$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/94700a8a-32a5-3681-bd22-f043ac32af81.roa File: 94700a8a-32a5-3681-bd22-f043ac32af81.roa (raw, json) Hash identifier: 5ZKIrnxojQBehxxg/xoQRYiVcLLGWjIBx78vKsW/xEY= Subject key identifier: 3A:0C:52:54:9F:B4:B3:13:8F:B8:F7:47:72:5B:42:62:F6:D1:3F:7B Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F78E82FDEB7FDCA02605E5D00 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/94700a8a-32a5-3681-bd22-f043ac32af81.roa Signing time: Mon 12 Oct 2026 01:00:13 +0000 ROA not before: Mon 12 Oct 2026 01:00:13 +0000 ROA not after: Sun 10 Jan 2027 02:00:13 +0000 asID: 63023 IP address blocks: 136.176.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:78:e8:2f:de:b7:fd:ca:02:60:5e:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 12 01:00:13 2026 GMT Not After : Jan 10 02:00:13 2027 GMT Subject: CN=e591784b-257f-4c55-81c5-cd21e80e8f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:10:74:69:80:7b:4c:06:89:cb:da:d9:5e:ef: b3:75:21:97:a7:eb:4f:9b:96:ef:18:d9:49:98:55: a1:c1:d3:a4:7e:c4:ca:21:1d:ac:e6:12:e1:b0:15: 88:35:4c:8b:81:53:45:8a:1b:e8:e5:c7:f4:6d:a7: ff:6c:28:68:76:54:8a:b3:fa:20:30:43:66:91:9b: 89:18:e6:fa:43:8f:8f:37:92:62:96:f1:e8:7e:a3: 07:2b:c5:a5:02:02:19:f3:6f:d1:eb:eb:2a:17:dd: 0a:70:a2:e8:5f:cd:70:a0:90:9c:5d:73:2d:8a:46: f7:34:ad:ba:94:13:45:d7:c9:5b:c1:9c:95:75:f7: a9:de:32:f1:29:7a:5f:bb:5f:a2:28:22:f3:4d:b7: d3:76:e7:43:79:09:cc:8c:71:f4:89:d3:14:3e:37: 35:2a:f2:16:56:55:ec:cc:13:33:fb:f4:ce:eb:d3: ea:98:9b:da:cf:f2:2c:9e:18:ab:de:8c:fa:8a:3e: 6a:11:6e:a8:98:e0:e3:7b:20:5b:e0:a6:bf:f8:d1: e7:fd:09:3d:41:69:34:46:0d:cf:e8:0f:d7:f8:82: 25:48:a7:8c:85:fc:22:e7:a3:87:b8:50:cd:50:cc: ad:05:c3:05:3e:b6:d8:56:d0:b6:57:cc:9a:30:cd: 48:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0C:52:54:9F:B4:B3:13:8F:B8:F7:47:72:5B:42:62:F6:D1:3F:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/94700a8a-32a5-3681-bd22-f043ac32af81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f5:1d:0a:50:63:c3:84:a3:14:e4:6c:8a:d2:b9:8d:32:7c: 93:c8:05:a9:28:00:bc:55:a1:ba:70:f4:9d:f9:03:90:6f:50: 2c:15:1b:34:bd:1b:6b:e3:56:af:95:68:18:65:cf:f2:50:ef: 8e:bb:e1:8b:0e:a5:ba:a4:c3:82:b9:75:71:9e:d3:4c:03:b1: e7:62:53:92:31:13:95:e5:f9:20:b0:29:e8:6b:63:26:da:0d: 06:c6:6c:8d:8d:43:e3:6f:ea:8b:cd:5a:76:77:5f:a4:9d:0b: 1f:e7:f9:7f:10:0f:90:7c:8f:ee:4c:83:dc:dd:58:fe:5e:02: 8d:6b:06:8e:e4:2a:c9:98:d5:02:7b:46:57:b5:f4:95:85:8a: 4c:63:cd:89:7b:ef:b2:15:c7:2f:b1:e8:18:39:e9:ca:af:11: 21:99:00:49:87:eb:e6:eb:38:dd:bf:86:cb:e0:d0:35:41:43: 42:b6:e0:4c:bf:6f:97:d8:35:68:6c:22:2d:a2:17:d1:87:71: 5b:7c:22:fe:04:81:a3:a0:73:9d:94:be:2a:a4:33:85:6d:9c: b4:06:08:37:72:dd:ce:08:f4:65:53:68:f6:f9:2c:5b:b7:d0: cd:bb:2c:fe:89:77:79:64:18:23:02:23:56:ce:78:6b:14:6e: 56:7d:c3:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE946C/et/3KAmBeXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAxMjAxMDAxM1oXDTI3MDExMDAyMDAxM1owLzEtMCsGA1UEAxMk ZTU5MTc4NGItMjU3Zi00YzU1LTgxYzUtY2QyMWU4MGU4ZjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBB0aYB7TAaJy9rZXu+zdSGXp+tPm5bvGNlJ mFWhwdOkfsTKIR2s5hLhsBWINUyLgVNFihvo5cf0baf/bChodlSKs/ogMENmkZuJ GOb6Q4+PN5JilvHofqMHK8WlAgIZ82/R6+sqF90KcKLoX81woJCcXXMtikb3NK26 lBNF18lbwZyVdfep3jLxKXpfu1+iKCLzTbfTdudDeQnMjHH0idMUPjc1KvIWVlXs zBMz+/TO69PqmJvaz/Isnhir3oz6ij5qEW6omODjeyBb4Ka/+NHn/Qk9QWk0Rg3P 6A/X+IIlSKeMhfwi56OHuFDNUMytBcMFPrbYVtC2V8yaMM1InwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoMUlSftLMTj7j3R3JbQmL20T97MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvOTQ3MDBhOGEtMzJhNS0z NjgxLWJkMjItZjA0M2FjMzJhZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB31HQpQY8OEoxTkbIrSuY0yfJPIBakoALxVobpw9J35A5BvUCwVGzS9 G2vjVq+VaBhlz/JQ74674YsOpbqkw4K5dXGe00wDsediU5IxE5Xl+SCwKehrYyba DQbGbI2NQ+Nv6ovNWnZ3X6SdCx/n+X8QD5B8j+5Mg9zdWP5eAo1rBo7kKsmY1QJ7 Rle19JWFikxjzYl777IVxy+x6Bg56cqvESGZAEmH6+brON2/hsvg0DVBQ0K24Ey/ b5fYNWhsIi2iF9GHcVt8Iv4EgaOgc52UviqkM4VtnLQGCDdy3c4I9GVTaPb5LFu3 0M27LP6Jd3lkGCMCI1bOeGsUblZ9wwY= -----END CERTIFICATE-----Generated at Tue Oct 27 20:37:50 2026 by rpki-client