$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cfbfac3f-1557-30d6-a7b8-a5f7a0311b22.roa File: cfbfac3f-1557-30d6-a7b8-a5f7a0311b22.roa (raw, json) Hash identifier: GcyjPNV03p3heuVqev6gUTg99YrQ7M5agzVFYFlpLCw= Subject key identifier: 08:69:BA:3C:BB:E7:01:3C:8E:F7:ED:87:21:F5:12:18:DC:D5:D6:AA Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584E8F5503C407227C645CC11240 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cfbfac3f-1557-30d6-a7b8-a5f7a0311b22.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 63023 IP address blocks: 170.101.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:55:03:c4:07:22:7c:64:5c:c1:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=1e5cad46-51f0-4e77-ad2c-49a68bb5d7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c5:7b:6d:2b:f9:2c:d5:df:19:b1:0f:84:4e: f2:4f:09:b2:c6:bc:42:02:0c:e5:e3:e2:f3:40:69: cf:05:cd:86:2a:ee:c7:9c:dd:d8:0a:5e:29:28:30: 0b:07:c8:4c:81:34:73:ad:69:46:af:3f:8c:4d:ee: 70:ab:99:bf:36:31:93:81:f9:02:10:5e:80:5e:e7: 68:2c:02:36:6e:77:b5:9d:25:7a:a0:06:a6:81:85: e7:7d:92:0f:5b:79:c7:40:c7:56:2e:f6:45:b1:5a: ce:16:c0:fd:d5:08:f4:41:6b:4d:e1:96:a2:d6:a3: ff:a0:f6:98:62:8f:90:d4:c2:ea:62:74:cc:92:ef: 6d:d8:77:a8:09:03:0e:a5:3e:ec:91:05:90:72:29: 7d:d3:c1:b1:18:00:a6:5f:99:8e:38:86:72:de:40: 7d:b8:30:ee:54:98:83:17:41:b2:89:9c:26:7a:f9: 5d:78:20:8c:3b:8b:de:33:f0:20:85:68:3c:8b:19: b1:6f:26:06:59:50:6d:2d:8c:5c:2e:0c:4a:c6:60: 85:5e:7b:9e:98:86:2c:c4:08:e4:a2:11:9c:5e:98: 70:eb:36:f7:b3:fb:30:04:87:5f:68:91:1f:bf:c0: ad:83:35:40:60:35:e8:50:30:f9:34:61:f1:41:47: a7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:69:BA:3C:BB:E7:01:3C:8E:F7:ED:87:21:F5:12:18:DC:D5:D6:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cfbfac3f-1557-30d6-a7b8-a5f7a0311b22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:fe:a7:e0:1d:5b:ca:01:d2:e1:eb:9b:29:83:d2:2a:7d:18: af:bf:66:da:09:02:95:e2:c1:df:5d:40:52:c4:a2:b8:82:45: 67:6e:95:48:4a:fc:6e:79:fd:34:81:39:56:36:b1:17:b8:80: b4:c9:37:de:46:1b:89:a7:e0:c5:3b:16:f0:66:9c:84:c9:ac: e9:72:f5:15:6e:9b:49:44:84:24:d1:c3:ce:6f:cf:cf:f2:87: 6e:da:79:a2:37:5d:ac:94:71:45:51:96:56:f6:63:15:2e:c5: 7b:f7:27:21:58:bc:03:77:0b:c5:fd:8f:82:63:16:87:83:f7: 81:ee:91:f9:8d:95:84:48:42:5e:d9:04:48:94:60:03:24:1f: 5f:fb:cf:ce:fe:d5:32:17:7b:5e:8a:9d:a5:ff:28:08:c0:4d: f9:33:99:b4:86:6f:fd:ca:4e:83:56:3e:23:c9:38:d4:16:ee: 0e:a0:4a:57:a3:72:e2:dc:cb:19:03:a4:88:fa:1b:7f:78:d4: 5a:49:f8:16:a5:b1:52:59:ff:ac:41:19:aa:f9:ac:ed:f9:b0: 61:da:ca:5f:66:16:d6:f5:5c:bd:57:7f:eb:c1:4d:98:22:36: 0b:06:a7:66:37:44:e2:b1:30:a7:44:b3:d8:5f:c4:b0:f0:dc: f1:9e:2e:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVQPEByJ8ZFzBEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk MWU1Y2FkNDYtNTFmMC00ZTc3LWFkMmMtNDlhNjhiYjVkN2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsV7bSv5LNXfGbEPhE7yTwmyxrxCAgzl4+Lz QGnPBc2GKu7HnN3YCl4pKDALB8hMgTRzrWlGrz+MTe5wq5m/NjGTgfkCEF6AXudo LAI2bne1nSV6oAamgYXnfZIPW3nHQMdWLvZFsVrOFsD91Qj0QWtN4Zai1qP/oPaY Yo+Q1MLqYnTMku9t2HeoCQMOpT7skQWQcil908GxGACmX5mOOIZy3kB9uDDuVJiD F0GyiZwmevldeCCMO4veM/AghWg8ixmxbyYGWVBtLYxcLgxKxmCFXnuemIYsxAjk ohGcXphw6zb3s/swBIdfaJEfv8CtgzVAYDXoUDD5NGHxQUenYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhpujy75wE8jvfthyH1Ehjc1daqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvY2ZiZmFjM2YtMTU1Ny0z MGQ2LWE3YjgtYTVmN2EwMzExYjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmV/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFT+p+AdW8oB0uHrmymD0ip9GK+/ZtoJApXiwd9dQFLEoriCRWdulUhK /G55/TSBOVY2sRe4gLTJN95GG4mn4MU7FvBmnITJrOly9RVum0lEhCTRw85vz8/y h27aeaI3XayUcUVRllb2YxUuxXv3JyFYvAN3C8X9j4JjFoeD94HukfmNlYRIQl7Z BEiUYAMkH1/7z87+1TIXe16KnaX/KAjATfkzmbSGb/3KToNWPiPJONQW7g6gSlej cuLcyxkDpIj6G3941FpJ+BalsVJZ/6xBGar5rO35sGHayl9mFtb1XL1Xf+vBTZgi NgsGp2Y3ROKxMKdEs9hfxLDw3PGeLhk= -----END CERTIFICATE-----Generated at Mon Jul 20 19:22:59 2026 by rpki-client