$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/7cdca5de-834d-324c-bc2b-9d8710859306.roa File: 7cdca5de-834d-324c-bc2b-9d8710859306.roa (raw, json) Hash identifier: +RSsa/r+7vQUF+GZX0NIBBKlnzVQYosHRfUt5mlErh4= Subject key identifier: 85:9E:86:56:68:7A:06:7D:EC:48:A4:88:43:24:1D:DA:C1:B3:79:E1 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584ECD3714ED8E2A6B697A7D1C00 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/7cdca5de-834d-324c-bc2b-9d8710859306.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 63023 IP address blocks: 216.152.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:14:ed:8e:2a:6b:69:7a:7d:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=e2958d05-1173-4162-9cc0-4946fbbfc81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:66:ec:19:81:6c:6b:44:f8:17:46:8a:1e:bc: a2:24:0a:c2:35:fb:48:4b:3a:a2:f4:03:98:44:e6: 49:4e:6c:44:86:e7:cf:d4:79:8f:4d:04:47:04:ca: f8:c0:a4:b0:33:01:57:59:fd:db:b6:60:b0:02:a9: eb:7c:96:ed:57:dc:0d:29:3c:31:8b:ca:f4:ec:c9: 07:cd:42:e6:3a:49:5d:3d:2e:4f:d2:d9:60:33:7c: 0a:a6:45:be:f3:7a:17:eb:45:b3:e2:07:47:01:de: 4d:c1:78:97:53:45:32:a9:7f:c7:22:10:f6:73:c7: a6:bd:dc:6b:46:2d:8e:44:9a:90:b6:69:69:8c:43: b6:f4:cd:fb:89:59:16:29:25:75:94:2d:6a:19:8f: 8e:1e:41:7a:0e:47:b1:7a:d5:ae:60:11:99:9b:0b: 7e:5f:9d:a5:5b:9b:39:ca:e0:4c:43:22:d6:90:b6: 37:9c:2b:b4:99:25:1f:fd:62:48:56:b3:0c:39:bd: f4:d0:f5:13:17:c2:98:24:c6:d9:02:30:fa:53:1a: 66:59:f9:ad:2a:cc:3b:2d:0f:a7:c5:c5:6b:c7:48: 3d:f1:15:ef:9f:c1:c0:7c:cb:7a:02:e8:27:b8:72: 91:f4:8e:47:2c:0c:52:d3:31:d6:2e:ab:5b:34:ae: b9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9E:86:56:68:7A:06:7D:EC:48:A4:88:43:24:1D:DA:C1:B3:79:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/7cdca5de-834d-324c-bc2b-9d8710859306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.152.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ec:4d:7b:be:2f:95:3b:c5:46:11:df:2d:3f:de:c3:60:ba: 19:48:20:0c:cc:fc:01:4d:2e:bb:d4:bc:f3:e8:af:82:88:e5: 36:f1:01:da:42:85:71:d3:a6:0a:0a:39:16:ba:51:e1:a0:f2: f3:81:e6:83:b6:03:a7:15:20:df:e2:a7:bd:af:29:6a:05:3c: de:e3:a3:4a:d5:ea:d3:03:9d:91:3c:09:33:1e:83:68:62:ab: 7b:e0:65:2c:fb:bd:de:92:8c:59:79:63:b7:c9:ad:fa:f3:75: 9a:03:d9:33:46:0c:2b:cc:ff:fe:91:c5:05:14:1f:69:3d:e5: 90:9d:8d:fd:05:22:c6:50:7d:d8:a6:12:91:63:d9:31:69:34: 45:c5:a6:6a:a0:b9:1c:06:79:e5:6a:fe:41:3d:e0:14:9a:ab: 4d:a4:8e:36:95:86:6f:73:a0:1b:06:7c:e7:52:49:8b:d4:32: 3a:af:00:35:2e:81:df:5e:4a:3d:09:31:77:7f:6b:12:77:3f: 67:e7:7c:32:11:2b:4e:2a:33:c1:15:3b:08:a5:89:12:db:02: 0d:d8:51:b5:52:32:3e:3c:83:3c:7b:12:f6:b5:93:ef:6b:42: 74:04:60:16:28:76:41:92:dc:06:df:27:be:5e:33:74:17:76: 57:a0:d7:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNxTtjipraXp9HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk ZTI5NThkMDUtMTE3My00MTYyLTljYzAtNDk0NmZiYmZjODFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02bsGYFsa0T4F0aKHryiJArCNftISzqi9AOY ROZJTmxEhufP1HmPTQRHBMr4wKSwMwFXWf3btmCwAqnrfJbtV9wNKTwxi8r07MkH zULmOkldPS5P0tlgM3wKpkW+83oX60Wz4gdHAd5NwXiXU0UyqX/HIhD2c8emvdxr Ri2ORJqQtmlpjEO29M37iVkWKSV1lC1qGY+OHkF6DkexetWuYBGZmwt+X52lW5s5 yuBMQyLWkLY3nCu0mSUf/WJIVrMMOb300PUTF8KYJMbZAjD6UxpmWfmtKsw7LQ+n xcVrx0g98RXvn8HAfMt6AugnuHKR9I5HLAxS0zHWLqtbNK652wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWehlZoegZ97EikiEMkHdrBs3nhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvN2NkY2E1ZGUtODM0ZC0z MjRjLWJjMmItOWQ4NzEwODU5MzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JiYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTsTXu+L5U7xUYR3y0/3sNguhlIIAzM/AFNLrvUvPPor4KI5TbxAdpC hXHTpgoKORa6UeGg8vOB5oO2A6cVIN/ip72vKWoFPN7jo0rV6tMDnZE8CTMeg2hi q3vgZSz7vd6SjFl5Y7fJrfrzdZoD2TNGDCvM//6RxQUUH2k95ZCdjf0FIsZQfdim EpFj2TFpNEXFpmqguRwGeeVq/kE94BSaq02kjjaVhm9zoBsGfOdSSYvUMjqvADUu gd9eSj0JMXd/axJ3P2fnfDIRK04qM8EVOwiliRLbAg3YUbVSMj48gzx7Eva1k+9r QnQEYBYodkGS3AbfJ75eM3QXdleg1+c= -----END CERTIFICATE-----Generated at Thu Sep 10 18:44:11 2026 by rpki-client