$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/731574a0-d20f-3d09-a967-20cf46956e52.roa File: 731574a0-d20f-3d09-a967-20cf46956e52.roa (raw, json) Hash identifier: fg1nez0sHH3LaInreLOhHhdNXBzCS7Zp1pmCeOO+Ldc= Subject key identifier: 33:89:FB:2A:7A:8E:9B:AD:78:01:B9:6E:D0:B6:6A:D3:B8:01:2C:16 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F6D0AA17D2078B23D13674120 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/731574a0-d20f-3d09-a967-20cf46956e52.roa Signing time: Wed 07 Oct 2026 18:59:59 +0000 ROA not before: Wed 07 Oct 2026 18:59:59 +0000 ROA not after: Tue 05 Jan 2027 19:59:59 +0000 asID: 63023 IP address blocks: 204.28.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:0a:a1:7d:20:78:b2:3d:13:67:41:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 7 18:59:59 2026 GMT Not After : Jan 5 19:59:59 2027 GMT Subject: CN=7509b89e-d26a-4ca9-b006-500f671aeac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9c:34:50:0b:b8:a2:46:48:da:91:50:60:91: 15:e7:9c:5a:fd:b4:c5:60:6b:18:6e:4e:04:e8:fe: f1:d0:9b:ff:ad:c7:da:e5:21:93:33:19:79:92:1a: 39:fa:e6:73:a7:68:5f:70:02:df:41:80:40:16:08: 1e:2c:01:96:6d:1e:b7:3e:48:c3:c4:b4:06:3f:76: 23:94:5a:55:97:72:a8:02:50:75:16:5d:35:73:24: 89:75:56:31:55:98:da:09:b9:4a:0b:b8:7d:12:47: ed:cd:93:54:40:3c:9d:8e:7c:5d:84:ed:62:29:10: 55:7b:ec:4e:4e:1b:7b:26:4b:7a:20:02:96:9d:cd: 90:03:c3:f8:3f:9a:db:50:0a:90:82:ab:d8:58:84: c2:d6:11:7f:fd:e0:8e:6e:1d:db:50:7f:64:18:58: 77:d8:89:92:73:0d:3a:db:de:51:04:62:7a:8a:b4: b1:af:a4:29:83:8d:a5:ce:4e:f9:69:c4:52:96:7e: 15:a0:b4:86:b7:9e:18:00:51:6b:e9:4f:93:2a:21: fb:61:ec:78:df:23:02:9e:60:6a:1e:c7:51:9b:a5: 7f:70:18:0e:54:41:d4:da:53:a9:5a:45:9c:63:a8: 24:7f:61:c6:b9:a7:c7:5d:69:8e:89:1d:01:02:3c: 56:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:89:FB:2A:7A:8E:9B:AD:78:01:B9:6E:D0:B6:6A:D3:B8:01:2C:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/731574a0-d20f-3d09-a967-20cf46956e52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 204.28.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:2c:d2:a5:2e:11:14:b8:8b:0d:f2:26:1a:54:81:c6:a3:b4: 50:aa:63:7c:8d:57:40:29:f9:a3:41:84:df:c5:45:e1:c0:da: 01:18:c4:c3:56:c7:37:8a:7c:9e:c9:c3:b3:f7:56:48:44:d7: 86:61:7a:25:01:67:47:2c:7e:89:91:4a:38:cb:91:44:99:a4: f6:09:fd:49:22:3a:78:a7:49:a1:7f:eb:78:6e:6d:27:b3:61: e0:09:f9:ef:a8:63:77:cf:04:6e:95:7f:06:7b:91:91:65:85: 7f:ff:fe:26:a0:54:7d:e9:51:69:c3:78:ac:b3:01:81:af:32: e9:e3:66:a1:36:0e:4e:ea:76:e1:c4:a1:2f:63:81:9a:16:ac: 2a:65:65:da:67:c2:62:5b:f7:2c:60:c0:74:02:3f:99:db:b8: 35:04:30:e9:95:99:6a:05:15:aa:32:a6:fb:fe:21:56:e4:39: 05:7f:ff:03:ac:f5:f6:6c:fe:11:8a:f5:d8:a1:24:3f:60:a9: f2:ef:f3:52:8c:59:d7:6a:fd:58:23:e0:f6:21:f6:03:99:5b: af:d7:4a:e8:e4:ab:b9:03:87:16:a6:7d:35:2f:0c:59:32:e4: 2d:32:57:79:e0:ee:bd:9d:48:d0:ad:09:a0:7f:8b:63:15:40: 55:f9:f3:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9tCqF9IHiyPRNnQSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAwNzE4NTk1OVoXDTI3MDEwNTE5NTk1OVowLzEtMCsGA1UEAxMk NzUwOWI4OWUtZDI2YS00Y2E5LWIwMDYtNTAwZjY3MWFlYWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5w0UAu4okZI2pFQYJEV55xa/bTFYGsYbk4E 6P7x0Jv/rcfa5SGTMxl5kho5+uZzp2hfcALfQYBAFggeLAGWbR63PkjDxLQGP3Yj lFpVl3KoAlB1Fl01cySJdVYxVZjaCblKC7h9EkftzZNUQDydjnxdhO1iKRBVe+xO Tht7Jkt6IAKWnc2QA8P4P5rbUAqQgqvYWITC1hF//eCObh3bUH9kGFh32ImScw06 295RBGJ6irSxr6Qpg42lzk75acRSln4VoLSGt54YAFFr6U+TKiH7Yex43yMCnmBq HsdRm6V/cBgOVEHU2lOpWkWcY6gkf2HGuafHXWmOiR0BAjxWXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOJ+yp6jputeAG5btC2atO4ASwWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNzMxNTc0YTAtZDIwZi0z ZDA5LWE5NjctMjBjZjQ2OTU2ZTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzByIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0s0qUuERS4iw3yJhpUgcajtFCqY3yNV0Ap+aNBhN/FReHA2gEYxMNW xzeKfJ7Jw7P3VkhE14ZheiUBZ0csfomRSjjLkUSZpPYJ/UkiOninSaF/63hubSez YeAJ+e+oY3fPBG6VfwZ7kZFlhX///iagVH3pUWnDeKyzAYGvMunjZqE2Dk7qduHE oS9jgZoWrCplZdpnwmJb9yxgwHQCP5nbuDUEMOmVmWoFFaoypvv+IVbkOQV//wOs 9fZs/hGK9dihJD9gqfLv81KMWddq/Vgj4PYh9gOZW6/XSujkq7kDhxamfTUvDFky 5C0yV3ng7r2dSNCtCaB/i2MVQFX580Q= -----END CERTIFICATE-----Generated at Mon Oct 19 00:10:37 2026 by rpki-client