$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d47de329-5f15-3af4-bf79-b5ce37f2c64a.roa File: d47de329-5f15-3af4-bf79-b5ce37f2c64a.roa (raw, json) Hash identifier: oCv1FrZ+p1aXormvgeDy3mEmasN+4On9f6FRTdRX+p4= Subject key identifier: 25:4F:0A:2C:08:16:3D:9D:AD:19:48:DE:76:A2:1D:FA:20:74:8D:B3 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584ED431CD91CDD8186E425BCBD8 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d47de329-5f15-3af4-bf79-b5ce37f2c64a.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 63023 IP address blocks: 136.176.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:cd:91:cd:d8:18:6e:42:5b:cb:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=e1a7c390-6ed7-4eec-acec-988d7cbb3501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0f:02:3d:43:f1:77:3a:09:a0:94:d2:ba:ce: 7c:38:de:05:40:86:18:7a:09:a7:4b:ed:54:c1:cd: a2:b7:0d:3c:e8:2c:c2:49:43:fe:83:d3:c5:66:3c: e1:e7:a3:37:c5:78:e8:4d:2c:50:01:7b:aa:0c:27: 4e:8f:40:88:97:a2:45:6f:48:83:91:be:78:41:14: de:6b:e4:38:6f:f5:04:2f:97:58:f0:0a:c2:13:d8: 13:8a:c0:01:41:6d:21:9c:b4:be:ea:ca:7a:d6:7c: 4c:58:de:2f:a8:2f:b2:cf:3b:3e:df:dd:8f:0b:8a: 33:67:6d:85:c8:6f:e3:43:ae:36:05:16:eb:0a:70: 90:8d:39:01:d7:65:e1:10:07:88:05:07:5a:d5:90: a9:0c:89:85:78:fb:4b:22:4b:f9:12:e5:e7:1b:ac: 38:5a:31:6c:7b:74:a7:a3:53:77:58:41:54:90:75: e4:ff:1d:f0:7a:76:3e:7f:6d:5a:10:6c:1f:3c:78: e4:88:d5:71:03:31:c0:a3:a9:58:20:5b:0b:9c:dd: e7:43:6e:72:e7:bd:58:fd:20:85:e7:1a:8a:bb:d5: 04:3a:11:2c:d6:b7:f6:9e:96:91:a3:51:65:0d:ae: ab:70:f9:01:17:66:03:19:83:6b:6a:59:58:c2:ac: 38:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:4F:0A:2C:08:16:3D:9D:AD:19:48:DE:76:A2:1D:FA:20:74:8D:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d47de329-5f15-3af4-bf79-b5ce37f2c64a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:19:7e:88:df:ad:52:c7:ae:b1:b8:19:61:21:a8:bc:e0:c4: 16:08:58:68:df:b9:3e:89:87:4d:9b:e5:ae:fa:57:ef:00:ea: 16:a3:0e:4a:8f:05:9e:35:62:d1:e3:0e:97:d1:e5:4c:0a:73: 9a:68:92:90:82:ac:f5:1a:d3:3a:3e:a8:37:44:e5:a8:44:d2: 87:39:ad:67:75:8f:df:f5:23:42:88:da:7b:03:e6:40:09:ac: 30:b6:c6:3c:f4:56:38:b9:e8:9c:36:b9:6a:86:69:41:7e:85: d7:85:f6:cb:73:85:94:26:64:7d:2f:dd:b5:02:a8:5b:95:e2: 22:95:d5:64:eb:13:4b:9a:b8:16:6f:e1:30:35:d9:14:28:88: 13:0b:6a:50:3c:c8:a9:ba:5a:40:24:10:66:c7:cd:53:87:a7: 99:ac:50:95:20:b4:1d:39:42:85:21:ad:bc:7a:f4:00:5b:38: c4:24:7b:5d:cb:45:29:22:c0:1b:a6:c4:91:4d:9a:4f:97:2c: c9:73:73:c1:81:1a:dc:52:5c:9b:5b:34:c6:c8:64:d4:fb:b5: 0c:af:33:69:9b:41:20:24:05:62:8b:5f:19:e8:90:7b:45:58: 49:80:a2:8e:17:17:51:c8:03:6a:04:14:39:bd:65:a3:96:2a: 53:19:61:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMc2RzdgYbkJby9gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZTFhN2MzOTAtNmVkNy00ZWVjLWFjZWMtOTg4ZDdjYmIzNTAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww8CPUPxdzoJoJTSus58ON4FQIYYegmnS+1U wc2itw086CzCSUP+g9PFZjzh56M3xXjoTSxQAXuqDCdOj0CIl6JFb0iDkb54QRTe a+Q4b/UEL5dY8ArCE9gTisABQW0hnLS+6sp61nxMWN4vqC+yzzs+392PC4ozZ22F yG/jQ642BRbrCnCQjTkB12XhEAeIBQda1ZCpDImFePtLIkv5EuXnG6w4WjFse3Sn o1N3WEFUkHXk/x3wenY+f21aEGwfPHjkiNVxAzHAo6lYIFsLnN3nQ25y571Y/SCF 5xqKu9UEOhEs1rf2npaRo1FlDa6rcPkBF2YDGYNrallYwqw48wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVPCiwIFj2drRlI3naiHfogdI2zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZDQ3ZGUzMjktNWYxNS0z YWY0LWJmNzktYjVjZTM3ZjJjNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQZfojfrVLHrrG4GWEhqLzgxBYIWGjfuT6Jh02b5a76V+8A6hajDkqP BZ41YtHjDpfR5UwKc5pokpCCrPUa0zo+qDdE5ahE0oc5rWd1j9/1I0KI2nsD5kAJ rDC2xjz0Vji56Jw2uWqGaUF+hdeF9stzhZQmZH0v3bUCqFuV4iKV1WTrE0uauBZv 4TA12RQoiBMLalA8yKm6WkAkEGbHzVOHp5msUJUgtB05QoUhrbx69ABbOMQke13L RSkiwBumxJFNmk+XLMlzc8GBGtxSXJtbNMbIZNT7tQyvM2mbQSAkBWKLXxnokHtF WEmAoo4XF1HIA2oEFDm9ZaOWKlMZYTQ= -----END CERTIFICATE-----Generated at Thu Sep 3 19:23:47 2026 by rpki-client