$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a72ec85c-3d23-3030-992d-9a8f8b97b369.roa File: a72ec85c-3d23-3030-992d-9a8f8b97b369.roa (raw, json) Hash identifier: dGtGT89ENOf+O6T7t5vYlzGXclAJNSM9TMAQLfCCzXg= Subject key identifier: 51:2F:90:03:1A:C6:5F:B9:B8:B6:C4:F7:6C:67:E5:DB:37:34:C9:9D Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584ED431CEFFBF92960E0AD1DE80 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a72ec85c-3d23-3030-992d-9a8f8b97b369.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 63023 IP address blocks: 136.176.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:ce:ff:bf:92:96:0e:0a:d1:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=44b784fe-5521-4553-a7d4-446e8aeacb15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4d:e3:74:c9:11:3a:e0:34:f2:8b:40:2f:0c: 41:22:a4:fb:ac:e8:e9:04:79:c6:8e:3b:ec:91:d5: 36:e7:cf:1b:6d:7c:bb:00:4d:15:fc:50:b6:06:db: 24:ad:15:9f:58:5f:53:3f:c2:7f:a6:1f:23:ad:b7: 5d:a2:03:c5:29:4a:14:fb:94:56:1d:ca:1d:44:bd: 78:86:46:17:9a:8c:2e:15:31:df:7d:ba:1a:11:10: ec:63:12:a8:a4:7a:de:0a:fb:3e:5b:70:7c:97:84: 23:b7:2e:1a:18:8c:64:06:9c:1f:79:9d:bc:dc:f3: 94:95:97:22:a4:fd:1e:7e:af:c3:d7:a3:18:1c:91: bb:29:9c:4c:c0:83:01:ae:fd:fe:a0:17:80:f2:dd: ba:47:9c:09:7f:f1:36:53:01:42:8c:9c:8b:46:f8: 88:34:31:82:3d:fc:a2:0a:cb:f0:a1:ad:44:6b:9e: 7d:52:51:66:43:f2:6a:8a:ab:ab:c8:9e:90:e5:b1: 71:a7:c7:dc:3d:31:80:9e:7d:dc:66:79:65:13:30: 8b:e0:fa:9f:5c:c0:98:5e:60:dd:b6:d4:8a:8b:6b: 87:92:36:36:3f:b8:37:0b:f3:bb:48:73:c3:c1:a7: aa:7f:9d:45:eb:2d:4c:67:c2:35:81:28:a0:4c:5e: 4f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:2F:90:03:1A:C6:5F:B9:B8:B6:C4:F7:6C:67:E5:DB:37:34:C9:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a72ec85c-3d23-3030-992d-9a8f8b97b369.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:80:85:73:d8:9e:15:97:e0:6b:ec:0c:26:c5:4a:0d:49:68: 81:67:70:33:4f:e8:b2:65:75:24:82:bd:a3:a4:35:e4:75:37: 83:e1:e6:73:44:cc:74:62:39:51:92:69:23:95:0f:e5:5b:a6: 07:90:90:c4:d4:03:7b:56:9e:01:b4:05:4e:48:7f:fa:75:75: cd:b1:66:9c:24:ab:a5:cb:91:15:0a:d7:0a:4f:3c:77:c5:e8: 4b:44:3f:0e:6b:bf:92:95:09:9f:42:16:3a:40:f4:e2:50:a8: aa:30:77:ab:62:64:ce:45:fb:62:5f:6b:d0:2f:1b:44:98:da: 10:78:35:b3:ad:a5:99:c8:90:70:44:89:f0:54:85:71:84:10: 0b:24:0c:f4:7b:60:98:8d:d7:c0:da:f7:07:3f:f5:82:0d:57: 3a:a4:09:59:dd:44:2a:fc:d7:24:55:69:7c:ba:7a:7d:29:b7: 6f:b3:d4:cb:02:8c:df:78:40:d2:a4:81:3f:6d:c4:41:1d:f1: 20:c8:c8:45:9e:81:83:af:0b:36:d4:83:41:26:8a:be:8c:ce: d0:7a:f8:0c:50:d0:f6:90:d5:7b:f0:94:6f:df:be:5c:16:bd: 6e:54:ab:5c:94:da:11:b8:6e:dd:8e:56:2f:f9:1c:6b:7b:37: 3f:84:a9:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMc7/v5KWDgrR3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk NDRiNzg0ZmUtNTUyMS00NTUzLWE3ZDQtNDQ2ZThhZWFjYjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE3jdMkROuA08otALwxBIqT7rOjpBHnGjjvs kdU2588bbXy7AE0V/FC2BtskrRWfWF9TP8J/ph8jrbddogPFKUoU+5RWHcodRL14 hkYXmowuFTHffboaERDsYxKopHreCvs+W3B8l4Qjty4aGIxkBpwfeZ283POUlZci pP0efq/D16MYHJG7KZxMwIMBrv3+oBeA8t26R5wJf/E2UwFCjJyLRviINDGCPfyi Csvwoa1Ea559UlFmQ/JqiquryJ6Q5bFxp8fcPTGAnn3cZnllEzCL4PqfXMCYXmDd ttSKi2uHkjY2P7g3C/O7SHPDwaeqf51F6y1MZ8I1gSigTF5PtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEvkAMaxl+5uLbE92xn5ds3NMmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvYTcyZWM4NWMtM2QyMy0z MDMwLTk5MmQtOWE4ZjhiOTdiMzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLBXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyAhXPYnhWX4GvsDCbFSg1JaIFncDNP6LJldSSCvaOkNeR1N4Ph5nNE zHRiOVGSaSOVD+VbpgeQkMTUA3tWngG0BU5If/p1dc2xZpwkq6XLkRUK1wpPPHfF 6EtEPw5rv5KVCZ9CFjpA9OJQqKowd6tiZM5F+2Jfa9AvG0SY2hB4NbOtpZnIkHBE ifBUhXGEEAskDPR7YJiN18Da9wc/9YINVzqkCVndRCr81yRVaXy6en0pt2+z1MsC jN94QNKkgT9txEEd8SDIyEWegYOvCzbUg0Emir6MztB6+AxQ0PaQ1XvwlG/fvlwW vW5Uq1yU2hG4bt2OVi/5HGt7Nz+Eqd0= -----END CERTIFICATE-----Generated at Thu Sep 3 20:49:28 2026 by rpki-client