$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/028a077e-a9e8-36c1-8ad2-eb764c568a20.roa File: 028a077e-a9e8-36c1-8ad2-eb764c568a20.roa (raw, json) Hash identifier: h1YcbP1zWn/pcMbuf4srdkhsrGM7bw0fztmwG3B8aog= Subject key identifier: 42:F2:5D:EA:F1:90:5F:BC:F0:29:76:CA:4E:5F:D6:5E:CD:E2:DB:4D Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584EDC9FA89B8C367A5011B4F500 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/028a077e-a9e8-36c1-8ad2-eb764c568a20.roa Signing time: Mon 17 Aug 2026 01:28:02 +0000 ROA not before: Mon 17 Aug 2026 01:28:02 +0000 ROA not after: Sun 15 Nov 2026 02:28:02 +0000 asID: 63023 IP address blocks: 172.99.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:9f:a8:9b:8c:36:7a:50:11:b4:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Aug 17 01:28:02 2026 GMT Not After : Nov 15 02:28:02 2026 GMT Subject: CN=88560b42-8a42-4fe1-966c-080714497eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:35:8a:e5:83:4f:74:e3:35:20:e8:42:8b:54: 7e:4f:71:4e:21:f2:45:e2:10:b2:15:14:0c:a0:99: c0:ff:5d:83:b0:31:4b:02:41:61:0a:ef:25:04:15: 69:1d:4b:b0:ea:54:58:ed:c9:92:96:fb:14:bf:85: 94:d9:80:f0:a3:58:40:dd:ae:ac:39:39:74:2e:fd: c5:56:a6:bf:e4:19:68:8b:3a:e2:75:a7:44:48:96: 31:79:06:69:bd:03:59:4d:db:35:0f:4c:4e:59:8d: b7:b7:f8:2e:48:44:4d:0d:aa:65:66:ff:ca:ce:72: f6:8f:16:46:1c:24:ef:24:ec:1b:3f:6c:87:7b:75: 0c:16:01:e4:57:53:00:78:77:7a:af:3d:8d:65:39: ca:b5:32:cc:59:cf:50:44:72:46:50:4e:84:2a:ca: c9:b2:e5:70:7c:f6:54:f1:b4:4f:8b:3f:ed:1a:92: 67:3b:54:33:79:42:4a:3d:41:44:63:b4:e7:1c:2a: 55:b6:e3:7a:75:e2:40:76:d2:5a:73:bd:a2:55:81: b7:48:7f:30:4d:24:db:fb:d9:bc:9a:ff:da:fc:33: b6:9b:ff:9c:25:29:0d:ab:5f:90:e3:26:1f:23:63: a9:e6:91:7b:24:52:9a:90:99:c0:2d:4d:1b:48:4c: 7e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F2:5D:EA:F1:90:5F:BC:F0:29:76:CA:4E:5F:D6:5E:CD:E2:DB:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/028a077e-a9e8-36c1-8ad2-eb764c568a20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 172.99.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f5:76:9d:17:f8:d5:cf:f0:63:f7:49:7c:e4:80:fe:c7:11: 30:93:4f:f1:a1:01:69:c4:f5:e4:fd:1c:e2:59:7c:a2:4c:3d: 5e:b1:f7:e8:8e:6e:70:5e:70:8f:95:e5:44:12:db:33:8a:7d: 5f:a2:d3:40:38:55:27:81:bf:7c:86:06:7a:8e:54:1e:a2:81: 62:d9:ab:7a:ae:bf:01:e2:f2:93:a6:f4:d5:a3:72:a4:fe:b9: 9e:01:e8:85:dc:5b:43:30:13:cd:a8:1a:40:7a:81:a1:5b:57: 79:f7:b7:04:09:7a:4c:b2:94:3c:19:97:92:e9:e7:6a:bd:2a: 79:dd:89:62:e3:71:bd:d5:26:79:29:82:22:59:13:b7:a8:6b: 5a:12:b2:5a:ac:95:5c:79:fe:f9:ef:a3:10:5e:59:7e:e0:1d: d3:c3:4b:98:28:e0:b9:30:f8:15:e5:23:80:a1:0c:a3:54:01: 01:e4:fb:30:4f:db:c4:2c:3d:23:e1:9b:62:a9:ae:d0:65:4a: b0:ca:68:3c:20:c3:ac:3c:66:1b:ae:23:a5:dc:a8:1b:ea:01: 1f:24:91:6c:fa:19:a7:9a:c7:42:80:a5:60:ec:dc:6d:17:37: 40:cc:6e:a6:1c:2c:d4:2d:4d:c4:87:55:12:86:9d:2d:e1:bb: 46:8e:8f:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7cn6ibjDZ6UBG09QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDgxNzAxMjgwMloXDTI2MTExNTAyMjgwMlowLzEtMCsGA1UEAxMk ODg1NjBiNDItOGE0Mi00ZmUxLTk2NmMtMDgwNzE0NDk3ZWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTWK5YNPdOM1IOhCi1R+T3FOIfJF4hCyFRQM oJnA/12DsDFLAkFhCu8lBBVpHUuw6lRY7cmSlvsUv4WU2YDwo1hA3a6sOTl0Lv3F Vqa/5BloizridadESJYxeQZpvQNZTds1D0xOWY23t/guSERNDaplZv/KznL2jxZG HCTvJOwbP2yHe3UMFgHkV1MAeHd6rz2NZTnKtTLMWc9QRHJGUE6EKsrJsuVwfPZU 8bRPiz/tGpJnO1QzeUJKPUFEY7TnHCpVtuN6deJAdtJac72iVYG3SH8wTSTb+9m8 mv/a/DO2m/+cJSkNq1+Q4yYfI2Op5pF7JFKakJnALU0bSEx+hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELyXerxkF+88Cl2yk5f1l7N4ttNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMDI4YTA3N2UtYTllOC0z NmMxLThhZDItZWI3NjRjNTY4YTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGO9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED1dp0X+NXP8GP3SXzkgP7HETCTT/GhAWnE9eT9HOJZfKJMPV6x9+iO bnBecI+V5UQS2zOKfV+i00A4VSeBv3yGBnqOVB6igWLZq3quvwHi8pOm9NWjcqT+ uZ4B6IXcW0MwE82oGkB6gaFbV3n3twQJekyylDwZl5Lp52q9KnndiWLjcb3VJnkp giJZE7eoa1oSslqslVx5/vnvoxBeWX7gHdPDS5go4Lkw+BXlI4ChDKNUAQHk+zBP 28QsPSPhm2KprtBlSrDKaDwgw6w8ZhuuI6XcqBvqAR8kkWz6Gaeax0KApWDs3G0X N0DMbqYcLNQtTcSHVRKGnS3hu0aOjzY= -----END CERTIFICATE-----Generated at Thu Sep 3 17:43:24 2026 by rpki-client