$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/bfb75b4b-f9b2-3d35-916b-5e0dcfc8053d.roa File: bfb75b4b-f9b2-3d35-916b-5e0dcfc8053d.roa (raw, json) Hash identifier: Q32ekn1md6xNcfI6ehhMjUQX4BvtsKw79YFpgF79DqA= Subject key identifier: DB:BA:61:D0:E5:E7:BA:53:C5:37:AB:E6:EE:98:DC:84:04:04:A6:B7 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584E8F550395641EA46333E5791C Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/bfb75b4b-f9b2-3d35-916b-5e0dcfc8053d.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 63023 IP address blocks: 170.101.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:55:03:95:64:1e:a4:63:33:e5:79:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=d186706a-dc3b-481f-a0c0-e6950d8322c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7d:76:a2:48:ff:af:d1:ab:9d:61:52:86:6c: 20:d9:f2:d9:ce:82:55:5d:44:0f:7a:a1:12:7f:94: 64:16:b3:b1:6f:f4:d2:c4:29:02:1c:2a:99:1c:bd: c9:64:38:ac:9a:00:5d:ef:8e:78:8e:42:bf:7e:57: 48:3f:3a:ce:f5:aa:08:71:f1:fc:48:32:66:5c:2b: fe:e6:42:aa:58:5d:b5:51:97:d7:80:4e:34:0b:b5: 82:97:19:73:f0:15:02:86:03:ad:92:fc:e1:e4:7f: 24:f8:60:de:85:fb:d8:fc:1b:67:0c:71:86:0a:73: 61:22:00:94:ee:a0:57:26:a3:00:84:fd:0d:3d:7e: 7e:1c:ed:57:97:49:32:1c:5b:aa:3d:3f:72:7e:fb: 1b:86:f8:e0:1e:87:ea:d8:e2:a0:cc:2f:dd:11:45: 3b:93:3f:e3:ac:78:7e:61:20:56:b8:b4:f9:d2:39: d3:87:33:1e:dd:af:be:03:99:3c:d9:cd:de:59:34: 3e:9d:02:1c:02:88:0f:9d:31:5f:0a:80:e0:4f:d6: 93:55:96:08:40:a4:70:10:1f:4b:97:65:bb:b0:ea: e6:b9:58:67:bd:2e:ef:44:82:fd:b6:e8:ae:eb:49: c3:4c:99:6e:ae:23:ad:9f:ae:d8:0f:a2:12:63:4e: 18:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BA:61:D0:E5:E7:BA:53:C5:37:AB:E6:EE:98:DC:84:04:04:A6:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/bfb75b4b-f9b2-3d35-916b-5e0dcfc8053d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:3c:ee:32:ec:aa:42:b4:e1:82:51:c9:8d:b9:3c:a9:a1:8a: a1:be:ce:f4:8b:82:97:64:4f:e9:e8:d0:b5:84:b0:64:7e:c6: 60:02:e5:44:e6:d9:05:a1:5d:49:df:97:c3:76:3f:db:1c:5b: 70:dc:ef:d7:fd:33:c2:1d:55:e8:19:73:55:17:80:af:61:03: 52:bc:78:19:55:ac:47:6b:02:d9:73:3b:66:5d:22:bf:ca:77: 34:eb:aa:26:ff:bd:f2:e9:35:6c:35:9c:1a:de:bb:cc:9a:ed: 0f:9b:97:78:3f:d4:ec:d9:da:1c:10:68:b3:0d:c3:bc:ae:2f: 7c:39:96:74:38:82:3a:c6:58:46:15:d2:6b:60:b8:2c:6b:d3: 35:c5:aa:d6:7c:6c:b4:54:18:ca:63:78:4a:0f:b1:0d:d5:01: d9:c2:c8:71:b6:6a:9b:e3:0b:40:a3:57:1e:c5:f9:b1:8a:51: ec:c0:0f:0a:8e:25:fa:bb:9a:7d:09:33:23:fd:bf:9c:2c:bb: fc:61:05:a5:5c:d7:50:5b:48:80:bc:8b:51:6a:9a:e3:24:5b: 0c:82:d6:52:bc:66:8a:ae:cb:42:97:96:8b:d3:52:a7:d1:49: 7a:74:18:ad:a1:e9:98:10:02:72:10:86:23:5a:6d:ae:2c:e8: ae:40:05:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVQOVZB6kYzPleRwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk ZDE4NjcwNmEtZGMzYi00ODFmLWEwYzAtZTY5NTBkODMyMmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk312okj/r9GrnWFShmwg2fLZzoJVXUQPeqES f5RkFrOxb/TSxCkCHCqZHL3JZDismgBd7454jkK/fldIPzrO9aoIcfH8SDJmXCv+ 5kKqWF21UZfXgE40C7WClxlz8BUChgOtkvzh5H8k+GDehfvY/BtnDHGGCnNhIgCU 7qBXJqMAhP0NPX5+HO1Xl0kyHFuqPT9yfvsbhvjgHofq2OKgzC/dEUU7kz/jrHh+ YSBWuLT50jnThzMe3a++A5k82c3eWTQ+nQIcAogPnTFfCoDgT9aTVZYIQKRwEB9L l2W7sOrmuVhnvS7vRIL9tuiu60nDTJluriOtn67YD6ISY04YqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNu6YdDl57pTxTer5u6Y3IQEBKa3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvYmZiNzViNGItZjliMi0z ZDM1LTkxNmItNWUwZGNmYzgwNTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmV7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF887jLsqkK04YJRyY25PKmhiqG+zvSLgpdkT+no0LWEsGR+xmAC5UTm 2QWhXUnfl8N2P9scW3Dc79f9M8IdVegZc1UXgK9hA1K8eBlVrEdrAtlzO2ZdIr/K dzTrqib/vfLpNWw1nBreu8ya7Q+bl3g/1OzZ2hwQaLMNw7yuL3w5lnQ4gjrGWEYV 0mtguCxr0zXFqtZ8bLRUGMpjeEoPsQ3VAdnCyHG2apvjC0CjVx7F+bGKUezADwqO Jfq7mn0JMyP9v5wsu/xhBaVc11BbSIC8i1FqmuMkWwyC1lK8Zoquy0KXlovTUqfR SXp0GK2h6ZgQAnIQhiNaba4s6K5ABXo= -----END CERTIFICATE-----Generated at Mon Jul 20 19:22:58 2026 by rpki-client