$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/d215c1cd-afde-3025-9011-f5e36c53f7dd.roa File: d215c1cd-afde-3025-9011-f5e36c53f7dd.roa (raw, json) Hash identifier: KV2lAorzXXxZxyMgiCcQHlgqkfHPstvxDsqXGUy2Pp8= Subject key identifier: 24:E7:7A:A9:30:F6:32:0C:CA:F2:34:2C:0F:89:1E:24:F2:E8:13:6B Certificate issuer: /CN=baebde37-2461-4409-96e1-a720edbe80a7 Certificate serial: 010D0C9F4328584AC9DBA175A530BA2F34DAEA00 Authority key identifier: 50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/d215c1cd-afde-3025-9011-f5e36c53f7dd.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 397717 IP address blocks: 192.138.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:a1:75:a5:30:ba:2f:34:da:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baebde37-2461-4409-96e1-a720edbe80a7 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=c656c8aa-2f56-4f7b-a320-5380e604c0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a7:de:0e:39:82:3a:94:3c:9d:db:01:61:77: 25:36:c1:e0:41:2a:87:92:53:ae:10:ef:27:ea:85: 1b:22:1e:fc:ba:45:a9:48:68:4a:40:8b:ac:50:ef: 1b:44:fd:98:e7:67:12:a2:e9:0c:9b:8e:18:1e:1e: c7:60:28:3c:9d:6b:4c:33:be:6b:0b:02:49:ad:60: e4:89:22:c3:06:be:3f:37:4b:a2:b3:2e:fd:0c:69: 8e:b5:e7:2c:43:68:96:14:be:a8:90:44:29:e0:61: dd:63:5b:5b:4b:90:22:57:b1:e1:67:6e:49:61:76: 21:4e:2a:d0:60:3a:f5:6b:a4:c8:6b:e3:28:70:59: da:61:14:85:1c:46:be:ff:c3:15:fd:b1:2c:84:77: 75:47:8d:46:0d:57:d2:79:61:f6:80:6b:0d:99:03: 63:75:29:b5:ca:9b:98:1f:6c:32:b2:32:db:c3:3a: 59:62:64:9a:88:77:1a:2c:d4:11:bf:85:49:53:c9: 4e:ab:81:73:62:22:2a:57:19:5c:97:da:0a:d8:7c: 4e:ae:3b:fa:cc:4f:b2:ea:20:82:a2:c1:7d:fc:2c: af:82:1e:ce:23:0d:74:6c:ef:89:bc:03:bf:a5:74: b6:3d:43:2c:7d:99:34:9c:af:7e:66:1a:c3:aa:f4: c3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E7:7A:A9:30:F6:32:0C:CA:F2:34:2C:0F:89:1E:24:F2:E8:13:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/d215c1cd-afde-3025-9011-f5e36c53f7dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl X509v3 Authority Key Identifier: keyid:50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer sbgp-ipAddrBlock: critical IPv4: 192.138.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:b8:dc:5a:ba:04:04:e5:5a:b8:d4:d7:2e:70:40:81:a9:7e: d9:e2:19:6a:65:fc:58:da:79:b0:9c:a5:0b:3b:2e:af:0f:23: e8:92:be:dc:bd:18:79:f1:f5:20:06:45:d4:94:bf:b9:c0:a5: 1d:d3:27:ad:b2:fe:70:e8:2d:f0:68:b6:02:61:8a:48:c2:bb: 83:4d:60:df:65:5f:5e:c9:5d:fb:3a:20:40:54:0b:1b:02:c0: b1:c7:96:01:df:d9:0b:1b:1a:20:7c:93:9a:d4:75:44:77:21: 24:f6:df:ca:0b:70:33:14:6c:b7:cc:eb:ef:21:d5:e1:a1:a7: 6d:9b:58:92:4a:a7:76:07:5f:25:a7:66:18:a1:76:12:b9:1d: f7:c7:f0:9e:3d:86:0e:b4:c5:de:33:97:d3:bb:ab:6a:dd:f6: 03:cc:c9:1c:01:eb:8d:be:f4:c8:1d:22:86:e5:bc:5f:cb:59: 71:64:30:41:21:8f:3b:07:90:aa:e3:77:03:5d:47:b8:36:8f: 36:47:86:35:39:1d:4d:a5:f6:90:40:2b:24:34:9d:0c:ab:9a: 02:33:11:bb:3a:0f:ca:b2:cd:5c:28:80:bc:54:e3:c5:14:09: e4:42:79:2c:81:b6:5c:e8:81:93:7a:62:5a:7d:8a:bf:ca:2d: ab:6f:a7:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ26F1pTC6LzTa6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFlYmRlMzctMjQ2MS00NDA5LTk2ZTEtYTcyMGVkYmU4 MGE3MB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk YzY1NmM4YWEtMmY1Ni00ZjdiLWEzMjAtNTM4MGU2MDRjMGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhafeDjmCOpQ8ndsBYXclNsHgQSqHklOuEO8n 6oUbIh78ukWpSGhKQIusUO8bRP2Y52cSoukMm44YHh7HYCg8nWtMM75rCwJJrWDk iSLDBr4/N0uisy79DGmOtecsQ2iWFL6okEQp4GHdY1tbS5AiV7HhZ25JYXYhTirQ YDr1a6TIa+MocFnaYRSFHEa+/8MV/bEshHd1R41GDVfSeWH2gGsNmQNjdSm1ypuY H2wysjLbwzpZYmSaiHcaLNQRv4VJU8lOq4FzYiIqVxlcl9oK2HxOrjv6zE+y6iCC osF9/Cyvgh7OIw10bO+JvAO/pXS2PUMsfZk0nK9+ZhrDqvTDyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTneqkw9jIMyvI0LA+JHiTy6BNrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iYWVi ZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIwZWRiZTgwYTcvZDIxNWMxY2QtYWZkZS0z MDI1LTkwMTEtZjVlMzZjNTNmN2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYmFlYmRlMzctMjQ2MS00NDA5LTk2 ZTEtYTcyMGVkYmU4MGE3L2JhZWJkZTM3LTI0NjEtNDQwOS05NmUxLWE3MjBlZGJl ODBhNy5jcmwwHwYDVR0jBBgwFoAUUDZNFsS1qHZodij63f6yFPBDAOEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9iYWViZGUzNy0yNDYxLTQ0MDktOTZlMS1hNzIw ZWRiZTgwYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIq/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADm43Fq6BATlWrjU1y5wQIGpftniGWpl/FjaebCcpQs7Lq8PI+iSvty9 GHnx9SAGRdSUv7nApR3TJ62y/nDoLfBotgJhikjCu4NNYN9lX17JXfs6IEBUCxsC wLHHlgHf2QsbGiB8k5rUdUR3IST238oLcDMUbLfM6+8h1eGhp22bWJJKp3YHXyWn ZhihdhK5HffH8J49hg60xd4zl9O7q2rd9gPMyRwB642+9MgdIoblvF/LWXFkMEEh jzsHkKrjdwNdR7g2jzZHhjU5HU2l9pBAKyQ0nQyrmgIzEbs6D8qyzVwogLxU48UU CeRCeSyBtlzogZN6Ylp9ir/KLatvpwE= -----END CERTIFICATE-----Generated at Sat Aug 23 20:16:19 2025 by rpki-client