$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/35e2f0c1-0db2-3daa-8607-b26ba451e84e.roa File: 35e2f0c1-0db2-3daa-8607-b26ba451e84e.roa (raw, json) Hash identifier: qvXB7JRTjXViddQ/4fRzjDagshkTyKQ6X0TW4ox1Iks= Subject key identifier: 3E:DD:27:29:95:23:DA:FE:0B:44:2D:1C:CA:1A:CB:55:65:4C:AC:6D Certificate issuer: /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Certificate serial: 010D0C9F4328584EED51FBDE3ABDEE6F338A3840 Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/35e2f0c1-0db2-3daa-8607-b26ba451e84e.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 46450 IP address blocks: 170.101.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:51:fb:de:3a:bd:ee:6f:33:8a:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=1adecc79-eaff-4ac7-8010-0d1408c5eac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2f:2e:92:be:bb:f0:a1:2d:f6:91:81:92:0e: cd:e8:19:3e:a1:91:cd:d4:06:f4:ca:b7:18:43:f0: 22:77:d9:b2:89:bc:3e:59:07:99:eb:40:e4:e8:d3: d4:7d:64:e9:29:76:cb:65:e9:50:c3:99:29:4f:0e: e3:3b:1b:ee:c0:87:49:82:1f:13:96:8a:5b:c5:13: 4a:6d:bb:3d:99:5e:d4:ed:6f:5f:8d:17:17:2d:12: 0b:16:40:e9:14:38:b7:b3:0d:5d:aa:ac:57:f2:e8: 2d:1c:62:10:12:48:04:f4:2a:d0:e7:fe:4c:09:32: 68:9d:60:00:ab:a2:86:3c:2f:0b:5b:3b:e0:e8:59: a0:eb:00:db:fa:eb:56:89:6e:db:07:20:23:84:d8: fc:87:49:96:0d:9c:03:d4:f7:66:85:31:fe:1f:a7: 62:48:03:b5:c8:12:30:f5:1b:5b:6c:0a:c5:35:75: 91:79:37:2e:48:a8:6c:bc:2a:a9:dc:fd:4a:c7:18: f7:4b:98:b1:a2:82:ca:07:a1:63:05:b9:55:c0:47: 10:29:97:56:82:59:fa:d8:16:e1:d3:73:d8:19:ff: 8e:81:69:2d:ab:d6:f3:e2:0c:ee:c4:7e:10:80:99: b3:fd:06:37:2a:df:2d:8d:77:75:69:96:e1:38:9e: 72:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DD:27:29:95:23:DA:FE:0B:44:2D:1C:CA:1A:CB:55:65:4C:AC:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/35e2f0c1-0db2-3daa-8607-b26ba451e84e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl X509v3 Authority Key Identifier: keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer sbgp-ipAddrBlock: critical IPv4: 170.101.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:e0:4b:c4:5e:47:53:db:0e:1e:16:09:e9:0d:b6:2a:28:f6: 50:dd:a2:ba:54:af:65:05:87:f3:03:d2:5f:99:22:03:e4:d1: 7c:b4:42:b9:66:f4:76:b2:a3:04:68:fe:f9:9a:3a:07:ac:11: 62:a3:21:d6:84:4e:7f:8f:b6:62:cf:5c:51:96:57:88:25:9f: 66:19:90:a7:2c:98:b2:19:01:e1:2a:ce:41:98:4d:f0:5a:9a: 36:ce:b7:39:c6:d2:ce:9f:a0:72:05:4d:71:21:bb:ad:32:98: 4e:1b:04:0c:d3:15:a1:a8:dd:96:a7:6b:84:d3:e5:a3:f7:1d: 3f:a9:4d:6b:0c:90:b4:dd:fd:37:db:cc:b9:5e:f9:5c:d5:f9: c3:63:66:7e:47:63:fa:2d:83:82:d9:af:2a:74:ba:a5:8f:a0: 62:01:43:8a:35:cf:90:b9:30:b2:d4:d4:1d:0f:b2:27:53:f8: 31:81:1f:c5:63:79:c7:fb:a8:33:ea:a2:e5:01:88:1c:bc:17: b8:3d:b3:78:f4:47:f5:cc:b7:48:95:05:02:9e:d3:55:52:25: 92:05:05:84:a9:63:d9:98:1d:48:e9:30:c4:77:ef:22:73:44: b6:3b:df:10:5c:6d:13:44:90:6f:01:d3:a2:86:8a:36:2e:71: 3b:98:04:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUfveOr3ubzOKOEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5 ZGMyMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk MWFkZWNjNzktZWFmZi00YWM3LTgwMTAtMGQxNDA4YzVlYWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry8ukr678KEt9pGBkg7N6Bk+oZHN1Ab0yrcY Q/Aid9myibw+WQeZ60Dk6NPUfWTpKXbLZelQw5kpTw7jOxvuwIdJgh8TlopbxRNK bbs9mV7U7W9fjRcXLRILFkDpFDi3sw1dqqxX8ugtHGIQEkgE9CrQ5/5MCTJonWAA q6KGPC8LWzvg6Fmg6wDb+utWiW7bByAjhNj8h0mWDZwD1PdmhTH+H6diSAO1yBIw 9RtbbArFNXWReTcuSKhsvCqp3P1Kxxj3S5ixooLKB6FjBblVwEcQKZdWgln62Bbh 03PYGf+OgWktq9bz4gzuxH4QgJmz/QY3Kt8tjXd1aZbhOJ5yLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7dJymVI9r+C0QtHMoay1VlTKxtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvMzVlMmYwYzEtMGRiMi0z ZGFhLTg2MDctYjI2YmE0NTFlODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3 YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0 OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh ZWY1NDlkYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqmUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrgS8ReR1PbDh4WCekNtioo9lDdorpUr2UFh/MD0l+ZIgPk0Xy0Qrlm 9HayowRo/vmaOgesEWKjIdaETn+PtmLPXFGWV4gln2YZkKcsmLIZAeEqzkGYTfBa mjbOtznG0s6foHIFTXEhu60ymE4bBAzTFaGo3Zana4TT5aP3HT+pTWsMkLTd/Tfb zLle+VzV+cNjZn5HY/otg4LZryp0uqWPoGIBQ4o1z5C5MLLU1B0PsidT+DGBH8Vj ecf7qDPqouUBiBy8F7g9s3j0R/XMt0iVBQKe01VSJZIFBYSpY9mYHUjpMMR37yJz RLY73xBcbRNEkG8B06KGijYucTuYBFk= -----END CERTIFICATE-----Generated at Sun Sep 13 08:50:19 2026 by rpki-client