$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/13f91abf-2725-3e27-acd9-50a6a6a8090f.roa File: 13f91abf-2725-3e27-acd9-50a6a6a8090f.roa (raw, json) Hash identifier: WnL154EwX7ZwWUmHhu9BbGkLwwkp2v0qb9ar+xYxkC4= Subject key identifier: 79:B4:3E:D1:AD:B0:EF:16:10:15:BC:36:36:E8:16:33:08:98:3F:6B Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584ECD371863E10551F2423DD000 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/13f91abf-2725-3e27-acd9-50a6a6a8090f.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 63023 IP address blocks: 216.152.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:18:63:e1:05:51:f2:42:3d:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=c237568a-f7a2-4b5c-a693-674eb57e2ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:98:f2:91:4f:98:71:64:fa:e5:8e:33:75:ad: 02:64:5b:54:ba:a7:03:69:77:11:b9:af:a4:e2:4e: 5f:d4:7c:ec:16:27:ce:a1:f7:29:fb:04:39:ac:9c: f0:fa:86:ba:39:14:56:78:e6:46:59:e9:54:a9:f5: 3a:fa:ba:14:22:53:89:67:6e:55:f9:0f:41:ed:d3: 2a:78:de:7a:6d:df:e3:12:ae:2e:12:6c:a4:1e:14: 8d:fc:40:7c:6f:b7:e4:01:e7:ce:96:97:da:40:90: 37:e0:f7:08:38:f5:67:a5:07:72:1f:1f:60:ad:fa: fd:70:88:0a:b3:dd:7c:c8:c7:c5:5c:3b:45:a0:11: c6:30:32:de:b0:ab:4b:65:e9:05:60:fd:c6:fe:84: 3e:72:e2:5b:5b:25:aa:e3:63:e8:bb:80:83:8a:20: 3a:b8:e2:17:67:6a:eb:7f:5d:7c:db:0a:79:1b:87: a0:88:a8:ca:6d:bc:f8:fa:96:bd:e7:37:bc:e8:1e: 1e:c4:15:9e:fe:87:1a:99:a5:11:99:30:72:8d:33: 9a:1e:76:5c:cf:9e:e1:3a:62:17:7a:3f:33:1d:70: 03:e6:28:15:8f:12:18:7e:41:98:4a:ed:06:b3:53: 6f:6f:21:fc:07:42:49:56:71:f0:d7:76:f1:62:84: 17:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B4:3E:D1:AD:B0:EF:16:10:15:BC:36:36:E8:16:33:08:98:3F:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/13f91abf-2725-3e27-acd9-50a6a6a8090f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.152.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:17:09:99:57:03:b9:ad:42:ee:b9:7a:55:b7:7f:fe:b7:dc: 73:7f:3d:0f:63:8a:d5:36:39:b9:8e:32:d5:f9:e4:8b:ec:f6: 3f:32:fd:8c:05:45:92:14:c5:25:3f:98:5c:de:ad:bd:6a:bb: 27:14:af:56:89:7d:05:6c:be:fe:85:90:ac:6e:5f:10:8c:e6: 27:c2:1c:46:aa:dc:2c:67:ed:2e:3b:ed:93:7e:e0:a3:fc:e7: c4:e4:22:bf:0c:9d:1e:e1:1d:f2:3d:cc:34:f7:d9:9e:c6:1f: f7:9d:82:d2:bf:b4:d6:fa:ae:62:e0:e9:ad:ed:25:64:2b:b4: 5b:a5:52:3e:f0:5b:c6:2c:34:1b:9a:06:f5:34:b8:fd:66:69: f6:98:2e:3d:c2:fc:e9:7e:17:33:e5:e5:c7:7f:dc:47:ef:35: 9d:05:13:93:40:c7:03:c9:1f:05:a6:ca:9f:85:2b:0c:83:8f: 08:01:b0:bf:98:bc:49:14:28:7f:b8:39:a6:83:23:88:a5:8f: ff:34:99:4f:ff:19:db:9d:43:7a:ab:cd:a1:79:16:76:de:c8: 38:69:dd:b3:a8:fd:ca:d5:87:d0:2c:72:cd:01:bc:a8:04:e5: 33:41:d8:df:54:9e:bb:14:df:7b:52:e0:a3:25:14:fc:8b:3d: e1:ca:33:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNxhj4QVR8kI90AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk YzIzNzU2OGEtZjdhMi00YjVjLWE2OTMtNjc0ZWI1N2UyZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35jykU+YcWT65Y4zda0CZFtUuqcDaXcRua+k 4k5f1HzsFifOofcp+wQ5rJzw+oa6ORRWeOZGWelUqfU6+roUIlOJZ25V+Q9B7dMq eN56bd/jEq4uEmykHhSN/EB8b7fkAefOlpfaQJA34PcIOPVnpQdyHx9grfr9cIgK s918yMfFXDtFoBHGMDLesKtLZekFYP3G/oQ+cuJbWyWq42Pou4CDiiA6uOIXZ2rr f1182wp5G4egiKjKbbz4+pa95ze86B4exBWe/ocamaURmTByjTOaHnZcz57hOmIX ej8zHXAD5igVjxIYfkGYSu0Gs1NvbyH8B0JJVnHw13bxYoQXCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHm0PtGtsO8WEBW8NjboFjMImD9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMTNmOTFhYmYtMjcyNS0z ZTI3LWFjZDktNTBhNmE2YTgwOTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JidMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEXCZlXA7mtQu65elW3f/633HN/PQ9jitU2ObmOMtX55Ivs9j8y/YwF RZIUxSU/mFzerb1quycUr1aJfQVsvv6FkKxuXxCM5ifCHEaq3Cxn7S477ZN+4KP8 58TkIr8MnR7hHfI9zDT32Z7GH/edgtK/tNb6rmLg6a3tJWQrtFulUj7wW8YsNBua BvU0uP1mafaYLj3C/Ol+FzPl5cd/3EfvNZ0FE5NAxwPJHwWmyp+FKwyDjwgBsL+Y vEkUKH+4OaaDI4ilj/80mU//GdudQ3qrzaF5FnbeyDhp3bOo/crVh9Ascs0BvKgE 5TNB2N9UnrsU33tS4KMlFPyLPeHKM3Q= -----END CERTIFICATE-----Generated at Thu Sep 10 18:44:45 2026 by rpki-client