$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/75ee1ecc-de7c-3a41-be3a-7f492006d956.roa File: 75ee1ecc-de7c-3a41-be3a-7f492006d956.roa (raw, json) Hash identifier: d7hnN3E0yRrMIHA3Xgla6LuUn9m78mWtLr0eqabAGu4= Subject key identifier: DE:A3:BA:01:DA:CD:A0:28:47:02:B2:13:69:C4:84:85:7D:0F:A9:B3 Certificate issuer: /CN=baebde37-2461-4409-96e1-a720edbe80a7 Certificate serial: 010D0C9F4328584A560049C938A4B31FAF5811A0 Authority key identifier: 50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/75ee1ecc-de7c-3a41-be3a-7f492006d956.roa Signing time: Sat 28 Jun 2025 01:00:48 +0000 ROA not before: Sat 28 Jun 2025 01:00:48 +0000 ROA not after: Fri 26 Sep 2025 01:00:48 +0000 asID: 6524 IP address blocks: 74.112.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:56:00:49:c9:38:a4:b3:1f:af:58:11:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baebde37-2461-4409-96e1-a720edbe80a7 Validity Not Before: Jun 28 01:00:48 2025 GMT Not After : Sep 26 01:00:48 2025 GMT Subject: CN=603ddee2-2958-4038-99a6-bef3b164fb29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b2:c4:0e:00:1a:60:97:b9:90:d0:35:27:99: 91:af:1d:de:c8:e8:a8:c5:bc:98:37:17:39:54:7d: 53:eb:21:a3:4d:84:67:e7:d5:1e:51:b2:54:ed:87: 7a:30:76:e1:71:42:43:c2:43:f6:a2:cc:cc:f4:29: 25:dc:84:92:33:54:14:e5:4c:30:94:51:8b:1a:bb: c9:37:dc:66:50:c4:d5:3d:12:98:9d:11:03:ec:82: bb:3d:2d:a9:7f:3c:ae:17:67:26:60:0a:81:45:49: 15:95:38:7d:f3:dd:53:a3:4f:41:5a:cd:96:5c:72: 78:91:8e:a7:b0:a7:76:13:06:d7:df:93:6e:1a:08: 46:f2:75:01:17:a8:fd:65:0c:68:94:2d:fb:63:ff: b1:91:54:38:91:c1:9c:b2:20:d7:74:26:7c:1e:a8: 67:d3:5e:8a:40:5d:2f:f9:66:80:0c:69:c6:cf:f4: 49:12:57:a1:6b:90:92:a7:1c:2c:0a:37:14:89:a2: 77:74:6a:af:44:47:07:84:cc:89:0c:36:45:9e:d7: 77:ba:44:f4:a6:e9:6c:cc:b5:41:73:47:0b:39:8e: 34:90:d8:1c:92:5f:e7:b6:64:e3:0f:31:c2:83:da: c8:d6:ac:c8:88:95:28:e5:30:13:0d:5f:05:fe:e5: 99:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A3:BA:01:DA:CD:A0:28:47:02:B2:13:69:C4:84:85:7D:0F:A9:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/75ee1ecc-de7c-3a41-be3a-7f492006d956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl X509v3 Authority Key Identifier: keyid:50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer sbgp-ipAddrBlock: critical IPv4: 74.112.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:1d:3b:a1:7c:65:83:cc:11:4c:d6:bc:df:a5:9d:b6:56:3f: 7f:06:c4:81:c2:a6:16:c1:ee:b5:91:67:d9:25:11:18:29:51: d8:4d:87:a0:8b:cb:5f:ff:23:9c:10:0e:da:f9:1a:82:5c:c6: 92:77:cd:b2:27:74:3e:9c:cd:df:07:58:cd:06:6c:92:f9:ab: b1:ae:7d:b4:6b:58:e5:0d:fc:59:99:32:b5:ea:ff:0c:67:96: c9:4e:a5:5b:21:94:9d:1b:a8:fc:f5:ad:61:26:5b:f0:2e:63: f7:6a:1b:f7:2d:13:18:27:6a:8d:5a:13:fe:1b:07:e4:2f:0b: da:00:da:7e:eb:3f:e4:c7:eb:4d:b2:88:6d:b8:58:0c:a1:c7: 44:46:30:10:b8:28:d5:eb:05:45:8b:42:dc:99:14:2b:90:c3: 9a:0d:b8:16:01:31:74:bd:be:4c:81:89:d6:63:b5:3f:04:75: 96:d4:17:d3:96:a0:0e:52:6f:0a:bf:4f:d3:b7:a9:21:db:26: 9c:e7:11:96:f1:46:a3:2e:ac:cd:ec:d7:0d:79:be:fd:88:ab: 62:27:14:cf:82:ff:62:ac:d7:99:da:76:79:d4:be:d2:de:92: b1:04:7e:7a:54:d0:eb:cd:3a:dc:9b:d6:fa:54:6a:c0:ec:dc: aa:96:65:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpWAEnJOKSzH69YEaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFlYmRlMzctMjQ2MS00NDA5LTk2ZTEtYTcyMGVkYmU4 MGE3MB4XDTI1MDYyODAxMDA0OFoXDTI1MDkyNjAxMDA0OFowLzEtMCsGA1UEAxMk NjAzZGRlZTItMjk1OC00MDM4LTk5YTYtYmVmM2IxNjRmYjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLLEDgAaYJe5kNA1J5mRrx3eyOioxbyYNxc5 VH1T6yGjTYRn59UeUbJU7Yd6MHbhcUJDwkP2oszM9Ckl3ISSM1QU5UwwlFGLGrvJ N9xmUMTVPRKYnRED7IK7PS2pfzyuF2cmYAqBRUkVlTh9891To09BWs2WXHJ4kY6n sKd2EwbX35NuGghG8nUBF6j9ZQxolC37Y/+xkVQ4kcGcsiDXdCZ8Hqhn016KQF0v +WaADGnGz/RJEleha5CSpxwsCjcUiaJ3dGqvREcHhMyJDDZFntd3ukT0pulszLVB c0cLOY40kNgckl/ntmTjDzHCg9rI1qzIiJUo5TATDV8F/uWZZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6jugHazaAoRwKyE2nEhIV9D6mzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYWVi ZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIwZWRiZTgwYTcvNzVlZTFlY2MtZGU3Yy0z YTQxLWJlM2EtN2Y0OTIwMDZkOTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmFlYmRlMzctMjQ2MS00NDA5LTk2 ZTEtYTcyMGVkYmU4MGE3L2JhZWJkZTM3LTI0NjEtNDQwOS05NmUxLWE3MjBlZGJl ODBhNy5jcmwwHwYDVR0jBBgwFoAUUDZNFsS1qHZodij63f6yFPBDAOEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYWViZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIw ZWRiZTgwYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSnCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4dO6F8ZYPMEUzWvN+lnbZWP38GxIHCphbB7rWRZ9klERgpUdhNh6CL y1//I5wQDtr5GoJcxpJ3zbIndD6czd8HWM0GbJL5q7GufbRrWOUN/FmZMrXq/wxn lslOpVshlJ0bqPz1rWEmW/AuY/dqG/ctExgnao1aE/4bB+QvC9oA2n7rP+TH602y iG24WAyhx0RGMBC4KNXrBUWLQtyZFCuQw5oNuBYBMXS9vkyBidZjtT8EdZbUF9OW oA5Sbwq/T9O3qSHbJpznEZbxRqMurM3s1w15vv2Iq2InFM+C/2Ks15nadnnUvtLe krEEfnpU0OvNOtyb1vpUasDs3KqWZSA= -----END CERTIFICATE-----Generated at Tue Jul 1 19:37:26 2025 by rpki-client