$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/b48de1a2-6828-3cb9-a56f-ac97faafb960.roa File: b48de1a2-6828-3cb9-a56f-ac97faafb960.roa (raw, json) Hash identifier: qF0xTWNBmbvc8mnD/CzCtKIAjD3bW2E+RzTM5sDYhDM= Subject key identifier: F9:DB:23:76:48:B7:6B:1B:5A:76:7E:6A:1E:A1:EA:4C:E7:FB:8F:7F Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584E8F55032C46519FAC30776600 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/b48de1a2-6828-3cb9-a56f-ac97faafb960.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 63023 IP address blocks: 170.101.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:55:03:2c:46:51:9f:ac:30:77:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=fe6f1c68-c8fc-4b29-b1a1-64311a8cfabb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:83:a4:42:03:4c:14:b2:4b:8a:ce:06:25:a0: 36:a0:7f:42:81:9b:d3:e9:d3:df:a3:30:7e:3f:2f: 8b:73:f7:03:22:b1:64:b2:ce:55:20:18:3e:d7:4b: d0:a7:b1:78:52:3f:36:a5:10:f6:58:b6:eb:99:67: d1:b8:26:9f:33:d4:6f:fd:00:b6:c9:99:84:d2:2b: 28:63:1c:70:e6:e0:ae:ac:37:23:13:a5:16:a6:f2: 93:e3:5e:a4:67:99:7a:b6:d4:4d:7f:ff:28:21:d7: ff:0c:f6:bc:67:f6:8c:aa:9f:78:cd:bb:48:e8:1c: f6:51:51:c1:7d:43:de:bc:df:b3:fd:b5:d2:8f:68: e3:1f:c1:b9:b7:ff:90:e5:d7:5b:84:3f:7f:85:39: 2c:48:e0:c9:e1:8c:f8:9d:20:b0:b6:13:7f:34:46: d3:b5:44:4d:4b:a1:30:2e:15:3d:7f:a4:0c:7d:03: d6:b0:d1:fb:c4:11:fc:4b:21:7b:5b:99:90:f7:d4: 85:0d:a4:7e:a9:63:09:dc:fa:d6:77:a4:28:74:c8: 63:d6:1e:4d:ce:79:63:5e:09:b3:1c:7d:61:d3:4c: b7:1d:a7:52:1e:96:78:b7:34:db:8a:29:a6:d6:9c: de:e0:32:65:46:36:63:72:9f:79:14:14:79:1a:59: 88:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DB:23:76:48:B7:6B:1B:5A:76:7E:6A:1E:A1:EA:4C:E7:FB:8F:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/b48de1a2-6828-3cb9-a56f-ac97faafb960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:04:20:06:86:23:fd:fe:f5:62:3d:4c:67:5f:2b:4b:5c:90: 48:ab:b0:54:ec:b6:86:a8:1a:0d:b6:ce:68:70:b7:54:bf:59: 43:1d:c0:89:fd:9a:39:91:0b:dc:88:3d:b8:cd:00:88:03:9e: 43:b4:4c:af:02:06:18:cc:bd:93:cb:7c:16:d7:63:a3:a9:2f: 6d:5e:18:52:a1:4a:f0:f5:de:39:a3:ef:b7:11:18:84:15:d0: ec:fc:53:6e:d7:6b:d6:d3:8f:ce:a4:05:37:05:a7:b6:d8:85: 64:cc:48:bf:de:09:35:ae:e7:7b:83:9d:80:ae:3b:70:ed:f2: 83:be:8c:ec:32:10:31:ba:6f:80:4d:66:b2:c1:13:7b:e0:26: 95:35:12:ca:8e:00:0a:e0:2d:4c:27:0f:78:8d:5b:dc:ec:0e: da:67:ed:c7:64:07:9b:a5:64:44:9c:fd:f4:17:3a:7f:2f:4d: 5c:70:a5:ba:27:d6:d3:80:15:70:39:f6:7a:ab:02:d1:a8:7b: 12:40:df:a5:04:19:f0:b6:52:e7:4f:9c:be:ec:54:2b:4b:8b: 32:1b:31:ad:82:c0:a7:30:1b:72:35:58:20:40:36:a5:fb:b5: da:11:5e:67:04:42:f8:ff:77:85:37:fc:6f:a6:07:3e:df:d4: 3c:ad:e6:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVQMsRlGfrDB3ZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk ZmU2ZjFjNjgtYzhmYy00YjI5LWIxYTEtNjQzMTFhOGNmYWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYOkQgNMFLJLis4GJaA2oH9CgZvT6dPfozB+ Py+Lc/cDIrFkss5VIBg+10vQp7F4Uj82pRD2WLbrmWfRuCafM9Rv/QC2yZmE0iso Yxxw5uCurDcjE6UWpvKT416kZ5l6ttRNf/8oIdf/DPa8Z/aMqp94zbtI6Bz2UVHB fUPevN+z/bXSj2jjH8G5t/+Q5ddbhD9/hTksSODJ4Yz4nSCwthN/NEbTtURNS6Ew LhU9f6QMfQPWsNH7xBH8SyF7W5mQ99SFDaR+qWMJ3PrWd6QodMhj1h5NznljXgmz HH1h00y3HadSHpZ4tzTbiimm1pze4DJlRjZjcp95FBR5GlmI0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnbI3ZIt2sbWnZ+ah6h6kzn+49/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvYjQ4ZGUxYTItNjgyOC0z Y2I5LWE1NmYtYWM5N2ZhYWZiOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmVyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkEIAaGI/3+9WI9TGdfK0tckEirsFTstoaoGg22zmhwt1S/WUMdwIn9 mjmRC9yIPbjNAIgDnkO0TK8CBhjMvZPLfBbXY6OpL21eGFKhSvD13jmj77cRGIQV 0Oz8U27Xa9bTj86kBTcFp7bYhWTMSL/eCTWu53uDnYCuO3Dt8oO+jOwyEDG6b4BN ZrLBE3vgJpU1EsqOAArgLUwnD3iNW9zsDtpn7cdkB5ulZESc/fQXOn8vTVxwpbon 1tOAFXA59nqrAtGoexJA36UEGfC2UudPnL7sVCtLizIbMa2CwKcwG3I1WCBANqX7 tdoRXmcEQvj/d4U3/G+mBz7f1Dyt5tg= -----END CERTIFICATE-----Generated at Mon Jul 20 19:22:54 2026 by rpki-client