$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa File: d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa (raw, json) Hash identifier: XxFJjN+vhNohDHnkdNtEEADVi89rraTskkPRPebytr8= Subject key identifier: FD:C9:78:21:90:9F:1E:EA:7F:04:95:88:85:28:60:6C:1A:4D:2C:AD Certificate issuer: /CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4 Certificate serial: 010D0C9F4328584B2A2C3B9008F8196B15821640 Authority key identifier: F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa Signing time: Fri 12 Sep 2025 01:00:32 +0000 ROA not before: Fri 12 Sep 2025 01:00:32 +0000 ROA not after: Thu 11 Dec 2025 02:00:32 +0000 asID: 8070 IP address blocks: 137.70.156.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2a:2c:3b:90:08:f8:19:6b:15:82:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4 Validity Not Before: Sep 12 01:00:32 2025 GMT Not After : Dec 11 02:00:32 2025 GMT Subject: CN=6bfa340d-b7d2-463b-809d-8b773fa624d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:35:d5:a0:be:93:59:df:93:5c:b1:be:fb:75: 80:3e:a8:b9:57:f1:69:e0:0d:12:38:2a:9e:89:00: ee:79:ca:13:51:23:a7:dc:bf:3b:95:e2:4f:52:bd: 26:10:58:42:ba:3a:24:5d:e7:0d:fb:42:8e:48:60: 00:9c:fd:a6:dc:b8:d1:46:48:70:f0:64:c0:9a:ed: 8a:66:a9:9d:ab:d8:0e:2f:d0:e5:4c:33:f0:97:c3: af:46:4b:3b:c8:50:e5:ce:d9:03:0a:ea:00:02:5b: af:7b:a5:80:44:1d:0b:12:d7:52:62:08:15:43:00: fe:eb:aa:f0:e6:cc:dc:fe:f1:54:0b:bc:7f:a8:8b: 33:e8:20:10:33:91:8e:bb:36:85:25:49:04:aa:e9: 4a:6d:85:19:fa:a4:6d:1b:02:5b:f8:54:96:a1:d7: a8:0e:31:3d:31:3a:17:f9:3c:86:81:82:3a:e4:2f: 7a:6c:ea:ad:b0:6c:c2:8d:29:b4:27:b0:bb:f5:ad: 2b:87:0a:8d:ea:b6:c2:c9:da:70:97:56:47:c0:53: 23:93:da:eb:ba:0f:8b:1b:60:3c:21:c5:d6:23:87: e9:d1:2c:d7:16:c4:ff:e9:00:7b:2e:6b:3a:8c:26: 27:46:88:5d:6b:42:f2:63:a0:b0:cf:7d:9e:df:b0: e0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C9:78:21:90:9F:1E:EA:7F:04:95:88:85:28:60:6C:1A:4D:2C:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl X509v3 Authority Key Identifier: keyid:F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer sbgp-ipAddrBlock: critical IPv4: 137.70.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:1a:7a:20:11:52:25:e0:2b:7c:06:e5:9d:28:05:23:a5:81: 20:5e:22:1c:d9:b8:a3:68:4b:b4:ca:24:8a:2e:d3:2a:52:ec: 91:73:b1:ab:b4:da:34:91:d3:f9:68:08:b8:7d:c4:1f:50:b4: 7f:bc:69:35:e2:f8:03:22:d0:3a:a1:e7:21:0f:8d:f7:61:56: 94:61:5b:d1:66:e5:42:75:0a:e0:bd:72:f9:3d:97:7a:e5:22: ac:b1:41:f4:0d:e7:35:61:96:8b:62:82:1d:bd:c3:7d:6c:0c: a7:fc:76:25:26:0d:74:a4:90:bb:98:97:10:dd:c6:2c:a6:e6: bf:f2:31:d1:86:36:17:7e:7a:8c:c3:54:56:66:ba:44:1b:ed: 30:69:4b:bc:f3:4b:d5:0d:4d:dc:33:09:38:42:5c:37:0d:0a: 93:15:2f:54:aa:90:f1:2c:31:fc:e8:e3:bf:91:3d:37:8c:33: 02:17:41:6b:00:29:28:08:3b:0a:db:45:f0:75:88:a6:3b:d0: b4:0d:6e:cc:82:0e:6d:5c:bf:88:e8:3b:83:d8:9a:c9:c8:d8: 98:69:3f:1f:99:2b:e6:4d:5f:57:eb:d5:d8:e0:54:83:6a:23: 8d:44:32:39:b6:d7:13:66:9f:bf:eb:90:f9:4a:9c:ac:5f:e1: 77:23:22:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsqLDuQCPgZaxWCFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzNWUzYmYtOTk0MC00YWJiLTljYzktMmY4YjhjZTY0 NGY0MB4XDTI1MDkxMjAxMDAzMloXDTI1MTIxMTAyMDAzMlowLzEtMCsGA1UEAxMk NmJmYTM0MGQtYjdkMi00NjNiLTgwOWQtOGI3NzNmYTYyNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DXVoL6TWd+TXLG++3WAPqi5V/Fp4A0SOCqe iQDuecoTUSOn3L87leJPUr0mEFhCujokXecN+0KOSGAAnP2m3LjRRkhw8GTAmu2K Zqmdq9gOL9DlTDPwl8OvRks7yFDlztkDCuoAAluve6WARB0LEtdSYggVQwD+66rw 5szc/vFUC7x/qIsz6CAQM5GOuzaFJUkEqulKbYUZ+qRtGwJb+FSWodeoDjE9MToX +TyGgYI65C96bOqtsGzCjSm0J7C79a0rhwqN6rbCydpwl1ZHwFMjk9rrug+LG2A8 IcXWI4fp0SzXFsT/6QB7Lms6jCYnRohda0LyY6Cwz32e37DgEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3JeCGQnx7qfwSViIUoYGwaTSytMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1 ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhiOGNlNjQ0ZjQvZDY3M2M2ZmUtYjg0OS0z MmIwLWFhOTAtMzM1YWMxMmMyYzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzNWUzYmYtOTk0MC00YWJiLTlj YzktMmY4YjhjZTY0NGY0LzNkMzVlM2JmLTk5NDAtNGFiYi05Y2M5LTJmOGI4Y2U2 NDRmNC5jcmwwHwYDVR0jBBgwFoAU8Sfva6IwqshfVMIEsxFsrb2vsvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhi OGNlNjQ0ZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiUacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoaeiARUiXgK3wG5Z0oBSOlgSBeIhzZuKNoS7TKJIou0ypS7JFzsau0 2jSR0/loCLh9xB9QtH+8aTXi+AMi0Dqh5yEPjfdhVpRhW9Fm5UJ1CuC9cvk9l3rl IqyxQfQN5zVhlotigh29w31sDKf8diUmDXSkkLuYlxDdxiym5r/yMdGGNhd+eozD VFZmukQb7TBpS7zzS9UNTdwzCThCXDcNCpMVL1SqkPEsMfzo47+RPTeMMwIXQWsA KSgIOwrbRfB1iKY70LQNbsyCDm1cv4joO4PYmsnI2JhpPx+ZK+ZNX1fr1djgVINq I41EMjm21xNmn7/rkPlKnKxf4XcjIgQ= -----END CERTIFICATE-----Generated at Mon Oct 20 19:05:57 2025 by rpki-client