$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/35b5bd71-8983-3aaf-b16f-13ecb09f734b.roa File: 35b5bd71-8983-3aaf-b16f-13ecb09f734b.roa (raw, json) Hash identifier: L5N1RtetWcWxu0AIombNcIem2XsFBkiztCcQYl0mvsQ= Subject key identifier: 5D:0E:E9:E0:1E:2C:D6:0B:10:32:1C:60:4D:1B:55:45:0B:3A:98:C9 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F6D09A54E535DF3471221E5C0 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/35b5bd71-8983-3aaf-b16f-13ecb09f734b.roa Signing time: Wed 07 Oct 2026 18:58:00 +0000 ROA not before: Wed 07 Oct 2026 18:58:00 +0000 ROA not after: Tue 05 Jan 2027 19:58:00 +0000 asID: 63023 IP address blocks: 204.28.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:09:a5:4e:53:5d:f3:47:12:21:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 7 18:58:00 2026 GMT Not After : Jan 5 19:58:00 2027 GMT Subject: CN=e7364a74-89a4-4ecf-8173-06142ce0c115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9f:d7:dc:7c:7a:19:4c:3b:76:b8:23:ec:2c: a7:0c:57:cc:9f:7d:f4:6a:6f:04:5e:33:c6:a5:77: dd:4c:eb:aa:b4:0d:f0:bb:67:2c:38:c8:4b:2e:84: a3:15:24:e4:86:a3:44:de:9e:ee:58:53:e7:92:b5: 57:09:db:2e:dc:13:1e:38:30:f5:d0:22:19:07:97: 40:2d:9e:75:1e:b1:f7:74:a4:9c:c2:1d:56:11:f6: 64:c5:c1:c7:47:f0:c1:a9:c3:fb:34:77:9a:59:a0: 9f:23:0b:07:2b:81:0c:5a:7e:54:73:be:cf:83:5e: 78:7f:b9:2f:52:95:5c:2c:c8:bf:0e:13:85:1b:40: 3f:93:1d:fe:a6:4c:fd:2e:a9:4f:54:9a:b4:67:35: a5:a1:23:fd:34:40:45:68:54:a2:9c:fb:b8:85:e5: 77:6b:3b:ee:84:4c:8b:8e:1f:2d:a0:95:71:dd:75: 6d:a5:08:62:31:fd:bb:90:f7:5e:21:99:97:af:1b: a0:a2:f1:b6:30:32:94:4c:07:5e:0d:3d:10:20:63: b2:12:db:1e:7e:f1:a3:2e:cc:b5:6a:13:3e:ef:0d: a6:7d:74:44:d3:37:49:a8:9d:f6:9b:bf:6e:c2:f9: b9:4c:36:59:e8:e4:6b:ea:15:f5:2f:47:f7:1e:ff: 33:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0E:E9:E0:1E:2C:D6:0B:10:32:1C:60:4D:1B:55:45:0B:3A:98:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/35b5bd71-8983-3aaf-b16f-13ecb09f734b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 204.28.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:4a:c7:4b:eb:f1:c4:60:29:c5:94:ca:be:d3:cc:58:1a:88: 9d:a2:48:48:73:d2:9c:06:a4:b1:b0:02:6d:e7:07:3c:96:49: 13:82:bd:6b:d0:fc:a5:c5:45:79:b0:7c:23:f3:d9:6f:46:9d: 18:03:e4:7e:8e:63:7c:0f:d6:be:a2:e1:40:04:31:23:06:49: ee:4d:31:d3:4d:3f:bf:91:d0:c1:9a:33:1e:d4:3e:af:87:19: 9a:6f:cd:3e:6a:ed:45:02:0b:ed:66:90:e2:32:f3:34:f1:44: bd:0d:7c:c8:9a:7f:57:6c:33:bd:9d:6b:cf:da:16:c8:c3:18: fb:36:22:e6:05:01:5e:0e:6c:f1:54:42:aa:4d:c5:45:b0:c3: 07:8a:80:56:f3:19:83:6c:a0:c8:2e:2e:e6:83:ed:b7:a3:40: 10:14:4b:a7:dc:98:51:ec:6f:72:6d:ca:7f:fe:99:8a:c7:ab: 0b:00:81:38:4e:85:80:4e:54:af:cf:3a:02:f4:68:86:35:ef: a5:db:53:20:dd:f4:f6:dd:85:37:81:dc:62:65:41:ef:6e:db: ec:0d:ca:28:66:dc:6e:d9:20:0a:62:56:f6:24:54:42:55:27: d5:19:56:51:52:2b:3c:88:9c:f5:cf:30:6c:b7:9c:ae:a1:af: 72:68:4a:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9tCaVOU13zRxIh5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAwNzE4NTgwMFoXDTI3MDEwNTE5NTgwMFowLzEtMCsGA1UEAxMk ZTczNjRhNzQtODlhNC00ZWNmLTgxNzMtMDYxNDJjZTBjMTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ/X3Hx6GUw7drgj7CynDFfMn330am8EXjPG pXfdTOuqtA3wu2csOMhLLoSjFSTkhqNE3p7uWFPnkrVXCdsu3BMeODD10CIZB5dA LZ51HrH3dKScwh1WEfZkxcHHR/DBqcP7NHeaWaCfIwsHK4EMWn5Uc77Pg154f7kv UpVcLMi/DhOFG0A/kx3+pkz9LqlPVJq0ZzWloSP9NEBFaFSinPu4heV3azvuhEyL jh8toJVx3XVtpQhiMf27kPdeIZmXrxugovG2MDKUTAdeDT0QIGOyEtsefvGjLsy1 ahM+7w2mfXRE0zdJqJ32m79uwvm5TDZZ6ORr6hX1L0f3Hv8zwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0O6eAeLNYLEDIcYE0bVUULOpjJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMzViNWJkNzEtODk4My0z YWFmLWIxNmYtMTNlY2IwOWY3MzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzByAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNKx0vr8cRgKcWUyr7TzFgaiJ2iSEhz0pwGpLGwAm3nBzyWSROCvWvQ /KXFRXmwfCPz2W9GnRgD5H6OY3wP1r6i4UAEMSMGSe5NMdNNP7+R0MGaMx7UPq+H GZpvzT5q7UUCC+1mkOIy8zTxRL0NfMiaf1dsM72da8/aFsjDGPs2IuYFAV4ObPFU QqpNxUWwwweKgFbzGYNsoMguLuaD7bejQBAUS6fcmFHsb3Jtyn/+mYrHqwsAgThO hYBOVK/POgL0aIY176XbUyDd9PbdhTeB3GJlQe9u2+wNyihm3G7ZIApiVvYkVEJV J9UZVlFSKzyInPXPMGy3nK6hr3JoSmo= -----END CERTIFICATE-----Generated at Mon Oct 19 00:09:31 2026 by rpki-client