$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/4701a3d2-ab86-301b-b183-ec499c9b3a73.roa File: 4701a3d2-ab86-301b-b183-ec499c9b3a73.roa (raw, json) Hash identifier: gwqPTfFzGZiXiHhEL5/rJgFbCGe9rkaUPudMhADReBE= Subject key identifier: E8:E4:49:E0:54:BA:A8:21:81:F6:A7:B7:C7:06:4F:DC:08:0B:23:6B Certificate issuer: /CN=3d9d359c-ec49-4660-ab04-8247987b8dc7 Certificate serial: 010D0C9F4328584F119CDF9D85F39EF908278100 Authority key identifier: 2D:59:9B:D7:4D:5F:60:F8:28:FA:87:6F:5E:A9:88:8D:60:C3:4E:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/4701a3d2-ab86-301b-b183-ec499c9b3a73.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 402718 IP address blocks: 169.128.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:df:9d:85:f3:9e:f9:08:27:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d9d359c-ec49-4660-ab04-8247987b8dc7 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=bc5bfc41-54c2-4e7d-b739-8fb4c01afb89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a9:b6:5c:1b:3a:b4:21:c6:b6:21:af:1f:11: ee:4b:9a:43:0b:81:33:0b:68:27:c8:fb:9e:82:41: d4:ac:51:ae:cf:8e:e0:64:e2:bf:bf:31:70:87:31: 57:41:fe:18:62:b5:76:1c:02:2c:8d:f0:28:8c:5d: 04:d2:7d:b3:cc:fb:7c:be:74:ad:31:31:33:98:4d: 1a:3d:21:b7:e9:5e:31:7b:1d:e2:37:aa:e5:e9:6e: 5c:ea:ec:ee:b7:a2:df:ff:c9:7c:bc:bd:c4:cb:ac: 58:58:42:70:38:ad:49:d6:b2:67:1b:ba:eb:07:9f: 0c:0f:45:96:a5:d6:17:e4:ee:bf:3d:96:2a:ad:55: 31:d3:01:ab:a5:0d:ab:71:eb:0c:f3:5f:9a:36:7a: 99:cd:28:e6:f4:b0:f9:00:0f:ad:03:cb:69:9f:2c: d9:ba:b1:c6:7b:87:10:ef:6a:7a:3e:8d:22:ac:56: 9f:e6:49:a0:d1:46:8f:12:72:2c:aa:b7:c3:4e:b7: e7:1c:9f:ed:cc:70:7a:db:39:6c:72:16:0f:ca:2f: ee:d1:db:ec:1d:58:1a:bf:3b:b5:08:a1:15:0b:e3: 6a:58:d7:d5:66:64:62:68:c7:ba:41:da:5d:0f:eb: c2:2f:99:d0:0f:b8:aa:06:0d:16:9c:af:eb:7f:eb: 7a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E4:49:E0:54:BA:A8:21:81:F6:A7:B7:C7:06:4F:DC:08:0B:23:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/4701a3d2-ab86-301b-b183-ec499c9b3a73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7/3d9d359c-ec49-4660-ab04-8247987b8dc7.crl X509v3 Authority Key Identifier: keyid:2D:59:9B:D7:4D:5F:60:F8:28:FA:87:6F:5E:A9:88:8D:60:C3:4E:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3d9d359c-ec49-4660-ab04-8247987b8dc7.cer sbgp-ipAddrBlock: critical IPv4: 169.128.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:0e:08:0b:c6:e5:80:e0:4b:aa:af:29:62:b8:a6:49:04:74: 1f:2f:14:ae:c1:63:af:c1:81:f9:31:fb:5c:a5:fa:4c:ca:df: d6:83:84:aa:76:15:0f:93:c0:1e:81:ff:9d:1a:69:31:dc:9c: 81:d7:a6:74:63:a5:b5:0f:ef:bb:71:a6:26:d0:67:66:1b:37: 98:6e:34:07:4c:50:80:72:23:8e:f5:04:b9:32:7f:f6:7e:07: 16:7e:78:44:93:b2:a1:a5:14:74:ae:6a:70:16:82:3a:ef:c0: a0:b4:5a:24:7b:f8:d5:ad:bd:13:1b:df:88:c8:c1:19:65:da: af:19:de:d4:a1:a9:89:43:1a:3d:28:ca:8d:43:f1:98:41:de: a6:9b:5a:3a:c2:25:c1:97:5b:11:f5:9f:85:d8:dc:df:dc:8f: 0a:25:35:10:3a:ec:b0:98:d3:7e:e8:df:33:e4:e4:2d:ab:fa: 46:65:13:bd:49:5e:90:b1:74:ee:3d:73:dc:38:51:25:a1:50: 6e:65:e4:48:6f:79:70:64:33:6b:00:18:ba:eb:62:38:3c:56: 5c:cb:8c:99:92:53:d0:24:3f:90:8f:a2:ac:e1:1b:44:e2:e9: 56:ee:58:62:ef:c1:c4:02:6a:7c:b4:db:3d:47:05:3a:9f:85: 37:a8:32:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnN+dhfOe+QgngQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q5ZDM1OWMtZWM0OS00NjYwLWFiMDQtODI0Nzk4N2I4 ZGM3MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YmM1YmZjNDEtNTRjMi00ZTdkLWI3MzktOGZiNGMwMWFmYjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6m2XBs6tCHGtiGvHxHuS5pDC4EzC2gnyPue gkHUrFGuz47gZOK/vzFwhzFXQf4YYrV2HAIsjfAojF0E0n2zzPt8vnStMTEzmE0a PSG36V4xex3iN6rl6W5c6uzut6Lf/8l8vL3Ey6xYWEJwOK1J1rJnG7rrB58MD0WW pdYX5O6/PZYqrVUx0wGrpQ2rcesM81+aNnqZzSjm9LD5AA+tA8tpnyzZurHGe4cQ 72p6Po0irFaf5kmg0UaPEnIsqrfDTrfnHJ/tzHB62zlschYPyi/u0dvsHVgavzu1 CKEVC+NqWNfVZmRiaMe6QdpdD+vCL5nQD7iqBg0WnK/rf+t6tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjkSeBUuqghgfant8cGT9wICyNrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zZDlk MzU5Yy1lYzQ5LTQ2NjAtYWIwNC04MjQ3OTg3YjhkYzcvNDcwMWEzZDItYWI4Ni0z MDFiLWIxODMtZWM0OTljOWIzYTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvM2Q5ZDM1OWMtZWM0OS00NjYwLWFi MDQtODI0Nzk4N2I4ZGM3LzNkOWQzNTljLWVjNDktNDY2MC1hYjA0LTgyNDc5ODdi OGRjNy5jcmwwHwYDVR0jBBgwFoAULVmb101fYPgo+odvXqmIjWDDTkAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zZDlkMzU5Yy1lYzQ5LTQ2NjAtYWIwNC04MjQ3 OTg3YjhkYzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqYCqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEOCAvG5YDgS6qvKWK4pkkEdB8vFK7BY6/Bgfkx+1yl+kzK39aDhKp2 FQ+TwB6B/50aaTHcnIHXpnRjpbUP77txpibQZ2YbN5huNAdMUIByI471BLkyf/Z+ BxZ+eESTsqGlFHSuanAWgjrvwKC0WiR7+NWtvRMb34jIwRll2q8Z3tShqYlDGj0o yo1D8ZhB3qabWjrCJcGXWxH1n4XY3N/cjwolNRA67LCY037o3zPk5C2r+kZlE71J XpCxdO49c9w4USWhUG5l5EhveXBkM2sAGLrrYjg8VlzLjJmSU9AkP5CPoqzhG0Ti 6VbuWGLvwcQCany02z1HBTqfhTeoMqg= -----END CERTIFICATE-----Generated at Sat Sep 5 07:38:52 2026 by rpki-client