$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/67f0a956-9846-3a15-8480-fd6aa3462556.roa File: 67f0a956-9846-3a15-8480-fd6aa3462556.roa (raw, json) Hash identifier: go2w7gYXVHhXvG9OrVxBfT4/dEg9QJWfmi9u7RA0Edo= Subject key identifier: 41:60:1D:84:46:54:73:39:36:6F:BC:00:39:4C:42:04:EA:02:E4:93 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584E30E5A65ADB797E8644812F80 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/67f0a956-9846-3a15-8480-fd6aa3462556.roa Signing time: Tue 16 Jun 2026 13:10:02 +0000 ROA not before: Tue 16 Jun 2026 13:10:02 +0000 ROA not after: Mon 14 Sep 2026 13:10:02 +0000 asID: 63023 IP address blocks: 136.176.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:30:e5:a6:5a:db:79:7e:86:44:81:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Jun 16 13:10:02 2026 GMT Not After : Sep 14 13:10:02 2026 GMT Subject: CN=8d50c760-ed73-4d1e-bc0f-0adb4a22fd33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a3:ae:8d:ad:be:bf:e7:99:66:c7:50:a5:c1: 11:bf:2a:ba:c3:05:e1:90:a8:4a:78:47:0c:17:76: 6e:8d:fc:29:47:81:0d:a1:03:5f:48:a8:17:21:d3: c7:fc:c2:5c:78:77:17:af:d2:63:9c:1d:10:20:55: 2e:b0:03:f4:3d:2d:26:68:e0:a2:21:cd:db:59:bc: 1f:0c:db:d2:ee:b4:6d:66:ec:3d:8b:6e:48:92:e3: c5:20:6a:7c:73:4f:d6:74:6f:9e:2b:e0:b9:17:c8: e5:c6:af:3d:9d:84:6c:12:f4:c4:46:0e:b1:0b:9a: 45:79:d5:87:cc:d8:8a:ce:70:ee:0d:1f:f8:d7:d7: a6:f4:19:62:e4:ec:90:7f:90:f3:1b:45:ec:d1:99: 85:b9:82:a5:e2:89:98:6e:af:bb:f2:ad:73:01:19: cf:65:0a:b4:b6:c7:14:b2:41:10:dc:3c:58:53:15: 73:ee:db:87:d3:8c:26:28:46:ec:b4:d0:8d:7a:af: 3a:f3:1b:ea:76:a2:e7:48:20:28:e0:98:30:57:aa: 23:b9:85:2d:2d:ec:46:6e:4d:70:62:c7:ce:90:92: e9:49:52:f0:0d:8f:1a:66:51:7a:2b:ed:b0:b6:f0: 14:bf:a5:a0:53:c4:96:b2:3a:fb:c4:9d:83:4d:4f: 64:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:60:1D:84:46:54:73:39:36:6F:BC:00:39:4C:42:04:EA:02:E4:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/67f0a956-9846-3a15-8480-fd6aa3462556.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:4d:c7:57:87:34:39:d7:2c:d0:4b:ae:e7:54:15:2b:eb:bc: 83:42:55:66:0f:dc:70:08:4f:e0:a3:2f:47:04:c1:98:78:2c: d9:25:c5:c6:23:d1:24:86:d5:e8:8f:bb:00:20:bf:66:2f:cb: 01:b0:e9:86:72:3c:43:3d:a1:94:1f:ce:29:f1:c4:fc:a2:52: e9:44:b4:46:f9:95:62:24:9f:7e:29:f0:79:73:aa:50:fa:71: bc:5a:c5:5f:62:1e:1c:73:e2:f1:4d:3e:bd:59:b7:37:0b:aa: 59:29:6b:e8:86:cc:93:5a:e5:fc:c8:6e:d4:77:68:85:0c:c6: 1d:31:50:ad:01:15:d5:63:62:51:38:bf:c0:36:e7:0c:b4:a7: d6:91:1d:c1:5e:91:b3:c5:d7:75:6c:77:10:04:c7:77:97:2e: 29:f8:a3:b9:a7:18:7d:15:da:b2:41:c3:c0:0a:a1:14:49:d0: 4b:8a:2b:c7:43:72:9a:c9:ac:65:00:29:73:46:dd:05:c0:f8: 85:37:5a:d2:c5:31:fe:53:65:67:78:f0:e1:31:bf:09:ef:49: 92:a3:8c:98:fa:a0:e9:3d:65:1b:bb:57:9c:be:e8:1e:19:6d: 2d:92:6d:0f:76:5b:7d:0f:a3:e2:c8:cc:e6:d4:4f:20:f4:78: 7a:9d:d4:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4w5aZa23l+hkSBL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDYxNjEzMTAwMloXDTI2MDkxNDEzMTAwMlowLzEtMCsGA1UEAxMk OGQ1MGM3NjAtZWQ3My00ZDFlLWJjMGYtMGFkYjRhMjJmZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16Ouja2+v+eZZsdQpcERvyq6wwXhkKhKeEcM F3ZujfwpR4ENoQNfSKgXIdPH/MJceHcXr9JjnB0QIFUusAP0PS0maOCiIc3bWbwf DNvS7rRtZuw9i25IkuPFIGp8c0/WdG+eK+C5F8jlxq89nYRsEvTERg6xC5pFedWH zNiKznDuDR/419em9Bli5OyQf5DzG0Xs0ZmFuYKl4omYbq+78q1zARnPZQq0tscU skEQ3DxYUxVz7tuH04wmKEbstNCNeq868xvqdqLnSCAo4JgwV6ojuYUtLexGbk1w YsfOkJLpSVLwDY8aZlF6K+2wtvAUv6WgU8SWsjr7xJ2DTU9kgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFgHYRGVHM5Nm+8ADlMQgTqAuSTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNjdmMGE5NTYtOTg0Ni0z YTE1LTg0ODAtZmQ2YWEzNDYyNTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLBWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNNx1eHNDnXLNBLrudUFSvrvINCVWYP3HAIT+CjL0cEwZh4LNklxcYj 0SSG1eiPuwAgv2YvywGw6YZyPEM9oZQfzinxxPyiUulEtEb5lWIkn34p8HlzqlD6 cbxaxV9iHhxz4vFNPr1ZtzcLqlkpa+iGzJNa5fzIbtR3aIUMxh0xUK0BFdVjYlE4 v8A25wy0p9aRHcFekbPF13VsdxAEx3eXLin4o7mnGH0V2rJBw8AKoRRJ0EuKK8dD cprJrGUAKXNG3QXA+IU3WtLFMf5TZWd48OExvwnvSZKjjJj6oOk9ZRu7V5y+6B4Z bS2SbQ92W30Po+LIzObUTyD0eHqd1Fs= -----END CERTIFICATE-----Generated at Thu Jun 25 13:20:48 2026 by rpki-client