$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/028a077e-a9e8-36c1-8ad2-eb764c568a20.roa File: 028a077e-a9e8-36c1-8ad2-eb764c568a20.roa (raw, json) Hash identifier: oKqtQcD+82rBYIgRAw1Taj0wsoLq9NRWO1A8OMckz98= Subject key identifier: 5B:25:ED:20:A7:61:1D:21:1F:35:21:07:A2:6A:CF:F2:E7:43:F2:8F Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F7FE2DBF45CF8DB8AE9682F00 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/028a077e-a9e8-36c1-8ad2-eb764c568a20.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 63023 IP address blocks: 172.99.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:db:f4:5c:f8:db:8a:e9:68:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=e1b36314-af94-4b03-b9b6-16ee99a9a285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f0:41:54:87:c1:80:b0:1c:bf:de:a3:b6:cb: df:d2:6a:0a:02:f3:18:da:93:fd:31:da:79:21:5c: f0:e7:22:85:38:15:d3:17:dd:89:74:38:6f:aa:dc: e9:f0:9f:f0:0a:62:37:74:f2:df:be:ec:2a:1c:04: c6:92:3e:43:6f:61:cd:b7:54:e9:c9:34:ff:41:ff: 42:a5:5b:8f:c2:b2:9b:f5:44:16:39:c3:b1:85:4d: 7e:e2:b3:bf:b6:e9:fc:a2:8e:6a:a5:16:53:97:95: 2a:c1:c8:ff:69:fc:a8:f0:5e:ac:cf:32:5a:e8:90: b1:35:47:72:b5:0d:bc:65:11:37:12:2a:3b:16:de: 1d:83:9e:4e:c7:cd:da:28:5e:0f:f3:81:f6:04:1e: c0:84:08:f2:12:43:b5:c6:3d:bd:73:ee:fd:03:0c: dc:f2:e1:b1:99:96:9e:b7:65:fd:59:55:fa:02:0b: 4d:6d:69:27:8b:07:9a:39:30:f7:cf:c6:f4:8f:41: 74:8b:06:59:c0:45:6d:a0:e2:1a:ad:1c:57:4f:1c: 1e:bc:9f:ab:97:b9:c8:a9:20:73:26:b8:74:bc:45: bd:9a:79:49:d9:66:4d:2f:bb:70:dd:3c:47:bf:a8: 02:06:24:f7:49:4b:ce:f2:9b:fe:ad:b7:61:b2:c8: 78:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:25:ED:20:A7:61:1D:21:1F:35:21:07:A2:6A:CF:F2:E7:43:F2:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/028a077e-a9e8-36c1-8ad2-eb764c568a20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 172.99.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:81:aa:7d:9f:5c:4c:97:15:4a:66:f5:81:c9:d5:53:b6:03: dc:e5:04:5c:12:90:ed:92:90:ed:d6:1c:7e:13:04:7c:1a:a7: b3:27:a5:d2:4a:6f:84:63:9d:5f:5a:ea:f3:1b:5b:c3:74:15: 28:b7:2f:a7:bd:9d:79:ed:ed:6e:ba:b7:ab:bd:1b:ce:44:49: 1b:a2:51:ad:62:81:4f:7b:d5:01:15:dc:83:59:c2:7e:3b:f3: ba:52:3a:98:4e:3e:92:32:c2:df:5a:c4:34:6f:80:95:26:93: b0:e7:17:1c:47:a8:61:6d:fe:4f:f7:c3:f9:31:22:ed:3d:19: 39:02:be:2b:03:d2:af:ca:9e:8d:3a:51:d9:85:26:82:55:ba: fb:2b:a4:9c:3f:3b:1a:e6:53:de:2a:c8:e4:90:d0:98:63:0d: c1:45:e3:d1:43:60:ed:87:89:3d:d1:7b:18:f7:ca:17:d2:71: 77:b6:51:69:2e:b5:0a:ed:85:a6:27:c1:b7:27:dd:4e:c8:e0: 44:45:fd:c5:42:75:3d:95:f3:55:d1:0d:9a:32:71:76:d7:7f: 9d:50:57:4b:56:80:ec:68:c9:e4:49:20:08:98:4c:69:c3:0b: b1:68:f6:90:ed:8d:2a:54:6a:38:b1:7c:90:8b:60:56:d3:cf: fa:06:de:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4tv0XPjbiuloLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk ZTFiMzYzMTQtYWY5NC00YjAzLWI5YjYtMTZlZTk5YTlhMjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfBBVIfBgLAcv96jtsvf0moKAvMY2pP9Mdp5 IVzw5yKFOBXTF92JdDhvqtzp8J/wCmI3dPLfvuwqHATGkj5Db2HNt1TpyTT/Qf9C pVuPwrKb9UQWOcOxhU1+4rO/tun8oo5qpRZTl5Uqwcj/afyo8F6szzJa6JCxNUdy tQ28ZRE3Eio7Ft4dg55Ox83aKF4P84H2BB7AhAjyEkO1xj29c+79Awzc8uGxmZae t2X9WVX6AgtNbWkniweaOTD3z8b0j0F0iwZZwEVtoOIarRxXTxwevJ+rl7nIqSBz Jrh0vEW9mnlJ2WZNL7tw3TxHv6gCBiT3SUvO8pv+rbdhssh4UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsl7SCnYR0hHzUhB6Jqz/LnQ/KPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMDI4YTA3N2UtYTllOC0z NmMxLThhZDItZWI3NjRjNTY4YTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGO9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+Bqn2fXEyXFUpm9YHJ1VO2A9zlBFwSkO2SkO3WHH4TBHwap7MnpdJK b4RjnV9a6vMbW8N0FSi3L6e9nXnt7W66t6u9G85ESRuiUa1igU971QEV3INZwn47 87pSOphOPpIywt9axDRvgJUmk7DnFxxHqGFt/k/3w/kxIu09GTkCvisD0q/Kno06 UdmFJoJVuvsrpJw/OxrmU94qyOSQ0JhjDcFF49FDYO2HiT3Rexj3yhfScXe2UWku tQrthaYnwbcn3U7I4ERF/cVCdT2V81XRDZoycXbXf51QV0tWgOxoyeRJIAiYTGnD C7Fo9pDtjSpUajixfJCLYFbTz/oG3l0= -----END CERTIFICATE-----Generated at Mon Oct 19 13:51:55 2026 by rpki-client