$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/99c1fae4-7977-3aee-9001-3727a0dd1757.roa File: 99c1fae4-7977-3aee-9001-3727a0dd1757.roa (raw, json) Hash identifier: hLq1k9Ord/quhOm1Ms5K+HQP753XJYqc/J9BF4pFmjs= Subject key identifier: 2C:DB:0C:92:69:B9:62:1E:39:E5:C3:8E:7D:A0:E9:91:5E:10:6A:C0 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584E8F550388F8DF59F73F9CCC00 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/99c1fae4-7977-3aee-9001-3727a0dd1757.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 63023 IP address blocks: 170.101.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:55:03:88:f8:df:59:f7:3f:9c:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=fc6019d5-e959-4cda-93f9-045654250397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:74:b6:3f:fb:8a:f3:b1:bc:3f:16:a2:9a:4f: 07:b9:70:a0:3c:26:8b:1e:9e:b8:fc:b4:ad:5f:b4: 47:ee:dc:55:9b:ad:46:7a:60:52:cb:55:90:46:c2: 82:c9:87:68:60:c0:46:75:f1:3d:90:98:54:ee:a2: 24:ea:a6:92:4b:9f:38:9a:37:a9:36:d7:85:45:15: 77:a3:68:dd:35:bb:45:d9:40:88:7a:57:18:d6:0c: 16:ec:02:29:ef:df:c6:77:b1:12:3a:b2:a1:f9:51: b8:45:05:5f:c8:f7:da:ea:0c:38:b7:cd:e6:0c:33: 1a:8f:bb:68:5f:7e:46:e7:b1:4c:cb:14:3f:8c:34: bb:8b:b7:75:47:28:da:24:cb:cd:df:38:23:49:e7: d2:1f:4c:58:de:58:83:a4:8c:d1:b2:8a:4a:63:55: 18:e1:c3:ed:fa:87:77:e2:cd:5f:e0:04:cc:fe:69: 41:cb:81:ce:dc:f4:e8:c9:f6:1e:28:bb:a3:16:79: aa:3c:27:24:32:de:c4:0f:38:a9:8f:38:e2:9b:81: 57:3f:a0:b2:e4:05:1c:b5:fb:6b:f3:26:dd:92:cc: c4:4e:e2:09:1b:17:9d:fa:02:11:68:05:80:e8:ab: cd:8f:d0:80:e3:f5:54:e5:75:42:91:0d:08:1f:01: 30:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DB:0C:92:69:B9:62:1E:39:E5:C3:8E:7D:A0:E9:91:5E:10:6A:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/99c1fae4-7977-3aee-9001-3727a0dd1757.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f0:e0:55:ed:f3:99:df:51:1e:8c:87:a2:b7:33:6b:69:2f: 06:45:de:c6:0d:1c:63:cf:7e:e0:ed:b3:f5:1e:57:dc:7f:17: 63:c8:5b:04:9d:c6:39:2e:51:e9:54:33:95:74:8b:03:10:53: db:49:b7:f8:59:6b:ba:95:02:df:99:98:e4:0f:6d:87:10:2c: ac:7b:7b:08:2a:eb:90:2f:6e:2d:ff:46:b6:3b:08:e6:79:eb: b1:f4:bc:6c:a0:e4:84:7f:a9:d0:9a:89:19:22:ab:82:b2:e4: 00:85:6c:4a:67:dc:cd:0a:d1:d0:bd:05:6e:b8:39:d3:62:e1: f5:4a:14:7b:d4:46:2a:50:5d:8a:6d:1b:c7:2a:e1:cf:4a:7f: dc:73:ba:1f:fa:00:01:86:74:55:9a:74:22:55:f3:7c:8e:99: a3:32:10:a3:43:06:b9:3c:15:13:9b:64:43:7c:87:6a:66:f0: 78:3a:30:b8:82:3a:48:a4:d0:78:11:0d:5b:66:92:9b:f5:47: da:be:d6:d1:f8:70:80:c7:a8:39:1b:44:7c:a5:14:fe:54:eb: 7d:02:ec:7a:8d:49:31:cc:e1:d3:53:34:60:cc:14:71:01:57: f2:4c:89:29:72:b4:76:e7:02:64:a5:5e:a1:33:49:14:e8:11: 63:c8:99:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVQOI+N9Z9z+czAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk ZmM2MDE5ZDUtZTk1OS00Y2RhLTkzZjktMDQ1NjU0MjUwMzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnS2P/uK87G8Pxaimk8HuXCgPCaLHp64/LSt X7RH7txVm61GemBSy1WQRsKCyYdoYMBGdfE9kJhU7qIk6qaSS584mjepNteFRRV3 o2jdNbtF2UCIelcY1gwW7AIp79/Gd7ESOrKh+VG4RQVfyPfa6gw4t83mDDMaj7to X35G57FMyxQ/jDS7i7d1RyjaJMvN3zgjSefSH0xY3liDpIzRsopKY1UY4cPt+od3 4s1f4ATM/mlBy4HO3PToyfYeKLujFnmqPCckMt7EDzipjzjim4FXP6Cy5AUctftr 8ybdkszETuIJGxed+gIRaAWA6KvNj9CA4/VU5XVCkQ0IHwEwIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzbDJJpuWIeOeXDjn2g6ZFeEGrAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvOTljMWZhZTQtNzk3Ny0z YWVlLTkwMDEtMzcyN2EwZGQxNzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmV6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArw4FXt85nfUR6Mh6K3M2tpLwZF3sYNHGPPfuDts/UeV9x/F2PIWwSd xjkuUelUM5V0iwMQU9tJt/hZa7qVAt+ZmOQPbYcQLKx7ewgq65Avbi3/RrY7COZ5 67H0vGyg5IR/qdCaiRkiq4Ky5ACFbEpn3M0K0dC9BW64OdNi4fVKFHvURipQXYpt G8cq4c9Kf9xzuh/6AAGGdFWadCJV83yOmaMyEKNDBrk8FRObZEN8h2pm8Hg6MLiC Okik0HgRDVtmkpv1R9q+1tH4cIDHqDkbRHylFP5U630C7HqNSTHM4dNTNGDMFHEB V/JMiSlytHbnAmSlXqEzSRToEWPImdc= -----END CERTIFICATE-----Generated at Mon Jul 20 19:24:00 2026 by rpki-client