$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa File: a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa (raw, json) Hash identifier: oxE2RhAuXnVk1ztNQnqEFIho4WTPd43WQ5IlNzvhVYQ= Subject key identifier: FD:EB:49:9D:8E:2A:D2:5E:3B:71:80:A3:71:77:CC:8C:09:F2:AA:5D Certificate issuer: /CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4 Certificate serial: 010D0C9F4328584CEA5CF15719A695F9E82F5A30 Authority key identifier: F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa Signing time: Thu 19 Feb 2026 14:00:40 +0000 ROA not before: Thu 19 Feb 2026 14:00:40 +0000 ROA not after: Wed 20 May 2026 13:00:40 +0000 asID: 8075 IP address blocks: 137.70.152.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ea:5c:f1:57:19:a6:95:f9:e8:2f:5a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4 Validity Not Before: Feb 19 14:00:40 2026 GMT Not After : May 20 13:00:40 2026 GMT Subject: CN=63a453c0-17f9-4098-a9df-a2691b82a9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:32:f7:70:5e:0b:e4:b4:f9:f3:0f:f7:98:b2: 94:24:7c:06:31:6c:fd:58:0b:b3:82:ae:27:51:e4: 26:61:f3:03:9e:88:a3:18:91:83:80:01:de:75:78: f4:8d:e5:c8:43:4b:47:28:39:56:78:ae:4b:d3:9d: 41:21:ad:95:04:22:35:0a:14:66:69:c6:cf:f8:e5: c8:69:eb:3f:f0:d6:e8:2b:34:fa:1a:a4:2a:b4:a9: 3e:84:21:c8:f7:3a:cd:82:95:c6:41:96:2f:50:d4: 7a:c4:cd:c6:72:c2:66:7a:98:10:49:59:fb:94:3e: fc:8b:64:8f:a0:9a:c3:a4:13:85:96:64:48:b5:f2: ba:2e:d5:94:be:8e:3a:1c:de:b0:4d:46:03:f1:30: a9:b0:67:6a:32:ca:a5:00:47:4c:fe:95:00:5a:5c: 6a:f9:e0:c5:71:a7:2c:29:55:45:69:52:c2:3e:ca: 92:9e:27:ba:c7:94:8e:3d:cf:3a:e6:89:c0:c5:28: 47:88:0c:04:3f:43:e0:16:54:30:05:c7:66:f5:f4: 3e:71:18:c3:a2:16:f5:da:c0:9c:b4:60:94:2c:f3: b1:a9:c0:44:8f:e9:10:8e:84:1d:b8:05:c0:67:1c: d0:34:f5:d1:9d:08:ba:6b:85:88:72:7d:7f:d5:5a: fc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EB:49:9D:8E:2A:D2:5E:3B:71:80:A3:71:77:CC:8C:09:F2:AA:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl X509v3 Authority Key Identifier: keyid:F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer sbgp-ipAddrBlock: critical IPv4: 137.70.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:cd:7c:d4:bd:2f:fd:d8:13:22:e8:d5:2b:af:dc:f8:fa:0c: 1e:e4:82:b7:80:2b:df:65:bf:1d:94:69:08:ae:bc:3a:e5:da: 1d:9e:bb:82:6e:9b:66:74:51:f3:b3:4b:0d:8d:b4:87:c5:3f: 87:f9:68:b9:7c:0e:5f:a6:64:2b:b8:2a:a2:ee:80:f3:5b:ce: 32:2d:4c:bb:12:1e:62:50:b4:2c:00:04:b7:73:d9:fd:46:8a: 0b:b0:17:82:9b:e9:ca:cd:4e:53:10:04:73:e4:34:95:7c:77: 31:32:2a:9c:3a:c2:a8:ae:ec:f5:96:01:4e:a2:12:4a:35:c7: d2:ee:32:35:d3:79:41:60:80:16:ad:9a:94:9e:6c:0f:48:c0: ea:9f:9d:9c:56:52:6f:c7:e3:2b:e3:44:75:b0:86:41:88:b7: 81:49:30:ea:f8:f1:c6:48:ac:be:97:79:11:28:6a:a8:a7:54: 88:88:9e:df:05:01:45:12:af:f1:28:31:18:85:c7:79:53:ee: e3:15:42:bb:c6:b7:37:99:74:27:00:9a:06:60:dd:e5:ba:c3: cc:26:d4:97:e9:f7:00:85:b2:1f:df:15:17:25:1a:64:8f:a6: a6:3f:dc:ee:13:23:3a:8e:45:8a:ae:01:72:47:4f:47:64:79: a2:c7:0a:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXPFXGaaV+egvWjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzNWUzYmYtOTk0MC00YWJiLTljYzktMmY4YjhjZTY0 NGY0MB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk NjNhNDUzYzAtMTdmOS00MDk4LWE5ZGYtYTI2OTFiODJhOWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTL3cF4L5LT58w/3mLKUJHwGMWz9WAuzgq4n UeQmYfMDnoijGJGDgAHedXj0jeXIQ0tHKDlWeK5L051BIa2VBCI1ChRmacbP+OXI aes/8NboKzT6GqQqtKk+hCHI9zrNgpXGQZYvUNR6xM3GcsJmepgQSVn7lD78i2SP oJrDpBOFlmRItfK6LtWUvo46HN6wTUYD8TCpsGdqMsqlAEdM/pUAWlxq+eDFcacs KVVFaVLCPsqSnie6x5SOPc865onAxShHiAwEP0PgFlQwBcdm9fQ+cRjDohb12sCc tGCULPOxqcBEj+kQjoQduAXAZxzQNPXRnQi6a4WIcn1/1Vr8FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3rSZ2OKtJeO3GAo3F3zIwJ8qpdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1 ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhiOGNlNjQ0ZjQvYTdiOTkyNGEtZjlhMy0z MDgzLWFhNmYtMzhkNjg1NWFjYzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzNWUzYmYtOTk0MC00YWJiLTlj YzktMmY4YjhjZTY0NGY0LzNkMzVlM2JmLTk5NDAtNGFiYi05Y2M5LTJmOGI4Y2U2 NDRmNC5jcmwwHwYDVR0jBBgwFoAU8Sfva6IwqshfVMIEsxFsrb2vsvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhi OGNlNjQ0ZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiUaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPNfNS9L/3YEyLo1Suv3Pj6DB7kgreAK99lvx2UaQiuvDrl2h2eu4Ju m2Z0UfOzSw2NtIfFP4f5aLl8Dl+mZCu4KqLugPNbzjItTLsSHmJQtCwABLdz2f1G iguwF4Kb6crNTlMQBHPkNJV8dzEyKpw6wqiu7PWWAU6iEko1x9LuMjXTeUFggBat mpSebA9IwOqfnZxWUm/H4yvjRHWwhkGIt4FJMOr48cZIrL6XeREoaqinVIiInt8F AUUSr/EoMRiFx3lT7uMVQrvGtzeZdCcAmgZg3eW6w8wm1Jfp9wCFsh/fFRclGmSP pqY/3O4TIzqORYquAXJHT0dkeaLHCtc= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:25 2026 by rpki-client