHLb6Iy zRbd/Z8EDIrxXZxnEVXP/sA7V7+otdm6Jbsc+0PC4NAZgPOJcDo/6+0HMzMIw0ln XhS7xMkN3JH9P433+KbkBse7mXPmiTpx1/9y7mvMaLotgC+g6p8wu2B/gI4q26BR vtC+aKAJyqvMGa0vDJyHXOSM+jr8iWIlT4niI0adNCcqYtXL/SZ4S+ULaTi91erY IYjFY+Mac5UQpgGK6nNxbnr8oUrPmzF42Fbys317vpB9LgOwFMBbK7h4PmfOqpJZ bFLXWHIhATA0BY6umFTk05EOAcNOlV0DzFpvRssT/FdNiVfrdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEb5e4XsyfTITyQxME9QJOcP0ZfzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYWVi ZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIwZWRiZTgwYTcvMmNkYTc1NzAtYTVhOC0z NjMzLWExOGMtOTJlZTk4MmU1YTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmFlYmRlMzctMjQ2MS00NDA5LTk2 ZTEtYTcyMGVkYmU4MGE3L2JhZWJkZTM3LTI0NjEtNDQwOS05NmUxLWE3MjBlZGJl ODBhNy5jcmwwHwYDVR0jBBgwFoAUUDZNFsS1qHZodij63f6yFPBDAOEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYWViZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIw ZWRiZTgwYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBieyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE98jKV4B4lkzMezbkW5z1v2wrZ80sypzDE9BMRgl8skvrMgNCNgakMj FQJuVBz/pPYGVwNJcva12yy5lk4CNyCH3Kg55MfOR5QxYlDop0XK4M57fR/lVfjW BbPjvHHp+b00GqYek/Ok7x9L4O8waBdt9ePjf++Z0wWEOiNHz1wEAKsBF2YXxeSG qdngi5oLii8p0r8ol0ZGWMeXgGtSbC2cZWruF49SjMkj20JqW0g8eQJ/dPxop7QT koL7eTZiQd1fh9HDiic8mDFt2Myc2f0PWsAEYRIZsdBXc4WkZX4yZK88F6xZU/GF cGJqE6EumY5UbF4RWJ+J9UxvQ/84pI8= -----END CERTIFICATE-----Generated at Wed Apr 30 17:24:15 2025 by rpki-client