$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/2cda7570-a5a8-3633-a18c-92ee982e5a67.roa File: 2cda7570-a5a8-3633-a18c-92ee982e5a67.roa (raw, json) Hash identifier: fQkxhwPDp1+gY03qSJuVWsARsoCBjC47tD1gagZ1QoM= Subject key identifier: 73:A7:92:01:B1:69:08:1C:72:DF:88:6F:FC:E2:0A:64:DC:A3:0F:0D Certificate issuer: /CN=baebde37-2461-4409-96e1-a720edbe80a7 Certificate serial: 010D0C9F4328584DEB15ED5FBC6BF2A794CC8E80 Authority key identifier: 50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/2cda7570-a5a8-3633-a18c-92ee982e5a67.roa Signing time: Fri 22 May 2026 13:00:31 +0000 ROA not before: Fri 22 May 2026 13:00:31 +0000 ROA not after: Thu 20 Aug 2026 13:00:31 +0000 asID: 27495 IP address blocks: 137.236.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:eb:15:ed:5f:bc:6b:f2:a7:94:cc:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baebde37-2461-4409-96e1-a720edbe80a7 Validity Not Before: May 22 13:00:31 2026 GMT Not After : Aug 20 13:00:31 2026 GMT Subject: CN=fa849328-90a9-4fac-9b3b-1924e25537c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f0:26:a4:fb:b0:7b:82:e5:70:64:70:22:08: 2f:00:07:9f:48:be:98:d6:a1:94:a2:33:73:4c:d1: d4:16:11:54:de:86:c5:9f:38:eb:12:30:31:ec:1d: 39:03:e3:75:a5:36:85:06:4e:ec:72:d0:cc:ca:c5: a4:c1:03:a6:dd:7e:41:4d:64:62:95:66:ba:8f:7f: 62:77:2c:dc:f0:22:02:8c:b9:07:73:23:3a:b3:ff: 55:55:fb:17:b4:5d:24:c3:d5:c1:b2:64:0f:05:ba: d6:41:2d:c8:ab:93:b0:cd:52:a6:bd:af:1c:4a:e9: 5f:9e:09:5b:a2:9e:75:ac:c9:8d:d3:70:4b:e3:86: 84:e1:a7:aa:00:5e:38:5e:c2:16:bd:b0:c6:f3:8e: 2b:8a:9d:77:54:41:8d:0b:b6:0f:04:f3:b5:58:79: a5:6d:4b:09:99:9a:ee:62:99:f7:20:33:b7:ae:2b: 76:c8:50:a5:33:c4:b0:49:c2:14:32:93:69:b1:36: 09:f3:34:9d:69:9f:83:1e:9b:96:92:c9:10:a1:e5: 02:d2:d0:2d:c8:a4:e0:be:de:99:40:62:20:dc:c9: 75:ce:15:90:59:07:a5:49:b4:fe:71:4d:26:9c:64: c8:38:0c:04:74:15:33:59:89:f9:cd:73:68:b6:72: d8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A7:92:01:B1:69:08:1C:72:DF:88:6F:FC:E2:0A:64:DC:A3:0F:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/2cda7570-a5a8-3633-a18c-92ee982e5a67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl X509v3 Authority Key Identifier: keyid:50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer sbgp-ipAddrBlock: critical IPv4: 137.236.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:30:52:eb:4b:34:c3:f0:f1:ce:1e:54:73:25:cc:9b:5b:b5: 3d:e7:c7:ee:e1:f6:98:9f:34:9b:1a:1c:2a:72:3a:a2:62:04: 3d:76:97:d1:af:ab:38:1d:e5:18:2b:ea:e8:58:dc:e1:47:5e: a3:3d:a0:46:88:2e:a5:6f:fc:e8:11:ae:05:e9:ac:fe:8d:4d: 47:b3:09:66:8f:28:e0:93:eb:ef:5f:1b:37:8b:d5:6b:a6:7a: db:90:b5:f4:00:5d:73:f3:f8:c3:75:19:0e:98:5b:1d:ea:9a: 9e:01:ed:1b:8f:57:cb:03:df:fd:99:17:0c:45:fa:51:57:26: 46:6e:b9:74:51:11:68:5c:e9:47:9d:a1:40:1a:62:fb:a8:b2: df:1f:7b:3a:c0:a9:7f:d0:0b:e4:82:e5:af:64:bf:75:6d:29: 79:07:2d:e3:ed:f4:32:c5:ac:93:e3:03:e8:da:4a:f1:44:48: 20:90:f8:32:d9:4a:d8:a2:37:e5:ea:b8:51:32:4f:e6:b9:bb: 81:20:e2:d7:5d:1f:4e:68:7d:89:3b:65:1d:b5:3f:c5:12:90: 2a:27:fd:23:53:d0:07:d9:21:81:b4:4d:8c:35:ee:d8:6c:27: 2a:6b:9c:54:44:90:f4:0f:16:d9:9d:ff:40:24:41:53:60:0e: fb:63:20:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3rFe1fvGvyp5TMjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFlYmRlMzctMjQ2MS00NDA5LTk2ZTEtYTcyMGVkYmU4 MGE3MB4XDTI2MDUyMjEzMDAzMVoXDTI2MDgyMDEzMDAzMVowLzEtMCsGA1UEAxMk ZmE4NDkzMjgtOTBhOS00ZmFjLTliM2ItMTkyNGUyNTUzN2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/AmpPuwe4LlcGRwIggvAAefSL6Y1qGUojNz TNHUFhFU3obFnzjrEjAx7B05A+N1pTaFBk7sctDMysWkwQOm3X5BTWRilWa6j39i dyzc8CICjLkHcyM6s/9VVfsXtF0kw9XBsmQPBbrWQS3Iq5OwzVKmva8cSulfnglb op51rMmN03BL44aE4aeqAF44XsIWvbDG844rip13VEGNC7YPBPO1WHmlbUsJmZru Ypn3IDO3rit2yFClM8SwScIUMpNpsTYJ8zSdaZ+DHpuWkskQoeUC0tAtyKTgvt6Z QGIg3Ml1zhWQWQelSbT+cU0mnGTIOAwEdBUzWYn5zXNotnLY2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOnkgGxaQgcct+Ib/ziCmTcow8NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYWVi ZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIwZWRiZTgwYTcvMmNkYTc1NzAtYTVhOC0z NjMzLWExOGMtOTJlZTk4MmU1YTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmFlYmRlMzctMjQ2MS00NDA5LTk2 ZTEtYTcyMGVkYmU4MGE3L2JhZWJkZTM3LTI0NjEtNDQwOS05NmUxLWE3MjBlZGJl ODBhNy5jcmwwHwYDVR0jBBgwFoAUUDZNFsS1qHZodij63f6yFPBDAOEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYWViZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIw ZWRiZTgwYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBieyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkwUutLNMPw8c4eVHMlzJtbtT3nx+7h9pifNJsaHCpyOqJiBD12l9Gv qzgd5Rgr6uhY3OFHXqM9oEaILqVv/OgRrgXprP6NTUezCWaPKOCT6+9fGzeL1Wum etuQtfQAXXPz+MN1GQ6YWx3qmp4B7RuPV8sD3/2ZFwxF+lFXJkZuuXRREWhc6Ued oUAaYvuost8fezrAqX/QC+SC5a9kv3VtKXkHLePt9DLFrJPjA+jaSvFESCCQ+DLZ StiiN+XquFEyT+a5u4Eg4tddH05ofYk7ZR21P8USkCon/SNT0AfZIYG0TYw17ths JyprnFREkPQPFtmd/0AkQVNgDvtjIOA= -----END CERTIFICATE-----Generated at Sat Jun 13 20:38:04 2026 by rpki-client