$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa File: d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa (raw, json) Hash identifier: LxVCwkprjUDHVZW5wj7/twXi6aWUoWD2fdffq3zAZ4w= Subject key identifier: 42:56:0C:2C:EC:8D:17:F0:9A:01:76:D8:23:C0:F1:21:A1:32:69:6F Certificate issuer: /CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4 Certificate serial: 010D0C9F4328584EA7873ACABAD3F30ED5FAF300 Authority key identifier: F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8070 IP address blocks: 137.70.156.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:3a:ca:ba:d3:f3:0e:d5:fa:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5ab454a4-24a7-4571-8f4f-f0a003ec4ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:06:66:cb:04:50:b4:08:95:05:ba:dd:ea:b7: f4:73:c9:5e:36:28:35:4d:0e:23:dd:32:e9:20:e2: 83:63:85:6b:09:df:e5:de:b7:80:c1:65:fa:61:90: 95:0d:0c:40:71:46:b8:7d:1c:32:1c:09:8a:39:5c: 39:36:81:43:1f:e5:e9:68:79:c2:5f:81:7a:46:87: 0d:59:78:dd:15:c1:e5:75:54:68:a1:90:c1:9b:64: ac:9d:70:60:01:d4:cd:53:89:ee:99:bd:68:09:76: 13:b4:6f:2a:6d:1b:f9:cb:0e:bb:69:66:0b:23:32: 04:aa:fc:8e:32:eb:69:a6:5f:de:16:ab:21:8a:7d: 6d:77:a2:61:af:cd:b4:f6:ad:18:e6:b5:67:b4:02: 8b:00:06:36:e1:22:88:a1:05:0c:9a:32:de:7b:33: 16:89:52:a5:eb:a3:bf:00:7a:72:65:8a:7c:db:77: 9b:22:54:7f:ed:24:ff:d7:9e:21:1f:3a:6b:fa:5f: 3d:ff:6c:de:7a:80:83:44:8b:22:07:c3:0b:9a:4d: 50:2a:95:3e:3e:6d:ba:75:78:a7:ed:7f:18:f3:fa: d2:43:13:ab:44:11:ea:a5:30:fd:e9:10:2a:01:64: f5:58:76:a5:94:6d:32:d6:ba:7b:13:b5:c2:32:6e: 03:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:56:0C:2C:EC:8D:17:F0:9A:01:76:D8:23:C0:F1:21:A1:32:69:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl X509v3 Authority Key Identifier: keyid:F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer sbgp-ipAddrBlock: critical IPv4: 137.70.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:66:52:4f:a4:f8:cb:22:15:15:16:b4:80:0f:37:c1:e9:18: c1:1d:b0:3a:e1:4d:2a:31:1d:e9:87:de:04:3e:d1:aa:36:17: e5:5f:81:ad:50:84:fa:68:b1:e3:bf:be:67:f1:cb:9c:00:da: 5f:f8:1a:04:0a:9a:e1:51:90:b6:2b:8e:e2:36:65:25:08:38: 18:a9:ba:ae:d2:17:98:2a:d4:23:8e:75:54:d2:c2:5c:99:1f: dc:46:ef:1d:ca:5a:42:29:82:db:9f:f6:db:0c:27:4a:c9:e6: e2:58:70:b7:74:ef:be:bd:65:56:8f:f5:12:56:86:4e:4a:d0: 83:7b:dd:be:4b:37:b6:79:f7:25:85:76:12:5d:83:33:f1:e5: 4b:26:8d:90:51:8e:ff:55:cd:49:f1:5a:f8:3b:0c:03:08:2d: 32:1a:9b:fc:33:a0:cb:02:7c:c8:f4:a2:ef:35:89:b4:1f:45: b5:fe:21:9c:0c:b5:fa:22:b1:19:4b:83:9c:11:0b:e5:5d:e7: f2:73:a1:dd:d7:a5:cd:91:89:8b:17:b5:15:8d:fd:40:29:fe: 88:7b:17:08:e3:c8:00:df:0b:3c:05:3e:08:93:8e:43:75:78: c2:39:15:62:d9:0f:3a:aa:b8:11:e4:c6:ff:fd:ad:96:54:4e: 3d:b4:0d:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhzrKutPzDtX68wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzNWUzYmYtOTk0MC00YWJiLTljYzktMmY4YjhjZTY0 NGY0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NWFiNDU0YTQtMjRhNy00NTcxLThmNGYtZjBhMDAzZWM0Y2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwZmywRQtAiVBbrd6rf0c8leNig1TQ4j3TLp IOKDY4VrCd/l3reAwWX6YZCVDQxAcUa4fRwyHAmKOVw5NoFDH+XpaHnCX4F6RocN WXjdFcHldVRooZDBm2SsnXBgAdTNU4numb1oCXYTtG8qbRv5yw67aWYLIzIEqvyO Mutppl/eFqshin1td6Jhr8209q0Y5rVntAKLAAY24SKIoQUMmjLeezMWiVKl66O/ AHpyZYp823ebIlR/7ST/154hHzpr+l89/2zeeoCDRIsiB8MLmk1QKpU+Pm26dXin 7X8Y8/rSQxOrRBHqpTD96RAqAWT1WHallG0y1rp7E7XCMm4DFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJWDCzsjRfwmgF22CPA8SGhMmlvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1 ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhiOGNlNjQ0ZjQvZDY3M2M2ZmUtYjg0OS0z MmIwLWFhOTAtMzM1YWMxMmMyYzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzNWUzYmYtOTk0MC00YWJiLTlj YzktMmY4YjhjZTY0NGY0LzNkMzVlM2JmLTk5NDAtNGFiYi05Y2M5LTJmOGI4Y2U2 NDRmNC5jcmwwHwYDVR0jBBgwFoAU8Sfva6IwqshfVMIEsxFsrb2vsvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhi OGNlNjQ0ZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiUacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhmUk+k+MsiFRUWtIAPN8HpGMEdsDrhTSoxHemH3gQ+0ao2F+Vfga1Q hPposeO/vmfxy5wA2l/4GgQKmuFRkLYrjuI2ZSUIOBipuq7SF5gq1COOdVTSwlyZ H9xG7x3KWkIpgtuf9tsMJ0rJ5uJYcLd07769ZVaP9RJWhk5K0IN73b5LN7Z59yWF dhJdgzPx5UsmjZBRjv9VzUnxWvg7DAMILTIam/wzoMsCfMj0ou81ibQfRbX+IZwM tfoisRlLg5wRC+Vd5/Jzod3Xpc2RiYsXtRWN/UAp/oh7FwjjyADfCzwFPgiTjkN1 eMI5FWLZDzqquBHkxv/9rZZUTj20DRs= -----END CERTIFICATE-----Generated at Wed Jul 29 22:59:51 2026 by rpki-client