$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cb483578-a3ae-33bf-a9dc-07ade0168a80.roa File: cb483578-a3ae-33bf-a9dc-07ade0168a80.roa (raw, json) Hash identifier: cdXTb3ZT7DzbrzxpHK3AWytrvnWFR8ozEg7IZJWovB4= Subject key identifier: 56:4D:53:85:BA:1E:4E:A3:5C:C0:1F:75:5A:04:F4:AB:8F:E6:F8:23 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584ED431CDB73A01C86C234ECBC0 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cb483578-a3ae-33bf-a9dc-07ade0168a80.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 63023 IP address blocks: 136.176.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:cd:b7:3a:01:c8:6c:23:4e:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=a73b1bd7-858a-4a8f-ab9a-20d6200e70a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:66:0d:03:17:e7:db:ef:59:a5:6f:5b:34:79: 8d:1b:39:28:09:8c:6f:d8:41:ca:b3:15:c0:29:d5: 5c:5b:e1:c5:42:44:92:93:c4:e6:2d:c8:4d:a0:bb: cc:cd:ea:6e:37:ef:e6:06:30:47:6a:c7:49:8d:af: 9e:53:b1:21:f1:44:4b:92:94:e1:f9:9b:1b:33:69: cb:a2:8d:f1:89:1b:66:9b:2e:3a:eb:b5:c3:1d:29: 76:1f:f0:ec:10:17:0b:1d:f0:33:9e:ed:03:39:8b: 3f:41:97:fe:39:92:2e:3d:1b:ce:51:7b:15:3d:a6: 5a:bc:65:64:0c:ad:a7:d7:e8:39:0c:27:2f:4c:ed: 35:bb:57:e3:22:9f:72:21:20:ae:5d:31:1a:63:f1: e2:f4:9b:05:42:ba:42:fc:c0:56:b3:92:44:27:b5: 65:35:0c:b2:cd:87:d0:81:c5:44:83:87:80:87:83: 5e:9d:18:35:8e:59:73:f4:97:5b:1e:be:94:e3:f9: b1:c9:3f:14:b4:6b:a3:c6:7f:35:59:9b:df:19:ec: 45:4f:32:49:3c:74:e6:4a:f2:dd:8b:f1:4f:24:8c: eb:30:0a:35:7f:78:77:bd:a8:33:e9:37:6e:37:26: 89:59:ab:aa:b3:6b:62:05:84:3d:eb:8d:b1:c2:70: f4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4D:53:85:BA:1E:4E:A3:5C:C0:1F:75:5A:04:F4:AB:8F:E6:F8:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cb483578-a3ae-33bf-a9dc-07ade0168a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:1b:45:b0:f6:f0:c3:41:2a:0a:74:e3:23:a9:74:f6:90:ad: 0b:cf:0a:3e:3e:29:a4:87:78:c1:f4:98:e2:9d:ef:99:46:29: d8:65:00:26:52:d3:96:48:3a:97:f3:6a:e1:5b:fc:a3:ab:47: a6:dc:4d:c6:4e:2e:9d:c8:71:ec:64:de:d6:57:98:4a:e5:48: df:3b:26:5c:87:b4:6b:26:55:06:7f:4d:fe:e4:6c:de:3a:96: c9:88:1a:50:39:59:f8:c1:86:a7:61:dc:36:46:7f:0b:d3:5c: 58:cf:26:c9:49:e5:d0:ba:0a:cd:1b:6d:25:8a:98:03:34:84: 22:9a:72:36:33:91:56:f0:2d:8d:3a:87:88:71:7d:89:96:c3: d4:00:39:a5:23:ce:ee:e1:d6:8e:53:e5:4c:e6:9e:b9:ef:bb: 39:17:4b:f5:1e:b6:0c:fe:01:83:b0:2d:c8:88:11:77:31:a8: 79:44:9a:b2:c9:16:1f:c3:5b:3b:5c:3e:58:71:d2:e9:20:48: fe:97:98:57:04:43:ae:c3:3c:6f:62:7e:0a:b1:26:00:0b:8a: 78:c0:16:c8:c8:8d:97:e1:99:c4:4d:c6:12:04:d4:61:a1:7e: b7:f1:03:c5:e3:ae:40:b4:b4:26:44:ab:d8:a8:16:8d:9f:6c: 84:0c:72:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMc23OgHIbCNOy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk YTczYjFiZDctODU4YS00YThmLWFiOWEtMjBkNjIwMGU3MGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGYNAxfn2+9ZpW9bNHmNGzkoCYxv2EHKsxXA KdVcW+HFQkSSk8TmLchNoLvMzepuN+/mBjBHasdJja+eU7Eh8URLkpTh+ZsbM2nL oo3xiRtmmy4667XDHSl2H/DsEBcLHfAznu0DOYs/QZf+OZIuPRvOUXsVPaZavGVk DK2n1+g5DCcvTO01u1fjIp9yISCuXTEaY/Hi9JsFQrpC/MBWs5JEJ7VlNQyyzYfQ gcVEg4eAh4NenRg1jllz9JdbHr6U4/mxyT8UtGujxn81WZvfGexFTzJJPHTmSvLd i/FPJIzrMAo1f3h3vagz6TduNyaJWauqs2tiBYQ9642xwnD06QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZNU4W6Hk6jXMAfdVoE9KuP5vgjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvY2I0ODM1NzgtYTNhZS0z M2JmLWE5ZGMtMDdhZGUwMTY4YTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLBGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8bRbD28MNBKgp04yOpdPaQrQvPCj4+KaSHeMH0mOKd75lGKdhlACZS 05ZIOpfzauFb/KOrR6bcTcZOLp3Icexk3tZXmErlSN87JlyHtGsmVQZ/Tf7kbN46 lsmIGlA5WfjBhqdh3DZGfwvTXFjPJslJ5dC6Cs0bbSWKmAM0hCKacjYzkVbwLY06 h4hxfYmWw9QAOaUjzu7h1o5T5UzmnrnvuzkXS/Uetgz+AYOwLciIEXcxqHlEmrLJ Fh/DWztcPlhx0ukgSP6XmFcEQ67DPG9ifgqxJgALinjAFsjIjZfhmcRNxhIE1GGh frfxA8XjrkC0tCZEq9ioFo2fbIQMcng= -----END CERTIFICATE-----Generated at Thu Sep 3 20:08:26 2026 by rpki-client