$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/03729581-50e8-367d-93e4-c663cf33f35e.roa File: 03729581-50e8-367d-93e4-c663cf33f35e.roa (raw, json) Hash identifier: FRIwg1W+0g8Umal2KDvKngsgdgnXcakFqdMc5SucV1M= Subject key identifier: 65:50:76:65:F4:10:A4:7E:48:23:A7:D6:0B:D3:06:09:2F:91:5F:7B Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F6D0CD46E643DBC64DA435100 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/03729581-50e8-367d-93e4-c663cf33f35e.roa Signing time: Wed 07 Oct 2026 19:04:25 +0000 ROA not before: Wed 07 Oct 2026 19:04:25 +0000 ROA not after: Tue 05 Jan 2027 20:04:25 +0000 asID: 63023 IP address blocks: 204.28.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:0c:d4:6e:64:3d:bc:64:da:43:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 7 19:04:25 2026 GMT Not After : Jan 5 20:04:25 2027 GMT Subject: CN=404e381d-94ae-4990-b052-a4a79b80a112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:57:3e:13:d2:67:59:ad:68:ba:24:a4:c2:84: 88:ef:12:be:44:51:1f:fb:72:c1:00:08:8f:29:6e: f5:09:d5:21:bc:57:0a:a6:d9:65:57:00:86:ce:54: af:6f:cf:b5:13:5c:11:17:28:4b:ec:e9:9b:ee:c3: 56:07:c0:80:d3:b4:30:e8:4a:c1:14:b7:02:0f:f8: f5:63:c2:42:5d:f5:e5:cf:c7:2a:d0:a5:29:af:47: a8:a8:a8:e6:32:36:1e:8c:04:f0:9c:6f:02:d8:7b: b5:1e:22:27:4f:57:54:2a:d7:18:f4:a4:88:92:a8: cf:79:7c:e0:4f:94:0a:66:f8:2f:c5:7d:84:ea:6d: 31:a3:3f:5b:47:57:53:69:a4:de:ab:dd:b0:b7:1c: a3:af:e8:15:f6:bd:1c:03:ff:3b:3e:77:fa:43:57: a5:84:90:98:b1:a3:a9:b4:0e:20:ac:f4:29:79:f4: 41:f3:47:d1:81:0e:54:d2:2e:fe:32:3c:40:7f:54: 74:71:ef:df:6d:e4:91:55:d1:0c:4b:32:4e:9b:c7: 30:60:93:d8:a6:c5:5d:60:ac:b5:2b:44:94:9b:a4: 1d:9b:72:9b:3d:ef:17:eb:ab:c5:04:fe:3c:a5:a3: 85:54:cd:8e:34:1b:24:d6:08:c9:a4:db:08:14:ef: c8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:50:76:65:F4:10:A4:7E:48:23:A7:D6:0B:D3:06:09:2F:91:5F:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/03729581-50e8-367d-93e4-c663cf33f35e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 204.28.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ee:be:9f:d6:a9:0c:11:8c:1e:42:7e:7a:6a:c6:a7:2b:df: 85:7d:44:17:45:c9:a3:5f:1a:de:4f:96:fc:9f:67:70:a8:e5: eb:87:c6:59:01:ae:90:0b:a6:bd:72:26:79:aa:eb:21:38:2d: 67:60:78:42:dd:21:64:6d:e9:b9:59:04:fd:13:56:e9:08:ba: 3c:cc:80:2c:fa:bf:80:17:33:54:6a:ed:30:29:d1:8c:c2:56: 8c:fe:bd:fa:d9:42:37:61:e3:25:38:03:fb:71:ef:90:34:c9: 53:de:68:d6:75:d9:1e:2e:4e:60:41:36:61:e8:da:c7:5f:88: d2:4b:2e:65:18:7a:8d:b5:6a:33:01:1c:66:be:4e:14:18:c8: c2:68:f6:e8:d2:2f:db:47:fc:0e:59:17:8b:60:0a:9a:82:83: 47:ac:92:a7:4c:c4:8c:9c:fb:a5:8c:4e:e3:8e:c7:88:fd:3f: f7:64:3b:20:da:3f:80:a1:91:34:1e:7b:2d:7d:1a:d4:47:9b: b5:10:f8:d7:10:e3:76:90:b3:67:cf:dc:e3:91:00:c3:62:26: 2b:0b:5f:6a:70:4e:7a:8f:a5:ae:01:ad:67:f7:fb:6c:f5:2e: 77:54:40:75:ba:08:b1:32:3d:50:d0:95:8a:5d:21:2a:d4:ca: 43:62:ea:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9tDNRuZD28ZNpDUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAwNzE5MDQyNVoXDTI3MDEwNTIwMDQyNVowLzEtMCsGA1UEAxMk NDA0ZTM4MWQtOTRhZS00OTkwLWIwNTItYTRhNzliODBhMTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1c+E9JnWa1ouiSkwoSI7xK+RFEf+3LBAAiP KW71CdUhvFcKptllVwCGzlSvb8+1E1wRFyhL7Omb7sNWB8CA07Qw6ErBFLcCD/j1 Y8JCXfXlz8cq0KUpr0eoqKjmMjYejATwnG8C2Hu1HiInT1dUKtcY9KSIkqjPeXzg T5QKZvgvxX2E6m0xoz9bR1dTaaTeq92wtxyjr+gV9r0cA/87Pnf6Q1elhJCYsaOp tA4grPQpefRB80fRgQ5U0i7+MjxAf1R0ce/fbeSRVdEMSzJOm8cwYJPYpsVdYKy1 K0SUm6Qdm3KbPe8X66vFBP48paOFVM2ONBsk1gjJpNsIFO/IfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVQdmX0EKR+SCOn1gvTBgkvkV97MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMDM3Mjk1ODEtNTBlOC0z NjdkLTkzZTQtYzY2M2NmMzNmMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzByYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGruvp/WqQwRjB5Cfnpqxqcr34V9RBdFyaNfGt5PlvyfZ3Co5euHxlkB rpALpr1yJnmq6yE4LWdgeELdIWRt6blZBP0TVukIujzMgCz6v4AXM1Rq7TAp0YzC Voz+vfrZQjdh4yU4A/tx75A0yVPeaNZ12R4uTmBBNmHo2sdfiNJLLmUYeo21ajMB HGa+ThQYyMJo9ujSL9tH/A5ZF4tgCpqCg0eskqdMxIyc+6WMTuOOx4j9P/dkOyDa P4ChkTQeey19GtRHm7UQ+NcQ43aQs2fP3OORAMNiJisLX2pwTnqPpa4BrWf3+2z1 LndUQHW6CLEyPVDQlYpdISrUykNi6kI= -----END CERTIFICATE-----Generated at Mon Oct 19 22:46:23 2026 by rpki-client