$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/bfe1b12d-9cbf-3bd3-a357-8bed5f3e39dc.roa File: bfe1b12d-9cbf-3bd3-a357-8bed5f3e39dc.roa (raw, json) Hash identifier: ztMcfEc/oUM2TYF9rbrmkOrv/oi0HsJiTHNK66lv6mI= Subject key identifier: 70:5E:1B:C3:A8:4E:F7:04:C1:0A:22:BD:19:E4:19:E1:E9:17:AE:42 Certificate issuer: /CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Certificate serial: 010D0C9F4328584F49872A956C066005BC97D900 Authority key identifier: 30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/bfe1b12d-9cbf-3bd3-a357-8bed5f3e39dc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 135074 IP address blocks: 23.170.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:2a:95:6c:06:60:05:bc:97:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=64f6c04b-c5aa-4999-a3e5-ef37f04f7a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:69:d7:a4:a6:02:d6:c6:87:8c:e6:85:b8:ad: 86:5a:f0:3d:c3:c7:6e:18:e4:c6:6d:ab:ea:96:b3: 2f:46:86:ad:18:d1:b5:a8:71:e5:3d:79:0f:c2:20: c6:24:f2:40:28:29:59:fa:7f:a2:5d:05:4b:d8:6c: d3:fa:de:64:cc:b1:f1:c4:b0:01:10:fb:dc:07:8c: 8f:b9:2e:7a:6f:91:d0:7f:f2:a7:a4:27:c3:ee:f4: 81:75:27:53:c9:a2:eb:55:47:07:cb:84:49:c6:29: c1:ee:26:37:a1:38:92:30:4d:82:1b:cc:d4:e9:78: 00:5c:8b:03:0f:e0:6d:86:4b:f9:06:f0:00:09:e6: 8d:b9:fa:56:8b:88:0c:d5:6d:5c:1a:00:98:32:71: c4:87:a5:08:24:f6:7d:ef:d4:04:52:d0:60:ef:6f: c4:6e:e5:c3:cb:86:96:53:33:30:7a:c4:e0:86:3b: cb:7e:b4:c4:4a:71:f9:97:77:93:4b:8b:eb:3f:50: ae:54:cf:c3:ce:84:8f:0b:af:4c:8d:36:65:f3:2b: 91:df:d8:77:45:bc:c2:cb:29:7d:c0:fb:bf:d8:84: 7e:a5:77:c6:c9:b5:99:ed:41:a2:2d:d7:60:19:42: c2:c5:37:e1:6d:57:3c:81:5e:9b:ee:6f:cf:d9:c6: 7e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:5E:1B:C3:A8:4E:F7:04:C1:0A:22:BD:19:E4:19:E1:E9:17:AE:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/bfe1b12d-9cbf-3bd3-a357-8bed5f3e39dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl X509v3 Authority Key Identifier: keyid:30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer sbgp-ipAddrBlock: critical IPv4: 23.170.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:57:01:df:48:5b:f9:7a:26:1a:5a:ab:10:fd:68:cb:a3:21: 9a:05:e7:cb:40:d3:c2:76:8f:f9:96:24:94:0c:ea:fe:40:04: 15:b8:d0:22:e6:a7:c7:12:eb:f1:e5:4e:7e:ff:8d:f0:3b:13: 46:e4:37:00:74:68:a4:28:df:dd:14:4b:f5:6c:cc:24:6f:e1: 78:7d:71:fc:b4:9b:1a:b4:53:bc:05:42:00:15:55:47:6d:03: fa:c0:82:d9:69:8c:47:c4:c5:c3:b2:3d:51:89:b6:5f:31:c6: 0d:98:2f:55:ea:4b:44:b0:ae:58:0e:6b:53:b1:6c:68:ef:c1: b3:4e:c0:55:ec:7a:44:9a:5f:9c:7f:79:cc:48:b1:1f:be:17: 28:81:05:27:8d:dc:05:8c:bd:f6:ab:40:92:65:47:a6:89:55: 22:b6:38:cb:8e:ce:05:be:22:af:9a:df:a6:8b:44:e2:d5:0d: 15:cf:8a:13:a9:79:5f:e9:e5:15:c6:37:97:cc:d8:94:0a:a5: ee:bc:37:7c:92:f4:32:e1:99:c5:92:64:fc:71:6c:8c:61:b3: a6:73:26:d1:e2:0d:9f:46:9a:52:c5:d5:15:f1:1f:69:18:f5: 98:9e:1f:6c:e5:8a:6a:1d:01:20:7a:9d:70:65:8b:b6:18:7b: d9:47:85:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhyqVbAZgBbyX2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NjdmOGItZTdiNy00YzM0LWFhYTAtMDBmZGRiZWVm NDhkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjRmNmMwNGItYzVhYS00OTk5LWEzZTUtZWYzN2YwNGY3YTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGnXpKYC1saHjOaFuK2GWvA9w8duGOTGbavq lrMvRoatGNG1qHHlPXkPwiDGJPJAKClZ+n+iXQVL2GzT+t5kzLHxxLABEPvcB4yP uS56b5HQf/KnpCfD7vSBdSdTyaLrVUcHy4RJxinB7iY3oTiSME2CG8zU6XgAXIsD D+Bthkv5BvAACeaNufpWi4gM1W1cGgCYMnHEh6UIJPZ979QEUtBg72/EbuXDy4aW UzMwesTghjvLfrTESnH5l3eTS4vrP1CuVM/DzoSPC69MjTZl8yuR39h3RbzCyyl9 wPu/2IR+pXfGybWZ7UGiLddgGULCxTfhbVc8gV6b7m/P2cZ+mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBeG8OoTvcEwQoivRnkGeHpF65CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zOTY2 N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZkZGJlZWY0OGQvYmZlMWIxMmQtOWNiZi0z YmQzLWEzNTctOGJlZDVmM2UzOWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzk2NjdmOGItZTdiNy00YzM0LWFh YTAtMDBmZGRiZWVmNDhkLzM5NjY3ZjhiLWU3YjctNGMzNC1hYWEwLTAwZmRkYmVl ZjQ4ZC5jcmwwHwYDVR0jBBgwFoAUMN8a5EPYVgbeIdFXPxgyY3q5bw0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zOTY2N2Y4Yi1lN2I3LTRjMzQtYWFhMC0wMGZk ZGJlZWY0OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6o4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5XAd9IW/l6JhpaqxD9aMujIZoF58tA08J2j/mWJJQM6v5ABBW40CLm p8cS6/HlTn7/jfA7E0bkNwB0aKQo390US/VszCRv4Xh9cfy0mxq0U7wFQgAVVUdt A/rAgtlpjEfExcOyPVGJtl8xxg2YL1XqS0SwrlgOa1OxbGjvwbNOwFXsekSaX5x/ ecxIsR++FyiBBSeN3AWMvfarQJJlR6aJVSK2OMuOzgW+Iq+a36aLROLVDRXPihOp eV/p5RXGN5fM2JQKpe68N3yS9DLhmcWSZPxxbIxhs6ZzJtHiDZ9GmlLF1RXxH2kY 9ZieH2zlimodASB6nXBli7YYe9lHhUs= -----END CERTIFICATE-----Generated at Mon Oct 12 19:03:37 2026 by rpki-client