$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/abccb9dd-b6da-3d08-b83f-abc9d9aae85a.roa File: abccb9dd-b6da-3d08-b83f-abc9d9aae85a.roa (raw, json) Hash identifier: I/EWPmAoCXXa0eyUaWtX4AtvRbIFVS0OVjTpHz6zrB8= Subject key identifier: 64:06:DA:E1:E9:19:55:02:E5:8E:69:09:2F:2E:AC:D7:5F:C1:99:CB Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584E8F55034EEFBE02FAFCAE47C0 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/abccb9dd-b6da-3d08-b83f-abc9d9aae85a.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 63023 IP address blocks: 170.101.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:55:03:4e:ef:be:02:fa:fc:ae:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=f76926dc-6bf9-4d7c-8c05-9c1eb5949272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fb:73:db:c0:fa:b3:a3:97:97:fb:0c:02:2b: 7e:84:83:bb:9a:f2:9a:34:26:09:4b:21:54:62:4a: 8a:29:c4:93:6b:9f:e6:de:84:88:ef:66:50:ed:46: e4:2c:72:05:d7:7e:a6:82:76:62:b1:05:1b:a9:77: d2:7a:a0:ac:b7:23:d9:46:f7:f0:eb:60:a2:5f:62: f5:06:fb:e7:35:60:4d:60:07:d4:bd:91:4b:7d:af: 92:c9:5d:44:4a:ff:06:2f:0c:96:38:8b:d6:bd:54: 42:56:b3:bf:0b:ef:90:c8:1e:b8:62:87:5d:4d:24: 01:03:5f:e1:db:39:36:18:3e:db:11:f4:20:ec:f2: f4:cf:26:2d:77:db:d2:68:2d:a4:55:0f:8b:d2:54: b2:20:32:c2:52:65:37:45:29:d4:9f:2e:6b:bd:f1: 8e:a4:54:03:a7:91:f6:f7:f7:7b:ec:f9:39:d7:af: 4d:58:09:f0:02:7c:b3:de:15:41:98:b1:45:1f:ff: 53:bd:f4:bd:1a:aa:63:70:58:1c:53:08:f0:85:90: 1f:f4:70:39:61:6e:bb:cd:f1:93:80:91:a7:fb:ca: b1:d9:82:8c:da:6c:12:d6:8d:9f:23:69:fc:9d:1d: c8:fa:ee:71:1b:38:19:60:fb:5a:ff:62:1a:b5:dc: fa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:06:DA:E1:E9:19:55:02:E5:8E:69:09:2F:2E:AC:D7:5F:C1:99:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/abccb9dd-b6da-3d08-b83f-abc9d9aae85a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:c6:9b:ab:a4:e0:f2:cb:d8:0b:10:e1:a3:5e:5f:5c:cf:38: 71:a0:04:6a:d9:6f:b5:96:f3:cb:44:2d:c5:34:32:1f:f2:ca: 56:53:4d:8d:ee:7d:b3:73:92:5b:8d:ed:b3:d7:17:c6:0a:a2: 82:de:36:cb:e9:f0:fa:e2:09:38:f2:07:7e:3d:51:c9:a5:5a: 68:e1:7a:59:32:12:99:4e:80:b7:e1:d9:f8:3b:74:1c:68:b0: d7:91:ea:c0:09:bf:03:29:52:cb:5f:fa:57:0c:76:1f:9c:3d: dd:64:56:f8:e2:47:0a:90:ab:21:85:d6:22:81:ec:bb:16:3d: 87:1c:9e:27:60:30:63:a7:4f:9f:d3:3a:2d:e0:2f:2e:ca:8e: d6:a9:42:cd:c1:90:44:82:25:11:68:c1:5a:49:7b:58:d1:f2: c6:b0:15:de:80:dc:53:e6:b4:d4:bd:05:a8:14:8d:0b:be:e2: 5e:6c:17:c7:ec:0b:58:8e:11:96:c6:4b:39:b9:1f:51:07:d0: ae:34:b5:77:72:03:b5:2f:1f:15:ed:26:db:43:46:cf:dd:ec: 4c:b3:6d:23:e4:91:e2:9f:92:49:d2:4b:9b:8c:b5:52:26:5d: 73:c7:13:b5:77:df:5a:7d:e4:a6:a6:90:b5:b6:ac:83:e6:2f: 34:15:79:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVQNO774C+vyuR8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk Zjc2OTI2ZGMtNmJmOS00ZDdjLThjMDUtOWMxZWI1OTQ5MjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/tz28D6s6OXl/sMAit+hIO7mvKaNCYJSyFU YkqKKcSTa5/m3oSI72ZQ7UbkLHIF136mgnZisQUbqXfSeqCstyPZRvfw62CiX2L1 BvvnNWBNYAfUvZFLfa+SyV1ESv8GLwyWOIvWvVRCVrO/C++QyB64YoddTSQBA1/h 2zk2GD7bEfQg7PL0zyYtd9vSaC2kVQ+L0lSyIDLCUmU3RSnUny5rvfGOpFQDp5H2 9/d77Pk5169NWAnwAnyz3hVBmLFFH/9TvfS9GqpjcFgcUwjwhZAf9HA5YW67zfGT gJGn+8qx2YKM2mwS1o2fI2n8nR3I+u5xGzgZYPta/2Iatdz6XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQG2uHpGVUC5Y5pCS8urNdfwZnLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvYWJjY2I5ZGQtYjZkYS0z ZDA4LWI4M2YtYWJjOWQ5YWFlODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmV1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLGm6uk4PLL2AsQ4aNeX1zPOHGgBGrZb7WW88tELcU0Mh/yylZTTY3u fbNzkluN7bPXF8YKooLeNsvp8PriCTjyB349UcmlWmjhelkyEplOgLfh2fg7dBxo sNeR6sAJvwMpUstf+lcMdh+cPd1kVvjiRwqQqyGF1iKB7LsWPYccnidgMGOnT5/T Oi3gLy7KjtapQs3BkESCJRFowVpJe1jR8sawFd6A3FPmtNS9BagUjQu+4l5sF8fs C1iOEZbGSzm5H1EH0K40tXdyA7UvHxXtJttDRs/d7EyzbSPkkeKfkknSS5uMtVIm XXPHE7V331p95KamkLW2rIPmLzQVeQE= -----END CERTIFICATE-----Generated at Mon Jul 20 19:22:23 2026 by rpki-client