$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/0c831aec-5d43-3e87-984d-273e1928450e.roa File: 0c831aec-5d43-3e87-984d-273e1928450e.roa (raw, json) Hash identifier: n2wUos8ws5Ci4jfCkY+m3EyK8uu/3yNQdsuMDQI61+A= Subject key identifier: 40:33:DD:CF:B5:C9:03:8B:33:F2:62:10:A4:35:80:CC:AC:3F:16:FD Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584E8F550320DA975A6A3DD36F00 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/0c831aec-5d43-3e87-984d-273e1928450e.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 63023 IP address blocks: 170.101.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:55:03:20:da:97:5a:6a:3d:d3:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=144d17ba-e748-4be3-9cf1-5161b83b3b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a3:93:31:89:c9:79:f2:64:6d:84:7a:93:ae: 7b:c5:f0:0e:d1:2e:11:e3:ec:75:68:d7:65:55:38: 4c:8c:dd:52:a6:a5:9c:42:91:e6:e1:0f:84:5c:a0: 31:3c:16:06:42:c1:a0:36:13:6c:10:83:39:de:9a: 11:b7:fb:e5:ab:0f:a0:59:36:4b:11:24:f9:0f:bb: 92:06:75:58:be:f8:c2:21:53:3e:d6:e9:dc:c7:d3: f9:e1:15:4b:50:82:60:79:56:20:ec:42:40:73:47: 01:24:41:60:95:cd:b4:8f:c1:6b:92:87:05:a2:cd: 4c:cc:89:5e:46:e5:45:65:ca:0c:69:1c:f8:59:2d: 07:cc:32:2e:47:89:fc:e1:21:82:6c:92:35:0c:e9: 1e:9b:d4:fb:7d:d3:5c:43:65:e2:f7:fb:89:a3:dd: 27:37:36:7c:dc:4d:80:08:e9:43:63:2c:73:1d:06: c7:9c:e6:fb:03:c3:71:d2:2d:94:76:dc:84:b1:6b: c0:7c:a7:57:dd:70:08:d8:d4:d7:64:2b:c4:8c:65: 3e:64:5d:06:a3:65:7a:85:5c:7f:7e:1f:30:00:19: be:9f:aa:2f:b1:a6:d6:06:1d:de:b6:e3:f1:69:c2: 51:88:07:47:56:20:4e:1d:15:72:4d:f3:6e:c1:04: e3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:33:DD:CF:B5:C9:03:8B:33:F2:62:10:A4:35:80:CC:AC:3F:16:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/0c831aec-5d43-3e87-984d-273e1928450e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:be:31:3a:80:75:4c:49:31:d9:37:29:6e:bb:0b:b7:b6:13: e9:a8:3f:c0:fb:2a:7a:24:38:c5:4e:ff:a9:8f:0c:03:62:33: ca:33:1d:d8:95:68:05:5d:4b:af:12:8d:05:95:fb:a7:01:52: 08:12:3c:c5:b6:dd:58:a5:e5:16:35:e9:30:bd:67:32:e7:77: 2c:43:13:bf:ef:43:6b:95:e3:75:b1:42:ec:8c:c4:ef:c7:f2: e3:70:29:aa:69:d5:5c:23:96:50:83:f8:c4:92:fd:1c:98:6d: 26:5b:f5:45:f3:7a:7c:e7:4c:51:ea:08:92:87:5f:6a:5f:29: 7d:e2:4a:99:c7:09:7a:6c:6f:d5:68:f2:07:43:e3:27:f6:72: d9:bb:4a:55:13:89:92:01:41:10:aa:21:9f:3e:30:14:f8:e6: d5:fd:bb:12:84:cd:8f:ce:b3:ae:30:03:85:ce:61:cb:8e:be: f0:74:6c:41:11:41:cd:2f:c6:b7:78:3c:0d:fe:94:67:5d:33: 3f:15:ab:85:75:af:77:72:60:0d:83:9b:f3:e9:78:8e:87:0f: 06:f8:bd:78:22:d5:ba:cd:cf:64:c0:fd:c3:d2:72:1a:b1:53: fa:da:c8:71:3d:51:9a:1d:72:6a:00:7b:1c:2c:af:e4:ed:e3: c4:3a:c2:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVQMg2pdaaj3TbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk MTQ0ZDE3YmEtZTc0OC00YmUzLTljZjEtNTE2MWI4M2IzYjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKOTMYnJefJkbYR6k657xfAO0S4R4+x1aNdl VThMjN1SpqWcQpHm4Q+EXKAxPBYGQsGgNhNsEIM53poRt/vlqw+gWTZLEST5D7uS BnVYvvjCIVM+1uncx9P54RVLUIJgeVYg7EJAc0cBJEFglc20j8FrkocFos1MzIle RuVFZcoMaRz4WS0HzDIuR4n84SGCbJI1DOkem9T7fdNcQ2Xi9/uJo90nNzZ83E2A COlDYyxzHQbHnOb7A8Nx0i2UdtyEsWvAfKdX3XAI2NTXZCvEjGU+ZF0Go2V6hVx/ fh8wABm+n6ovsabWBh3etuPxacJRiAdHViBOHRVyTfNuwQTjuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAz3c+1yQOLM/JiEKQ1gMysPxb9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMGM4MzFhZWMtNWQ0My0z ZTg3LTk4NGQtMjczZTE5Mjg0NTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmVxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6+MTqAdUxJMdk3KW67C7e2E+moP8D7KnokOMVO/6mPDANiM8ozHdiV aAVdS68SjQWV+6cBUggSPMW23Vil5RY16TC9ZzLndyxDE7/vQ2uV43WxQuyMxO/H 8uNwKapp1VwjllCD+MSS/RyYbSZb9UXzenznTFHqCJKHX2pfKX3iSpnHCXpsb9Vo 8gdD4yf2ctm7SlUTiZIBQRCqIZ8+MBT45tX9uxKEzY/Os64wA4XOYcuOvvB0bEER Qc0vxrd4PA3+lGddMz8Vq4V1r3dyYA2Dm/PpeI6HDwb4vXgi1brNz2TA/cPSchqx U/rayHE9UZodcmoAexwsr+Tt48Q6woM= -----END CERTIFICATE-----Generated at Mon Jul 20 19:23:00 2026 by rpki-client