$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/30abe295-36df-3a55-b128-5442bfea690f.roa File: 30abe295-36df-3a55-b128-5442bfea690f.roa (raw, json) Hash identifier: mYaiRNk71tVbfzm3gMGkFoxKYdLWnbrTYE43QpKVVr8= Subject key identifier: 04:65:74:DC:26:7F:C7:1A:7B:56:6F:D3:F2:6A:B2:E6:60:A6:C1:78 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F6D0AF7E6ACD9B3D62FE79B00 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/30abe295-36df-3a55-b128-5442bfea690f.roa Signing time: Wed 07 Oct 2026 19:00:40 +0000 ROA not before: Wed 07 Oct 2026 19:00:40 +0000 ROA not after: Tue 05 Jan 2027 20:00:40 +0000 asID: 63023 IP address blocks: 204.28.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:0a:f7:e6:ac:d9:b3:d6:2f:e7:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 7 19:00:40 2026 GMT Not After : Jan 5 20:00:40 2027 GMT Subject: CN=0cb200e9-9670-4b94-b5ab-3ad8a743b695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b1:b2:35:d9:f4:07:4e:24:f8:76:94:d3:7d: 9a:0b:a2:dc:b4:e0:ee:e0:20:53:30:13:0e:35:03: 9d:6d:7b:d3:aa:38:43:56:4d:dd:f9:0f:5f:a9:57: 35:ce:20:cb:58:1e:af:8f:b4:2b:a3:d7:df:a2:57: 86:05:58:87:be:86:53:02:eb:a5:c2:41:5c:53:e0: a3:26:3d:1c:dc:89:f0:37:1d:3c:a9:52:b3:41:86: 19:a2:95:a7:ce:77:ea:6c:96:51:eb:7c:1c:4b:cb: be:ee:7b:08:cd:e0:2d:90:08:b9:0f:5d:79:c6:72: c5:61:42:53:e9:42:6a:91:25:21:9a:de:15:e0:9c: 25:14:bc:ed:18:06:93:34:3c:c7:f7:7e:32:c2:f1: d3:4c:5d:4f:9e:9a:88:7b:b5:03:2a:ad:76:7d:1d: b9:1d:43:25:33:0e:0e:4a:fd:99:36:aa:c9:68:20: 65:8c:19:2b:67:0f:35:4f:9f:48:aa:14:a0:5d:6d: 83:eb:f8:0e:ed:eb:73:f7:f9:89:32:9c:a5:b9:d0: ce:3c:79:9f:b5:d4:e5:09:3b:87:99:94:2a:3d:45: a6:ee:e9:a5:c6:1c:ba:fa:29:ba:06:a1:a0:13:2b: c0:01:37:ab:2c:b4:1b:8c:bd:51:9c:6f:c9:03:4e: a1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:65:74:DC:26:7F:C7:1A:7B:56:6F:D3:F2:6A:B2:E6:60:A6:C1:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/30abe295-36df-3a55-b128-5442bfea690f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 204.28.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:7b:48:a3:a6:81:a3:ee:3b:88:2d:c3:a0:6d:43:13:9d:98: 67:46:f6:00:be:27:64:27:97:87:30:6b:70:42:f8:08:4b:3c: b4:50:42:96:96:8d:23:ef:02:4d:c5:47:13:9e:d9:a1:c9:79: 3b:2d:e0:26:ae:21:01:04:70:1e:6f:e4:01:43:6f:89:f0:65: b3:96:82:e7:91:b9:34:4a:0f:65:1d:7d:6a:ae:32:11:ec:0d: 42:99:3a:9f:b9:49:2a:91:8b:fa:9e:54:b3:b0:2a:9d:95:ac: 1e:7b:e1:73:80:53:c0:24:a6:1b:b3:92:cc:89:5b:dd:06:6d: 8f:23:25:d0:28:73:32:24:7a:6d:58:1c:77:a1:67:81:c4:42: 6a:dd:a3:d3:76:9a:b9:b6:af:0e:31:6f:bf:9d:1b:29:49:30: 1f:da:8a:6a:2e:8e:68:3f:c1:6a:d6:54:a4:13:1b:27:c6:2b: 73:93:f8:0d:cf:c4:58:8f:47:a3:84:6f:86:27:8c:2f:69:22: ff:94:62:88:4c:9c:58:c6:6c:75:7d:a2:e2:bd:5a:e3:ba:ba: 24:46:58:0d:87:70:80:69:fb:0b:0b:1e:a9:88:e8:76:8d:81: a7:29:be:fd:e6:89:5a:70:f5:86:c4:c0:c0:90:6b:fc:3b:e5: 57:2f:95:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9tCvfmrNmz1i/nmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAwNzE5MDA0MFoXDTI3MDEwNTIwMDA0MFowLzEtMCsGA1UEAxMk MGNiMjAwZTktOTY3MC00Yjk0LWI1YWItM2FkOGE3NDNiNjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLGyNdn0B04k+HaU032aC6LctODu4CBTMBMO NQOdbXvTqjhDVk3d+Q9fqVc1ziDLWB6vj7Qro9ffoleGBViHvoZTAuulwkFcU+Cj Jj0c3InwNx08qVKzQYYZopWnznfqbJZR63wcS8u+7nsIzeAtkAi5D115xnLFYUJT 6UJqkSUhmt4V4JwlFLztGAaTNDzH934ywvHTTF1PnpqIe7UDKq12fR25HUMlMw4O Sv2ZNqrJaCBljBkrZw81T59IqhSgXW2D6/gO7etz9/mJMpyludDOPHmftdTlCTuH mZQqPUWm7umlxhy6+im6BqGgEyvAATerLLQbjL1RnG/JA06hBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARldNwmf8cae1Zv0/JqsuZgpsF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMzBhYmUyOTUtMzZkZi0z YTU1LWIxMjgtNTQ0MmJmZWE2OTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzByLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACl7SKOmgaPuO4gtw6BtQxOdmGdG9gC+J2Qnl4cwa3BC+AhLPLRQQpaW jSPvAk3FRxOe2aHJeTst4CauIQEEcB5v5AFDb4nwZbOWgueRuTRKD2UdfWquMhHs DUKZOp+5SSqRi/qeVLOwKp2VrB574XOAU8AkphuzksyJW90GbY8jJdAoczIkem1Y HHehZ4HEQmrdo9N2mrm2rw4xb7+dGylJMB/aimoujmg/wWrWVKQTGyfGK3OT+A3P xFiPR6OEb4YnjC9pIv+UYohMnFjGbHV9ouK9WuO6uiRGWA2HcIBp+wsLHqmI6HaN gacpvv3miVpw9YbEwMCQa/w75VcvlTE= -----END CERTIFICATE-----Generated at Tue Oct 20 07:59:22 2026 by rpki-client