$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/0c0f476e-7716-351b-9eb1-1ca11d6609a9.roa File: 0c0f476e-7716-351b-9eb1-1ca11d6609a9.roa (raw, json) Hash identifier: KhvQs69kdiv5ADpN29V6MBlvRREqf3jV0HGhpUtFizA= Subject key identifier: D4:F3:53:7C:47:7E:FE:2D:90:0C:A2:3C:A7:34:18:4E:C6:10:75:C4 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584ED431CD574DEEC527B90B8C80 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/0c0f476e-7716-351b-9eb1-1ca11d6609a9.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 63023 IP address blocks: 136.176.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:cd:57:4d:ee:c5:27:b9:0b:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=2f4ee6c9-6537-4a5a-9927-1fad7c60f3af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d6:c3:7a:17:46:87:2f:02:77:97:88:d7:d0: 8f:da:08:7b:f9:5c:2e:34:74:9c:75:83:a9:90:e8: 9f:45:10:55:91:65:64:33:a8:10:b6:62:ac:a5:e9: 0b:ec:4f:b3:25:b2:b8:12:23:d1:86:ad:ee:04:5e: 76:e3:2b:6a:e4:0b:7e:8a:c5:7c:36:10:f5:3f:f2: 09:59:d1:95:69:ea:56:bf:52:4c:29:4f:af:37:26: f0:fc:2c:5f:5e:29:c6:9c:57:44:b2:46:f4:e1:bd: fb:54:f1:c0:15:7a:8b:26:16:d9:33:f2:b2:fd:99: 0b:fe:ab:3b:af:20:9a:78:a9:1f:02:48:6f:19:16: af:4a:54:05:55:3a:8f:4c:1a:47:56:31:95:31:96: 33:1d:31:34:d5:43:4a:fd:d3:f9:23:93:1a:a1:dc: 6d:7c:dd:72:b4:8b:45:6e:46:99:71:4d:09:2b:4f: ff:28:f2:0f:c2:05:22:9e:c5:bc:3e:7b:a1:65:69: 7b:cb:68:f3:09:f5:66:9c:62:9e:de:df:df:d6:c5: f7:89:5d:c2:fe:b0:98:05:d4:11:1c:f7:e7:32:b1: 3a:04:ab:17:22:5a:82:ef:e3:81:6a:c4:1c:18:b5: b7:cf:fe:d0:68:c4:99:d8:00:04:b3:e6:a7:99:62: 76:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F3:53:7C:47:7E:FE:2D:90:0C:A2:3C:A7:34:18:4E:C6:10:75:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/0c0f476e-7716-351b-9eb1-1ca11d6609a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:d2:7b:85:da:48:fb:a5:49:a7:66:50:7d:43:a6:dc:e8:f3: a7:99:ca:d1:5c:61:68:d3:79:97:79:e9:72:eb:67:0a:c3:a2: c4:21:7f:9a:7e:d2:b4:14:ff:6c:41:f3:f9:ff:36:cb:f8:b4: 09:31:06:3b:67:a8:4e:8d:0b:e7:95:86:4d:7a:6a:92:ee:be: 23:90:7e:56:c3:92:20:59:88:a8:56:a4:57:d4:ef:9b:9f:55: 48:0f:b3:a9:e7:bb:2f:06:d5:42:1c:09:71:07:b2:49:ae:a1: 4a:1c:7b:2e:a6:c3:26:f1:91:93:58:2a:70:19:72:e2:40:1e: 3d:5a:97:49:be:8e:02:19:a1:47:52:92:81:ef:31:91:9e:10: cc:f0:16:90:e8:76:cf:18:c4:fc:c0:0b:9f:51:82:db:fe:0a: d2:42:4b:14:a7:44:f5:72:0d:06:e4:86:1f:2f:7e:8f:38:44: ab:b8:d6:e4:e3:a9:8a:98:51:79:ed:62:5a:bc:62:e3:3f:73: b1:4f:4a:b5:61:1c:9e:4d:f8:2f:61:85:90:ee:c3:dc:39:c3: 8e:24:d2:2b:49:23:d6:eb:42:48:0c:85:fa:10:fb:9c:97:ad: 89:ba:50:48:9c:d8:3e:6d:e1:77:ae:97:01:1b:8f:02:a6:0e: 31:d2:ae:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMc1XTe7FJ7kLjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk MmY0ZWU2YzktNjUzNy00YTVhLTk5MjctMWZhZDdjNjBmM2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotbDehdGhy8Cd5eI19CP2gh7+VwuNHScdYOp kOifRRBVkWVkM6gQtmKspekL7E+zJbK4EiPRhq3uBF524ytq5At+isV8NhD1P/IJ WdGVaepWv1JMKU+vNybw/CxfXinGnFdEskb04b37VPHAFXqLJhbZM/Ky/ZkL/qs7 ryCaeKkfAkhvGRavSlQFVTqPTBpHVjGVMZYzHTE01UNK/dP5I5MaodxtfN1ytItF bkaZcU0JK0//KPIPwgUinsW8PnuhZWl7y2jzCfVmnGKe3t/f1sX3iV3C/rCYBdQR HPfnMrE6BKsXIlqC7+OBasQcGLW3z/7QaMSZ2AAEs+anmWJ2fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTzU3xHfv4tkAyiPKc0GE7GEHXEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMGMwZjQ3NmUtNzcxNi0z NTFiLTllYjEtMWNhMTFkNjYwOWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLBBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXSe4XaSPulSadmUH1Dptzo86eZytFcYWjTeZd56XLrZwrDosQhf5p+ 0rQU/2xB8/n/Nsv4tAkxBjtnqE6NC+eVhk16apLuviOQflbDkiBZiKhWpFfU75uf VUgPs6nnuy8G1UIcCXEHskmuoUocey6mwybxkZNYKnAZcuJAHj1al0m+jgIZoUdS koHvMZGeEMzwFpDods8YxPzAC59Rgtv+CtJCSxSnRPVyDQbkhh8vfo84RKu41uTj qYqYUXntYlq8YuM/c7FPSrVhHJ5N+C9hhZDuw9w5w44k0itJI9brQkgMhfoQ+5yX rYm6UEic2D5t4XeulwEbjwKmDjHSrrg= -----END CERTIFICATE-----Generated at Thu Sep 3 20:49:55 2026 by rpki-client