$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/4e71ff2c-375d-3948-8f30-ec4ebdd6f810.roa File: 4e71ff2c-375d-3948-8f30-ec4ebdd6f810.roa (raw, json) Hash identifier: qshZfOKn+3wxK2SIJIBkMYaLMAGNIwePBCeGk63Z4OU= Subject key identifier: 21:61:4C:F5:A5:46:E8:89:99:B8:08:63:A6:F3:62:3B:4A:ED:73:D7 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F778365AE757874CA5A2CEF00 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/4e71ff2c-375d-3948-8f30-ec4ebdd6f810.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 63023 IP address blocks: 136.176.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:65:ae:75:78:74:ca:5a:2c:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=bed3a594-2c09-422f-9751-7b8573c9e084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ce:ef:5c:f8:7d:63:31:e3:29:01:ff:a8:96: ea:44:f6:d2:2b:42:89:7c:9c:44:6b:9c:80:7b:c8: ab:d4:93:b3:73:63:e2:38:65:b1:7f:c3:fa:c3:f7: 17:03:fc:9c:87:9e:25:d2:bc:8b:d4:3b:f6:cc:a7: 8e:13:85:94:e9:7b:ee:a1:6c:d0:60:74:d7:9a:62: 1e:81:bc:53:41:e2:89:41:d2:96:e4:6e:da:6a:0c: f8:d2:27:e0:0e:3b:d3:77:87:9e:e2:07:13:8b:2a: 16:79:f2:23:9f:2d:61:93:95:a1:f8:ff:e6:43:61: b3:12:03:73:c9:a0:92:61:db:75:aa:01:75:06:0e: 70:b5:ad:a7:8f:89:32:65:d6:49:66:10:72:2e:3b: 81:44:2a:79:12:ae:c6:c8:10:cc:99:0e:de:b1:d8: e7:30:a5:55:df:c1:b8:b8:fe:05:a1:c9:cb:be:f9: b8:c2:c7:e3:e5:d5:19:be:f8:e3:1f:07:64:c4:0b: 14:8c:e5:ac:0b:7c:60:58:41:94:9c:fc:de:39:93: 0f:fe:f3:9b:98:5f:02:4f:80:03:82:43:11:13:6e: e8:1f:9a:b9:8a:12:86:69:e8:68:c8:86:af:59:3f: 16:d3:93:1d:fe:74:be:86:88:56:8f:2a:6f:59:7a: 5b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:61:4C:F5:A5:46:E8:89:99:B8:08:63:A6:F3:62:3B:4A:ED:73:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/4e71ff2c-375d-3948-8f30-ec4ebdd6f810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:bc:7b:9b:aa:dd:b8:3e:0c:4d:f8:08:cb:ce:3b:f5:49:12: 22:f2:3a:7b:ff:9a:d4:58:72:e2:91:73:27:8a:68:14:ff:f5: c8:b6:15:8a:24:85:0a:dc:bc:7f:c8:9b:52:90:d2:7a:1e:dd: a4:62:84:4e:53:f1:ff:5a:eb:8a:fd:ae:38:d5:c7:da:86:3f: c5:cd:d3:8a:a9:46:64:02:47:2a:d0:41:90:d4:4d:a0:eb:7a: a1:b9:39:59:51:00:88:d4:ee:42:8f:a8:76:aa:3d:56:29:b7: 85:af:9c:32:3e:c9:ae:f2:f3:c1:b9:d9:65:d3:12:d0:44:f9: 5f:12:9f:58:2c:c9:bf:9d:4e:2e:51:88:d5:34:59:3e:ec:e5: f4:6a:9f:37:7a:b9:0f:7d:04:06:bd:93:f2:77:c0:e9:57:b0: 6b:e2:97:6f:9a:45:52:e6:b8:3f:07:35:4e:5e:4a:42:35:ad: 7d:b7:e2:95:44:6d:d4:0a:a4:20:35:91:71:8e:84:92:d9:10: 7d:b6:d0:06:36:c2:ef:7a:64:1a:ba:8e:7f:19:b9:28:59:67: b6:75:ae:43:26:62:ff:94:f8:6f:87:9b:fe:3e:25:4b:09:89: dd:34:04:c6:a3:e6:1d:ac:ef:26:fc:60:93:ea:55:52:ad:de: 6a:5c:93:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g2WudXh0ylos7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk YmVkM2E1OTQtMmMwOS00MjJmLTk3NTEtN2I4NTczYzllMDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc7vXPh9YzHjKQH/qJbqRPbSK0KJfJxEa5yA e8ir1JOzc2PiOGWxf8P6w/cXA/ych54l0ryL1Dv2zKeOE4WU6XvuoWzQYHTXmmIe gbxTQeKJQdKW5G7aagz40ifgDjvTd4ee4gcTiyoWefIjny1hk5Wh+P/mQ2GzEgNz yaCSYdt1qgF1Bg5wta2nj4kyZdZJZhByLjuBRCp5Eq7GyBDMmQ7esdjnMKVV38G4 uP4FocnLvvm4wsfj5dUZvvjjHwdkxAsUjOWsC3xgWEGUnPzeOZMP/vObmF8CT4AD gkMRE27oH5q5ihKGaehoyIavWT8W05Md/nS+hohWjypvWXpbRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFhTPWlRuiJmbgIY6bzYjtK7XPXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNGU3MWZmMmMtMzc1ZC0z OTQ4LThmMzAtZWM0ZWJkZDZmODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLBjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABa8e5uq3bg+DE34CMvOO/VJEiLyOnv/mtRYcuKRcyeKaBT/9ci2FYok hQrcvH/Im1KQ0noe3aRihE5T8f9a64r9rjjVx9qGP8XN04qpRmQCRyrQQZDUTaDr eqG5OVlRAIjU7kKPqHaqPVYpt4WvnDI+ya7y88G52WXTEtBE+V8Sn1gsyb+dTi5R iNU0WT7s5fRqnzd6uQ99BAa9k/J3wOlXsGvil2+aRVLmuD8HNU5eSkI1rX234pVE bdQKpCA1kXGOhJLZEH220AY2wu96ZBq6jn8ZuShZZ7Z1rkMmYv+U+G+Hm/4+JUsJ id00BMaj5h2s7yb8YJPqVVKt3mpck5o= -----END CERTIFICATE-----Generated at Wed Oct 28 10:28:48 2026 by rpki-client