$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bfd9aa03-f2f8-378a-b993-4399913468c8.roa File: bfd9aa03-f2f8-378a-b993-4399913468c8.roa (raw, json) Hash identifier: 3NxcGdDF/UaD2DFRJ09a0eqS2zERBimVz1s5YwdLG/s= Subject key identifier: 30:77:59:4F:B7:C5:47:29:06:BA:75:6C:AD:43:33:EA:88:18:88:86 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584F655E15E17B1E528D9CB3D100 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bfd9aa03-f2f8-378a-b993-4399913468c8.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 11427 IP address blocks: 70.120.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5e:15:e1:7b:1e:52:8d:9c:b3:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=6b0ed56b-d48d-4b98-b84b-be1442ca1a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:92:f0:d6:58:cd:45:68:63:24:b8:a0:1d:2c: 5e:ec:c0:b1:92:e9:b4:ac:c1:eb:1e:35:9d:8b:c4: 45:6d:43:50:92:6b:72:3d:63:69:66:e3:54:9e:a0: b9:4a:39:43:f8:00:b0:a7:34:e8:de:bd:23:e9:9b: 16:f7:82:c3:7e:e1:fc:4b:3f:81:19:2f:d4:c5:61: 50:9c:89:9d:c3:21:84:3b:0f:0f:ed:f5:75:6b:b9: 22:52:25:d5:3c:43:0b:de:cc:24:1c:66:27:0d:6f: b2:c8:1a:d4:b0:4b:73:ff:54:fd:fb:20:c8:04:dc: d7:92:4e:27:78:64:9b:6c:46:78:83:5a:ed:5f:f9: 72:eb:69:84:de:45:aa:3a:91:92:08:ac:a8:a7:cd: ac:14:31:21:0e:27:ed:76:06:d0:0e:3e:a9:d5:60: 6e:1b:45:4b:b1:54:59:c4:d3:31:ee:b8:00:00:c3: 44:db:16:c3:d7:6e:ab:31:74:85:68:0f:34:5f:31: 3d:24:1b:89:9c:94:f5:f7:e8:b3:a5:7a:de:b9:83: 66:be:17:d9:11:c2:4a:39:30:41:e6:d3:9b:aa:9d: 86:06:6e:2f:96:4b:5c:e7:75:3d:0e:62:47:06:33: b1:71:f5:f0:fb:f0:ab:42:4c:a8:fa:4b:3b:80:fd: 8d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:77:59:4F:B7:C5:47:29:06:BA:75:6C:AD:43:33:EA:88:18:88:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bfd9aa03-f2f8-378a-b993-4399913468c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 70.120.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:3f:fb:d6:3a:75:62:a0:b6:5f:01:3c:fd:15:21:f3:37:6e: 2b:d7:4d:b4:45:3c:d8:72:4a:29:80:90:59:85:92:3d:09:16: bf:ca:14:58:97:14:9b:aa:2b:75:c2:e5:4f:9d:86:c6:b0:d5: 06:0d:7b:c9:9c:9e:50:54:91:c3:9f:e4:13:2d:0c:aa:e3:7c: 4a:bb:6b:28:13:66:0a:17:12:98:a6:6d:3e:1c:3c:0e:e6:f5: fb:e0:1d:0e:45:51:f0:7a:a6:63:9e:af:42:d6:cb:c1:75:aa: ab:ba:e5:e6:2d:eb:7b:14:44:46:38:84:52:7a:f8:ea:be:b2: c2:91:d4:c8:2b:c7:44:b6:c8:a0:84:9e:50:18:a3:0b:61:dd: 33:ae:ee:e3:c3:89:fe:b6:62:50:54:0a:5d:80:cf:61:6b:a0: 3a:e1:40:cd:b0:a9:5c:bd:3b:7e:e6:35:72:36:0b:a6:16:2c: 60:2d:a8:51:58:bf:30:f4:e3:57:48:5f:c3:47:5c:a8:b5:ee: 1f:fc:d8:9f:b6:1f:b8:3d:37:fc:bd:ef:6e:d6:67:55:bb:4e: 08:c5:45:20:a8:fe:f2:95:bf:4b:89:b8:a6:bc:0e:72:8b:67: 74:c3:68:81:ef:58:eb:61:6e:df:ac:95:6a:de:7f:37:ff:98: be:c2:f9:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXhXhex5SjZyz0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk NmIwZWQ1NmItZDQ4ZC00Yjk4LWI4NGItYmUxNDQyY2ExYTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJLw1ljNRWhjJLigHSxe7MCxkum0rMHrHjWd i8RFbUNQkmtyPWNpZuNUnqC5SjlD+ACwpzTo3r0j6ZsW94LDfuH8Sz+BGS/UxWFQ nImdwyGEOw8P7fV1a7kiUiXVPEML3swkHGYnDW+yyBrUsEtz/1T9+yDIBNzXkk4n eGSbbEZ4g1rtX/ly62mE3kWqOpGSCKyop82sFDEhDiftdgbQDj6p1WBuG0VLsVRZ xNMx7rgAAMNE2xbD126rMXSFaA80XzE9JBuJnJT19+izpXreuYNmvhfZEcJKOTBB 5tObqp2GBm4vlktc53U9DmJHBjOxcfXw+/CrQkyo+ks7gP2NGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDB3WU+3xUcpBrp1bK1DM+qIGIiGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvYmZkOWFhMDMtZjJmOC0z NzhhLWI5OTMtNDM5OTkxMzQ2OGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRngAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFo/+9Y6dWKgtl8BPP0VIfM3bivXTbRFPNhySimAkFmFkj0JFr/KFFiX FJuqK3XC5U+dhsaw1QYNe8mcnlBUkcOf5BMtDKrjfEq7aygTZgoXEpimbT4cPA7m 9fvgHQ5FUfB6pmOer0LWy8F1qqu65eYt63sUREY4hFJ6+Oq+ssKR1Mgrx0S2yKCE nlAYowth3TOu7uPDif62YlBUCl2Az2FroDrhQM2wqVy9O37mNXI2C6YWLGAtqFFY vzD041dIX8NHXKi17h/82J+2H7g9N/y9727WZ1W7TgjFRSCo/vKVv0uJuKa8DnKL Z3TDaIHvWOthbt+slWrefzf/mL7C+bk= -----END CERTIFICATE-----Generated at Tue Oct 13 18:02:44 2026 by rpki-client