$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/a81edad8-f2ca-31db-b601-efd107d11bde.roa File: a81edad8-f2ca-31db-b601-efd107d11bde.roa (raw, json) Hash identifier: qhAKgHDv+1TK6reTmr9af1jsAPwUeZw2Pj0XR9uC0fk= Subject key identifier: DF:72:FF:79:45:FF:2B:D4:80:51:B4:B6:E9:E3:29:91:50:4B:E8:28 Certificate issuer: /CN=baebde37-2461-4409-96e1-a720edbe80a7 Certificate serial: 010D0C9F4328584B004BEF6F548F2E78B7FF2A00 Authority key identifier: 50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/a81edad8-f2ca-31db-b601-efd107d11bde.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 26704 IP address blocks: 150.105.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:ef:6f:54:8f:2e:78:b7:ff:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baebde37-2461-4409-96e1-a720edbe80a7 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=927aa052-606e-4c30-9f27-97e3d1553ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:04:fe:8d:41:9d:19:3f:29:28:75:6a:04:e0: 10:b2:14:26:36:5a:a5:c5:29:16:27:21:b3:e5:63: 10:a0:0e:43:f9:5c:5d:5d:39:cd:97:15:62:42:90: 20:49:66:fe:4d:61:60:fb:f4:37:00:ac:35:e5:39: 2f:7d:d4:49:73:5c:91:8a:f7:9c:58:3f:3b:bd:ab: 04:ae:58:41:d5:1c:be:6b:46:ba:d8:91:d0:18:03: af:96:95:7f:59:de:72:4e:46:cb:fd:f8:99:74:cc: f7:c0:a4:d9:3d:9d:30:64:d5:70:49:da:54:38:42: 15:03:53:b3:bb:64:91:41:5a:f4:1a:5a:07:3e:65: 6e:87:b8:c7:6f:a4:54:e4:f5:32:52:b7:28:86:10: 82:76:0a:5f:d9:c3:39:bd:49:05:77:67:ce:43:ff: 76:08:c0:c5:21:de:09:88:6f:be:41:2f:06:f6:ab: 81:36:c4:55:6f:d8:1f:9e:4b:7b:60:c2:c4:60:a5: 92:c0:27:85:0f:d8:59:98:92:61:31:65:ca:3e:ce: 66:1d:a0:b7:ce:a9:62:39:4b:6f:e9:79:1b:71:f4: 94:9a:ef:69:9a:00:13:3b:43:25:8f:d2:5a:fb:1e: 0f:a8:a3:ac:52:6c:6e:61:42:da:4e:81:c6:e1:cd: 62:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:72:FF:79:45:FF:2B:D4:80:51:B4:B6:E9:E3:29:91:50:4B:E8:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/a81edad8-f2ca-31db-b601-efd107d11bde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl X509v3 Authority Key Identifier: keyid:50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer sbgp-ipAddrBlock: critical IPv4: 150.105.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:39:de:01:2c:b0:bc:0b:8c:5f:7b:2a:85:5b:9d:bb:bd:01: 4f:b4:dd:a5:df:20:bd:a2:50:12:f7:75:55:d0:6c:22:58:c6: 49:74:f1:d4:0a:88:ca:d7:d7:99:9e:51:97:bc:93:79:f1:1c: 5d:af:61:db:37:52:8b:68:59:10:28:51:0b:30:af:a1:ec:24: a0:df:3a:11:ba:26:02:ed:53:54:6f:da:50:72:e1:ee:f0:11: fa:6c:9c:cf:55:50:b5:a7:0b:a9:f7:19:6e:89:f9:5e:e1:ed: bd:5e:2a:a7:ac:06:4a:fc:89:eb:0d:f2:1d:88:52:bd:8b:bb: 84:64:e7:58:4b:82:5f:36:47:41:c3:14:1d:7d:01:fc:57:22: 42:45:a0:cf:40:2e:b7:80:46:2e:43:be:e0:4e:5e:9d:04:55: e9:42:89:b3:ac:af:d9:2f:e7:60:b4:5b:f6:1a:da:73:ef:0a: 48:ea:3f:c3:4a:42:1c:2e:77:9e:20:4f:7e:16:50:7b:ac:c1: 75:9f:d2:44:5e:2f:25:b4:97:ab:fb:64:62:90:ca:5f:34:69: b6:56:82:6e:37:75:3d:1f:49:38:1b:c1:29:69:2a:9b:ca:84: a1:44:2e:05:16:9b:9f:9e:66:2a:50:1e:cc:6f:bd:44:c7:c9: 85:eb:0f:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+9vVI8ueLf/KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFlYmRlMzctMjQ2MS00NDA5LTk2ZTEtYTcyMGVkYmU4 MGE3MB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk OTI3YWEwNTItNjA2ZS00YzMwLTlmMjctOTdlM2QxNTUzZWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAT+jUGdGT8pKHVqBOAQshQmNlqlxSkWJyGz 5WMQoA5D+VxdXTnNlxViQpAgSWb+TWFg+/Q3AKw15TkvfdRJc1yRivecWD87vasE rlhB1Ry+a0a62JHQGAOvlpV/Wd5yTkbL/fiZdMz3wKTZPZ0wZNVwSdpUOEIVA1Oz u2SRQVr0GloHPmVuh7jHb6RU5PUyUrcohhCCdgpf2cM5vUkFd2fOQ/92CMDFId4J iG++QS8G9quBNsRVb9gfnkt7YMLEYKWSwCeFD9hZmJJhMWXKPs5mHaC3zqliOUtv 6XkbcfSUmu9pmgATO0Mlj9Ja+x4PqKOsUmxuYULaToHG4c1ixQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9y/3lF/yvUgFG0tunjKZFQS+goMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYWVi ZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIwZWRiZTgwYTcvYTgxZWRhZDgtZjJjYS0z MWRiLWI2MDEtZWZkMTA3ZDExYmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmFlYmRlMzctMjQ2MS00NDA5LTk2 ZTEtYTcyMGVkYmU4MGE3L2JhZWJkZTM3LTI0NjEtNDQwOS05NmUxLWE3MjBlZGJl ODBhNy5jcmwwHwYDVR0jBBgwFoAUUDZNFsS1qHZodij63f6yFPBDAOEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYWViZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIw ZWRiZTgwYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlmkUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE853gEssLwLjF97KoVbnbu9AU+03aXfIL2iUBL3dVXQbCJYxkl08dQK iMrX15meUZe8k3nxHF2vYds3UotoWRAoUQswr6HsJKDfOhG6JgLtU1Rv2lBy4e7w EfpsnM9VULWnC6n3GW6J+V7h7b1eKqesBkr8iesN8h2IUr2Lu4Rk51hLgl82R0HD FB19AfxXIkJFoM9ALreARi5DvuBOXp0EVelCibOsr9kv52C0W/Ya2nPvCkjqP8NK Qhwud54gT34WUHuswXWf0kReLyW0l6v7ZGKQyl80abZWgm43dT0fSTgbwSlpKpvK hKFELgUWm5+eZipQHsxvvUTHyYXrDyw= -----END CERTIFICATE-----Generated at Wed Nov 5 17:51:47 2025 by rpki-client