$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/41669e49-17ef-3963-9598-340601f08f5b.roa File: 41669e49-17ef-3963-9598-340601f08f5b.roa (raw, json) Hash identifier: KxNN5RwzqLrzOhBlJhjHIA8nyQ2art5E8ztoSa2PTYg= Subject key identifier: 62:16:7E:1C:96:4C:A6:0D:DC:80:D0:C4:B7:1E:00:E3:BC:38:7A:D7 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584ECD37338D6505BBC6D44386C0 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/41669e49-17ef-3963-9598-340601f08f5b.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 63023 IP address blocks: 216.152.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:33:8d:65:05:bb:c6:d4:43:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=9a63d036-74ff-4f5c-9c0e-aa6b7c488cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bc:5b:bf:a3:68:ad:7c:17:e6:82:ac:fc:a7: 16:ea:a1:80:82:01:65:97:27:d8:7b:c4:c5:e9:9f: e2:27:4c:b4:00:2b:ae:50:46:16:38:de:e5:78:c8: 45:81:65:c2:7d:97:45:e2:19:be:7c:33:8b:23:43: 00:a8:83:24:68:0f:ea:b4:42:52:7c:99:27:d1:d5: 82:f7:08:65:00:d4:e6:52:d9:6e:b2:7a:e9:82:f5: ba:3b:e0:99:98:90:a2:0c:84:0a:06:71:bf:af:0b: 37:b2:29:55:03:71:56:0d:d9:7a:63:63:93:d7:43: 78:34:44:48:e0:a0:4c:87:e6:6a:77:3f:87:95:55: 3c:88:cf:50:00:b3:3e:f5:4a:8b:17:ac:3a:a4:de: 4d:ed:58:39:28:c8:a2:a8:29:2e:9d:2b:b4:1e:73: e3:cb:08:25:c7:19:35:38:04:5e:e8:54:46:d5:24: 52:e2:cd:ff:82:29:a4:ba:51:9f:b7:5d:39:30:72: 3a:99:7b:9f:50:b9:d7:ff:52:ec:b8:34:f2:7d:f4: d0:a5:27:0a:b2:f1:84:59:e8:09:6a:ba:dc:10:61: 60:c5:87:91:84:44:8f:81:c0:86:43:f1:0b:74:90: 01:e5:62:5d:ea:a6:a0:29:dd:75:29:fd:37:12:b6: 86:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:16:7E:1C:96:4C:A6:0D:DC:80:D0:C4:B7:1E:00:E3:BC:38:7A:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/41669e49-17ef-3963-9598-340601f08f5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.152.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:5b:af:7b:94:bc:92:39:e0:fa:1b:dd:f1:f4:51:4d:43:64: f1:02:39:09:1f:8d:aa:98:09:e5:e5:d7:8e:e3:0e:0f:97:64: 39:eb:2a:69:a3:9f:60:1b:83:b9:a0:95:66:8f:fe:e5:ad:89: c0:4a:25:ae:29:43:2f:32:5b:94:28:5c:8a:f2:b3:5a:a5:e2: 66:68:57:52:1d:76:15:ac:1f:f4:60:3d:29:1b:6f:fe:ac:b3: bf:5e:f2:af:3f:1e:87:bb:20:af:4e:e0:40:62:6d:c4:be:b0: d8:aa:e5:4e:6f:95:42:e5:eb:c3:3d:4a:d7:69:a6:95:e9:6b: 71:ba:92:c4:c0:fe:94:af:2f:fb:84:f1:28:f4:05:f1:d9:45: c2:cb:18:5a:8b:19:e0:81:d1:21:ba:40:6d:17:5c:8a:65:5d: 9f:cf:7c:80:4f:97:98:17:ff:eb:f3:cb:a5:b6:ee:86:49:c8: 98:91:7e:99:e2:46:93:59:9d:e2:2c:8a:d1:ca:55:0e:e1:ff: a3:7e:fe:02:68:85:dd:81:9e:e0:64:c7:56:70:4b:04:81:e3: 57:7d:54:e8:fd:cf:84:ee:49:08:29:6b:dd:fc:fe:c7:18:c2: aa:8c:22:85:ab:b1:2c:55:0f:ed:54:3c:95:f5:9d:12:4b:97: 37:75:12:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNzONZQW7xtRDhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk OWE2M2QwMzYtNzRmZi00ZjVjLTljMGUtYWE2YjdjNDg4Y2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLxbv6NorXwX5oKs/KcW6qGAggFllyfYe8TF 6Z/iJ0y0ACuuUEYWON7leMhFgWXCfZdF4hm+fDOLI0MAqIMkaA/qtEJSfJkn0dWC 9whlANTmUtlusnrpgvW6O+CZmJCiDIQKBnG/rws3silVA3FWDdl6Y2OT10N4NERI 4KBMh+Zqdz+HlVU8iM9QALM+9UqLF6w6pN5N7Vg5KMiiqCkunSu0HnPjywglxxk1 OARe6FRG1SRS4s3/gimkulGft105MHI6mXufULnX/1LsuDTyffTQpScKsvGEWegJ arrcEGFgxYeRhESPgcCGQ/ELdJAB5WJd6qagKd11Kf03EraGAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIWfhyWTKYN3IDQxLceAOO8OHrXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNDE2NjllNDktMTdlZi0z OTYzLTk1OTgtMzQwNjAxZjA4ZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JiUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlbr3uUvJI54Pob3fH0UU1DZPECOQkfjaqYCeXl147jDg+XZDnrKmmj n2Abg7mglWaP/uWticBKJa4pQy8yW5QoXIrys1ql4mZoV1IddhWsH/RgPSkbb/6s s79e8q8/Hoe7IK9O4EBibcS+sNiq5U5vlULl68M9StdpppXpa3G6ksTA/pSvL/uE 8Sj0BfHZRcLLGFqLGeCB0SG6QG0XXIplXZ/PfIBPl5gX/+vzy6W27oZJyJiRfpni RpNZneIsitHKVQ7h/6N+/gJohd2BnuBkx1ZwSwSB41d9VOj9z4TuSQgpa938/scY wqqMIoWrsSxVD+1UPJX1nRJLlzd1EhY= -----END CERTIFICATE-----Generated at Thu Sep 10 18:45:55 2026 by rpki-client