$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/65ab4dbc-5d77-31c4-baa6-db0e517a93b5.roa File: 65ab4dbc-5d77-31c4-baa6-db0e517a93b5.roa (raw, json) Hash identifier: o7Ori/06rfmY+e39D/uWaJAu0p+T/0NEGX92f9S4OcA= Subject key identifier: 1D:F7:FD:29:D3:DC:19:49:41:17:B6:56:12:EE:0A:83:37:D7:23:E8 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584EC9072859A2C6DA52C3D14C80 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/65ab4dbc-5d77-31c4-baa6-db0e517a93b5.roa Signing time: Mon 10 Aug 2026 01:00:12 +0000 ROA not before: Mon 10 Aug 2026 01:00:12 +0000 ROA not after: Sun 08 Nov 2026 02:00:12 +0000 asID: 63023 IP address blocks: 216.106.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c9:07:28:59:a2:c6:da:52:c3:d1:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Aug 10 01:00:12 2026 GMT Not After : Nov 8 02:00:12 2026 GMT Subject: CN=4cfe85d7-875b-4b95-ab8b-40574ee6b0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:32:9e:e9:6f:1b:ac:e5:0a:aa:35:26:60:22: 60:0f:63:30:d9:95:58:8d:00:ab:67:51:a5:27:22: 2d:f7:53:d1:57:c4:a6:73:6c:0f:11:39:7b:b3:71: 28:70:b5:07:3c:44:40:3f:ce:49:2e:03:f4:22:e3: fd:d3:c6:ae:e1:34:77:95:c2:33:3e:7d:c3:a7:c4: 97:e3:70:a4:7e:e4:94:61:eb:9d:22:57:f3:af:0a: 6d:68:b2:0c:55:e8:81:2d:de:31:2b:b4:36:cd:e5: ae:fe:1b:cf:0f:26:48:64:19:ed:e0:1d:46:53:ef: e0:30:17:ed:43:39:c8:d3:20:c2:63:15:3f:97:2a: c1:5b:3f:28:f3:e2:64:4f:28:f8:e8:8d:2d:a8:da: 6c:27:57:44:d5:da:23:65:54:90:a1:fd:bd:81:9a: 7e:c6:2b:52:6b:ca:d4:c5:8a:5f:82:21:bf:80:42: 87:cc:33:b1:ca:d0:f0:e7:ec:63:37:1a:06:36:e7: e7:d6:43:35:a2:34:f9:b3:25:d3:3d:1a:8a:a5:10: 48:c0:69:6d:69:e8:d0:10:7c:82:ea:96:03:81:67: e8:1f:dd:3f:7c:db:6b:31:cf:1d:c8:6b:46:30:6d: e0:90:a0:87:ce:ac:6a:da:5b:33:78:6b:e5:4a:0c: a0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F7:FD:29:D3:DC:19:49:41:17:B6:56:12:EE:0A:83:37:D7:23:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/65ab4dbc-5d77-31c4-baa6-db0e517a93b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.106.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c2:4c:0d:2f:bb:13:92:0c:d6:ab:0f:af:97:22:a0:ad:03: c1:d7:08:23:6d:e3:72:b2:b2:e7:31:66:88:1c:bf:c8:f5:e7: b7:4f:32:c1:4d:22:0b:32:38:80:93:27:91:d9:39:14:9c:5d: 9e:96:7b:41:5a:96:b3:ae:ee:f4:66:7a:1e:94:78:4a:7d:1e: 8e:25:22:5c:45:4e:75:5c:74:c0:69:c6:a5:62:96:a2:11:f7: ed:8c:22:11:cc:ea:b9:cd:a6:d5:c3:66:fb:6e:fc:36:64:30: f7:cc:d1:7a:e1:08:db:3c:d3:3c:ff:2d:fc:4e:66:00:52:9d: 09:3a:27:d5:02:b5:01:af:19:cd:7c:7d:3c:75:38:34:98:b5: d7:10:1f:1c:1b:0b:b6:ec:13:c1:40:75:f4:c3:9b:9a:15:d2: 84:18:09:76:60:f0:a5:3c:41:40:70:c1:a5:0e:16:f2:55:f2: eb:f2:88:52:ca:75:ad:c9:96:aa:2b:8b:2d:df:7d:03:40:bf: ac:81:05:08:58:59:48:07:ef:6d:40:bb:a2:da:1e:19:b5:74: 4e:38:84:80:ab:52:79:6a:00:4f:07:26:4d:1c:88:ea:4e:c1: e9:b7:3c:4e:9e:63:ad:e9:61:cd:48:64:a8:02:6d:8f:60:50: 0d:cf:f5:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7JByhZosbaUsPRTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDgxMDAxMDAxMloXDTI2MTEwODAyMDAxMlowLzEtMCsGA1UEAxMk NGNmZTg1ZDctODc1Yi00Yjk1LWFiOGItNDA1NzRlZTZiMGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzKe6W8brOUKqjUmYCJgD2Mw2ZVYjQCrZ1Gl JyIt91PRV8Smc2wPETl7s3EocLUHPERAP85JLgP0IuP908au4TR3lcIzPn3Dp8SX 43CkfuSUYeudIlfzrwptaLIMVeiBLd4xK7Q2zeWu/hvPDyZIZBnt4B1GU+/gMBft QznI0yDCYxU/lyrBWz8o8+JkTyj46I0tqNpsJ1dE1dojZVSQof29gZp+xitSa8rU xYpfgiG/gEKHzDOxytDw5+xjNxoGNufn1kM1ojT5syXTPRqKpRBIwGltaejQEHyC 6pYDgWfoH90/fNtrMc8dyGtGMG3gkKCHzqxq2lszeGvlSgygxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB33/SnT3BlJQRe2VhLuCoM31yPoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNjVhYjRkYmMtNWQ3Ny0z MWM0LWJhYTYtZGIwZTUxN2E5M2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Gq0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTCTA0vuxOSDNarD6+XIqCtA8HXCCNt43KysucxZogcv8j157dPMsFN IgsyOICTJ5HZORScXZ6We0FalrOu7vRmeh6UeEp9Ho4lIlxFTnVcdMBpxqVilqIR 9+2MIhHM6rnNptXDZvtu/DZkMPfM0XrhCNs80zz/LfxOZgBSnQk6J9UCtQGvGc18 fTx1ODSYtdcQHxwbC7bsE8FAdfTDm5oV0oQYCXZg8KU8QUBwwaUOFvJV8uvyiFLK da3Jlqoriy3ffQNAv6yBBQhYWUgH721Au6LaHhm1dE44hICrUnlqAE8HJk0ciOpO wem3PE6eY63pYc1IZKgCbY9gUA3P9Zc= -----END CERTIFICATE-----Generated at Thu Sep 10 18:44:21 2026 by rpki-client