$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/2cda7570-a5a8-3633-a18c-92ee982e5a67.roa File: 2cda7570-a5a8-3633-a18c-92ee982e5a67.roa (raw, json) Hash identifier: bPe+MVe0oh19qlnZHAOcgFtpmsFRladKYAWfeXyeqzM= Subject key identifier: 91:56:14:C5:BB:DD:81:61:8D:80:E4:6D:06:41:48:9C:6E:3E:5C:10 Certificate issuer: /CN=baebde37-2461-4409-96e1-a720edbe80a7 Certificate serial: 010D0C9F4328584D0A77A926CDCB742E8ADFC1A0 Authority key identifier: 50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/2cda7570-a5a8-3633-a18c-92ee982e5a67.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 27495 IP address blocks: 137.236.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:a9:26:cd:cb:74:2e:8a:df:c1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baebde37-2461-4409-96e1-a720edbe80a7 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=1669c3f2-a445-4702-8071-14fd903704e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:31:04:a2:a8:43:73:d2:a5:b0:a5:30:ba:1b: f3:50:cf:73:f8:0e:5c:9e:ac:27:f1:55:0d:05:51: c8:c7:7d:2d:b1:dc:9b:37:ca:c9:49:d4:e8:af:ec: 28:b1:ac:dd:61:b1:98:ea:14:b6:9b:34:37:5b:5a: 88:46:1c:4c:16:cf:e8:93:2d:1e:fd:f7:7b:24:a3: db:b8:83:1f:d7:b7:85:6e:82:e6:aa:2a:af:45:fd: f3:d5:d5:69:39:1e:29:2d:e6:aa:1f:07:66:77:8a: 11:ec:f0:c9:04:79:f5:83:cd:87:55:46:2c:ec:ad: 45:0e:50:2f:29:fb:5c:24:10:13:72:bd:bf:0a:f2: 85:a9:a5:2e:ef:d9:a8:4c:62:ef:03:c7:7e:df:20: ff:38:a8:a3:ec:df:c7:a0:41:0e:7f:4b:b0:cb:79: 23:45:c0:43:1d:dd:10:00:0e:bb:4f:ae:1f:b9:25: 86:03:1f:bb:1e:9e:1b:a2:78:c4:b0:4e:90:40:39: 71:3f:c8:5f:48:27:32:d6:97:14:05:4c:46:b5:2c: 5f:c9:2b:ff:ff:85:19:e2:52:94:c5:ff:41:d0:14: 70:43:1f:ba:a4:e5:6d:33:35:7c:08:2c:57:5e:44: 2e:e6:fb:d8:4b:d7:14:f4:ee:22:99:ea:f7:48:9d: b6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:56:14:C5:BB:DD:81:61:8D:80:E4:6D:06:41:48:9C:6E:3E:5C:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/2cda7570-a5a8-3633-a18c-92ee982e5a67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl X509v3 Authority Key Identifier: keyid:50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer sbgp-ipAddrBlock: critical IPv4: 137.236.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:21:09:a2:c7:db:c2:d6:83:38:c8:2e:44:1f:c5:dd:73:a7: ba:41:7e:42:37:39:47:2f:41:b5:8c:62:cb:d5:fb:1b:80:6d: cd:50:68:18:5b:f4:27:73:f9:e8:b7:27:05:a4:4a:25:99:0b: c0:55:8b:b0:d5:be:d7:7b:c3:ad:30:af:84:5c:2d:33:99:cd: a7:2b:f8:22:5b:f0:10:6a:5d:6e:d7:79:2c:65:38:d7:42:ec: 5e:9f:6d:1f:57:a7:47:6c:2b:9d:c6:95:77:c1:d8:ce:a3:a6: 58:c2:c4:d8:ba:a7:2f:84:5d:e1:e2:e8:50:3b:ab:98:b3:c5: e8:40:b2:c0:06:93:c1:28:1e:67:a5:cf:b0:fd:fe:90:d0:bf: bf:c5:ec:43:52:0d:25:3d:59:6d:b0:55:1e:b5:be:35:3c:62: c1:05:1b:7f:94:6d:2c:4d:9c:88:7f:dd:ee:5c:ee:ae:cc:a2: 28:35:4a:4f:04:05:c9:18:90:e5:d4:39:6d:50:e6:5a:9e:c9: 23:a7:49:b3:d6:5d:ce:9e:14:9d:5f:cc:66:7e:33:63:bf:95: 6d:9d:f5:51:b1:f9:2f:5f:78:bf:3d:3f:5a:e5:70:f3:70:dc: 54:3e:c6:b8:84:2f:ff:5e:2b:43:bc:c6:0a:bf:24:cf:16:72: 87:c4:b7:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6kmzct0LorfwaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFlYmRlMzctMjQ2MS00NDA5LTk2ZTEtYTcyMGVkYmU4 MGE3MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk MTY2OWMzZjItYTQ0NS00NzAyLTgwNzEtMTRmZDkwMzcwNGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozEEoqhDc9KlsKUwuhvzUM9z+A5cnqwn8VUN BVHIx30tsdybN8rJSdTor+wosazdYbGY6hS2mzQ3W1qIRhxMFs/oky0e/fd7JKPb uIMf17eFboLmqiqvRf3z1dVpOR4pLeaqHwdmd4oR7PDJBHn1g82HVUYs7K1FDlAv KftcJBATcr2/CvKFqaUu79moTGLvA8d+3yD/OKij7N/HoEEOf0uwy3kjRcBDHd0Q AA67T64fuSWGAx+7Hp4bonjEsE6QQDlxP8hfSCcy1pcUBUxGtSxfySv//4UZ4lKU xf9B0BRwQx+6pOVtMzV8CCxXXkQu5vvYS9cU9O4imer3SJ22qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFWFMW73YFhjYDkbQZBSJxuPlwQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYWVi ZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIwZWRiZTgwYTcvMmNkYTc1NzAtYTVhOC0z NjMzLWExOGMtOTJlZTk4MmU1YTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmFlYmRlMzctMjQ2MS00NDA5LTk2 ZTEtYTcyMGVkYmU4MGE3L2JhZWJkZTM3LTI0NjEtNDQwOS05NmUxLWE3MjBlZGJl ODBhNy5jcmwwHwYDVR0jBBgwFoAUUDZNFsS1qHZodij63f6yFPBDAOEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYWViZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIw ZWRiZTgwYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBieyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwhCaLH28LWgzjILkQfxd1zp7pBfkI3OUcvQbWMYsvV+xuAbc1QaBhb 9Cdz+ei3JwWkSiWZC8BVi7DVvtd7w60wr4RcLTOZzacr+CJb8BBqXW7XeSxlONdC 7F6fbR9Xp0dsK53GlXfB2M6jpljCxNi6py+EXeHi6FA7q5izxehAssAGk8EoHmel z7D9/pDQv7/F7ENSDSU9WW2wVR61vjU8YsEFG3+UbSxNnIh/3e5c7q7Moig1Sk8E BckYkOXUOW1Q5lqeySOnSbPWXc6eFJ1fzGZ+M2O/lW2d9VGx+S9feL89P1rlcPNw 3FQ+xriEL/9eK0O8xgq/JM8WcofEt38= -----END CERTIFICATE-----Generated at Thu Mar 26 05:59:10 2026 by rpki-client