$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/99e4058c-8cc4-3179-8cdd-37b16b96cf9a.roa File: 99e4058c-8cc4-3179-8cdd-37b16b96cf9a.roa (raw, json) Hash identifier: 4/IJlWqjLh8jk4pZC8Wu3gwHYAK22Bjeaayrs72XLa8= Subject key identifier: F0:41:4D:0C:61:92:6D:79:EE:5A:68:01:EC:D7:69:B3:3E:E9:1A:22 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F7FE2DBCF7CCA754435B64740 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/99e4058c-8cc4-3179-8cdd-37b16b96cf9a.roa Signing time: Wed 14 Oct 2026 13:00:12 +0000 ROA not before: Wed 14 Oct 2026 13:00:12 +0000 ROA not after: Tue 12 Jan 2027 14:00:12 +0000 asID: 63023 IP address blocks: 139.64.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7f:e2:db:cf:7c:ca:75:44:35:b6:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 14 13:00:12 2026 GMT Not After : Jan 12 14:00:12 2027 GMT Subject: CN=b3221443-5f27-4d2e-ab4a-1b55567bf004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6e:39:ab:42:a4:a5:1c:c0:d5:c0:e1:64:ae: 39:8e:0b:ee:a7:64:58:b6:3a:e5:8b:3e:a7:6c:a7: 2f:78:4d:9b:48:58:2a:34:78:25:c7:9d:60:66:7d: 21:a8:29:51:67:09:df:3d:6f:c0:dd:d5:83:fd:2b: d5:69:0e:ff:92:1f:77:41:b4:95:e5:43:6d:6a:b1: 26:c2:b5:71:ac:9c:73:18:ec:f6:94:d3:dc:6b:ec: 8b:62:7a:9b:a8:32:93:79:a1:f8:56:53:ef:81:db: 17:bc:fc:94:4b:fd:46:02:8a:2e:2e:6d:ab:09:d3: 04:1b:37:e9:63:81:53:48:d1:eb:13:29:e3:ac:9d: 57:c2:7b:d1:d6:cb:96:f6:80:ef:bb:3f:32:b9:9b: 41:76:53:ca:32:c5:06:62:c1:22:74:a6:78:08:d0: 1a:b8:e9:9e:c4:bc:8f:0e:a8:1a:72:12:26:a8:1e: 88:8e:4e:9d:48:10:ba:5f:32:d6:9c:50:71:1f:0c: 8a:e8:73:2c:ff:3d:58:da:4c:12:b1:92:e6:dc:05: 32:dc:30:ec:0c:e0:6e:0a:6f:72:ca:bf:cd:d4:b9: f2:98:f9:a4:cc:ae:05:2d:f4:56:e9:5e:91:81:6a: 93:26:b1:d7:96:b1:6d:16:1e:dc:c6:45:de:a2:7a: 45:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:41:4D:0C:61:92:6D:79:EE:5A:68:01:EC:D7:69:B3:3E:E9:1A:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/99e4058c-8cc4-3179-8cdd-37b16b96cf9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 139.64.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:a7:9c:29:d1:d3:22:10:c0:48:cc:64:2c:55:54:b7:e4:44: 62:6a:7f:75:06:10:4f:a3:73:b7:00:f7:09:4b:0c:fd:e9:e1: ea:9b:a0:4c:75:6a:22:05:2a:22:16:23:f2:59:5c:62:54:11: 1b:5b:64:94:4b:63:76:20:2f:e1:e1:a0:5b:f6:04:b8:66:39: 54:a0:62:86:ca:57:f2:d5:c5:e4:3b:ca:74:94:3d:57:b2:4d: 67:cf:86:5a:b3:8d:2e:27:3e:8e:5f:9a:a3:ac:7a:8a:ca:0d: b3:47:c6:ac:27:85:30:c6:f8:66:63:1d:5b:d6:c5:20:3b:23: 38:47:4c:4a:cf:58:28:43:a1:02:a0:58:0b:aa:9a:10:35:33: 37:48:67:41:b9:a4:7a:3e:6b:7e:bc:64:71:26:d0:1b:74:38: 20:a3:37:29:d7:63:dc:50:e2:97:01:09:f1:ba:20:75:b5:6c: 0b:ce:ef:d7:55:92:7b:3e:87:73:f9:02:25:9f:f1:24:22:65: c7:3c:48:e9:de:d0:2d:45:8f:5b:58:80:e5:79:53:05:7c:62: 5c:19:81:6c:fb:e1:57:28:9f:de:79:d5:61:32:f2:88:8e:e2: c9:f8:3b:2f:e1:18:d7:02:a1:b1:58:18:d3:5c:e4:41:b2:dc: d1:39:67:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9/4tvPfMp1RDW2R0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk YjMyMjE0NDMtNWYyNy00ZDJlLWFiNGEtMWI1NTU2N2JmMDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW45q0KkpRzA1cDhZK45jgvup2RYtjrliz6n bKcveE2bSFgqNHglx51gZn0hqClRZwnfPW/A3dWD/SvVaQ7/kh93QbSV5UNtarEm wrVxrJxzGOz2lNPca+yLYnqbqDKTeaH4VlPvgdsXvPyUS/1GAoouLm2rCdMEGzfp Y4FTSNHrEynjrJ1XwnvR1suW9oDvuz8yuZtBdlPKMsUGYsEidKZ4CNAauOmexLyP DqgachImqB6Ijk6dSBC6XzLWnFBxHwyK6HMs/z1Y2kwSsZLm3AUy3DDsDOBuCm9y yr/N1LnymPmkzK4FLfRW6V6RgWqTJrHXlrFtFh7cxkXeonpFQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBBTQxhkm157lpoAezXabM+6RoiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvOTllNDA1OGMtOGNjNC0z MTc5LThjZGQtMzdiMTZiOTZjZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi0CnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWnnCnR0yIQwEjMZCxVVLfkRGJqf3UGEE+jc7cA9wlLDP3p4eqboEx1 aiIFKiIWI/JZXGJUERtbZJRLY3YgL+HhoFv2BLhmOVSgYobKV/LVxeQ7ynSUPVey TWfPhlqzjS4nPo5fmqOseorKDbNHxqwnhTDG+GZjHVvWxSA7IzhHTErPWChDoQKg WAuqmhA1MzdIZ0G5pHo+a368ZHEm0Bt0OCCjNynXY9xQ4pcBCfG6IHW1bAvO79dV kns+h3P5AiWf8SQiZcc8SOne0C1Fj1tYgOV5UwV8YlwZgWz74Vcon9551WEy8oiO 4sn4Oy/hGNcCobFYGNNc5EGy3NE5Z7Q= -----END CERTIFICATE-----Generated at Tue Oct 27 15:52:54 2026 by rpki-client