$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f81bf8d0-f935-35ea-b428-849b31e2e31a.roa File: f81bf8d0-f935-35ea-b428-849b31e2e31a.roa (raw, json) Hash identifier: JmufuTmvAFQzynbNbTJ7rLkMNxeTCwQfO2RL5wTpE44= Subject key identifier: BA:B1:15:46:F7:3A:CE:6A:18:74:2C:54:98:C8:29:B7:28:2A:5F:E6 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584E8F54EBA4698F781E73132580 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f81bf8d0-f935-35ea-b428-849b31e2e31a.roa Signing time: Mon 20 Jul 2026 09:00:11 +0000 ROA not before: Mon 20 Jul 2026 09:00:11 +0000 ROA not after: Sun 18 Oct 2026 09:00:11 +0000 asID: 63023 IP address blocks: 170.101.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8f:54:eb:a4:69:8f:78:1e:73:13:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Jul 20 09:00:11 2026 GMT Not After : Oct 18 09:00:11 2026 GMT Subject: CN=820fc4d5-1abc-42ba-8071-7f22b002d68f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d4:1c:27:b9:00:43:1a:90:5d:67:83:61:48: 64:dd:1c:5e:ea:a3:7e:99:ba:17:18:a7:8b:5a:19: 83:2a:d8:79:eb:75:09:cf:72:30:a3:c8:b4:35:2b: 0b:fc:07:c8:19:08:4d:84:09:18:02:e2:a7:16:2d: f9:b1:3e:c7:53:a1:bb:1b:2b:7b:41:c4:28:5d:62: 77:8b:af:ed:25:cf:e6:74:d2:f9:3b:29:69:ed:83: af:a4:e9:fb:35:1a:32:91:94:7e:db:ec:c1:3c:2a: f1:e4:f5:40:b5:5b:29:c0:81:e6:86:6a:c9:78:79: fa:20:7a:94:f6:43:2c:45:95:08:18:5d:5e:2c:86: 6f:02:52:b1:99:e7:55:49:63:33:84:9a:26:3f:8f: e2:a7:86:bb:ba:69:c8:0e:ea:69:9f:6f:27:76:21: 66:f6:14:21:63:20:26:eb:40:73:dc:1c:4a:67:49: c6:f1:79:22:3e:f6:74:05:36:e5:71:a0:65:e1:17: f2:90:2f:03:4b:70:31:3c:38:9c:e6:ec:89:60:fd: 16:a4:90:b4:11:5c:61:89:67:a2:71:b0:93:7d:9c: 25:a4:26:ec:01:00:eb:89:b8:98:7f:ce:94:8e:ee: 85:c1:00:72:fd:20:8e:bf:4e:25:f5:8e:43:3a:25: 77:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B1:15:46:F7:3A:CE:6A:18:74:2C:54:98:C8:29:B7:28:2A:5F:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f81bf8d0-f935-35ea-b428-849b31e2e31a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:c7:13:60:f6:cd:42:c4:ab:1a:ad:17:43:05:e9:6c:e3:3b: 24:e1:3d:d0:50:94:a0:e7:ef:2a:88:9f:72:ff:a1:bd:3a:17: 42:69:11:9f:1b:0b:6c:bd:b5:15:48:58:6f:d4:d5:54:ca:5e: 6a:65:26:79:58:84:86:a4:d4:5b:c9:a7:c4:2f:08:27:c7:d2: 6f:66:20:ec:a4:e1:48:45:1a:cd:21:d8:86:9e:a1:1d:b6:2a: e5:e7:31:77:68:c7:3e:b6:16:86:43:84:d8:68:72:e7:03:c0: 2c:98:0d:7e:57:48:2c:48:fa:b5:78:e7:2b:47:34:97:d2:ed: 8d:d9:85:a3:2b:65:a8:e1:e1:f2:c8:03:cd:f9:63:52:c0:e6: 4a:24:f9:b5:dd:87:b2:b5:35:8b:0e:32:dd:87:6b:67:fc:45: 78:27:68:af:24:e2:88:02:71:c7:78:d4:84:3c:ee:db:e1:0a: 29:64:bc:d8:a8:82:d7:af:1e:9d:b5:ea:4b:18:bf:e5:14:3f: 51:f2:4b:1a:a0:33:3d:b2:b8:42:16:dc:72:fb:79:6d:0c:e9: fb:35:43:63:4f:cb:f4:ad:dc:f9:c6:21:52:78:04:13:89:9a: 99:ce:77:4a:8f:03:03:17:78:09:de:08:e9:3e:b7:c6:7a:a0: 08:67:03:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6PVOukaY94HnMTJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDcyMDA5MDAxMVoXDTI2MTAxODA5MDAxMVowLzEtMCsGA1UEAxMk ODIwZmM0ZDUtMWFiYy00MmJhLTgwNzEtN2YyMmIwMDJkNjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNQcJ7kAQxqQXWeDYUhk3Rxe6qN+mboXGKeL WhmDKth563UJz3Iwo8i0NSsL/AfIGQhNhAkYAuKnFi35sT7HU6G7Gyt7QcQoXWJ3 i6/tJc/mdNL5Oylp7YOvpOn7NRoykZR+2+zBPCrx5PVAtVspwIHmhmrJeHn6IHqU 9kMsRZUIGF1eLIZvAlKxmedVSWMzhJomP4/ip4a7umnIDuppn28ndiFm9hQhYyAm 60Bz3BxKZ0nG8XkiPvZ0BTblcaBl4RfykC8DS3AxPDic5uyJYP0WpJC0EVxhiWei cbCTfZwlpCbsAQDribiYf86Uju6FwQBy/SCOv04l9Y5DOiV32wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqxFUb3Os5qGHQsVJjIKbcoKl/mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZjgxYmY4ZDAtZjkzNS0z NWVhLWI0MjgtODQ5YjMxZTJlMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmViMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzHE2D2zULEqxqtF0MF6WzjOyThPdBQlKDn7yqIn3L/ob06F0JpEZ8b C2y9tRVIWG/U1VTKXmplJnlYhIak1FvJp8QvCCfH0m9mIOyk4UhFGs0h2IaeoR22 KuXnMXdoxz62FoZDhNhocucDwCyYDX5XSCxI+rV45ytHNJfS7Y3ZhaMrZajh4fLI A835Y1LA5kok+bXdh7K1NYsOMt2Ha2f8RXgnaK8k4ogCccd41IQ87tvhCilkvNio gtevHp216ksYv+UUP1HySxqgMz2yuEIW3HL7eW0M6fs1Q2NPy/St3PnGIVJ4BBOJ mpnOd0qPAwMXeAneCOk+t8Z6oAhnAys= -----END CERTIFICATE-----Generated at Mon Jul 20 19:23:27 2026 by rpki-client