$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/847c9b72-6e9d-338c-9075-6296dfabe62c.roa File: 847c9b72-6e9d-338c-9075-6296dfabe62c.roa (raw, json) Hash identifier: cP1cdy0dEdPFJdlcSgOFUtEg30NvFOGIt+vzEdzIS0I= Subject key identifier: C7:0E:37:B0:80:A9:7F:A7:5C:FB:9F:7A:96:12:2F:3D:D1:C4:43:14 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F7FE2DBE1E67A2A682451D180 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/847c9b72-6e9d-338c-9075-6296dfabe62c.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 63023 IP address blocks: 172.99.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:db:e1:e6:7a:2a:68:24:51:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=f5404538-60e2-4dd6-aab5-0dd747c3c683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b3:eb:18:5a:f0:85:6b:f7:00:27:99:e4:d0: 88:db:6e:ab:d0:00:2c:c8:70:eb:90:05:4e:1c:21: de:c3:63:37:24:90:91:96:1b:4a:92:3a:29:91:ea: 26:6f:69:cc:ed:31:46:d0:cb:fa:02:79:56:a6:27: 49:17:ae:05:48:fa:45:b7:3f:be:7c:c1:5e:5b:17: f7:09:02:94:09:08:14:1a:0f:1b:f2:f0:a2:3b:7b: 4b:c0:95:0e:4b:3c:95:bb:b8:25:4a:0a:90:6a:4f: c1:69:06:4c:98:e9:ce:d7:58:d2:aa:54:a1:30:94: 5a:c9:d4:6e:55:dc:79:a6:05:61:03:65:48:c8:fa: a2:1c:50:c8:82:6d:7b:17:93:5d:58:af:99:a8:21: 95:86:12:50:21:40:96:d6:eb:3e:d2:2e:ae:d3:29: 3f:18:3c:ca:0f:93:b3:7f:ec:81:ae:ce:08:3d:1d: 86:40:fe:e1:27:c9:cb:dd:23:eb:20:df:82:fd:8f: 84:8e:c7:e8:f5:2b:7e:ff:5e:f7:d1:a7:2c:3b:24: 13:d4:ba:68:61:74:ef:59:51:af:7b:d8:e9:10:fe: 31:ff:97:6f:18:b1:ad:2f:6c:e9:e6:53:19:46:01: a6:bf:a0:ad:20:09:e8:c1:1f:d1:a0:11:e4:21:18: f3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0E:37:B0:80:A9:7F:A7:5C:FB:9F:7A:96:12:2F:3D:D1:C4:43:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/847c9b72-6e9d-338c-9075-6296dfabe62c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 172.99.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:87:81:06:ea:2a:15:cb:10:d6:cd:8b:e9:72:c8:3c:29:58: 0a:16:e1:1a:5e:19:ee:58:3a:c7:04:f5:dc:44:78:12:84:8c: 6a:f7:80:75:c7:3c:24:1e:ba:1e:6d:30:0b:0c:bf:a2:6b:ba: f2:cd:54:a0:2a:8d:af:a6:5a:78:ec:4e:f4:1b:de:a1:37:21: 0c:ec:1a:74:72:b6:ea:05:62:fd:1b:31:6a:85:c2:da:74:40: 61:d3:fa:75:97:a7:e3:20:3d:a7:03:7d:10:f2:23:bd:69:f3: d8:7e:6a:a3:73:4e:d4:c7:87:04:6b:d6:0f:b8:ef:24:cd:3a: 15:07:85:11:fe:e4:40:4b:17:ec:63:1a:29:bf:b5:f7:01:54: 82:ef:a2:d0:e0:ac:d4:77:0d:eb:b9:5a:31:9f:85:99:98:13: b7:8a:bc:18:4c:c2:c4:de:ae:42:a0:83:e7:4d:c8:60:06:e7: a8:18:29:cc:97:b2:82:d9:c0:dc:45:86:f6:f4:b9:82:e8:83: 24:e5:05:fb:a8:17:ae:76:38:df:5f:e1:e7:aa:c0:a9:46:4e: 54:45:63:c4:36:17:a5:45:e3:d8:e1:34:6a:ec:a3:64:0c:fa: b4:ff:e5:13:8f:75:17:b6:19:4e:a3:99:3c:cf:f4:63:78:92: 87:f6:70:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4tvh5noqaCRR0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk ZjU0MDQ1MzgtNjBlMi00ZGQ2LWFhYjUtMGRkNzQ3YzNjNjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7PrGFrwhWv3ACeZ5NCI226r0AAsyHDrkAVO HCHew2M3JJCRlhtKkjopkeomb2nM7TFG0Mv6AnlWpidJF64FSPpFtz++fMFeWxf3 CQKUCQgUGg8b8vCiO3tLwJUOSzyVu7glSgqQak/BaQZMmOnO11jSqlShMJRaydRu Vdx5pgVhA2VIyPqiHFDIgm17F5NdWK+ZqCGVhhJQIUCW1us+0i6u0yk/GDzKD5Oz f+yBrs4IPR2GQP7hJ8nL3SPrIN+C/Y+Ejsfo9St+/1730acsOyQT1LpoYXTvWVGv e9jpEP4x/5dvGLGtL2zp5lMZRgGmv6CtIAnowR/RoBHkIRjznQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcON7CAqX+nXPufepYSLz3RxEMUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvODQ3YzliNzItNmU5ZC0z MzhjLTkwNzUtNjI5NmRmYWJlNjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGO8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKHgQbqKhXLENbNi+lyyDwpWAoW4RpeGe5YOscE9dxEeBKEjGr3gHXH PCQeuh5tMAsMv6JruvLNVKAqja+mWnjsTvQb3qE3IQzsGnRytuoFYv0bMWqFwtp0 QGHT+nWXp+MgPacDfRDyI71p89h+aqNzTtTHhwRr1g+47yTNOhUHhRH+5EBLF+xj Gim/tfcBVILvotDgrNR3Deu5WjGfhZmYE7eKvBhMwsTerkKgg+dNyGAG56gYKcyX soLZwNxFhvb0uYLogyTlBfuoF652ON9f4eeqwKlGTlRFY8Q2F6VF49jhNGrso2QM +rT/5ROPdRe2GU6jmTzP9GN4kof2cPk= -----END CERTIFICATE-----Generated at Tue Oct 20 00:40:38 2026 by rpki-client