$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/bdcefe6a-ece3-398c-8bf2-1f1bc9c26a19.roa File: bdcefe6a-ece3-398c-8bf2-1f1bc9c26a19.roa (raw, json) Hash identifier: am2KOiNzky+heFk2uo6hdNsX/9K705k9R5mu0i/mnIE= Subject key identifier: 9B:9D:BD:9B:97:DE:9A:50:27:A7:A0:42:6D:73:D7:24:C6:66:3B:70 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584DD625CAE81D93154F7B583E80 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/bdcefe6a-ece3-398c-8bf2-1f1bc9c26a19.roa Signing time: Fri 15 May 2026 01:00:24 +0000 ROA not before: Fri 15 May 2026 01:00:24 +0000 ROA not after: Thu 13 Aug 2026 01:00:24 +0000 asID: 5650 IP address blocks: 170.130.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d6:25:ca:e8:1d:93:15:4f:7b:58:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: May 15 01:00:24 2026 GMT Not After : Aug 13 01:00:24 2026 GMT Subject: CN=718a6710-074d-4da2-9d5d-91f0ae5c097e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:45:85:49:90:df:10:cb:a4:8d:72:e1:e2:0c: cd:34:b9:86:85:f7:a3:78:e4:ff:9a:01:94:ee:4f: bb:78:df:fe:12:21:f7:9a:a3:b2:9e:da:d4:13:ce: e0:53:ef:df:a4:40:ca:ac:5c:c2:f8:fa:eb:06:1b: 47:e6:8d:4b:16:83:bb:63:61:ea:54:b2:45:f2:f8: 48:07:f2:05:65:d3:fc:f9:ce:31:05:c3:3a:6b:b2: 3a:c6:c2:ed:d8:6d:fd:59:a3:c2:bf:bf:69:b2:22: 64:26:0d:2d:db:22:59:b3:e4:c1:22:08:52:a1:c9: 51:f1:cd:01:7a:13:dd:ee:44:04:f6:6a:05:9e:44: 30:00:39:7b:59:74:9c:c3:d0:44:c2:e6:03:9b:fd: 81:72:f2:18:9d:8d:d0:09:6e:03:86:a8:86:60:c7: 0c:4c:d4:03:da:0d:a9:33:3e:aa:cb:19:79:c9:3b: 59:57:ed:6f:ec:21:ee:46:5e:12:59:91:09:e1:06: 26:63:01:4d:34:22:6c:d6:80:00:60:a5:6f:ca:2e: 5d:5a:6d:ad:81:7b:fc:1e:e9:c7:f4:67:6c:5a:9d: b5:2a:5c:cc:20:f7:12:2c:46:99:c6:f6:57:44:31: 1f:de:eb:6a:99:34:63:02:da:87:84:70:5f:a6:7e: f3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:9D:BD:9B:97:DE:9A:50:27:A7:A0:42:6D:73:D7:24:C6:66:3B:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/bdcefe6a-ece3-398c-8bf2-1f1bc9c26a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 170.130.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:57:38:a8:ed:d6:25:0a:ec:ec:07:62:c2:51:d6:30:25:8d: 72:cd:d4:b0:67:78:f7:92:08:7c:32:56:67:31:b9:d9:35:e2: 38:e3:a7:6e:46:c5:61:e5:c8:79:58:95:f6:a4:2f:79:ea:84: 02:15:e9:07:9b:32:3e:9a:fc:5c:81:69:9f:56:93:c6:d5:3b: 21:d6:96:0a:c2:31:c2:fb:00:d9:23:fa:1b:91:d7:5d:a3:68: 08:1e:28:6f:62:03:97:54:e2:ad:9f:3c:c4:55:ca:8e:0c:31: f9:94:94:59:09:fb:fd:11:9f:43:d3:e4:d4:87:a4:d8:10:51: 5d:16:db:0d:26:19:d6:92:35:a7:b3:37:17:cf:f7:cb:5a:ea: ca:ad:1e:02:74:f9:b6:d4:9f:30:a0:d3:92:74:f9:b4:cd:f5: a4:a2:30:b7:0e:18:98:4f:30:b8:ef:c8:64:ec:0f:4b:c8:17: 82:09:21:52:9b:9e:24:e3:73:ec:5a:a6:bb:ab:90:4b:bf:32: 59:90:98:a9:80:75:93:10:e1:54:78:0a:b7:31:36:7c:e4:cf: 3c:5a:07:4d:3d:9e:5b:2e:cc:da:99:b5:0b:2d:70:50:b6:72: 38:b7:81:b1:8b:e0:4d:90:bc:0d:5c:f1:ec:5e:75:1a:1b:26: a5:24:42:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3WJcroHZMVT3tYPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDUxNTAxMDAyNFoXDTI2MDgxMzAxMDAyNFowLzEtMCsGA1UEAxMk NzE4YTY3MTAtMDc0ZC00ZGEyLTlkNWQtOTFmMGFlNWMwOTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkWFSZDfEMukjXLh4gzNNLmGhfejeOT/mgGU 7k+7eN/+EiH3mqOyntrUE87gU+/fpEDKrFzC+PrrBhtH5o1LFoO7Y2HqVLJF8vhI B/IFZdP8+c4xBcM6a7I6xsLt2G39WaPCv79psiJkJg0t2yJZs+TBIghSoclR8c0B ehPd7kQE9moFnkQwADl7WXScw9BEwuYDm/2BcvIYnY3QCW4DhqiGYMcMTNQD2g2p Mz6qyxl5yTtZV+1v7CHuRl4SWZEJ4QYmYwFNNCJs1oAAYKVvyi5dWm2tgXv8HunH 9GdsWp21KlzMIPcSLEaZxvZXRDEf3utqmTRjAtqHhHBfpn7zmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJudvZuX3ppQJ6egQm1z1yTGZjtwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYmRjZWZlNmEtZWNlMy0z OThjLThiZjItMWYxYmM5YzI2YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqoI5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdXOKjt1iUK7OwHYsJR1jAljXLN1LBnePeSCHwyVmcxudk14jjjp25G xWHlyHlYlfakL3nqhAIV6QebMj6a/FyBaZ9Wk8bVOyHWlgrCMcL7ANkj+huR112j aAgeKG9iA5dU4q2fPMRVyo4MMfmUlFkJ+/0Rn0PT5NSHpNgQUV0W2w0mGdaSNaez NxfP98ta6sqtHgJ0+bbUnzCg05J0+bTN9aSiMLcOGJhPMLjvyGTsD0vIF4IJIVKb niTjc+xaprurkEu/MlmQmKmAdZMQ4VR4CrcxNnzkzzxaB009nlsuzNqZtQstcFC2 cji3gbGL4E2QvA1c8exedRobJqUkQio= -----END CERTIFICATE-----Generated at Fri May 29 17:51:43 2026 by rpki-client