$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/37d8d218-5221-3e19-a1c7-5a94802da063.roa File: 37d8d218-5221-3e19-a1c7-5a94802da063.roa (raw, json) Hash identifier: WSztMEnmPEx7nL1cRxFnIv4oHp6VVInzFmoWY9s5ycI= Subject key identifier: 1C:41:76:B6:16:45:7E:79:1A:85:A5:82:A2:75:AD:E3:59:85:36:60 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F7782E449EC4235FC5556B680 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/37d8d218-5221-3e19-a1c7-5a94802da063.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 63023 IP address blocks: 136.176.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:e4:49:ec:42:35:fc:55:56:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=625716b8-d0ce-4473-afd2-e906981a3d59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6a:3a:99:f9:e6:36:9b:e7:4d:a3:a2:0e:49: 31:5f:14:1f:c1:ce:7b:3f:d2:72:a2:4e:77:d3:a8: bd:23:27:4d:f5:c2:55:fd:ce:e4:b5:a1:9b:66:2c: 52:93:cc:86:c8:af:39:94:9c:2c:75:aa:5c:95:b6: 08:8f:0b:fa:c1:86:93:15:11:3c:cf:de:08:15:8b: cb:73:b6:d0:f1:1b:f7:8a:8a:67:66:93:39:b2:e5: 1f:4f:9b:06:84:53:2c:c0:48:80:cf:35:74:39:58: 9c:83:02:7f:95:1b:5d:d3:dd:60:32:77:84:06:9c: c2:b4:01:ed:3f:d2:47:ae:02:58:51:f5:18:41:8a: 54:fc:af:66:83:ee:03:9a:4b:65:d8:ba:66:f5:25: 84:3f:dc:ce:3b:ed:a7:78:98:90:5a:0c:c9:60:ad: bc:cf:f7:2b:26:20:c3:ea:be:79:a5:50:f1:7d:3d: ab:b2:0d:7e:49:c5:2c:9e:d2:59:2b:84:63:dc:26: a4:62:5a:bd:34:ea:12:c0:6d:a4:ae:58:52:18:29: da:fa:3f:bf:7d:14:8d:9e:e3:e3:6b:44:81:b2:cc: c4:fb:25:a6:d6:b2:fd:00:49:bb:e4:b9:b4:d8:82: 26:93:d8:4e:71:f4:0b:cc:32:8a:ee:2f:12:34:88: b8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:41:76:B6:16:45:7E:79:1A:85:A5:82:A2:75:AD:E3:59:85:36:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/37d8d218-5221-3e19-a1c7-5a94802da063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:17:8b:3b:f8:7c:87:42:21:4b:2d:ee:6e:c0:f8:69:e9:f1: 0d:bd:b4:48:fa:60:07:61:ae:eb:3e:0d:1a:e1:27:84:37:97: 3b:6f:07:76:2e:68:8a:ad:70:76:ed:19:17:b2:56:db:84:67: 07:37:4d:42:6a:e0:44:3e:c3:c5:2d:5b:4d:64:4a:cc:74:78: 05:3c:9c:a1:9f:fa:48:af:cc:a5:fa:b1:c2:6e:a9:bf:4f:f0: ac:d3:5b:aa:db:ee:cd:13:9b:d6:b1:c6:26:d4:81:65:c1:16: c9:f6:5a:be:48:27:75:a2:75:87:c2:21:98:5d:20:70:61:43: 67:4d:5c:c2:97:4c:a6:aa:d9:50:76:7a:ca:ef:13:ba:f4:e4: 8f:2f:4b:13:bf:10:ac:df:97:f9:38:18:35:21:6f:90:b9:fd: 12:44:1e:cd:a9:fc:0e:fc:57:9e:77:cd:59:d8:0e:f0:0b:b8: 60:dd:21:60:8f:c4:51:f8:dd:23:9f:3f:e1:16:7b:6c:37:4b: e9:65:76:c3:f3:21:ef:ed:aa:d5:f1:97:2d:e0:b0:1a:3f:b8: 3a:0c:5a:04:52:6c:79:e3:1a:a8:0d:02:03:17:fa:ca:c9:f5: 01:ec:7b:cd:b3:05:0c:e3:c9:cd:d0:81:3c:cc:89:d9:e4:bc: a2:80:1f:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93guRJ7EI1/FVWtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk NjI1NzE2YjgtZDBjZS00NDczLWFmZDItZTkwNjk4MWEzZDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2o6mfnmNpvnTaOiDkkxXxQfwc57P9Jyok53 06i9IydN9cJV/c7ktaGbZixSk8yGyK85lJwsdapclbYIjwv6wYaTFRE8z94IFYvL c7bQ8Rv3iopnZpM5suUfT5sGhFMswEiAzzV0OVicgwJ/lRtd091gMneEBpzCtAHt P9JHrgJYUfUYQYpU/K9mg+4Dmktl2Lpm9SWEP9zOO+2neJiQWgzJYK28z/crJiDD 6r55pVDxfT2rsg1+ScUsntJZK4Rj3CakYlq9NOoSwG2krlhSGCna+j+/fRSNnuPj a0SBsszE+yWm1rL9AEm75Lm02IImk9hOcfQLzDKK7i8SNIi4UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxBdrYWRX55GoWlgqJ1reNZhTZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMzdkOGQyMTgtNTIyMS0z ZTE5LWExYzctNWE5NDgwMmRhMDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLBNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIXizv4fIdCIUst7m7A+Gnp8Q29tEj6YAdhrus+DRrhJ4Q3lztvB3Yu aIqtcHbtGReyVtuEZwc3TUJq4EQ+w8UtW01kSsx0eAU8nKGf+kivzKX6scJuqb9P 8KzTW6rb7s0Tm9axxibUgWXBFsn2Wr5IJ3WidYfCIZhdIHBhQ2dNXMKXTKaq2VB2 esrvE7r05I8vSxO/EKzfl/k4GDUhb5C5/RJEHs2p/A78V553zVnYDvALuGDdIWCP xFH43SOfP+EWe2w3S+lldsPzIe/tqtXxly3gsBo/uDoMWgRSbHnjGqgNAgMX+srJ 9QHse82zBQzjyc3QgTzMidnkvKKAHxs= -----END CERTIFICATE-----Generated at Wed Oct 28 14:37:13 2026 by rpki-client