$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa File: a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa (raw, json) Hash identifier: ibNlKFnL96tTmXRPu5CG3P5bnA6dck4jKqA5xZvuoDk= Subject key identifier: 21:C3:63:E6:2F:B0:75:AB:4E:32:A3:D8:A2:BD:A8:E0:62:0D:CD:C7 Certificate issuer: /CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4 Certificate serial: 010D0C9F4328584F497627E9C53BDE5496C7F6C0 Authority key identifier: F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8075 IP address blocks: 137.70.152.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:27:e9:c5:3b:de:54:96:c7:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=48499ee2-e101-4b7e-9d17-52c58da91ff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:20:0e:1e:f8:44:df:17:2e:f6:25:3a:ad:5c: 9f:a7:be:f4:6e:0e:77:ac:3f:9d:57:7e:5d:4a:b1: 82:85:3b:97:17:96:dd:2e:02:79:76:ec:ae:d4:e2: 00:b6:3e:14:a0:08:28:7f:6f:b3:79:b2:b7:92:5d: f4:eb:20:2d:6f:08:2b:db:4d:3a:a8:33:5a:b3:d2: 81:1c:3e:b4:a4:b8:ed:a2:36:fa:40:78:f9:49:1f: 5a:8c:ce:23:71:5c:97:21:e5:d1:60:5a:bd:e8:8f: c9:8a:08:ba:ca:aa:0a:34:93:79:65:9f:2e:e2:65: e0:8d:25:f7:d9:55:b8:29:2b:d3:ee:c6:51:b0:a9: 48:7c:32:ed:d1:a0:5c:68:93:33:10:62:07:4f:70: 8c:7d:51:12:0a:74:d0:26:2f:1f:a6:c4:ab:2c:d2: 46:fd:8d:70:a0:97:e5:2c:fb:36:a6:d2:6c:ad:45: bf:e1:64:a5:68:a0:00:2f:aa:18:ee:11:0d:d4:25: 2d:0b:b6:ef:9a:55:f6:b6:9b:c9:eb:67:b3:f9:5b: ab:c0:91:23:22:f0:59:cb:81:08:b3:0d:b8:d8:1e: 11:21:d0:de:d6:6e:b3:bb:fd:80:b2:65:15:a4:bf: ea:37:ce:f0:3f:09:e9:cd:bf:ee:75:a8:86:00:f8: ea:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C3:63:E6:2F:B0:75:AB:4E:32:A3:D8:A2:BD:A8:E0:62:0D:CD:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl X509v3 Authority Key Identifier: keyid:F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer sbgp-ipAddrBlock: critical IPv4: 137.70.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:15:c9:fa:5a:80:ed:ff:73:db:99:f1:9b:bd:d0:2f:c5:43: 36:5f:98:e4:d1:4f:7a:b6:c1:56:a8:53:3e:05:cb:de:bf:d3: 3c:14:fb:df:dd:da:da:c2:98:00:e3:d4:3d:cd:de:80:29:42: 10:63:93:ab:56:7f:83:db:09:eb:9c:e7:d5:d3:fe:8e:1c:96: 92:34:38:9a:af:e5:42:5e:e3:f9:88:03:4d:50:30:d8:04:66: 7a:ab:cf:91:7b:a5:3b:b9:d0:c1:b3:bc:3d:9d:17:23:03:65: 1d:d4:de:ed:6f:ba:a0:ac:92:03:7d:ce:ce:21:d4:1a:5a:8f: 1f:8d:47:04:eb:be:a9:52:91:2b:ad:31:7d:c7:27:da:0e:11: 8d:5b:be:fa:8d:bb:a5:8b:64:3e:26:ce:f8:b8:1c:3b:77:11: da:d2:38:2f:4f:a0:c3:12:0c:bb:de:1a:9b:1c:ac:4b:92:23: b5:e5:fd:4a:b2:04:54:d7:da:4f:60:13:18:4a:41:a3:2d:80: 1e:4a:11:fc:59:2b:d9:32:3b:d9:0e:a3:8c:f1:89:b7:21:bf: 42:f3:fd:24:1c:2c:18:49:ab:eb:1a:9d:81:3c:e2:4d:dd:c5: 20:52:9e:5b:71:b8:29:0a:30:f7:f1:42:05:bc:b3:98:18:3c: 1a:77:8d:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdifpxTveVJbH9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzNWUzYmYtOTk0MC00YWJiLTljYzktMmY4YjhjZTY0 NGY0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDg0OTllZTItZTEwMS00YjdlLTlkMTctNTJjNThkYTkxZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiAOHvhE3xcu9iU6rVyfp770bg53rD+dV35d SrGChTuXF5bdLgJ5duyu1OIAtj4UoAgof2+zebK3kl306yAtbwgr2006qDNas9KB HD60pLjtojb6QHj5SR9ajM4jcVyXIeXRYFq96I/Jigi6yqoKNJN5ZZ8u4mXgjSX3 2VW4KSvT7sZRsKlIfDLt0aBcaJMzEGIHT3CMfVESCnTQJi8fpsSrLNJG/Y1woJfl LPs2ptJsrUW/4WSlaKAAL6oY7hEN1CUtC7bvmlX2tpvJ62ez+VurwJEjIvBZy4EI sw242B4RIdDe1m6zu/2AsmUVpL/qN87wPwnpzb/udaiGAPjqswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHDY+YvsHWrTjKj2KK9qOBiDc3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1 ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhiOGNlNjQ0ZjQvYTdiOTkyNGEtZjlhMy0z MDgzLWFhNmYtMzhkNjg1NWFjYzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzNWUzYmYtOTk0MC00YWJiLTlj YzktMmY4YjhjZTY0NGY0LzNkMzVlM2JmLTk5NDAtNGFiYi05Y2M5LTJmOGI4Y2U2 NDRmNC5jcmwwHwYDVR0jBBgwFoAU8Sfva6IwqshfVMIEsxFsrb2vsvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhi OGNlNjQ0ZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiUaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8VyfpagO3/c9uZ8Zu90C/FQzZfmOTRT3q2wVaoUz4Fy96/0zwU+9/d 2trCmADj1D3N3oApQhBjk6tWf4PbCeuc59XT/o4clpI0OJqv5UJe4/mIA01QMNgE Znqrz5F7pTu50MGzvD2dFyMDZR3U3u1vuqCskgN9zs4h1Bpajx+NRwTrvqlSkSut MX3HJ9oOEY1bvvqNu6WLZD4mzvi4HDt3EdrSOC9PoMMSDLveGpscrEuSI7Xl/Uqy BFTX2k9gExhKQaMtgB5KEfxZK9kyO9kOo4zxibchv0Lz/SQcLBhJq+sanYE84k3d xSBSnltxuCkKMPfxQgW8s5gYPBp3jes= -----END CERTIFICATE-----Generated at Mon Sep 28 18:52:07 2026 by rpki-client