$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cd6241f8-2917-3949-b8cc-44a35746d65f.roa File: cd6241f8-2917-3949-b8cc-44a35746d65f.roa (raw, json) Hash identifier: hj5oRfnuGGTZJZ0qUjZ1QK17QJDft7dqtYOEZedwaGY= Subject key identifier: 2C:AC:AC:DA:36:AE:CB:9C:3F:BB:98:42:45:CE:69:67:A0:3B:E9:F2 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584ED597239DB41304BFFDA70D00 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cd6241f8-2917-3949-b8cc-44a35746d65f.roa Signing time: Fri 14 Aug 2026 13:00:12 +0000 ROA not before: Fri 14 Aug 2026 13:00:12 +0000 ROA not after: Thu 12 Nov 2026 14:00:12 +0000 asID: 63023 IP address blocks: 136.176.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d5:97:23:9d:b4:13:04:bf:fd:a7:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Aug 14 13:00:12 2026 GMT Not After : Nov 12 14:00:12 2026 GMT Subject: CN=d3f8bdb0-ba34-4279-88c4-72489b2abb6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:e2:b2:5c:00:5b:cd:ad:7e:78:0d:0f:73: 91:65:b1:85:a2:9d:58:07:ef:88:d5:c2:47:d3:dc: 74:c9:19:40:41:0b:8c:14:37:64:d8:54:00:fc:1a: 38:2f:d1:38:0d:79:63:36:8d:2f:6e:92:42:df:b9: 85:be:8d:2e:0e:09:f4:6a:c5:37:73:22:32:d7:b6: 95:97:96:ea:ef:a7:03:24:1d:4b:68:bc:55:f9:51: f3:c3:a3:13:91:5f:e3:c7:83:04:41:1b:ca:e8:6c: 72:5e:ee:21:99:62:8a:18:a3:91:f7:54:55:2e:af: d6:84:0a:a3:00:55:47:d8:99:43:0a:c3:8b:8c:f0: 22:3c:35:1e:8d:62:5a:53:d5:d0:8f:c8:b6:1c:43: 09:cf:f8:90:b3:64:e6:c7:8f:5a:0e:db:04:7c:04: 9e:42:5e:60:86:f5:80:d6:52:58:eb:a2:25:14:31: e9:02:8a:b9:cc:a2:3d:1d:db:4c:de:51:71:a7:16: a9:64:b5:e4:28:d7:b5:16:33:4d:b5:e5:b0:36:de: f4:ef:0f:c7:62:74:13:9d:01:71:89:75:ef:59:83: 7f:20:86:12:02:28:95:8c:a2:c3:9f:b0:07:8c:ab: 05:2e:ea:be:48:3c:e9:da:85:fc:d5:f2:ed:42:1e: d5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:AC:AC:DA:36:AE:CB:9C:3F:BB:98:42:45:CE:69:67:A0:3B:E9:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cd6241f8-2917-3949-b8cc-44a35746d65f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:8e:8e:ea:41:17:b1:58:30:1b:7b:d6:8d:5d:40:c8:b3:e5: d5:83:63:dd:d0:11:93:39:8c:c9:fa:e6:f0:64:32:a9:35:d9: c3:fc:10:3c:55:a7:75:ab:d2:f8:c8:1d:84:22:de:34:61:0f: 9d:65:4b:ec:25:12:f0:02:b2:e3:40:23:ed:16:a6:ca:33:cb: 89:f0:7a:47:22:85:23:df:bd:9c:53:ed:07:1f:cb:7a:7a:f6: 9c:93:ff:77:91:a9:04:86:2a:71:57:e3:19:f2:0d:7c:16:56: 76:9d:c1:6d:1a:0a:07:24:c5:3c:68:7d:a0:f4:5a:14:62:8e: cf:9a:e1:57:48:aa:15:04:b6:f4:43:80:fc:cc:a8:4c:17:fa: b9:c5:de:a2:a1:6e:b7:1e:6d:98:85:80:f3:d7:e9:88:1b:4c: e2:de:08:68:76:50:05:95:34:c2:0a:5e:4f:8c:66:da:82:20: 6f:75:0c:24:c7:6d:74:1d:63:94:d9:9d:bf:ac:73:94:aa:3b: 23:57:b7:4a:0b:cf:b4:1e:fb:b9:0e:49:90:ac:b4:a5:b5:1b: 3b:53:62:bb:c0:53:3f:61:27:47:a7:a5:3e:01:c4:f8:d2:86: 05:fb:59:b5:25:a8:60:b4:ce:cf:c9:46:e2:01:b3:8d:9f:e6: 36:42:f9:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7VlyOdtBMEv/2nDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDgxNDEzMDAxMloXDTI2MTExMjE0MDAxMlowLzEtMCsGA1UEAxMk ZDNmOGJkYjAtYmEzNC00Mjc5LTg4YzQtNzI0ODliMmFiYjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRPislwAW82tfngND3ORZbGFop1YB++I1cJH 09x0yRlAQQuMFDdk2FQA/Bo4L9E4DXljNo0vbpJC37mFvo0uDgn0asU3cyIy17aV l5bq76cDJB1LaLxV+VHzw6MTkV/jx4MEQRvK6GxyXu4hmWKKGKOR91RVLq/WhAqj AFVH2JlDCsOLjPAiPDUejWJaU9XQj8i2HEMJz/iQs2Tmx49aDtsEfASeQl5ghvWA 1lJY66IlFDHpAoq5zKI9HdtM3lFxpxapZLXkKNe1FjNNteWwNt707w/HYnQTnQFx iXXvWYN/IIYSAiiVjKLDn7AHjKsFLuq+SDzp2oX81fLtQh7VoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCysrNo2rsucP7uYQkXOaWegO+nyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvY2Q2MjQxZjgtMjkxNy0z OTQ5LWI4Y2MtNDRhMzU3NDZkNjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLBtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6OjupBF7FYMBt71o1dQMiz5dWDY93QEZM5jMn65vBkMqk12cP8EDxV p3Wr0vjIHYQi3jRhD51lS+wlEvACsuNAI+0Wpsozy4nwekcihSPfvZxT7Qcfy3p6 9pyT/3eRqQSGKnFX4xnyDXwWVnadwW0aCgckxTxofaD0WhRijs+a4VdIqhUEtvRD gPzMqEwX+rnF3qKhbrcebZiFgPPX6YgbTOLeCGh2UAWVNMIKXk+MZtqCIG91DCTH bXQdY5TZnb+sc5SqOyNXt0oLz7Qe+7kOSZCstKW1GztTYrvAUz9hJ0enpT4BxPjS hgX7WbUlqGC0zs/JRuIBs42f5jZC+SM= -----END CERTIFICATE-----Generated at Thu Sep 3 13:55:55 2026 by rpki-client