$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa File: d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa (raw, json) Hash identifier: 6STuz+Fuw0+i1S0hMiav6U++W8Akyih0Hymvw43dzzA= Subject key identifier: A5:EE:62:89:1D:4E:40:71:40:B8:82:02:4A:E1:4A:12:31:D0:B1:85 Certificate issuer: /CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4 Certificate serial: 010D0C9F4328584F49762809343E3B63F51E9540 Authority key identifier: F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8070 IP address blocks: 137.70.156.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:28:09:34:3e:3b:63:f5:1e:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=794dd685-f508-47c2-834a-df32381a9c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:26:94:3e:ec:14:f3:c9:4e:cc:dc:bd:d4:59: c0:03:a9:9f:dc:bc:a2:fd:84:d2:d2:6f:4c:3f:b1: 3d:30:7a:8b:87:e9:56:f5:69:c1:7b:96:27:1c:16: 77:9e:7f:3f:fe:a2:b7:92:50:14:18:6d:5b:09:b2: 84:26:84:3f:0e:c6:5d:e3:ba:20:29:cb:40:8d:9e: 8e:aa:8a:fe:0c:fb:6e:1f:22:1e:6d:41:72:ce:b0: 80:2b:57:52:61:dd:fa:82:5b:ea:3b:54:c9:2a:06: 7e:a1:8f:5e:80:17:4c:d8:85:12:16:8a:45:79:3e: 76:27:a1:69:a3:af:0f:82:7a:eb:bb:8d:c9:6d:c3: 27:be:d2:b7:ce:17:f8:41:a2:94:a4:30:10:a4:d9: 0c:3e:ed:30:88:94:d4:73:9f:18:de:a3:7a:21:81: bb:b1:66:4c:39:ed:db:d2:89:a8:29:1d:c6:18:4b: 75:12:8e:7d:21:53:ef:70:77:c4:c9:75:2b:d3:bf: 29:62:bc:c4:15:c3:f6:8f:7a:ae:a4:11:90:e1:80: 86:59:bb:eb:82:7b:4a:39:ac:72:62:e3:24:9d:06: 85:51:4a:a0:fe:f3:0f:b0:07:a9:15:5f:2d:10:24: c9:26:d6:44:2d:5e:e6:b7:17:f0:df:04:e4:b9:d8: a5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EE:62:89:1D:4E:40:71:40:B8:82:02:4A:E1:4A:12:31:D0:B1:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/d673c6fe-b849-32b0-aa90-335ac12c2c0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.crl X509v3 Authority Key Identifier: keyid:F1:27:EF:6B:A2:30:AA:C8:5F:54:C2:04:B3:11:6C:AD:BD:AF:B2:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d35e3bf-9940-4abb-9cc9-2f8b8ce644f4.cer sbgp-ipAddrBlock: critical IPv4: 137.70.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:23:7a:83:cd:f4:1f:ef:f9:4d:11:0e:82:d8:c0:72:e8:02: 46:18:f1:f5:cd:7d:21:e4:01:d1:e2:11:dc:49:0c:87:bc:b5: 59:4d:2c:1f:ed:51:42:97:65:b0:9c:b4:14:8a:8e:08:43:a1: 10:6c:90:6a:c7:5e:b7:f0:5b:d1:86:0e:1b:1b:2d:12:63:cc: fb:1a:67:63:bb:fe:13:f5:df:a7:ba:88:1d:af:1c:20:e3:cd: 00:9b:69:e9:bf:7a:f3:94:8a:e5:e5:49:8f:85:22:e8:98:2e: 1d:88:32:d4:48:30:5c:07:29:01:7c:3f:4b:a5:1c:a6:ae:0e: 7a:78:75:3e:66:a3:d4:dd:73:46:fd:81:cb:98:cb:c8:5b:5c: 14:21:97:a6:92:86:ce:98:03:c8:6c:7c:96:e5:03:e4:bf:24: 5f:dd:34:5b:02:66:fa:b8:5d:c4:61:10:a9:3d:29:f2:f7:41: ed:f9:47:53:a6:88:9c:6f:07:f3:36:33:6f:36:0e:0a:64:ae: ae:be:51:10:cb:3c:af:77:6b:08:09:a0:d3:72:75:59:3b:17: 8d:33:e9:41:c4:3a:33:bd:3e:99:8c:0b:c3:52:d5:9a:06:61: fa:53:36:76:eb:24:cb:3d:9c:d9:2f:11:d4:da:4b:d0:3e:e4: 2b:b5:6b:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdigJND47Y/UelUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzNWUzYmYtOTk0MC00YWJiLTljYzktMmY4YjhjZTY0 NGY0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Nzk0ZGQ2ODUtZjUwOC00N2MyLTgzNGEtZGYzMjM4MWE5YzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiaUPuwU88lOzNy91FnAA6mf3Lyi/YTS0m9M P7E9MHqLh+lW9WnBe5YnHBZ3nn8//qK3klAUGG1bCbKEJoQ/DsZd47ogKctAjZ6O qor+DPtuHyIebUFyzrCAK1dSYd36glvqO1TJKgZ+oY9egBdM2IUSFopFeT52J6Fp o68Pgnrru43JbcMnvtK3zhf4QaKUpDAQpNkMPu0wiJTUc58Y3qN6IYG7sWZMOe3b 0omoKR3GGEt1Eo59IVPvcHfEyXUr078pYrzEFcP2j3qupBGQ4YCGWbvrgntKOaxy YuMknQaFUUqg/vMPsAepFV8tECTJJtZELV7mtxfw3wTkudilAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXuYokdTkBxQLiCAkrhShIx0LGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1 ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhiOGNlNjQ0ZjQvZDY3M2M2ZmUtYjg0OS0z MmIwLWFhOTAtMzM1YWMxMmMyYzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzNWUzYmYtOTk0MC00YWJiLTlj YzktMmY4YjhjZTY0NGY0LzNkMzVlM2JmLTk5NDAtNGFiYi05Y2M5LTJmOGI4Y2U2 NDRmNC5jcmwwHwYDVR0jBBgwFoAU8Sfva6IwqshfVMIEsxFsrb2vsvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDM1ZTNiZi05OTQwLTRhYmItOWNjOS0yZjhi OGNlNjQ0ZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiUacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUjeoPN9B/v+U0RDoLYwHLoAkYY8fXNfSHkAdHiEdxJDIe8tVlNLB/t UUKXZbCctBSKjghDoRBskGrHXrfwW9GGDhsbLRJjzPsaZ2O7/hP136e6iB2vHCDj zQCbaem/evOUiuXlSY+FIuiYLh2IMtRIMFwHKQF8P0ulHKauDnp4dT5mo9Tdc0b9 gcuYy8hbXBQhl6aShs6YA8hsfJblA+S/JF/dNFsCZvq4XcRhEKk9KfL3Qe35R1Om iJxvB/M2M282Dgpkrq6+URDLPK93awgJoNNydVk7F40z6UHEOjO9PpmMC8NS1ZoG YfpTNnbrJMs9nNkvEdTaS9A+5Cu1a0c= -----END CERTIFICATE-----Generated at Sun Sep 27 11:50:35 2026 by rpki-client