$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/1d047265-d4b5-36e3-8ef6-eca5e5e8160a.roa File: 1d047265-d4b5-36e3-8ef6-eca5e5e8160a.roa (raw, json) Hash identifier: YTepiFwJTyqA/dVYDMxGcRZtxAAjwY/LGwp1eTYTSAU= Subject key identifier: E0:4D:43:42:A7:87:01:24:B9:32:77:53:4E:3F:51:75:AB:8A:A7:22 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584ED59722A3C820B79517D01C00 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/1d047265-d4b5-36e3-8ef6-eca5e5e8160a.roa Signing time: Fri 14 Aug 2026 13:00:12 +0000 ROA not before: Fri 14 Aug 2026 13:00:12 +0000 ROA not after: Thu 12 Nov 2026 14:00:12 +0000 asID: 63023 IP address blocks: 136.176.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d5:97:22:a3:c8:20:b7:95:17:d0:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Aug 14 13:00:12 2026 GMT Not After : Nov 12 14:00:12 2026 GMT Subject: CN=56f5dde6-3347-4a97-9f9a-b3c75b07a2f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:8f:db:78:f2:c6:e2:6a:2f:64:48:42:23: 4c:a0:ff:9e:c7:a1:63:29:d2:fc:99:32:bc:8a:37: 49:00:f3:b7:fb:6e:2f:50:ed:16:78:53:75:83:35: 3f:02:59:fc:79:58:e2:08:c1:9c:23:85:0a:e2:93: 63:a3:bc:88:66:d5:c6:87:11:c5:d2:a1:1e:16:23: b2:81:a3:85:97:a0:d6:0a:4c:f7:d2:13:d3:06:27: 26:00:9a:f0:be:95:17:22:e8:3a:30:7e:bb:94:73: 26:71:45:e0:ef:92:2b:b7:e6:68:b7:57:d3:5d:f8: bf:e7:ab:0a:13:9c:12:be:37:c2:95:07:df:82:5a: 17:a6:5c:8e:2f:60:16:cd:5a:1b:fa:0e:3c:0d:54: fb:bb:50:a5:b4:11:59:a7:7f:73:84:ba:ac:e9:91: 1e:1e:e2:1b:09:06:a9:00:69:2c:41:64:51:55:a8: 37:b7:07:70:2f:29:2a:92:0b:c1:b4:b9:21:4a:d2: ba:a2:7e:25:cb:7d:10:d0:32:54:73:e7:60:28:8e: 44:cf:05:05:57:cb:e3:05:d8:19:c7:0a:24:74:59: 39:7f:7c:9c:21:ba:9a:d0:b7:8a:58:81:9c:3b:76: 0b:b7:d4:7c:ba:75:54:d8:eb:1c:25:5e:2f:9b:4a: e3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4D:43:42:A7:87:01:24:B9:32:77:53:4E:3F:51:75:AB:8A:A7:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/1d047265-d4b5-36e3-8ef6-eca5e5e8160a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:7e:21:2c:04:dd:6e:07:77:90:bc:21:30:cc:db:0b:b3:52: af:77:09:40:3a:96:d0:d5:e1:60:91:be:cd:39:b7:e7:65:57: fb:01:de:d9:58:57:97:f7:5d:a4:b7:79:11:7c:14:90:c0:a6: 46:6c:16:fe:2b:fa:5f:14:59:e9:58:49:26:06:43:cb:05:6b: 5d:03:87:3f:fd:87:63:94:b1:a0:89:ee:17:08:6f:e6:cb:65: fb:b9:a3:f1:14:20:51:65:e9:e0:40:dc:3b:61:34:66:25:ec: c2:36:f3:bd:8b:89:a0:6d:ad:fd:a7:95:48:fd:66:b7:eb:99: dc:f1:3d:fe:14:23:15:8d:75:13:cd:1d:a7:0f:3e:70:b6:17: d2:28:be:06:b5:a7:a6:7c:54:22:d5:25:08:80:a4:74:5b:8d: d8:30:f1:6d:6f:48:2c:27:09:10:e2:06:db:e4:a5:6b:4f:cd: fb:b2:b6:89:d5:1f:3d:b8:e0:01:03:75:4c:35:54:90:e5:53: 77:2c:2d:f7:0a:9d:96:f8:d1:54:78:1b:ed:88:01:0d:66:cf: 33:63:cd:99:ca:71:72:1b:dc:fe:6e:4d:0f:9d:42:0c:de:9b: 6a:ad:03:20:4a:51:01:f2:ea:2d:3d:6e:cf:4a:37:d5:a2:f5: 15:2e:62:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7VlyKjyCC3lRfQHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDgxNDEzMDAxMloXDTI2MTExMjE0MDAxMlowLzEtMCsGA1UEAxMk NTZmNWRkZTYtMzM0Ny00YTk3LTlmOWEtYjNjNzViMDdhMmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3qP23jyxuJqL2RIQiNMoP+ex6FjKdL8mTK8 ijdJAPO3+24vUO0WeFN1gzU/Aln8eVjiCMGcI4UK4pNjo7yIZtXGhxHF0qEeFiOy gaOFl6DWCkz30hPTBicmAJrwvpUXIug6MH67lHMmcUXg75Irt+Zot1fTXfi/56sK E5wSvjfClQffgloXplyOL2AWzVob+g48DVT7u1CltBFZp39zhLqs6ZEeHuIbCQap AGksQWRRVag3twdwLykqkgvBtLkhStK6on4ly30Q0DJUc+dgKI5EzwUFV8vjBdgZ xwokdFk5f3ycIbqa0LeKWIGcO3YLt9R8unVU2OscJV4vm0rjqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBNQ0KnhwEkuTJ3U04/UXWriqciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMWQwNDcyNjUtZDRiNS0z NmUzLThlZjYtZWNhNWU1ZTgxNjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEB+ISwE3W4Hd5C8ITDM2wuzUq93CUA6ltDV4WCRvs05t+dlV/sB3tlY V5f3XaS3eRF8FJDApkZsFv4r+l8UWelYSSYGQ8sFa10Dhz/9h2OUsaCJ7hcIb+bL Zfu5o/EUIFFl6eBA3DthNGYl7MI2872LiaBtrf2nlUj9ZrfrmdzxPf4UIxWNdRPN HacPPnC2F9Iovga1p6Z8VCLVJQiApHRbjdgw8W1vSCwnCRDiBtvkpWtPzfuytonV Hz244AEDdUw1VJDlU3csLfcKnZb40VR4G+2IAQ1mzzNjzZnKcXIb3P5uTQ+dQgze m2qtAyBKUQHy6i09bs9KN9Wi9RUuYoU= -----END CERTIFICATE-----Generated at Thu Sep 3 22:38:18 2026 by rpki-client