$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/8f1fb9f4-f2bd-39a7-a60a-77057537f198.roa File: 8f1fb9f4-f2bd-39a7-a60a-77057537f198.roa (raw, json) Hash identifier: 5ZKZQmz8Beh1wd8jnoQZjX+zsfNXW0y4VZfv0GncrNo= Subject key identifier: B3:AB:40:D5:4D:63:9E:EB:8A:98:B4:94:DB:61:71:D5:1F:8E:D8:FB Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584E8F54EB93114195173DBCD5C0 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/8f1fb9f4-f2bd-39a7-a60a-77057537f198.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 63023 IP address blocks: 170.101.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:54:eb:93:11:41:95:17:3d:bc:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=69e824d6-1997-4365-adaf-9196b4997275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c6:1a:58:8f:c2:31:bc:f7:06:c5:ad:d5:33: fc:e4:4e:e8:7d:7a:29:a3:ef:07:5a:93:2a:02:0c: 54:af:52:6c:f2:fb:68:19:71:cc:b4:ee:43:c7:c7: 53:45:6d:c3:4a:6a:de:20:eb:92:32:ec:6b:19:af: 59:bd:a7:79:97:4e:7d:40:60:44:33:3f:c4:55:6e: 84:d1:7e:82:f0:b8:0a:45:f3:bb:c6:00:a3:ec:32: f9:5a:19:4c:b5:e7:2f:09:6a:75:b1:1b:3e:c1:27: 0c:f9:55:38:12:7a:d7:6e:1c:69:42:79:96:37:99: 7b:0a:08:be:56:56:29:23:7e:a6:58:1d:17:2d:f2: e9:a7:1a:12:90:76:0a:7c:00:73:fa:84:9e:1a:3e: 3f:bc:c6:9a:d1:29:8d:79:8e:1b:23:4a:ef:69:97: e4:c6:dc:7e:f6:f4:22:cd:d7:bf:83:31:a1:9d:b8: a7:e1:d3:25:1f:10:06:f2:ac:f1:1b:16:e1:f1:12: b8:72:4b:6e:44:c2:07:27:f1:4c:2d:da:f5:b2:e4: 5b:08:a4:a5:d9:c5:4f:5d:09:e6:8f:8a:40:07:d3: 1b:d2:eb:c1:78:cc:24:22:cf:22:a3:b5:be:3c:4c: cf:a5:55:8b:73:0b:eb:4b:b6:27:61:ca:c1:4a:6b: b6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AB:40:D5:4D:63:9E:EB:8A:98:B4:94:DB:61:71:D5:1F:8E:D8:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/8f1fb9f4-f2bd-39a7-a60a-77057537f198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:12:7d:dd:32:c2:2e:c8:3c:a1:39:3a:67:68:1b:d8:80:d4: 27:bf:04:97:a3:cf:95:8f:a4:79:84:9e:9b:98:1a:34:65:a7: ec:0b:84:ee:d1:bf:13:03:1b:01:51:60:5f:f1:42:0c:05:f8: f5:88:22:05:69:4d:5e:28:9f:bc:3a:cf:23:46:09:15:85:d0: d6:5f:f6:5e:4f:ba:2f:c4:cd:68:1d:c4:b5:81:bc:d2:d6:54: 5b:0d:4a:e1:0e:e7:72:ea:e9:68:76:f4:d7:7a:e1:45:5d:1c: 8b:e2:18:3a:fc:cc:69:00:53:aa:4c:6e:f6:92:b1:33:e9:15: 6a:bc:43:b3:15:66:95:92:21:03:11:4e:db:44:d3:ba:b6:0d: 27:1a:c3:5f:3f:f5:6e:24:df:aa:78:3b:f3:90:af:c9:a7:1b: eb:ae:ac:81:5b:5a:15:c2:fe:db:16:04:b9:74:58:a6:fc:fd: 76:4b:fe:0f:32:26:6c:c3:98:b8:24:bf:a5:61:c1:88:49:80: a0:50:d8:28:9a:11:82:6b:47:97:70:16:db:18:b2:f1:45:fe: 1d:2a:98:7b:6d:f5:0b:d3:6c:79:3e:32:3c:30:87:d5:66:c9: 02:07:bc:da:c1:16:f7:89:ba:24:d2:ce:82:b8:9d:6f:d1:72: a8:e8:b3:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVOuTEUGVFz281cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk NjllODI0ZDYtMTk5Ny00MzY1LWFkYWYtOTE5NmI0OTk3Mjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcYaWI/CMbz3BsWt1TP85E7ofXopo+8HWpMq AgxUr1Js8vtoGXHMtO5Dx8dTRW3DSmreIOuSMuxrGa9Zvad5l059QGBEMz/EVW6E 0X6C8LgKRfO7xgCj7DL5WhlMtecvCWp1sRs+wScM+VU4EnrXbhxpQnmWN5l7Cgi+ VlYpI36mWB0XLfLppxoSkHYKfABz+oSeGj4/vMaa0SmNeY4bI0rvaZfkxtx+9vQi zde/gzGhnbin4dMlHxAG8qzxGxbh8RK4cktuRMIHJ/FMLdr1suRbCKSl2cVPXQnm j4pAB9Mb0uvBeMwkIs8io7W+PEzPpVWLcwvrS7YnYcrBSmu2mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOrQNVNY57ripi0lNthcdUfjtj7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvOGYxZmI5ZjQtZjJiZC0z OWE3LWE2MGEtNzcwNTc1MzdmMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmVhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHESfd0ywi7IPKE5OmdoG9iA1Ce/BJejz5WPpHmEnpuYGjRlp+wLhO7R vxMDGwFRYF/xQgwF+PWIIgVpTV4on7w6zyNGCRWF0NZf9l5Pui/EzWgdxLWBvNLW VFsNSuEO53Lq6Wh29Nd64UVdHIviGDr8zGkAU6pMbvaSsTPpFWq8Q7MVZpWSIQMR TttE07q2DScaw18/9W4k36p4O/OQr8mnG+uurIFbWhXC/tsWBLl0WKb8/XZL/g8y JmzDmLgkv6VhwYhJgKBQ2CiaEYJrR5dwFtsYsvFF/h0qmHtt9QvTbHk+Mjwwh9Vm yQIHvNrBFveJuiTSzoK4nW/Rcqjos2Q= -----END CERTIFICATE-----Generated at Mon Jul 20 19:23:59 2026 by rpki-client