$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/11a0507a-dc37-368a-b737-7ae864768f61.roa File: 11a0507a-dc37-368a-b737-7ae864768f61.roa (raw, json) Hash identifier: Q/rQ3iZCZ1NFPTW62WDuwKoMv422dHMsDWZrqeG0EdU= Subject key identifier: B4:DF:01:25:C7:42:EC:8A:E9:00:83:7D:26:22:98:6F:D8:53:FB:28 Certificate issuer: /CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Certificate serial: 010D0C9F4328584D91C01C8292EE58D3B0843AB0 Authority key identifier: 33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/11a0507a-dc37-368a-b737-7ae864768f61.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 54735 IP address blocks: 97.107.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:1c:82:92:ee:58:d3:b0:84:3a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=d4663d6d-5c8b-4c37-845b-2ff507110c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:81:a6:0b:e9:6f:c6:a2:67:a8:89:7d:97:fa: 57:67:a1:fd:cf:ee:69:52:33:c5:4e:54:fa:69:cb: 50:20:3b:f7:b3:c8:c7:89:0f:f8:9e:15:e8:90:e8: c7:49:2c:f8:3a:38:83:ee:26:8f:be:cb:30:40:59: 40:4b:6d:22:2b:75:18:ce:68:3b:46:09:fc:57:35: 6c:47:ec:89:4d:bb:23:9f:12:c5:81:bb:21:6c:d7: a9:be:e7:61:cd:2d:d2:eb:72:f6:5a:21:16:6f:66: ca:42:f8:91:28:6d:4e:71:5f:f1:19:54:5c:dc:5b: c7:13:9f:4a:59:f9:a4:f7:31:4f:dd:70:0a:83:53: e3:25:c8:47:65:15:83:29:dc:50:bc:ff:39:46:c5: 8f:33:c0:e8:ad:67:f6:af:a6:f1:20:25:17:ea:db: d3:80:51:db:2d:2f:9b:64:b0:3d:cc:dc:84:04:db: 44:a1:74:a3:97:71:4e:8e:07:7f:cf:a9:35:0c:34: ce:da:29:cf:53:f3:b6:8e:d3:22:01:17:17:fa:54: 97:9b:3b:60:6f:60:d3:02:89:2d:33:f1:bf:8c:08: 67:d8:be:9a:ba:a3:83:6b:9e:c0:a9:0b:55:48:82: 8b:65:7d:3a:ae:f5:e5:8f:a5:2a:51:4b:b1:66:44: ec:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DF:01:25:C7:42:EC:8A:E9:00:83:7D:26:22:98:6F:D8:53:FB:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/11a0507a-dc37-368a-b737-7ae864768f61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl X509v3 Authority Key Identifier: keyid:33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer sbgp-ipAddrBlock: critical IPv4: 97.107.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:fd:13:45:15:bc:5a:b4:07:94:c2:0c:97:d4:e5:4d:4f:6c: e4:f2:0b:c8:7e:02:33:25:9a:57:f8:26:f6:50:0d:cc:47:4c: 7f:35:13:54:ca:9c:21:b5:20:9a:61:4b:fb:41:f7:0e:ee:ea: c1:56:29:60:cf:a2:b7:7a:e8:d3:04:89:97:57:96:50:b3:df: a0:53:4e:03:de:ba:26:32:e6:41:8e:ee:49:eb:61:88:bc:af: 4a:f5:2a:d8:8f:bc:c8:3a:df:8b:91:c9:7f:be:d9:64:29:4d: 91:82:65:da:36:04:69:35:db:e1:5f:83:41:9b:38:aa:8c:f2: 37:72:99:28:9f:f1:3d:80:d9:d6:65:2e:56:89:a5:db:0b:4b: 71:e3:fb:bf:6e:17:df:18:50:9a:19:15:03:1b:03:10:cc:e7: 6f:e3:5e:6e:39:60:dd:56:0b:de:69:50:72:d0:b8:88:77:f0: 3f:71:5a:16:a3:79:d4:50:2f:95:56:1d:ee:cf:11:00:1c:d2: 2b:ce:c2:a9:dd:c3:90:ea:84:db:fa:cd:0a:2e:91:e8:55:07: 10:c8:76:a1:77:a7:19:53:4f:30:f2:4b:e8:08:e3:11:73:fd: 8b:a6:3e:4d:16:10:ab:5f:3f:48:e0:fd:4e:ac:32:f2:01:4a: e0:80:a0:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwByCku5Y07CEOrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3MGMzYTEtNmFkMC00Y2RkLWFhZDctNjEzMzgxZjBl NjBkMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk ZDQ2NjNkNmQtNWM4Yi00YzM3LTg0NWItMmZmNTA3MTEwYzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIGmC+lvxqJnqIl9l/pXZ6H9z+5pUjPFTlT6 actQIDv3s8jHiQ/4nhXokOjHSSz4OjiD7iaPvsswQFlAS20iK3UYzmg7Rgn8VzVs R+yJTbsjnxLFgbshbNepvudhzS3S63L2WiEWb2bKQviRKG1OcV/xGVRc3FvHE59K Wfmk9zFP3XAKg1PjJchHZRWDKdxQvP85RsWPM8DorWf2r6bxICUX6tvTgFHbLS+b ZLA9zNyEBNtEoXSjl3FOjgd/z6k1DDTO2inPU/O2jtMiARcX+lSXmztgb2DTAokt M/G/jAhn2L6auqODa57AqQtVSIKLZX06rvXlj6UqUUuxZkTs/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTfASXHQuyK6QCDfSYimG/YU/soMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcw YzNhMS02YWQwLTRjZGQtYWFkNy02MTMzODFmMGU2MGQvMTFhMDUwN2EtZGMzNy0z NjhhLWI3MzctN2FlODY0NzY4ZjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZGQ3MGMzYTEtNmFkMC00Y2RkLWFh ZDctNjEzMzgxZjBlNjBkL2RkNzBjM2ExLTZhZDAtNGNkZC1hYWQ3LTYxMzM4MWYw ZTYwZC5jcmwwHwYDVR0jBBgwFoAUMxtcGs7Weta/gi+QLvpGHMFRW2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcwYzNhMS02YWQwLTRjZGQtYWFkNy02MTMz ODFmMGU2MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYWvtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHf9E0UVvFq0B5TCDJfU5U1PbOTyC8h+AjMlmlf4JvZQDcxHTH81E1TK nCG1IJphS/tB9w7u6sFWKWDPord66NMEiZdXllCz36BTTgPeuiYy5kGO7knrYYi8 r0r1KtiPvMg634uRyX++2WQpTZGCZdo2BGk12+Ffg0GbOKqM8jdymSif8T2A2dZl LlaJpdsLS3Hj+79uF98YUJoZFQMbAxDM52/jXm45YN1WC95pUHLQuIh38D9xWhaj edRQL5VWHe7PEQAc0ivOwqndw5DqhNv6zQoukehVBxDIdqF3pxlTTzDyS+gI4xFz /YumPk0WEKtfP0jg/U6sMvIBSuCAoBk= -----END CERTIFICATE-----Generated at Wed Apr 29 14:45:39 2026 by rpki-client