$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5524f1db-bbd4-3775-a453-c36094677a2a.roa File: 5524f1db-bbd4-3775-a453-c36094677a2a.roa (raw, json) Hash identifier: VG6dMB3yDzLEWa8B4YiRj5GdUF5SxsdeT8wo43UzglE= Subject key identifier: 13:30:5E:D3:65:EE:DD:DF:E8:B8:4E:AF:4D:67:ED:36:27:20:BE:A0 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F6F22FBC1E0F69A7A80E57200 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5524f1db-bbd4-3775-a453-c36094677a2a.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 62563 IP address blocks: 216.152.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:fb:c1:e0:f6:9a:7a:80:e5:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=97bfce68-4f55-4552-a6ce-f8dd6d20cb1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:aa:95:af:99:05:f9:50:9d:7b:e7:01:45:17: 13:ad:3b:95:bf:ee:22:44:38:29:69:53:ac:d7:65: 26:8e:2a:56:ff:b8:8e:a9:fa:99:48:19:86:14:16: d8:a7:b1:e2:60:a3:52:e8:37:84:75:11:cd:32:1b: ef:ec:ce:e5:08:75:4c:cd:1c:67:52:b1:d9:5f:2e: 31:35:be:94:03:4f:cc:05:c3:ea:cb:3a:87:4d:84: c7:7a:d7:27:58:ba:c9:25:a5:0c:12:a5:ef:fc:cd: 11:a1:65:7b:d2:e4:d1:0c:fb:1f:bc:e2:73:14:4d: 99:65:dd:eb:e3:ee:44:35:bc:b9:97:60:78:09:67: 59:ef:df:f3:52:3b:9f:e3:65:ac:b7:95:88:45:1e: 5d:7c:84:e3:e9:79:ef:0b:b2:4e:59:0f:9b:90:98: 3c:f5:54:7a:dd:7a:77:9e:75:48:92:61:56:10:1d: 27:c9:68:df:be:51:8e:5a:56:7a:86:60:f0:e0:82: b4:b8:d3:1e:1d:d0:13:29:55:fc:cf:f8:f2:7e:5b: 70:f9:e2:78:07:04:51:e0:9f:6b:8c:ac:3a:c0:1f: a9:19:12:0f:23:8b:17:70:4e:11:ae:d1:3e:14:b1: 98:66:2c:52:50:60:f7:3a:a9:16:81:6e:ec:de:dd: a6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:30:5E:D3:65:EE:DD:DF:E8:B8:4E:AF:4D:67:ED:36:27:20:BE:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5524f1db-bbd4-3775-a453-c36094677a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.152.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:45:68:9b:f2:69:53:e7:6c:06:a4:f4:67:ed:c5:da:dd:d6: 03:1c:3e:91:80:ce:a9:35:9e:a4:58:c6:0c:d1:8e:2d:7c:03: 32:67:34:e0:83:ec:7c:f9:e3:da:29:f4:c5:37:a1:d4:48:85: 75:eb:e3:d7:fc:c5:9c:4f:69:7a:b2:9f:41:d8:9c:c1:be:a4: dd:e7:2a:2a:4b:20:69:35:58:39:df:db:9d:52:cb:bb:da:7a: e1:d6:84:67:7b:a7:b5:fc:ab:79:80:35:1f:27:f2:14:e2:d4: 4b:4b:38:8b:2b:d0:17:19:08:f3:c6:d8:c6:9c:d0:0b:93:26: f6:a4:68:3a:78:96:20:ce:e5:52:2e:6f:35:43:05:b5:85:dd: a6:fd:8a:2c:26:f2:22:54:78:39:bd:53:1f:e8:2c:e9:d1:29: 81:76:71:f2:49:94:84:80:2f:56:fe:6a:f2:8a:f5:2f:f1:33: c9:1d:ad:30:6c:32:4e:ac:bb:15:96:13:43:e3:05:09:05:dd: 8f:dc:73:1b:94:1c:2f:18:fb:8e:f9:1a:a2:9e:b7:e3:02:a1: d2:c8:8b:66:76:be:af:bb:b7:c5:ba:e0:62:f8:2c:0e:98:b2: 4f:c4:b3:14:d7:e5:6c:6c:b2:56:98:86:67:43:d7:9e:98:9f: cb:af:96:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIvvB4PaaeoDlcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk OTdiZmNlNjgtNGY1NS00NTUyLWE2Y2UtZjhkZDZkMjBjYjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaqVr5kF+VCde+cBRRcTrTuVv+4iRDgpaVOs 12UmjipW/7iOqfqZSBmGFBbYp7HiYKNS6DeEdRHNMhvv7M7lCHVMzRxnUrHZXy4x Nb6UA0/MBcPqyzqHTYTHetcnWLrJJaUMEqXv/M0RoWV70uTRDPsfvOJzFE2ZZd3r 4+5ENby5l2B4CWdZ79/zUjuf42Wst5WIRR5dfITj6XnvC7JOWQ+bkJg89VR63Xp3 nnVIkmFWEB0nyWjfvlGOWlZ6hmDw4IK0uNMeHdATKVX8z/jyfltw+eJ4BwRR4J9r jKw6wB+pGRIPI4sXcE4RrtE+FLGYZixSUGD3OqkWgW7s3t2m9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMwXtNl7t3f6LhOr01n7TYnIL6gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNTUyNGYxZGItYmJkNC0z Nzc1LWE0NTMtYzM2MDk0Njc3YTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JiTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNFaJvyaVPnbAak9Gftxdrd1gMcPpGAzqk1nqRYxgzRji18AzJnNOCD 7Hz549op9MU3odRIhXXr49f8xZxPaXqyn0HYnMG+pN3nKipLIGk1WDnf251Sy7va euHWhGd7p7X8q3mANR8n8hTi1EtLOIsr0BcZCPPG2Mac0AuTJvakaDp4liDO5VIu bzVDBbWF3ab9iiwm8iJUeDm9Ux/oLOnRKYF2cfJJlISAL1b+avKK9S/xM8kdrTBs Mk6suxWWE0PjBQkF3Y/ccxuUHC8Y+475GqKet+MCodLIi2Z2vq+7t8W64GL4LA6Y sk/EsxTX5WxsslaYhmdD156Yn8uvlnI= -----END CERTIFICATE-----Generated at Mon Oct 26 23:23:54 2026 by rpki-client