$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/84506a05-b705-3e28-9028-1365fc0c7fde.roa File: 84506a05-b705-3e28-9028-1365fc0c7fde.roa (raw, json) Hash identifier: upTdAoA0A2lX14hq0p63RL2YUWJCZ+/X0JIuUpOJmvg= Subject key identifier: 34:CB:C0:A6:88:A2:B2:27:27:25:EC:3C:79:07:0A:E7:2A:71:F7:4E Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F89CB3C91456C0B134FADD880 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/84506a05-b705-3e28-9028-1365fc0c7fde.roa Signing time: Sun 18 Oct 2026 02:10:41 +0000 ROA not before: Sun 18 Oct 2026 02:10:41 +0000 ROA not after: Sat 16 Jan 2027 03:10:41 +0000 asID: 198459 IP address blocks: 204.28.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:89:cb:3c:91:45:6c:0b:13:4f:ad:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 18 02:10:41 2026 GMT Not After : Jan 16 03:10:41 2027 GMT Subject: CN=2b11e8da-9e38-493d-a5e5-9a789e34958f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c3:29:f7:66:00:4c:70:9c:c3:4c:14:84:3d: 44:20:f2:06:c6:9c:db:eb:95:eb:38:1d:c0:15:f6: f4:90:c8:33:85:c5:57:70:41:6d:c7:d3:cf:8e:78: 07:de:be:8f:9e:f0:13:4a:af:10:82:66:05:a4:a7: bb:a5:36:d0:ab:90:5c:4b:93:a1:4b:1d:64:1d:50: 65:c5:96:90:1a:f1:4a:f5:55:95:e0:26:a5:81:d8: 10:56:60:34:a7:f5:7d:89:6b:35:8c:fb:9c:50:94: 67:14:cc:18:e0:1d:fc:b2:8e:98:8d:cd:b0:66:a0: c8:5a:70:27:88:70:c1:75:91:87:7c:26:32:0b:85: bf:11:48:bb:1c:90:8a:70:73:e9:57:28:27:c5:3f: ef:18:f5:99:fd:68:e3:b2:f1:e8:36:c1:dd:58:14: 6c:b6:9c:a6:e4:f6:de:b6:57:3d:2e:78:19:4e:a8: f5:6a:a7:08:7f:35:ae:1b:61:fd:26:25:46:af:d7: c7:d2:df:3a:43:4d:ba:eb:c1:be:12:3b:c2:7e:00: 30:54:5b:5f:f9:1f:6c:4a:79:44:e1:0a:f6:0d:14: 3e:9c:55:b0:0a:61:ce:99:2b:e3:ca:be:69:03:d3: 77:63:fc:d7:11:65:f7:40:81:e6:29:11:a8:56:bb: 38:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CB:C0:A6:88:A2:B2:27:27:25:EC:3C:79:07:0A:E7:2A:71:F7:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/84506a05-b705-3e28-9028-1365fc0c7fde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 204.28.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ca:ca:91:80:e9:4f:00:a9:0e:7b:1d:4f:3b:22:cf:88:c9: 26:39:c4:19:02:e7:df:38:12:24:e4:30:16:31:11:12:41:89: 68:b0:45:58:ec:b0:27:e5:f7:e5:88:a5:a0:3c:20:80:df:14: cc:c3:a0:d6:cf:b7:30:13:05:d0:a7:22:a9:43:30:e5:35:24: 7c:c2:7f:42:23:f8:0b:a6:08:fd:f5:52:9e:bd:31:49:89:6d: 8c:f4:07:4a:74:92:bf:5a:5d:89:95:bb:88:4a:0e:09:bc:3c: fb:2d:56:55:91:88:63:24:b0:05:7c:d1:5a:94:5b:39:87:fa: ad:6a:9c:f2:7f:fa:8b:43:7a:fe:53:e4:4c:5a:63:8a:ba:20: 2e:53:68:33:98:d3:ed:4b:01:88:ce:26:fc:3f:4c:a5:37:d5: de:24:ee:73:ef:5b:b2:e6:81:13:70:77:0d:99:9e:3b:e8:a0: d0:9b:f2:d4:95:d2:88:10:0d:22:4d:92:f0:fa:50:a1:b0:ec: b7:30:b4:b2:aa:4b:1a:ce:51:b2:57:61:f0:6a:7d:55:41:05: 60:f3:2b:e6:b7:ea:e4:e3:b0:27:45:13:35:a0:ce:09:df:59: 5e:aa:f5:96:23:bc:69:b1:c9:1f:a6:f1:19:4f:79:1a:3c:dd: e0:47:51:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+JyzyRRWwLE0+t2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAxODAyMTA0MVoXDTI3MDExNjAzMTA0MVowLzEtMCsGA1UEAxMk MmIxMWU4ZGEtOWUzOC00OTNkLWE1ZTUtOWE3ODllMzQ5NThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Mp92YATHCcw0wUhD1EIPIGxpzb65XrOB3A Ffb0kMgzhcVXcEFtx9PPjngH3r6PnvATSq8QgmYFpKe7pTbQq5BcS5OhSx1kHVBl xZaQGvFK9VWV4CalgdgQVmA0p/V9iWs1jPucUJRnFMwY4B38so6Yjc2wZqDIWnAn iHDBdZGHfCYyC4W/EUi7HJCKcHPpVygnxT/vGPWZ/WjjsvHoNsHdWBRstpym5Pbe tlc9LngZTqj1aqcIfzWuG2H9JiVGr9fH0t86Q02668G+EjvCfgAwVFtf+R9sSnlE 4Qr2DRQ+nFWwCmHOmSvjyr5pA9N3Y/zXEWX3QIHmKRGoVrs48wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTLwKaIorInJyXsPHkHCucqcfdOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvODQ1MDZhMDUtYjcwNS0z ZTI4LTkwMjgtMTM2NWZjMGM3ZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzByeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTKypGA6U8AqQ57HU87Is+IySY5xBkC5984EiTkMBYxERJBiWiwRVjs sCfl9+WIpaA8IIDfFMzDoNbPtzATBdCnIqlDMOU1JHzCf0Ij+AumCP31Up69MUmJ bYz0B0p0kr9aXYmVu4hKDgm8PPstVlWRiGMksAV80VqUWzmH+q1qnPJ/+otDev5T 5ExaY4q6IC5TaDOY0+1LAYjOJvw/TKU31d4k7nPvW7LmgRNwdw2ZnjvooNCb8tSV 0ogQDSJNkvD6UKGw7LcwtLKqSxrOUbJXYfBqfVVBBWDzK+a36uTjsCdFEzWgzgnf WV6q9ZYjvGmxyR+m8RlPeRo83eBHUYo= -----END CERTIFICATE-----Generated at Tue Oct 27 16:32:23 2026 by rpki-client