$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/52fceaa1-27a7-34f8-b01c-20a30f8e2ec9.roa File: 52fceaa1-27a7-34f8-b01c-20a30f8e2ec9.roa (raw, json) Hash identifier: E1hgNwkaswxWLpZR5BLEhYG/lOmdtfXOpFJWABYyQrI= Subject key identifier: 14:0F:1D:40:D9:08:E2:32:A8:1A:42:EF:80:8D:73:0B:27:48:74:83 Certificate issuer: /CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4 Certificate serial: 010D0C9F4328584B5B073C0FAD0F046E896E5E80 Authority key identifier: F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/52fceaa1-27a7-34f8-b01c-20a30f8e2ec9.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 40382 IP address blocks: 137.70.0.0/16 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:3c:0f:ad:0f:04:6e:89:6e:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=04718b35-d7b6-457f-b63d-31f461f31c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:75:58:f6:94:02:9d:42:89:c2:4d:17:96:9f: cd:42:7b:18:3b:f8:40:33:3e:27:d0:99:12:88:35: 54:27:ee:d7:45:34:e9:ca:89:0a:58:5a:4e:c8:39: da:35:9c:c2:e6:20:c3:e1:48:2f:51:12:c4:f8:43: a8:5d:02:c9:9d:e6:7a:0f:2f:92:aa:2a:dc:83:01: 8c:5e:f8:3a:28:06:48:2d:87:10:65:38:1f:36:19: 53:7d:fd:b5:b8:71:fa:8f:b1:88:d0:35:de:ae:b2: 6d:4f:9d:5a:84:86:b8:c1:46:51:4d:75:35:20:51: a6:70:eb:b4:82:fb:f7:2d:58:3c:49:7a:18:82:bd: 56:9b:77:e9:85:3c:cb:ba:69:b8:97:fe:be:b7:10: 9d:cc:d4:96:87:c0:a9:89:49:d5:c9:25:e9:7b:62: 01:d5:7d:fc:ff:3e:73:a0:7c:c5:02:f7:e0:89:8f: 08:42:72:61:56:f3:51:b3:a0:25:19:39:9b:63:0f: fe:f3:09:60:89:27:18:ea:ee:ee:1b:60:25:46:85: 29:f7:a6:75:b5:74:b5:9f:dd:f7:92:c7:7f:0b:a6: 18:b4:36:80:7e:d9:83:d7:9e:c2:aa:6c:7c:50:3e: 66:3a:23:34:ea:c5:23:c5:8d:15:9b:a8:6a:fc:69: 40:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0F:1D:40:D9:08:E2:32:A8:1A:42:EF:80:8D:73:0B:27:48:74:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/52fceaa1-27a7-34f8-b01c-20a30f8e2ec9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl X509v3 Authority Key Identifier: keyid:F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer sbgp-ipAddrBlock: critical IPv4: 137.70.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:23:16:2a:9b:25:51:fe:81:a7:61:84:11:2e:5e:61:40:4c: 6d:4d:bf:55:6c:25:ba:82:cd:6a:33:2c:15:04:77:05:69:d3: 54:28:17:8c:2a:71:b8:57:03:57:d3:45:33:65:dd:15:3e:6f: a2:35:f6:f7:85:17:94:8a:35:ee:0a:67:de:80:c7:a3:67:c1: 0b:ac:79:ec:19:60:66:c4:fc:36:d2:03:64:1c:44:88:2f:3d: 0f:d5:0d:a5:b8:b3:fd:b8:42:d6:84:fa:eb:fd:5d:ad:0f:b6: ac:2a:8f:8f:34:33:8b:cd:d4:65:f7:e0:b9:d8:63:71:5f:0d: 5c:60:6e:db:b2:bd:4d:1e:a6:c0:ca:03:c8:66:c4:63:e6:1f: 0e:08:43:ac:b0:f8:d6:73:01:ec:43:dd:62:9d:5f:84:e6:64: 7a:a6:90:88:50:66:e5:9b:75:e9:de:f5:8e:01:2a:17:e2:7b: 91:35:5b:56:d9:ac:2f:6d:6a:2b:bb:7d:15:d0:91:92:ea:17: db:fb:e3:08:47:9c:c3:75:84:ae:bb:c0:3f:ad:38:80:c1:0f: 4e:c5:a1:e1:7d:2a:89:7e:a7:19:a4:1a:6e:e8:8d:5c:1d:de: 8a:a8:c4:e4:32:fc:ce:3a:6d:b4:f8:0b:0e:bb:da:62:e1:21: fc:05:98:d4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtbBzwPrQ8EboluXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzNWUzYmYtOTk0MC00YWJiLTljYzktMmY4YjhjZTY0 NGY0MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk MDQ3MThiMzUtZDdiNi00NTdmLWI2M2QtMzFmNDYxZjMxYzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnVY9pQCnUKJwk0Xlp/NQnsYO/hAMz4n0JkS iDVUJ+7XRTTpyokKWFpOyDnaNZzC5iDD4UgvURLE+EOoXQLJneZ6Dy+SqircgwGM Xvg6KAZILYcQZTgfNhlTff21uHH6j7GI0DXerrJtT51ahIa4wUZRTXU1IFGmcOu0 gvv3LVg8SXoYgr1Wm3fphTzLumm4l/6+txCdzNSWh8CpiUnVySXpe2IB1X38/z5z oHzFAvfgiY8IQnJhVvNRs6AlGTmbYw/+8wlgiScY6u7uG2AlRoUp96Z1tXS1n933 ksd/C6YYtDaAftmD157Cqmx8UD5mOiM06sUjxY0Vm6hq/GlACwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBQPHUDZCOIyqBpC74CNcwsnSHSDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1 ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhiOGNlNjQ0ZjQvNTJmY2VhYTEtMjdhNy0z NGY4LWIwMWMtMjBhMzBmOGUyZWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzNWUzYmYtOTk0MC00YWJiLTlj YzktMmY4YjhjZTY0NGY0LzNkMzVlM2JmLTk5NDAtNGFiYi05Y2M5LTJmOGI4Y2U2 NDRmNC5jcmwwHwYDVR0jBBgwFoAU8Sfva6IwqshfVMIEsxFsrb2vsvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhi OGNlNjQ0ZjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiUYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALiMWKpslUf6Bp2GEES5eYUBMbU2/VWwluoLNajMsFQR3BWnTVCgXjCpx uFcDV9NFM2XdFT5vojX294UXlIo17gpn3oDHo2fBC6x57BlgZsT8NtIDZBxEiC89 D9UNpbiz/bhC1oT66/1drQ+2rCqPjzQzi83UZffgudhjcV8NXGBu27K9TR6mwMoD yGbEY+YfDghDrLD41nMB7EPdYp1fhOZkeqaQiFBm5Zt16d71jgEqF+J7kTVbVtms L21qK7t9FdCRkuoX2/vjCEecw3WErrvAP604gMEPTsWh4X0qiX6nGaQabuiNXB3e iqjE5DL8zjpttPgLDrvaYuEh/AWY1A== -----END CERTIFICATE-----Generated at Mon Oct 20 19:05:58 2025 by rpki-client