$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/6657df97-da1f-391d-b1f9-c60139648223.roa File: 6657df97-da1f-391d-b1f9-c60139648223.roa (raw, json) Hash identifier: Wl9SS80qDelK4+aZPstpauzHuOly1geB3MyJwZAOhy4= Subject key identifier: 16:66:EC:72:60:3E:88:6F:B2:03:18:11:7A:31:91:35:31:39:5F:99 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584E30E6079450854C644750E6C0 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/6657df97-da1f-391d-b1f9-c60139648223.roa Signing time: Tue 16 Jun 2026 13:10:48 +0000 ROA not before: Tue 16 Jun 2026 13:10:48 +0000 ROA not after: Mon 14 Sep 2026 13:10:48 +0000 asID: 63023 IP address blocks: 136.176.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:30:e6:07:94:50:85:4c:64:47:50:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Jun 16 13:10:48 2026 GMT Not After : Sep 14 13:10:48 2026 GMT Subject: CN=96c265f0-733b-48d7-ac29-109bbfa4629d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:73:df:0a:f0:af:2a:3d:5a:e2:9b:91:e0:1f: 08:d6:5e:55:68:e0:47:07:42:a1:b7:2f:40:71:16: 0d:a5:62:13:31:27:a8:4b:82:e3:7b:48:13:fd:23: b7:88:3d:1d:03:e6:19:be:a8:49:f8:9a:38:ce:27: 87:0f:c3:29:c4:e4:56:37:76:b7:52:1b:67:51:cb: 7a:5c:b9:48:66:cc:0b:1a:e5:a8:a4:ff:46:6d:86: b1:f1:b8:59:c3:cf:fd:fb:55:63:f1:29:86:9e:4e: 69:4b:97:86:79:8f:63:3a:0a:fa:2d:d2:88:cb:fc: f2:ac:22:ae:fe:45:97:8f:f2:08:74:08:15:fa:a0: 16:56:f6:d2:4f:45:67:32:04:30:63:e8:91:bd:2c: 13:d3:b6:94:40:d2:12:e8:85:3e:9b:cf:b1:43:1d: 1a:4b:7d:4c:17:17:c3:c3:64:dd:66:72:90:16:67: 43:ba:e3:a6:a7:43:b7:3e:9c:e5:bf:dd:06:e9:87: 60:ab:2e:27:21:1a:91:55:6f:6d:38:4e:2d:ad:1f: b0:cf:ee:b9:05:49:78:bf:1c:d8:2d:ac:b7:4b:57: 78:ac:9a:28:11:44:f1:84:6d:2d:92:3b:f1:15:51: 54:42:3e:80:27:78:81:3d:d2:09:71:52:4c:a4:f5: d2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:66:EC:72:60:3E:88:6F:B2:03:18:11:7A:31:91:35:31:39:5F:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/6657df97-da1f-391d-b1f9-c60139648223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:42:de:be:e4:98:b8:9a:b6:11:47:70:12:91:24:73:f1:74: 67:53:bd:52:bc:db:dd:1a:1e:c2:d4:94:fa:72:35:e2:b3:22: c3:a5:7c:c3:ab:32:dd:cc:63:cf:e9:f8:95:ca:5d:ea:4c:1c: 21:4f:50:94:a4:87:a9:a9:e8:1e:2f:2a:25:00:55:c8:f8:71: 10:fb:5b:6e:ab:88:21:9f:46:10:dc:76:f8:8d:08:2e:fc:0c: 7c:78:8b:53:b7:e7:34:36:80:ec:ba:32:e4:aa:7b:17:1d:e0: 97:7f:cb:bd:a9:57:7e:19:cb:30:ca:3d:a9:49:59:4e:f6:5a: f7:84:e2:85:ac:22:53:a3:41:ff:ff:dd:66:be:4c:23:51:1b: 89:32:22:a3:c2:c5:b6:87:c9:33:d3:1d:44:b4:16:c6:d1:c3: 55:b0:23:38:9f:31:f4:b9:81:25:aa:7e:eb:50:38:0f:4f:fe: c7:27:df:38:dc:bd:7a:e8:ce:71:1a:54:d2:06:95:cc:70:60: 0a:32:6c:0b:e5:e4:9a:a8:9e:09:0c:40:4e:f5:e9:4a:9d:ce: dd:e7:dc:48:88:f6:15:8a:e4:14:68:16:11:5f:21:45:ed:b1: 2c:1b:2a:ce:7a:8f:40:bc:78:14:66:8a:68:32:aa:39:5e:94: a3:89:01:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4w5geUUIVMZEdQ5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDYxNjEzMTA0OFoXDTI2MDkxNDEzMTA0OFowLzEtMCsGA1UEAxMk OTZjMjY1ZjAtNzMzYi00OGQ3LWFjMjktMTA5YmJmYTQ2MjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXPfCvCvKj1a4puR4B8I1l5VaOBHB0Khty9A cRYNpWITMSeoS4Lje0gT/SO3iD0dA+YZvqhJ+Jo4zieHD8MpxORWN3a3UhtnUct6 XLlIZswLGuWopP9GbYax8bhZw8/9+1Vj8SmGnk5pS5eGeY9jOgr6LdKIy/zyrCKu /kWXj/IIdAgV+qAWVvbST0VnMgQwY+iRvSwT07aUQNIS6IU+m8+xQx0aS31MFxfD w2TdZnKQFmdDuuOmp0O3Ppzlv90G6Ydgqy4nIRqRVW9tOE4trR+wz+65BUl4vxzY Lay3S1d4rJooEUTxhG0tkjvxFVFUQj6AJ3iBPdIJcVJMpPXSuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZm7HJgPohvsgMYEXoxkTUxOV+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNjY1N2RmOTctZGExZi0z OTFkLWIxZjktYzYwMTM5NjQ4MjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLBZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpC3r7kmLiathFHcBKRJHPxdGdTvVK8290aHsLUlPpyNeKzIsOlfMOr Mt3MY8/p+JXKXepMHCFPUJSkh6mp6B4vKiUAVcj4cRD7W26riCGfRhDcdviNCC78 DHx4i1O35zQ2gOy6MuSqexcd4Jd/y72pV34ZyzDKPalJWU72WveE4oWsIlOjQf// 3Wa+TCNRG4kyIqPCxbaHyTPTHUS0FsbRw1WwIzifMfS5gSWqfutQOA9P/scn3zjc vXroznEaVNIGlcxwYAoybAvl5JqongkMQE716Uqdzt3n3EiI9hWK5BRoFhFfIUXt sSwbKs56j0C8eBRmimgyqjlelKOJAbI= -----END CERTIFICATE-----Generated at Thu Jun 25 13:20:48 2026 by rpki-client