$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/870d0c27-e843-348a-b285-4817a8b3c1eb.roa File: 870d0c27-e843-348a-b285-4817a8b3c1eb.roa (raw, json) Hash identifier: Tn3LSkspq1rXQT/P0sm60W4ZE6oKMOUgcnlbyj2G3Bw= Subject key identifier: A5:2D:28:4A:43:25:F0:88:CB:2C:14:61:07:27:A7:E9:AD:88:17:0F Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584E8F5502A0EF7D6B090B7BEB00 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/870d0c27-e843-348a-b285-4817a8b3c1eb.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 63023 IP address blocks: 170.101.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:55:02:a0:ef:7d:6b:09:0b:7b:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=238fa1ab-8730-41ac-8bd6-d3e6d42ccbda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3e:d1:cd:dd:ee:d5:7f:f8:e7:b1:4a:ac:28: a3:db:6b:80:0f:7d:ff:17:81:43:34:2d:80:28:12: 0f:a0:00:0f:ac:f8:8b:52:f4:3a:3d:2f:2c:77:58: 79:23:07:0d:7d:75:c4:48:b4:1f:bf:d8:7d:db:7e: 45:37:f0:fc:2f:75:82:9a:03:37:9f:14:02:e0:01: 20:a6:95:3c:3e:d0:32:d0:79:b9:06:3f:a2:c5:67: be:36:0f:28:ff:d0:45:97:c3:c1:dc:4d:3b:a6:63: a5:17:73:9d:de:df:ad:1a:67:b6:ea:98:5b:54:8c: c3:0e:7f:8b:41:ea:3e:45:d1:03:00:25:c8:17:fa: 48:85:78:6a:12:c0:b7:9a:7c:68:4a:88:58:27:32: 0d:50:5b:31:66:01:39:cf:7b:54:1a:65:ea:c7:8c: 49:f9:25:a2:58:4e:3a:17:f4:92:ef:86:33:74:f6: 7f:01:3b:10:d9:93:2c:14:89:ae:5c:62:56:5e:31: 70:f5:36:11:5d:e2:2c:e8:73:37:0e:6c:86:e0:06: c2:63:24:d4:ed:66:43:bc:f5:c1:8c:53:23:3d:87: 7e:af:cc:74:3e:f9:94:3a:bf:05:97:e4:ef:11:94: 4f:93:ce:13:37:f6:45:be:41:73:64:16:6b:f2:16: 41:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2D:28:4A:43:25:F0:88:CB:2C:14:61:07:27:A7:E9:AD:88:17:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/870d0c27-e843-348a-b285-4817a8b3c1eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:cb:db:5b:13:17:65:44:5d:ae:2c:34:80:96:cf:6f:cd:49: 3a:0e:61:8c:7d:1a:b8:31:ae:1e:34:52:ea:7f:e8:6d:60:9f: d5:ee:07:df:29:bd:7d:3b:49:0c:3c:fd:26:22:0c:5d:22:6f: 6f:f5:e9:4a:fc:83:31:92:c7:b8:ee:8e:dc:90:e1:6e:89:36: bf:0a:4a:6f:40:19:97:2f:aa:83:47:1c:d6:4b:40:1c:a4:91: a1:05:38:1b:a6:73:ed:28:a3:83:a8:45:ec:57:2f:34:cb:15: 2c:5d:73:1b:e3:d2:f0:a8:92:e4:99:f5:54:a8:0e:bd:44:01: d9:ca:bc:90:9d:29:e0:d4:4c:7f:5f:fe:5b:46:cf:a9:68:8d: ce:a7:99:d7:6c:82:68:dd:61:8f:94:c6:ee:55:50:8c:2e:df: 86:8a:77:14:69:cd:30:4b:3a:af:c4:55:a5:b0:ff:f3:b7:e3: ea:8b:b3:94:32:13:32:36:97:a2:fd:d3:a9:81:0f:0c:39:10: ad:dd:fe:1a:cd:95:a9:9e:c8:f7:fd:23:c6:0f:9a:e1:82:a1: 0e:21:09:71:77:f2:85:a5:1e:4b:93:b5:9a:20:df:48:87:38: 4d:3d:56:52:ba:17:56:38:b2:22:64:2a:59:b7:26:28:b7:0f: 23:0f:2f:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVQKg731rCQt76wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk MjM4ZmExYWItODczMC00MWFjLThiZDYtZDNlNmQ0MmNjYmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj7Rzd3u1X/457FKrCij22uAD33/F4FDNC2A KBIPoAAPrPiLUvQ6PS8sd1h5IwcNfXXESLQfv9h9235FN/D8L3WCmgM3nxQC4AEg ppU8PtAy0Hm5Bj+ixWe+Ng8o/9BFl8PB3E07pmOlF3Od3t+tGme26phbVIzDDn+L Qeo+RdEDACXIF/pIhXhqEsC3mnxoSohYJzINUFsxZgE5z3tUGmXqx4xJ+SWiWE46 F/SS74YzdPZ/ATsQ2ZMsFImuXGJWXjFw9TYRXeIs6HM3DmyG4AbCYyTU7WZDvPXB jFMjPYd+r8x0PvmUOr8Fl+TvEZRPk84TN/ZFvkFzZBZr8hZBmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUtKEpDJfCIyywUYQcnp+mtiBcPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvODcwZDBjMjctZTg0My0z NDhhLWIyODUtNDgxN2E4YjNjMWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLL21sTF2VEXa4sNICWz2/NSToOYYx9Grgxrh40Uup/6G1gn9XuB98p vX07SQw8/SYiDF0ib2/16Ur8gzGSx7jujtyQ4W6JNr8KSm9AGZcvqoNHHNZLQByk kaEFOBumc+0oo4OoRexXLzTLFSxdcxvj0vCokuSZ9VSoDr1EAdnKvJCdKeDUTH9f /ltGz6lojc6nmddsgmjdYY+Uxu5VUIwu34aKdxRpzTBLOq/EVaWw//O34+qLs5Qy EzI2l6L906mBDww5EK3d/hrNlameyPf9I8YPmuGCoQ4hCXF38oWlHkuTtZog30iH OE09VlK6F1Y4siJkKlm3Jii3DyMPLw8= -----END CERTIFICATE-----Generated at Mon Jul 20 19:22:54 2026 by rpki-client