$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/6bd7aeb8-7513-3ce0-ab40-543da5303447.roa File: 6bd7aeb8-7513-3ce0-ab40-543da5303447.roa (raw, json) Hash identifier: zgNpoP5jphzMRm/WhHVhzf5vi4IIEHdf/mBjTTbNrsw= Subject key identifier: D7:20:7A:0C:3E:D9:0F:15:F1:C3:91:83:91:73:D7:09:BB:4F:07:F4 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F6C581507E12887E55122E240 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/6bd7aeb8-7513-3ce0-ab40-543da5303447.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 63023 IP address blocks: 216.106.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:15:07:e1:28:87:e5:51:22:e2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=8d8c7414-36e9-4634-9a9c-bcf9587ee328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:62:cb:f8:82:ac:ec:cc:31:ba:f3:a8:79:94: 07:c4:2e:62:33:04:09:35:bd:95:e9:b5:a2:6e:59: 70:09:4e:f7:42:b4:c6:fa:51:d5:1a:81:b2:77:d4: 10:ac:4a:90:d0:41:be:9e:7e:29:5f:f2:a8:92:5a: 2a:77:d4:5e:c3:7d:d4:bb:a0:fe:b5:d5:81:5f:a7: d1:fd:1d:ec:0c:ae:9c:98:20:d6:ad:8c:0d:bf:a5: 12:ff:42:90:61:c6:a3:37:ff:3e:47:2f:ae:7d:3b: 17:74:df:a7:27:12:e7:4b:45:bd:6a:a9:ec:65:30: d0:a2:53:10:69:7d:bf:a3:ac:f7:ce:d6:4f:50:1f: e5:fc:47:0e:e6:a0:70:25:29:c0:bc:5a:0d:1f:05: c3:f1:17:a9:b2:3b:1a:64:0c:ad:f8:c4:77:6c:d6: 61:3f:af:fa:b5:00:9d:48:30:07:f3:0a:d3:ca:05: 95:b1:74:08:ba:b1:4f:c7:e9:0a:11:99:d4:79:e5: cd:a3:6b:9a:fb:d4:47:f6:61:3c:6a:36:39:27:24: 13:bd:fe:56:4c:f7:8d:69:2a:38:b4:73:bf:aa:93: 52:f1:7b:7d:39:a4:cf:e7:59:c1:11:97:ef:08:b7: b2:92:2e:7f:25:cb:01:eb:40:1a:45:a9:f0:95:ca: 91:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:20:7A:0C:3E:D9:0F:15:F1:C3:91:83:91:73:D7:09:BB:4F:07:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/6bd7aeb8-7513-3ce0-ab40-543da5303447.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.106.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:e4:49:c0:61:2d:68:89:6c:01:a8:89:94:e8:70:85:e4:8d: 8c:ae:07:4e:f4:c8:b8:47:8a:d3:ec:03:9c:7f:48:0e:fd:3e: de:44:eb:0b:be:02:4a:00:19:f1:4e:fd:c0:20:6f:04:e3:a5: 4c:cb:73:c7:85:a0:9d:c9:ec:d1:ad:2d:1e:be:71:7a:ac:de: 22:69:3c:75:68:26:91:31:8d:e6:e4:2a:d6:a1:24:a5:99:97: 3a:0e:66:1e:76:50:c0:83:1f:9d:ce:80:b8:30:fc:f9:64:e0: ed:f3:a5:b9:40:4b:8d:bf:ae:c4:66:18:d7:a9:5f:cf:53:df: 7a:0f:8b:c2:18:49:47:f7:fa:ee:83:bb:da:ad:98:cd:69:dc: 53:80:32:84:71:eb:02:a3:34:8f:da:9b:c2:ae:b1:b7:20:95: 8d:13:eb:89:dd:04:c3:5d:49:1c:e6:ba:34:13:f7:4f:bf:8a: 6f:e4:36:ab:e6:b3:a4:16:e6:d4:df:2d:bd:4b:3e:1a:bc:af: a1:63:db:d2:db:7a:25:34:25:01:75:ff:95:8b:81:a1:59:2d: 5d:7e:67:d0:25:55:d7:f3:d8:f5:dc:72:04:0b:3f:65:a9:ee: 41:6b:ce:e0:cb:36:55:6a:70:8c:86:10:1b:5f:3a:83:39:be: 33:12:9d:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWBUH4SiH5VEi4kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk OGQ4Yzc0MTQtMzZlOS00NjM0LTlhOWMtYmNmOTU4N2VlMzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmLL+IKs7MwxuvOoeZQHxC5iMwQJNb2V6bWi bllwCU73QrTG+lHVGoGyd9QQrEqQ0EG+nn4pX/Kokloqd9Rew33Uu6D+tdWBX6fR /R3sDK6cmCDWrYwNv6US/0KQYcajN/8+Ry+ufTsXdN+nJxLnS0W9aqnsZTDQolMQ aX2/o6z3ztZPUB/l/EcO5qBwJSnAvFoNHwXD8RepsjsaZAyt+MR3bNZhP6/6tQCd SDAH8wrTygWVsXQIurFPx+kKEZnUeeXNo2ua+9RH9mE8ajY5JyQTvf5WTPeNaSo4 tHO/qpNS8Xt9OaTP51nBEZfvCLeyki5/JcsB60AaRanwlcqRSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcgegw+2Q8V8cORg5Fz1wm7Twf0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNmJkN2FlYjgtNzUxMy0z Y2UwLWFiNDAtNTQzZGE1MzAzNDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Gq/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3kScBhLWiJbAGoiZTocIXkjYyuB070yLhHitPsA5x/SA79Pt5E6wu+ AkoAGfFO/cAgbwTjpUzLc8eFoJ3J7NGtLR6+cXqs3iJpPHVoJpExjebkKtahJKWZ lzoOZh52UMCDH53OgLgw/Plk4O3zpblAS42/rsRmGNepX89T33oPi8IYSUf3+u6D u9qtmM1p3FOAMoRx6wKjNI/am8KusbcglY0T64ndBMNdSRzmujQT90+/im/kNqvm s6QW5tTfLb1LPhq8r6Fj29LbeiU0JQF1/5WLgaFZLV1+Z9AlVdfz2PXccgQLP2Wp 7kFrzuDLNlVqcIyGEBtfOoM5vjMSnbc= -----END CERTIFICATE-----Generated at Tue Oct 27 15:52:57 2026 by rpki-client