$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/9225d0c1-07de-3b77-b931-edfae476dc1f.roa File: 9225d0c1-07de-3b77-b931-edfae476dc1f.roa (raw, json) Hash identifier: ZfB6FvfoTBVynt6ZqRn/KC+wMznNx669Ts0jmzzOqH0= Subject key identifier: 42:A0:D4:AB:94:4A:29:9A:2D:B5:64:56:C9:87:45:88:CE:F3:9C:64 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F6C58253EC2518135AA2475C0 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/9225d0c1-07de-3b77-b931-edfae476dc1f.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 63023 IP address blocks: 216.106.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:25:3e:c2:51:81:35:aa:24:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=61c793e9-7b3b-4925-96fd-f29d689365f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:74:0b:fb:24:fc:c0:3b:85:95:da:d7:3f:90: 42:77:15:7f:5c:5c:62:a2:2f:42:ea:c1:0f:e7:47: 38:82:43:59:bb:b3:51:cb:05:d9:3a:23:05:4f:1b: af:42:ee:44:ef:3d:2c:cb:9f:1f:e6:0e:78:61:f0: 28:3b:41:4c:d2:61:98:e9:b9:e3:f3:5d:5b:71:0f: 6d:64:59:2a:06:43:2c:14:00:a8:b8:7c:03:3e:4c: 31:b0:f1:8d:08:9b:07:30:a1:57:c9:0a:6e:45:46: d8:90:02:98:ca:6f:70:74:f1:62:52:71:3d:e8:6c: 9a:59:4f:76:ba:0a:1b:e5:a0:fe:c7:de:9c:26:0c: bd:47:0f:86:b6:ba:72:31:4f:27:c9:37:85:8a:5c: 9b:f8:95:33:91:0c:53:bb:5e:53:74:83:7a:9f:37: e8:b5:89:17:14:52:83:df:68:b4:47:d6:4b:72:ef: c4:ee:b4:57:5c:ec:f7:ef:ab:ec:8a:11:fe:6c:20: 2b:d8:62:c8:ad:82:8a:e9:9e:ad:7f:62:1e:1c:be: 6a:da:d6:67:32:71:22:0c:65:d1:25:0a:06:38:b3: 39:fc:f8:dc:84:b8:af:f4:f2:83:b6:e4:2c:1a:88: ca:19:27:3d:c3:77:0c:3f:a4:9d:f3:8c:bc:9f:49: b9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A0:D4:AB:94:4A:29:9A:2D:B5:64:56:C9:87:45:88:CE:F3:9C:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/9225d0c1-07de-3b77-b931-edfae476dc1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.106.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:cb:66:33:ae:63:01:c3:88:36:24:e0:6f:0b:22:d3:04:9b: 91:75:28:58:fd:aa:25:83:d7:d6:04:26:01:90:14:5d:b3:1d: 1f:fb:55:1d:3c:3a:5e:67:37:20:40:d9:62:6b:9c:4a:4e:0e: 0e:21:7e:5c:ce:46:7d:a9:a6:bf:ae:ac:a7:71:21:07:b2:09: dd:cf:08:af:d5:4e:a0:81:6f:bc:55:7e:6c:cc:12:5f:1b:8d: 2d:3e:cd:f4:40:98:c1:f3:ee:d2:66:0b:71:ce:33:3d:7b:12: 69:c6:0e:2b:cd:da:6b:f5:93:ef:9c:49:f9:b5:96:c2:97:80: bc:00:d9:cf:50:7f:94:a7:97:37:fd:d5:07:83:aa:e3:c8:f2: a5:b1:df:a7:60:0b:34:8f:c5:53:16:13:91:30:f7:53:46:8e: 9a:38:87:b3:f3:bf:a4:4b:11:34:68:f5:be:fc:66:63:04:75: 50:c1:d0:ff:96:50:bd:85:d5:0e:5e:f1:a2:c1:8d:d9:f7:0a: dc:06:78:d7:f5:ab:d7:d1:86:81:09:3a:55:bd:63:4d:e7:07: 2f:51:1d:07:85:92:43:e0:50:da:b1:b3:d6:55:47:a4:10:78: 55:c4:40:46:0c:2f:12:3d:72:5e:34:a7:d5:01:a0:2a:13:81: 02:f5:8c:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWCU+wlGBNaokdcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk NjFjNzkzZTktN2IzYi00OTI1LTk2ZmQtZjI5ZDY4OTM2NWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XQL+yT8wDuFldrXP5BCdxV/XFxioi9C6sEP 50c4gkNZu7NRywXZOiMFTxuvQu5E7z0sy58f5g54YfAoO0FM0mGY6bnj811bcQ9t ZFkqBkMsFACouHwDPkwxsPGNCJsHMKFXyQpuRUbYkAKYym9wdPFiUnE96GyaWU92 ugob5aD+x96cJgy9Rw+GtrpyMU8nyTeFilyb+JUzkQxTu15TdIN6nzfotYkXFFKD 32i0R9ZLcu/E7rRXXOz376vsihH+bCAr2GLIrYKK6Z6tf2IeHL5q2tZnMnEiDGXR JQoGOLM5/PjchLiv9PKDtuQsGojKGSc9w3cMP6Sd84y8n0m5EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKg1KuUSimaLbVkVsmHRYjO85xkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvOTIyNWQwYzEtMDdkZS0z Yjc3LWI5MzEtZWRmYWU0NzZkYzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Gq1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPLZjOuYwHDiDYk4G8LItMEm5F1KFj9qiWD19YEJgGQFF2zHR/7VR08 Ol5nNyBA2WJrnEpODg4hflzORn2ppr+urKdxIQeyCd3PCK/VTqCBb7xVfmzMEl8b jS0+zfRAmMHz7tJmC3HOMz17EmnGDivN2mv1k++cSfm1lsKXgLwA2c9Qf5Snlzf9 1QeDquPI8qWx36dgCzSPxVMWE5Ew91NGjpo4h7Pzv6RLETRo9b78ZmMEdVDB0P+W UL2F1Q5e8aLBjdn3CtwGeNf1q9fRhoEJOlW9Y03nBy9RHQeFkkPgUNqxs9ZVR6QQ eFXEQEYMLxI9cl40p9UBoCoTgQL1jIs= -----END CERTIFICATE-----Generated at Wed Oct 28 14:17:55 2026 by rpki-client