$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/8a7cd91e-f27d-36af-bb19-78576fa0f3fa.roa File: 8a7cd91e-f27d-36af-bb19-78576fa0f3fa.roa (raw, json) Hash identifier: itUPMHQgVC2s4jyURM5S0lSxuFs08Dv/KssfIyXIkvw= Subject key identifier: 31:4F:47:79:82:06:1E:31:83:60:8A:53:B1:19:34:96:7A:B0:30:07 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584ED6FC7AFDFE5BA43C1F0E8240 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/8a7cd91e-f27d-36af-bb19-78576fa0f3fa.roa Signing time: Sat 15 Aug 2026 01:00:12 +0000 ROA not before: Sat 15 Aug 2026 01:00:12 +0000 ROA not after: Fri 13 Nov 2026 02:00:12 +0000 asID: 63023 IP address blocks: 136.176.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d6:fc:7a:fd:fe:5b:a4:3c:1f:0e:82:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Aug 15 01:00:12 2026 GMT Not After : Nov 13 02:00:12 2026 GMT Subject: CN=6502e7db-c175-4f95-98ea-74b0cc0d5061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:02:5e:f1:05:74:ce:74:6e:a2:9f:30:0d:23: 8f:a9:49:ca:56:f6:7e:7f:dc:55:70:45:4c:bb:06: 7a:96:8e:69:e2:34:fc:e0:4d:f2:32:9f:72:65:4c: fa:4a:b0:11:af:ba:70:52:1a:20:38:b3:62:38:b4: 1a:65:30:77:d6:91:de:55:12:32:7e:ee:3d:1f:44: 54:e5:94:d7:44:e7:06:0e:7f:24:b9:05:36:a2:01: 02:7b:a4:06:15:00:9d:c4:08:84:1e:4f:9f:1d:38: df:f2:b3:9d:00:0a:04:7c:b7:b5:74:27:1b:98:49: 45:c1:f2:71:9d:df:7c:1f:5e:f6:1b:7b:2f:f8:f6: bd:3b:26:3a:ea:2c:c6:aa:7d:72:73:07:12:5b:7b: f0:dd:97:b5:b1:25:75:bc:6e:ed:c7:a7:94:57:e3: 56:6f:e1:a2:34:da:38:90:21:cc:98:18:91:bb:77: da:33:08:56:9c:84:cb:69:ec:f9:f4:3c:8f:97:3f: a3:23:c3:0a:aa:a6:5a:6b:e9:e5:c2:2c:d6:31:1f: 78:1b:80:80:03:2e:89:87:15:b5:e9:cc:08:82:fd: 42:d0:d6:ef:94:93:50:b5:12:a1:a1:b2:fe:e0:c8: 81:d0:92:f2:a8:02:f0:9c:c5:60:89:64:e6:6b:c4: c6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4F:47:79:82:06:1E:31:83:60:8A:53:B1:19:34:96:7A:B0:30:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/8a7cd91e-f27d-36af-bb19-78576fa0f3fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:28:ab:da:95:ca:e5:1d:b9:c5:36:6f:85:4d:d8:f0:75:63: 71:36:d0:ef:52:55:88:d1:9c:3f:bd:59:88:9c:af:2b:3f:de: 2e:8c:30:b6:a4:08:74:ed:14:b6:8a:94:63:2a:be:d1:34:ef: 19:68:51:0b:2c:99:51:50:a2:34:b3:63:40:76:89:32:49:69: bc:14:79:3f:c7:1e:b2:85:0a:a2:5d:fe:80:f0:3b:54:70:2b: c4:be:4b:3b:b6:e9:72:a7:94:f4:12:5c:5f:f4:27:5e:d0:d6: a7:16:32:a9:23:3b:11:a8:7f:27:bd:2c:05:26:0b:62:63:8a: e1:3a:07:da:13:3e:c9:26:bc:5f:23:52:cf:f4:0a:c0:1a:f8: 62:d2:a3:de:42:0a:15:fe:b8:45:1d:e4:1b:9a:7c:84:e6:f3: 83:34:63:5e:00:36:8a:22:9c:dd:07:8e:71:97:af:9c:78:99: d1:ab:94:17:80:ed:fb:c4:ea:d8:ef:da:d0:aa:7d:8b:c4:46: ec:58:fc:87:36:f2:9e:61:76:32:c0:49:d3:4e:7c:43:17:d0: ac:45:dd:89:3d:9c:b7:9b:04:50:25:d5:91:68:20:50:86:41: ef:ea:51:4c:b8:74:7c:f4:71:b0:e0:05:16:6f:e9:cf:12:1e: 5e:32:93:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7W/Hr9/lukPB8OgkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDgxNTAxMDAxMloXDTI2MTExMzAyMDAxMlowLzEtMCsGA1UEAxMk NjUwMmU3ZGItYzE3NS00Zjk1LTk4ZWEtNzRiMGNjMGQ1MDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigJe8QV0znRuop8wDSOPqUnKVvZ+f9xVcEVM uwZ6lo5p4jT84E3yMp9yZUz6SrARr7pwUhogOLNiOLQaZTB31pHeVRIyfu49H0RU 5ZTXROcGDn8kuQU2ogECe6QGFQCdxAiEHk+fHTjf8rOdAAoEfLe1dCcbmElFwfJx nd98H172G3sv+Pa9OyY66izGqn1ycwcSW3vw3Ze1sSV1vG7tx6eUV+NWb+GiNNo4 kCHMmBiRu3faMwhWnITLaez59DyPlz+jI8MKqqZaa+nlwizWMR94G4CAAy6JhxW1 6cwIgv1C0NbvlJNQtRKhobL+4MiB0JLyqALwnMVgiWTma8TG5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFPR3mCBh4xg2CKU7EZNJZ6sDAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvOGE3Y2Q5MWUtZjI3ZC0z NmFmLWJiMTktNzg1NzZmYTBmM2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLB5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQoq9qVyuUducU2b4VN2PB1Y3E20O9SVYjRnD+9WYicrys/3i6MMLak CHTtFLaKlGMqvtE07xloUQssmVFQojSzY0B2iTJJabwUeT/HHrKFCqJd/oDwO1Rw K8S+Szu26XKnlPQSXF/0J17Q1qcWMqkjOxGofye9LAUmC2JjiuE6B9oTPskmvF8j Us/0CsAa+GLSo95CChX+uEUd5BuafITm84M0Y14ANooinN0HjnGXr5x4mdGrlBeA 7fvE6tjv2tCqfYvERuxY/Ic28p5hdjLASdNOfEMX0KxF3Yk9nLebBFAl1ZFoIFCG Qe/qUUy4dHz0cbDgBRZv6c8SHl4ykxc= -----END CERTIFICATE-----Generated at Thu Sep 10 18:44:28 2026 by rpki-client