$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d3b4ce3e-9fc0-3927-a4a6-1e2fd4a1f69c.roa File: d3b4ce3e-9fc0-3927-a4a6-1e2fd4a1f69c.roa (raw, json) Hash identifier: 9NVAVjteehOAcbgdSaHhYA5k1EpluhWhlSnVzi3+0mw= Subject key identifier: 91:A5:F0:FE:43:07:4B:67:6D:60:80:81:D8:BB:47:84:D2:82:75:6E Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584ED597238BCAA5341F71453A20 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d3b4ce3e-9fc0-3927-a4a6-1e2fd4a1f69c.roa Signing time: Fri 14 Aug 2026 13:00:12 +0000 ROA not before: Fri 14 Aug 2026 13:00:12 +0000 ROA not after: Thu 12 Nov 2026 14:00:12 +0000 asID: 63023 IP address blocks: 136.176.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d5:97:23:8b:ca:a5:34:1f:71:45:3a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Aug 14 13:00:12 2026 GMT Not After : Nov 12 14:00:12 2026 GMT Subject: CN=c4e64a74-8118-4190-b7fa-d21d76ce466f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0c:dc:d6:72:d1:98:3d:fb:d3:9d:68:7d:49: 70:f0:66:30:dd:72:77:d2:1c:c7:60:73:33:80:f7: e5:61:e5:7f:de:10:64:bf:96:f2:20:7d:15:da:7f: ec:ad:c3:a1:f7:7f:44:6c:e3:a5:a1:1b:c9:ec:ce: e2:20:f1:d5:e5:1e:4b:45:f2:a3:49:74:47:bc:6c: c4:c8:e4:96:4c:84:2a:38:43:d9:50:c7:83:3a:b9: 12:9c:b7:c8:6f:94:1c:60:98:e2:d8:1d:02:2f:b5: b9:08:5f:41:3d:3e:cd:19:50:05:5a:8e:77:b0:1b: 59:d1:21:21:28:a1:40:ec:94:9b:8a:3e:64:98:29: 97:c4:65:59:24:0a:e0:8a:cc:45:08:c5:75:8f:05: 53:b7:01:86:e9:e0:94:83:c1:af:34:84:6f:78:b3: eb:4a:db:c7:76:aa:d9:5a:53:96:3b:6f:fe:74:fb: 03:cd:da:12:a6:a6:8a:f3:c2:46:e6:75:2d:c1:c9: 5c:30:f5:d6:1c:b1:2b:f8:cf:50:af:d8:f3:3b:14: 1d:65:fd:4d:a4:79:91:77:a5:13:a0:1e:ac:63:77: a8:5b:93:94:b2:5c:2f:c3:3c:34:e7:66:96:d0:dc: d1:8a:c8:ee:52:14:b0:87:80:9a:84:8d:c5:79:4e: 92:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A5:F0:FE:43:07:4B:67:6D:60:80:81:D8:BB:47:84:D2:82:75:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d3b4ce3e-9fc0-3927-a4a6-1e2fd4a1f69c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a0:b3:23:50:50:f0:68:31:57:2a:31:75:36:42:03:b0:6b: 38:8b:6c:5a:19:fb:a3:bf:d0:30:c6:d0:5f:02:27:07:b1:8b: 4c:cd:57:f8:53:ee:f0:3c:dc:0d:3b:23:2f:46:90:e5:fa:aa: 0e:b0:b3:7e:25:f8:25:0c:31:28:22:65:fd:bc:3e:e8:13:24: d8:4c:72:aa:99:a5:59:20:28:6c:9b:3e:e0:ed:57:e0:59:0f: aa:44:b6:66:b6:7f:f8:f7:d3:09:58:c1:0d:dc:92:8c:61:9a: dc:e4:b2:bb:4b:fe:a2:05:5d:af:93:d0:12:0e:53:18:94:f0: 8d:85:b4:d8:6a:f9:17:9f:44:d5:ea:88:ee:fb:6b:9b:2e:dc: d8:97:c0:3e:e6:8b:3c:5c:b7:4f:44:58:a2:97:c9:a1:3a:95: 05:d7:77:8a:47:c8:36:04:47:6c:5d:9f:ee:6e:e8:ed:85:3e: 48:3c:7e:69:67:d0:fd:a2:5d:7f:39:eb:c4:fe:72:cd:02:f2: ce:52:ac:55:c3:b3:2b:62:16:42:bc:c0:66:0a:d0:f8:83:ed: 12:a5:b6:5f:4e:05:65:ac:d5:e4:56:e4:a3:27:35:99:80:66: 09:dd:d8:de:e0:89:a1:3e:0d:62:1d:ec:8a:2b:c4:d2:06:2a: 16:02:1b:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7VlyOLyqU0H3FFOiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDgxNDEzMDAxMloXDTI2MTExMjE0MDAxMlowLzEtMCsGA1UEAxMk YzRlNjRhNzQtODExOC00MTkwLWI3ZmEtZDIxZDc2Y2U0NjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgzc1nLRmD37051ofUlw8GYw3XJ30hzHYHMz gPflYeV/3hBkv5byIH0V2n/srcOh939EbOOloRvJ7M7iIPHV5R5LRfKjSXRHvGzE yOSWTIQqOEPZUMeDOrkSnLfIb5QcYJji2B0CL7W5CF9BPT7NGVAFWo53sBtZ0SEh KKFA7JSbij5kmCmXxGVZJArgisxFCMV1jwVTtwGG6eCUg8GvNIRveLPrStvHdqrZ WlOWO2/+dPsDzdoSpqaK88JG5nUtwclcMPXWHLEr+M9Qr9jzOxQdZf1NpHmRd6UT oB6sY3eoW5OUslwvwzw052aW0NzRisjuUhSwh4CahI3FeU6SNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGl8P5DB0tnbWCAgdi7R4TSgnVuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZDNiNGNlM2UtOWZjMC0z OTI3LWE0YTYtMWUyZmQ0YTFmNjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqgsyNQUPBoMVcqMXU2QgOwaziLbFoZ+6O/0DDG0F8CJwexi0zNV/hT 7vA83A07Iy9GkOX6qg6ws34l+CUMMSgiZf28PugTJNhMcqqZpVkgKGybPuDtV+BZ D6pEtma2f/j30wlYwQ3ckoxhmtzksrtL/qIFXa+T0BIOUxiU8I2FtNhq+RefRNXq iO77a5su3NiXwD7mizxct09EWKKXyaE6lQXXd4pHyDYER2xdn+5u6O2FPkg8fmln 0P2iXX8568T+cs0C8s5SrFXDsytiFkK8wGYK0PiD7RKltl9OBWWs1eRW5KMnNZmA Zgnd2N7giaE+DWId7IorxNIGKhYCG30= -----END CERTIFICATE-----Generated at Thu Sep 3 17:45:10 2026 by rpki-client