$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/068bb085-b881-3a36-bc51-790e34b0c1d4.roa File: 068bb085-b881-3a36-bc51-790e34b0c1d4.roa (raw, json) Hash identifier: SdRpo0+rKMxi4Dzc7p7czcBA7U0GzrGg9+1QIe79J4s= Subject key identifier: 68:8E:78:0B:06:A0:66:A1:1B:DE:CC:91:D9:2A:09:74:E6:16:BC:CB Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F7782E187064BD1BB6F8B7100 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/068bb085-b881-3a36-bc51-790e34b0c1d4.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 63023 IP address blocks: 136.176.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:e1:87:06:4b:d1:bb:6f:8b:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=4f3dfb19-5b26-45eb-bfd5-9803d86de023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:81:bd:9f:d6:57:9d:03:0d:65:b1:0d:a7:0a: 55:2c:94:17:fe:ea:cc:86:1a:6b:a4:7f:b5:9b:1c: 26:30:82:84:e9:24:1a:40:0e:b3:d4:c7:bf:ed:99: 86:27:da:84:5f:4b:fa:3e:0c:c7:86:d5:e2:b9:34: e2:51:bb:0e:9a:46:31:8a:e5:5c:c0:f0:07:84:93: 61:c4:49:d9:f6:9e:93:32:00:f3:cd:db:61:40:04: 0e:f2:7e:77:66:d3:01:db:16:fb:b1:7e:16:59:28: 2a:81:42:16:93:74:54:9f:da:45:f9:a5:eb:ca:c1: 20:83:41:14:8b:7d:39:e5:63:18:78:cd:a4:1f:5f: 46:f9:33:62:52:ab:f1:f6:49:0a:23:69:b2:73:0f: 4a:40:01:b0:69:fa:9a:43:46:00:ed:50:95:5c:75: 3a:fe:14:d7:99:61:42:30:ad:ef:be:54:e4:e6:00: ca:79:a2:2a:47:88:f4:cc:b7:33:b7:43:99:b7:8a: a6:52:9d:d1:e6:31:15:d7:2f:c1:b6:05:5a:d6:e9: 11:a8:e6:12:cd:42:53:66:d4:9c:a3:9f:24:43:3d: ca:90:4c:be:5d:ee:2a:ec:7f:d7:ef:04:7f:87:96: 96:f7:46:8a:4f:fd:f2:f2:45:a3:cc:30:aa:37:8f: 8d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8E:78:0B:06:A0:66:A1:1B:DE:CC:91:D9:2A:09:74:E6:16:BC:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/068bb085-b881-3a36-bc51-790e34b0c1d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:dd:47:de:f3:16:df:c4:ca:9e:dc:f2:f7:e8:23:0f:aa:a2: 22:57:71:0a:fb:a3:ea:54:68:14:84:0a:81:86:89:69:c4:97: 0f:a5:63:dd:ba:59:1d:36:99:5c:93:c8:29:d2:8d:86:0d:ce: 58:62:89:15:50:5e:c9:ca:d0:d7:c6:64:f9:68:3c:fb:1a:47: 05:ad:51:c3:a1:07:fc:c0:b8:43:64:e3:dc:92:23:b7:b4:73: 9b:33:56:ea:27:0c:13:c1:bd:8f:d4:7e:f8:42:18:7c:1f:54: b9:2a:32:2d:68:38:c9:42:49:2e:73:c9:40:1d:9a:42:35:6d: f2:c5:19:9a:b0:09:36:58:b9:40:e8:e8:27:ef:0f:3a:20:51: 1f:0f:d0:0c:a1:e6:c9:16:16:a0:84:ea:3e:4b:74:62:b0:2f: eb:c1:34:e0:30:2f:ca:44:00:85:d1:7f:95:cf:2e:01:a8:6c: e8:8c:a8:62:1c:3d:7d:a8:6c:f5:08:00:c8:2d:b6:a3:f7:04: 9a:d4:8b:df:49:86:67:e8:74:96:f4:ab:48:b3:c9:eb:2c:75: ae:b4:75:e3:2c:fa:e7:b9:6a:44:83:58:8d:79:32:01:92:bd: 07:dd:05:67:6f:55:a9:1c:96:54:4e:d4:57:60:6e:06:20:8d: a6:04:66:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93guGHBkvRu2+LcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk NGYzZGZiMTktNWIyNi00NWViLWJmZDUtOTgwM2Q4NmRlMDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4G9n9ZXnQMNZbENpwpVLJQX/urMhhprpH+1 mxwmMIKE6SQaQA6z1Me/7ZmGJ9qEX0v6PgzHhtXiuTTiUbsOmkYxiuVcwPAHhJNh xEnZ9p6TMgDzzdthQAQO8n53ZtMB2xb7sX4WWSgqgUIWk3RUn9pF+aXrysEgg0EU i3055WMYeM2kH19G+TNiUqvx9kkKI2mycw9KQAGwafqaQ0YA7VCVXHU6/hTXmWFC MK3vvlTk5gDKeaIqR4j0zLczt0OZt4qmUp3R5jEV1y/BtgVa1ukRqOYSzUJTZtSc o58kQz3KkEy+Xe4q7H/X7wR/h5aW90aKT/3y8kWjzDCqN4+NUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiOeAsGoGahG97MkdkqCXTmFrzLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMDY4YmIwODUtYjg4MS0z YTM2LWJjNTEtNzkwZTM0YjBjMWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzdR97zFt/Eyp7c8vfoIw+qoiJXcQr7o+pUaBSECoGGiWnElw+lY926 WR02mVyTyCnSjYYNzlhiiRVQXsnK0NfGZPloPPsaRwWtUcOhB/zAuENk49ySI7e0 c5szVuonDBPBvY/UfvhCGHwfVLkqMi1oOMlCSS5zyUAdmkI1bfLFGZqwCTZYuUDo 6CfvDzogUR8P0Ayh5skWFqCE6j5LdGKwL+vBNOAwL8pEAIXRf5XPLgGobOiMqGIc PX2obPUIAMgttqP3BJrUi99JhmfodJb0q0izyessda60deMs+ue5akSDWI15MgGS vQfdBWdvVakcllRO1FdgbgYgjaYEZrA= -----END CERTIFICATE-----Generated at Tue Oct 27 17:32:42 2026 by rpki-client