$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa File: a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa (raw, json) Hash identifier: d0GX6ZTmTAg0aLx4gTJR8kLl4VtlXVJRzAmcUW6FTYs= Subject key identifier: 3E:91:8E:3F:F8:0D:B1:A5:63:39:C0:BF:52:D3:43:0B:F7:3C:4B:3F Certificate issuer: /CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4 Certificate serial: 010D0C9F4328584A4970713F12AF09EE46ED1580 Authority key identifier: F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 8075 IP address blocks: 137.70.152.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:71:3f:12:af:09:ee:46:ed:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=89e70ab8-c369-4d70-a38a-999f2940d08c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:74:98:6e:9a:bc:d4:c0:d2:ad:55:b7:d7:50: f8:a3:72:da:51:1d:72:23:37:62:44:47:7b:28:de: 2a:ed:e9:91:26:d8:9a:99:e9:d8:e5:66:3b:68:1a: a6:27:84:a5:18:ee:e2:51:dd:96:d7:c2:26:50:ed: 80:ad:d1:8e:55:d6:2f:f8:41:ac:f7:55:d6:11:0a: 46:d8:7d:84:24:b5:ee:43:68:e5:11:65:3e:22:c2: ab:d9:f6:ef:99:e3:06:9d:91:e7:5f:2d:13:44:85: 12:73:82:85:53:10:70:93:83:42:82:f1:b6:1e:e6: f9:78:e3:36:aa:37:37:88:45:6e:cb:25:2c:09:fd: 48:5d:0e:c4:3c:02:f2:c5:d7:f2:8f:b0:26:14:d5: b0:1d:6c:6e:12:4f:6e:54:83:0e:fc:8b:b4:02:af: c2:d3:b7:63:29:78:3e:bf:22:10:b3:df:77:4a:4d: 06:ef:3b:02:a3:2c:2c:8d:a0:00:4e:5f:8b:b6:03: d5:59:ab:f9:93:35:64:c2:76:0e:46:ed:c2:8b:cc: 2a:bb:2b:81:14:fe:7c:d9:52:71:9c:38:0b:9a:cf: de:ad:61:6c:be:6f:4b:03:f3:99:27:1e:8c:2b:81: 6d:bb:a4:84:e8:04:a6:fc:8a:c7:69:64:49:2c:00: 4e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:91:8E:3F:F8:0D:B1:A5:63:39:C0:BF:52:D3:43:0B:F7:3C:4B:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl X509v3 Authority Key Identifier: keyid:F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer sbgp-ipAddrBlock: critical IPv4: 137.70.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:49:e0:5b:b0:c0:9d:02:10:ad:0f:ff:0f:f5:cc:1c:c4:01: 65:53:7d:50:31:6d:84:83:c0:7b:3c:df:08:a2:01:11:44:dd: f2:32:f8:d4:5a:56:fd:16:66:aa:aa:6c:3b:e8:26:8e:94:23: ae:85:6f:00:fb:a5:e5:6f:ed:a4:35:f9:e4:1f:70:3a:a3:d7: 93:a0:69:2a:a4:df:20:3c:50:5d:16:20:31:bb:75:ad:f1:c5: 5e:d2:48:92:7f:23:3d:86:f8:22:4c:4b:1a:b3:ff:c0:ae:1c: 1e:a2:d9:8f:c4:cb:d1:72:00:94:29:15:e2:3f:3e:19:9a:f8: e9:25:b9:4d:d5:17:a3:7f:33:d2:fb:3a:3b:0c:aa:d0:b5:6b: 99:f0:19:6b:bb:ff:f0:39:f1:51:f3:49:02:55:91:65:15:20: 78:ae:a9:5d:e7:2e:b9:f8:08:86:89:23:d5:be:95:1f:72:13: 8a:47:1c:ca:84:f4:54:02:96:f0:de:0c:59:dd:43:62:fc:ca: d7:bb:ff:b0:99:57:ce:cd:36:45:47:b5:42:84:37:bf:e6:74: 28:00:cb:69:f3:c7:d8:53:2b:5d:39:27:40:b4:c2:78:3d:a0: 02:71:4b:6e:be:47:b2:f4:ea:f7:af:a3:e2:04:af:c4:99:fc: e3:bf:fb:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHE/Eq8J7kbtFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzNWUzYmYtOTk0MC00YWJiLTljYzktMmY4YjhjZTY0 NGY0MB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk ODllNzBhYjgtYzM2OS00ZDcwLWEzOGEtOTk5ZjI5NDBkMDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3SYbpq81MDSrVW311D4o3LaUR1yIzdiREd7 KN4q7emRJtiamenY5WY7aBqmJ4SlGO7iUd2W18ImUO2ArdGOVdYv+EGs91XWEQpG 2H2EJLXuQ2jlEWU+IsKr2fbvmeMGnZHnXy0TRIUSc4KFUxBwk4NCgvG2Hub5eOM2 qjc3iEVuyyUsCf1IXQ7EPALyxdfyj7AmFNWwHWxuEk9uVIMO/Iu0Aq/C07djKXg+ vyIQs993Sk0G7zsCoywsjaAATl+LtgPVWav5kzVkwnYORu3Ci8wquyuBFP582VJx nDgLms/erWFsvm9LA/OZJx6MK4Ftu6SE6ASm/IrHaWRJLABO2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6Rjj/4DbGlYznAv1LTQwv3PEs/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1 ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhiOGNlNjQ0ZjQvYTdiOTkyNGEtZjlhMy0z MDgzLWFhNmYtMzhkNjg1NWFjYzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzNWUzYmYtOTk0MC00YWJiLTlj YzktMmY4YjhjZTY0NGY0LzNkMzVlM2JmLTk5NDAtNGFiYi05Y2M5LTJmOGI4Y2U2 NDRmNC5jcmwwHwYDVR0jBBgwFoAU8Sfva6IwqshfVMIEsxFsrb2vsvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhi OGNlNjQ0ZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiUaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBJ4FuwwJ0CEK0P/w/1zBzEAWVTfVAxbYSDwHs83wiiARFE3fIy+NRa Vv0WZqqqbDvoJo6UI66FbwD7peVv7aQ1+eQfcDqj15OgaSqk3yA8UF0WIDG7da3x xV7SSJJ/Iz2G+CJMSxqz/8CuHB6i2Y/Ey9FyAJQpFeI/Phma+OkluU3VF6N/M9L7 OjsMqtC1a5nwGWu7//A58VHzSQJVkWUVIHiuqV3nLrn4CIaJI9W+lR9yE4pHHMqE 9FQClvDeDFndQ2L8yte7/7CZV87NNkVHtUKEN7/mdCgAy2nzx9hTK105J0C0wng9 oAJxS26+R7L06vevo+IEr8SZ/OO/+54= -----END CERTIFICATE-----Generated at Mon Jun 30 00:17:47 2025 by rpki-client