$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/4bb77066-c654-3abd-b610-c2335054db90.roa File: 4bb77066-c654-3abd-b610-c2335054db90.roa (raw, json) Hash identifier: /FMK1IGQEGva1ce4rh/KrXe9KmCZqww17neDa0ljwAA= Subject key identifier: 75:5A:94:05:82:18:20:6C:FF:26:C8:C5:C9:87:B7:8A:07:1C:7F:44 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584E8F5503722C4BD81D9266F400 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/4bb77066-c654-3abd-b610-c2335054db90.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 63023 IP address blocks: 170.101.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:55:03:72:2c:4b:d8:1d:92:66:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=f2b92a21-67dd-4128-b538-889782843176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b0:1e:63:61:4b:41:39:9b:f8:ef:8a:dd:cc: c7:31:c0:ed:d9:1b:da:7d:f0:bf:b3:f5:60:6d:4a: f5:df:c4:0e:1b:f2:ce:82:f2:38:cf:43:96:37:b3: f0:7d:8e:da:02:2f:ee:05:1c:64:03:38:ae:e4:64: 36:53:5e:87:87:65:5b:5d:fc:0d:d8:36:64:c9:46: 64:86:00:1c:8f:94:b5:b9:39:c1:76:3c:88:5d:93: da:74:75:82:2b:9d:8a:0e:45:6b:b2:f4:f1:2e:3a: f0:ea:96:01:46:a8:d9:4c:da:56:05:ed:06:5c:ed: a0:4c:3b:c0:54:59:cc:a8:48:d6:85:ca:de:d4:00: 2f:a4:5a:3f:57:8d:a7:47:c8:2a:e5:aa:ad:20:81: 77:44:79:56:56:77:b4:87:d7:6c:82:3c:5d:d3:01: 57:68:a7:f7:26:21:5d:8b:56:80:0e:d0:e3:5e:2d: 2d:db:a9:4f:26:03:aa:1e:f9:33:da:7c:b8:61:d2: ec:ae:d5:e9:a6:c5:03:64:67:73:62:09:3e:12:b6: 41:4a:9c:ab:cf:18:d1:a6:94:f5:dc:62:cc:8e:47: c3:58:1a:59:56:36:e6:2d:ca:9a:77:be:52:55:55: 87:d0:a8:76:94:e2:21:e1:03:cc:e8:5c:f6:1e:62: 94:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5A:94:05:82:18:20:6C:FF:26:C8:C5:C9:87:B7:8A:07:1C:7F:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/4bb77066-c654-3abd-b610-c2335054db90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:d0:08:c8:fa:9e:45:40:bc:a7:9a:ce:11:e9:46:23:22:1e: 3a:64:c0:4a:44:31:37:64:fb:4d:b4:f0:07:f0:58:c7:e9:b7: c5:ea:fa:0c:8b:99:74:12:ff:d5:e3:6b:21:ce:9f:8c:7a:66: ad:99:f6:d6:b3:a9:af:57:ad:ce:bd:31:7a:ca:e3:cf:4a:c8: 66:26:41:82:ee:99:de:f9:45:4c:c7:03:73:bb:23:fc:f8:aa: 58:cf:64:2d:71:7c:59:c2:33:cd:05:bc:5f:77:2f:7f:31:7e: 32:c5:a7:34:6f:cc:4e:fd:04:2c:31:20:49:a2:b8:4b:0c:b5: b1:6b:dc:57:b0:e4:87:a3:6d:5d:ee:a3:e1:bc:f6:29:6a:ff: 88:9b:4c:ed:eb:52:aa:c6:e7:b9:9a:af:10:6b:60:a2:c0:c8: 76:34:34:42:4e:74:ce:ba:67:55:4c:9f:bc:af:10:57:73:7e: 2b:8f:06:73:c8:3b:b8:ae:39:e1:4f:22:72:7a:1e:7d:35:88: 9f:a6:1e:d3:44:f8:4d:d3:dc:af:12:3f:95:d4:a8:82:66:c5: 8e:70:39:0d:78:67:77:01:c4:f0:5b:16:65:ac:9c:b4:4d:de: e0:43:dc:da:dd:d3:3d:a3:2d:c0:84:3e:5c:b1:a2:80:34:b9: 25:af:90:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVQNyLEvYHZJm9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk ZjJiOTJhMjEtNjdkZC00MTI4LWI1MzgtODg5NzgyODQzMTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrAeY2FLQTmb+O+K3czHMcDt2RvaffC/s/Vg bUr138QOG/LOgvI4z0OWN7PwfY7aAi/uBRxkAziu5GQ2U16Hh2VbXfwN2DZkyUZk hgAcj5S1uTnBdjyIXZPadHWCK52KDkVrsvTxLjrw6pYBRqjZTNpWBe0GXO2gTDvA VFnMqEjWhcre1AAvpFo/V42nR8gq5aqtIIF3RHlWVne0h9dsgjxd0wFXaKf3JiFd i1aADtDjXi0t26lPJgOqHvkz2ny4YdLsrtXppsUDZGdzYgk+ErZBSpyrzxjRppT1 3GLMjkfDWBpZVjbmLcqad75SVVWH0Kh2lOIh4QPM6Fz2HmKUmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHValAWCGCBs/ybIxcmHt4oHHH9EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNGJiNzcwNjYtYzY1NC0z YWJkLWI2MTAtYzIzMzUwNTRkYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbQCMj6nkVAvKeazhHpRiMiHjpkwEpEMTdk+0208AfwWMfpt8Xq+gyL mXQS/9XjayHOn4x6Zq2Z9tazqa9Xrc69MXrK489KyGYmQYLumd75RUzHA3O7I/z4 qljPZC1xfFnCM80FvF93L38xfjLFpzRvzE79BCwxIEmiuEsMtbFr3Few5IejbV3u o+G89ilq/4ibTO3rUqrG57marxBrYKLAyHY0NEJOdM66Z1VMn7yvEFdzfiuPBnPI O7iuOeFPInJ6Hn01iJ+mHtNE+E3T3K8SP5XUqIJmxY5wOQ14Z3cBxPBbFmWsnLRN 3uBD3Nrd0z2jLcCEPlyxooA0uSWvkB8= -----END CERTIFICATE-----Generated at Mon Jul 20 19:23:40 2026 by rpki-client