$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/00884a6a-71b9-3851-96da-4fa2fc62f185.roa File: 00884a6a-71b9-3851-96da-4fa2fc62f185.roa (raw, json) Hash identifier: TPqvurvo3SxZDakv1ztQ1LUQYwsDL0W+KjZNVjQxHcw= Subject key identifier: 35:0E:8A:86:34:E6:1F:29:91:74:DD:3A:C7:64:75:09:81:A9:34:95 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F6C58224E574F9FFFB98EC580 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/00884a6a-71b9-3851-96da-4fa2fc62f185.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 63023 IP address blocks: 216.106.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:22:4e:57:4f:9f:ff:b9:8e:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=42c60e78-67eb-44a2-bc01-9dd97c1b3376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e5:e8:8f:e1:08:0b:f0:10:bc:28:56:55:5f: 70:a8:cb:4e:83:db:69:65:af:6e:d5:4a:10:ba:44: 4b:d1:43:34:48:b9:6e:db:0f:10:b6:3d:27:13:8b: 6d:03:2b:ba:dc:25:c9:0f:c3:ad:91:28:dd:40:27: 92:07:d4:61:05:b1:28:c1:4a:31:ec:bd:b3:51:d5: 52:c1:fc:cb:49:64:0f:0e:ae:e6:c3:09:d7:92:51: 0e:48:6a:8e:82:59:b6:fd:3e:39:a5:d1:ab:43:83: a5:26:f8:df:16:ed:86:e0:bc:21:da:e0:fa:61:c6: 79:6d:d6:9c:ba:c9:9a:a2:31:d6:d1:ec:2a:8c:e8: 4c:03:01:d6:db:e6:5b:f3:59:c2:8b:cb:40:f7:68: 74:8e:5d:e0:c3:a6:01:e0:a6:5d:64:d6:81:41:af: 73:43:59:0a:a4:6b:21:78:9e:83:03:88:78:db:ec: 6b:9d:9f:24:90:5f:41:a8:a3:59:e5:6c:1d:f6:2c: b7:cd:fe:df:a3:d3:93:d7:12:03:13:11:7f:76:9a: 00:78:1e:61:83:8a:8d:a8:dc:12:f7:dd:2f:38:76: 43:ea:a7:20:c7:0a:e2:d0:01:9f:3d:7c:74:81:c7: f9:7b:2f:f3:af:5b:8a:80:0f:21:6e:8a:72:03:3a: 8f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0E:8A:86:34:E6:1F:29:91:74:DD:3A:C7:64:75:09:81:A9:34:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/00884a6a-71b9-3851-96da-4fa2fc62f185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.106.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:86:b6:ec:c6:86:66:01:da:08:fe:1b:fd:52:2c:f6:5c:4f: 5c:6b:d6:c2:f7:e5:cd:5f:4b:6a:dd:f2:64:92:dc:e8:49:7c: c7:4e:2f:10:64:b0:1b:3d:18:93:ad:0d:55:4f:f8:b8:9e:60: b9:ee:ed:fa:4d:0a:49:0c:6e:63:f1:78:c1:df:e2:ef:fc:ed: e1:84:7f:ca:be:12:1a:6c:10:d6:91:81:1a:fd:71:09:c3:93: e4:79:28:06:d7:44:af:4c:03:c8:94:5c:bd:3e:8c:1c:58:8f: c7:06:bd:99:9b:83:ad:c7:96:88:26:b0:84:2e:fc:a0:f2:f0: 5a:e7:80:31:2d:25:bd:b0:9a:85:6b:7f:03:ff:ec:b7:6a:91: 06:cd:56:0c:c5:a3:34:4d:14:2a:72:3d:f7:15:31:45:6b:db: 31:d3:85:d6:d5:ca:97:49:e9:fa:a8:cf:1c:6e:81:bc:2c:ff: 9e:cd:d6:fb:2f:e7:9e:6e:3b:12:5a:ad:fd:40:9f:94:89:05: 59:88:6a:9c:66:de:60:b2:d9:28:02:ee:3a:b1:8e:9c:da:26: 40:b1:e7:28:6f:1c:e8:de:c9:46:68:60:36:8f:5a:ec:e4:0d: 78:f5:e2:44:5a:86:37:a0:2c:3f:49:5a:b5:1f:52:c6:2b:c8: b5:b3:b1:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWCJOV0+f/7mOxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk NDJjNjBlNzgtNjdlYi00NGEyLWJjMDEtOWRkOTdjMWIzMzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+Xoj+EIC/AQvChWVV9wqMtOg9tpZa9u1UoQ ukRL0UM0SLlu2w8Qtj0nE4ttAyu63CXJD8OtkSjdQCeSB9RhBbEowUox7L2zUdVS wfzLSWQPDq7mwwnXklEOSGqOglm2/T45pdGrQ4OlJvjfFu2G4Lwh2uD6YcZ5bdac usmaojHW0ewqjOhMAwHW2+Zb81nCi8tA92h0jl3gw6YB4KZdZNaBQa9zQ1kKpGsh eJ6DA4h42+xrnZ8kkF9BqKNZ5Wwd9iy3zf7fo9OT1xIDExF/dpoAeB5hg4qNqNwS 990vOHZD6qcgxwri0AGfPXx0gcf5ey/zr1uKgA8hbopyAzqPAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUOioY05h8pkXTdOsdkdQmBqTSVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMDA4ODRhNmEtNzFiOS0z ODUxLTk2ZGEtNGZhMmZjNjJmMTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Gq4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyGtuzGhmYB2gj+G/1SLPZcT1xr1sL35c1fS2rd8mSS3OhJfMdOLxBk sBs9GJOtDVVP+LieYLnu7fpNCkkMbmPxeMHf4u/87eGEf8q+EhpsENaRgRr9cQnD k+R5KAbXRK9MA8iUXL0+jBxYj8cGvZmbg63HlogmsIQu/KDy8FrngDEtJb2wmoVr fwP/7LdqkQbNVgzFozRNFCpyPfcVMUVr2zHThdbVypdJ6fqozxxugbws/57N1vsv 555uOxJarf1An5SJBVmIapxm3mCy2SgC7jqxjpzaJkCx5yhvHOjeyUZoYDaPWuzk DXj14kRahjegLD9JWrUfUsYryLWzsYA= -----END CERTIFICATE-----Generated at Tue Oct 27 15:52:07 2026 by rpki-client