$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/2d232c06-adff-33dc-a513-f88329eccb2e.roa File: 2d232c06-adff-33dc-a513-f88329eccb2e.roa (raw, json) Hash identifier: RiRe/9fVuiEQspio0f63c9oT42t+GyF7lCq9c1lGWPA= Subject key identifier: 12:7E:1C:71:C1:BA:6E:DD:97:6C:87:E0:36:59:6F:68:7F:D6:E6:33 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F6C5822AC1E8B7DFDFEC19380 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/2d232c06-adff-33dc-a513-f88329eccb2e.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 63023 IP address blocks: 216.106.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:22:ac:1e:8b:7d:fd:fe:c1:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=2ddd080d-feed-4189-8bd1-ea8298ed2351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6b:e2:c2:d6:f0:df:37:ce:9f:ad:56:fb:3f: 28:18:29:da:dd:4b:83:1e:9b:ea:26:7d:4d:35:75: f3:3b:ca:be:3c:4f:0a:89:e2:3a:7a:bd:48:22:37: 6a:25:b0:29:df:5d:20:a5:36:a6:c9:9d:1f:ae:b3: 23:25:94:90:70:01:d4:50:d6:a4:a3:0c:f0:36:95: a3:d9:5d:34:83:a5:49:95:17:1c:bb:c2:6f:80:24: f2:e0:ca:c6:ed:00:56:68:b6:ab:41:eb:04:2c:7a: d8:3a:c8:b8:95:28:69:b7:67:f4:00:21:e9:ad:0c: e8:70:65:05:23:2b:20:b5:d6:a5:60:92:24:c1:da: f8:3a:a1:93:24:ee:36:fe:ad:33:4f:ec:19:76:d9: 34:ff:cb:b1:52:4b:56:49:36:e1:ca:43:92:8b:b3: f2:82:8a:3f:43:de:0f:f6:a9:4a:bc:9a:37:51:d9: ec:2c:cc:d0:1a:7e:9d:31:db:67:5a:30:13:0c:34: 6d:97:fb:93:bd:b9:24:87:c9:09:d2:17:80:17:1c: 22:1d:78:86:1c:4b:97:5e:74:ba:bf:0f:79:2b:f8: 2d:c0:e4:5f:a3:1e:05:bb:df:7d:b5:de:d2:ef:98: fb:67:39:40:e8:55:99:fc:6e:cd:e3:1a:c7:bb:dc: 41:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7E:1C:71:C1:BA:6E:DD:97:6C:87:E0:36:59:6F:68:7F:D6:E6:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/2d232c06-adff-33dc-a513-f88329eccb2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.106.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ff:d0:2c:67:3e:e2:30:e9:10:cd:7f:19:8e:d9:df:94:e5: d0:6c:c8:8b:47:31:94:3e:7f:02:78:61:8a:c3:53:26:2b:f4: 9a:3f:7f:f5:b9:53:46:a5:db:a9:15:f9:48:ad:7b:15:66:10: 43:bc:22:16:81:05:36:bb:0d:3c:69:19:33:d9:e0:df:20:95: f3:b3:0e:6e:ae:e6:6f:34:34:c2:3b:58:d5:df:1b:a8:07:62: 5b:7a:7b:f3:b3:5c:0d:90:33:cf:62:c5:1a:4e:1c:77:d4:4a: 44:37:43:71:ee:59:22:b6:95:bd:5b:39:ac:9b:50:8a:f5:81: 1f:4b:0a:a4:bf:45:be:9d:97:00:2c:0c:90:86:b8:08:53:12: 25:7d:cb:9e:90:91:58:98:a1:71:35:da:c6:d0:83:14:1c:81: dd:1e:10:31:ad:a8:c7:28:43:e6:05:8a:a8:e0:53:f3:13:d9: c5:6b:ba:56:2f:5f:56:76:a2:0f:3e:de:38:1c:3d:26:1b:cf: 60:30:fb:bc:e1:f3:79:5a:00:8d:9f:6b:c1:68:66:90:40:20: 18:0b:5c:44:67:db:ce:f9:cd:67:35:1d:bf:a1:5a:ea:ff:b6: 3c:0e:2d:b9:7b:cc:0a:0a:62:a2:cc:17:87:4a:e4:73:45:ef: d9:b4:59:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWCKsHot9/f7Bk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk MmRkZDA4MGQtZmVlZC00MTg5LThiZDEtZWE4Mjk4ZWQyMzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymviwtbw3zfOn61W+z8oGCna3UuDHpvqJn1N NXXzO8q+PE8KieI6er1IIjdqJbAp310gpTamyZ0frrMjJZSQcAHUUNakowzwNpWj 2V00g6VJlRccu8JvgCTy4MrG7QBWaLarQesELHrYOsi4lShpt2f0ACHprQzocGUF IysgtdalYJIkwdr4OqGTJO42/q0zT+wZdtk0/8uxUktWSTbhykOSi7Pygoo/Q94P 9qlKvJo3UdnsLMzQGn6dMdtnWjATDDRtl/uTvbkkh8kJ0heAFxwiHXiGHEuXXnS6 vw95K/gtwORfox4Fu999td7S75j7ZzlA6FWZ/G7N4xrHu9xBowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJ+HHHBum7dl2yH4DZZb2h/1uYzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMmQyMzJjMDYtYWRmZi0z M2RjLWE1MTMtZjg4MzI5ZWNjYjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Gq7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD//0CxnPuIw6RDNfxmO2d+U5dBsyItHMZQ+fwJ4YYrDUyYr9Jo/f/W5 U0al26kV+UitexVmEEO8IhaBBTa7DTxpGTPZ4N8glfOzDm6u5m80NMI7WNXfG6gH Ylt6e/OzXA2QM89ixRpOHHfUSkQ3Q3HuWSK2lb1bOaybUIr1gR9LCqS/Rb6dlwAs DJCGuAhTEiV9y56QkViYoXE12sbQgxQcgd0eEDGtqMcoQ+YFiqjgU/MT2cVrulYv X1Z2og8+3jgcPSYbz2Aw+7zh83laAI2fa8FoZpBAIBgLXERn2875zWc1Hb+hWur/ tjwOLbl7zAoKYqLMF4dK5HNF79m0WZU= -----END CERTIFICATE-----Generated at Tue Oct 27 20:36:44 2026 by rpki-client