$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa File: a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa (raw, json) Hash identifier: 8lvhGEyOjbx67uGFzM5GtxOKB0NYlrLRsg3u8t9ltOY= Subject key identifier: F3:36:FC:99:D0:0F:0D:F3:79:2B:D2:B5:0A:21:62:D4:8B:F4:95:7C Certificate issuer: /CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4 Certificate serial: 010D0C9F4328584DCAFB0A5A707F9A67BB75B500 Authority key identifier: F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 8075 IP address blocks: 137.70.152.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:0a:5a:70:7f:9a:67:bb:75:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=fcdcc003-dea8-41d3-a7fb-1e4c73c8afef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b6:74:15:da:de:be:5f:b4:4a:35:c8:46:71: 2a:f3:41:84:79:78:07:da:5f:d1:ef:13:f6:40:eb: a5:77:3c:b8:6d:db:d4:28:c8:2b:75:82:21:28:dc: 6c:91:52:61:5b:29:bd:9a:d8:43:06:7d:10:2c:1b: e2:20:b1:ad:04:4e:0e:61:ee:85:2d:34:ca:f5:10: 7e:d2:c2:89:d4:2d:ce:57:f4:4c:a0:f5:6a:be:01: 9c:78:4a:2b:9c:78:d5:12:34:10:ab:26:ae:de:91: 02:18:73:26:05:29:1c:ad:17:4e:0e:fa:79:2e:5e: b6:51:0d:cd:70:3d:8b:44:4b:94:57:90:e0:a7:38: fc:d4:c3:f3:5b:69:d6:c3:d8:52:37:58:62:3c:c1: 6a:48:e9:8b:65:ed:61:27:f9:4c:a1:84:5a:19:52: d7:a2:72:5b:fb:7d:02:c9:4d:00:85:b9:cf:9c:a7: 94:49:af:7d:66:2a:67:98:5b:ae:0b:8d:7c:46:a9: a7:2f:52:3c:fe:93:eb:43:c6:ac:ce:75:00:1e:9c: 1b:c1:83:d1:fa:60:79:fc:06:71:e4:0b:1e:2b:82: 3c:d4:90:c5:54:74:64:2e:40:e5:c2:4a:09:07:5c: e7:08:e6:45:d9:da:a6:d5:cb:2d:a6:3b:8e:d6:e3: 2c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:36:FC:99:D0:0F:0D:F3:79:2B:D2:B5:0A:21:62:D4:8B:F4:95:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/a7b9924a-f9a3-3083-aa6f-38d6855acc36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl X509v3 Authority Key Identifier: keyid:F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer sbgp-ipAddrBlock: critical IPv4: 137.70.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:85:b2:c7:46:4a:8c:d8:e5:e4:64:c0:a0:e1:80:9a:ce:63: 4a:f1:d1:b9:09:ad:2c:e3:a8:f8:b3:2a:9c:58:18:86:52:df: 07:e9:8f:2b:d8:15:b3:f6:14:d2:5b:32:62:74:e5:67:e9:46: e1:27:43:f9:ed:60:9d:19:76:f7:15:f7:ca:0d:f8:71:ce:c4: 9b:30:82:ff:42:54:58:99:03:06:91:59:5f:67:10:08:8f:ca: bb:f2:d4:99:3f:95:7a:eb:ed:86:ce:9b:38:38:ce:92:79:dc: 63:8f:ce:74:29:cc:2c:85:81:bd:65:91:5c:c7:5e:8b:06:e8: 37:f9:fe:af:bf:cd:b5:5b:c1:81:cb:48:ef:e8:2f:a0:f1:e0: a0:27:37:d3:ce:bb:1d:cb:0b:65:67:fb:b1:47:e2:0e:11:13: 3b:8d:1d:10:46:d0:75:c9:c4:ce:b3:a1:df:b5:ae:bf:12:0a: aa:10:79:55:d9:90:2f:8a:8a:dd:b1:34:79:09:74:b2:ac:bf: 3f:06:6b:01:55:ad:05:45:81:ea:11:61:d6:2e:e6:b4:34:c6: 5b:b8:5c:e4:35:25:09:c0:4d:97:8d:42:c9:cf:28:09:a6:e3: a9:44:72:0d:e0:ed:54:28:b0:ad:eb:dd:47:a5:a6:1c:23:0e: 65:51:c6:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+wpacH+aZ7t1tQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzNWUzYmYtOTk0MC00YWJiLTljYzktMmY4YjhjZTY0 NGY0MB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk ZmNkY2MwMDMtZGVhOC00MWQzLWE3ZmItMWU0YzczYzhhZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLZ0Fdrevl+0SjXIRnEq80GEeXgH2l/R7xP2 QOuldzy4bdvUKMgrdYIhKNxskVJhWym9mthDBn0QLBviILGtBE4OYe6FLTTK9RB+ 0sKJ1C3OV/RMoPVqvgGceEornHjVEjQQqyau3pECGHMmBSkcrRdODvp5Ll62UQ3N cD2LREuUV5Dgpzj81MPzW2nWw9hSN1hiPMFqSOmLZe1hJ/lMoYRaGVLXonJb+30C yU0AhbnPnKeUSa99ZipnmFuuC418RqmnL1I8/pPrQ8asznUAHpwbwYPR+mB5/AZx 5AseK4I81JDFVHRkLkDlwkoJB1znCOZF2dqm1cstpjuO1uMscQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPM2/JnQDw3zeSvStQohYtSL9JV8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1 ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhiOGNlNjQ0ZjQvYTdiOTkyNGEtZjlhMy0z MDgzLWFhNmYtMzhkNjg1NWFjYzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzNWUzYmYtOTk0MC00YWJiLTlj YzktMmY4YjhjZTY0NGY0LzNkMzVlM2JmLTk5NDAtNGFiYi05Y2M5LTJmOGI4Y2U2 NDRmNC5jcmwwHwYDVR0jBBgwFoAU8Sfva6IwqshfVMIEsxFsrb2vsvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhi OGNlNjQ0ZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiUaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaFssdGSozY5eRkwKDhgJrOY0rx0bkJrSzjqPizKpxYGIZS3wfpjyvY FbP2FNJbMmJ05WfpRuEnQ/ntYJ0ZdvcV98oN+HHOxJswgv9CVFiZAwaRWV9nEAiP yrvy1Jk/lXrr7YbOmzg4zpJ53GOPznQpzCyFgb1lkVzHXosG6Df5/q+/zbVbwYHL SO/oL6Dx4KAnN9POux3LC2Vn+7FH4g4REzuNHRBG0HXJxM6zod+1rr8SCqoQeVXZ kC+Kit2xNHkJdLKsvz8GawFVrQVFgeoRYdYu5rQ0xlu4XOQ1JQnATZeNQsnPKAmm 46lEcg3g7VQosK3r3UelphwjDmVRxiM= -----END CERTIFICATE-----Generated at Wed May 13 11:29:00 2026 by rpki-client