$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/bdcefe6a-ece3-398c-8bf2-1f1bc9c26a19.roa File: bdcefe6a-ece3-398c-8bf2-1f1bc9c26a19.roa (raw, json) Hash identifier: Fns4H7mWJmGmXVf3pF2dwLYaTmcqmz1BGKwAFt5F9zs= Subject key identifier: E3:67:CF:2E:D8:EC:21:9F:5B:A1:87:E0:CD:D7:B3:36:5D:D8:9C:A4 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F4972E56FFB94C6C5569BC440 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/bdcefe6a-ece3-398c-8bf2-1f1bc9c26a19.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 5650 IP address blocks: 170.130.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:e5:6f:fb:94:c6:c5:56:9b:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=305ad075-bc43-41a4-b738-2bc36631c2df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a2:6a:21:0e:63:a7:e0:4d:1f:39:eb:2e:de: 97:9d:3f:fe:52:3a:33:7e:fd:29:45:74:10:94:eb: 79:03:0f:48:13:15:cb:bd:08:0e:61:0e:ef:1d:3a: 0e:23:ab:62:fd:36:61:64:70:5a:6d:27:8e:98:78: 71:c2:80:22:3c:7f:36:ea:16:e7:fd:15:0d:36:63: 01:0b:54:a5:bd:1f:3e:45:65:20:ac:d4:50:55:26: 55:21:66:38:c5:5b:30:21:aa:00:2e:11:11:b9:5b: 56:2f:12:e1:24:c5:d8:b9:2d:ef:2f:87:c1:5d:ce: 67:97:12:a8:7a:a0:d0:91:a4:d6:5a:3f:60:49:80: b6:b5:ca:f9:fa:67:76:e3:ba:07:87:78:36:f6:82: 4f:e0:0b:41:b5:38:bd:e6:4c:c4:6b:3d:b2:5b:e8: 5d:8a:bf:f2:a9:ac:e3:7d:1a:1f:8c:44:00:7e:9a: b0:27:47:f0:11:69:68:23:28:0d:80:cc:0d:27:17: fb:e9:a8:36:63:d7:3f:ba:16:63:0c:59:76:a6:0e: 54:b6:62:86:7f:11:8f:08:ec:84:36:d4:f1:f8:55: ac:ea:e9:5a:4c:7a:3f:71:24:db:9c:1f:68:10:ca: f6:8d:13:14:ad:ca:09:64:99:a2:b9:89:0b:f4:4b: 1e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:67:CF:2E:D8:EC:21:9F:5B:A1:87:E0:CD:D7:B3:36:5D:D8:9C:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/bdcefe6a-ece3-398c-8bf2-1f1bc9c26a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 170.130.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:df:50:94:19:ea:b0:db:f7:76:02:3d:52:5d:de:41:51:51: c8:66:be:c3:49:e7:3c:89:ee:45:17:8a:4e:fd:39:5f:e9:d0: da:45:c7:a0:65:40:8a:89:8e:60:52:81:14:ec:f8:c8:4e:db: d8:e8:d2:35:76:14:c7:3c:54:3e:ef:b1:a1:67:81:e2:bf:7f: 0d:4b:35:62:d0:c4:55:84:9f:93:73:54:1a:96:2f:fd:9d:8b: e6:3e:79:44:35:b6:08:02:ec:e5:59:a2:bf:52:e0:93:36:45: 10:37:f2:a8:e6:3b:26:7e:b4:f7:5d:6b:df:8b:7c:94:a5:f7: 8c:c2:8b:79:20:05:3d:21:d8:97:4b:25:32:e6:3c:2f:96:3e: 63:49:51:c1:98:9d:07:b3:10:1f:2d:5c:6c:9c:72:50:e0:97: f6:90:18:63:cb:45:3a:cd:37:e4:4a:e4:4d:52:ba:39:8a:32: e5:83:93:97:15:af:ad:52:8b:c0:5d:3a:c0:52:4d:d8:02:ac: ce:68:c2:8a:13:a0:f0:fa:0d:de:05:c2:03:ab:66:8f:38:84: cd:0b:e2:0d:cd:d3:e6:12:d9:29:49:85:8f:b3:60:d7:0a:c4: ba:1e:a0:f3:03:aa:37:15:0d:91:3d:e5:36:80:75:24:70:1b: 4d:50:2a:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcuVv+5TGxVabxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzA1YWQwNzUtYmM0My00MWE0LWI3MzgtMmJjMzY2MzFjMmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKJqIQ5jp+BNHznrLt6XnT/+Ujozfv0pRXQQ lOt5Aw9IExXLvQgOYQ7vHToOI6ti/TZhZHBabSeOmHhxwoAiPH826hbn/RUNNmMB C1SlvR8+RWUgrNRQVSZVIWY4xVswIaoALhERuVtWLxLhJMXYuS3vL4fBXc5nlxKo eqDQkaTWWj9gSYC2tcr5+md247oHh3g29oJP4AtBtTi95kzEaz2yW+hdir/yqazj fRofjEQAfpqwJ0fwEWloIygNgMwNJxf76ag2Y9c/uhZjDFl2pg5UtmKGfxGPCOyE NtTx+FWs6ulaTHo/cSTbnB9oEMr2jRMUrcoJZJmiuYkL9EsezwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONnzy7Y7CGfW6GH4M3XszZd2JykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYmRjZWZlNmEtZWNlMy0z OThjLThiZjItMWYxYmM5YzI2YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqoI5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHfUJQZ6rDb93YCPVJd3kFRUchmvsNJ5zyJ7kUXik79OV/p0NpFx6Bl QIqJjmBSgRTs+MhO29jo0jV2FMc8VD7vsaFngeK/fw1LNWLQxFWEn5NzVBqWL/2d i+Y+eUQ1tggC7OVZor9S4JM2RRA38qjmOyZ+tPdda9+LfJSl94zCi3kgBT0h2JdL JTLmPC+WPmNJUcGYnQezEB8tXGycclDgl/aQGGPLRTrNN+RK5E1SujmKMuWDk5cV r61Si8BdOsBSTdgCrM5owooToPD6Dd4FwgOrZo84hM0L4g3N0+YS2SlJhY+zYNcK xLoeoPMDqjcVDZE95TaAdSRwG01QKpk= -----END CERTIFICATE-----Generated at Sun Sep 27 05:36:24 2026 by rpki-client