$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/99f96a92-20b5-38a2-87d1-93697f5b3b9e.roa File: 99f96a92-20b5-38a2-87d1-93697f5b3b9e.roa (raw, json) Hash identifier: xWmcVNFlO7ASDLJyNshpybNtH+SKM9pMkMFv151S13U= Subject key identifier: 6C:98:17:F8:77:1D:7D:4A:E6:73:77:8C:DD:4D:51:E4:99:14:BD:93 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F78E8306E5C56DE784EAA22C0 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/99f96a92-20b5-38a2-87d1-93697f5b3b9e.roa Signing time: Mon 12 Oct 2026 01:00:13 +0000 ROA not before: Mon 12 Oct 2026 01:00:13 +0000 ROA not after: Sun 10 Jan 2027 02:00:13 +0000 asID: 63023 IP address blocks: 136.176.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:78:e8:30:6e:5c:56:de:78:4e:aa:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 12 01:00:13 2026 GMT Not After : Jan 10 02:00:13 2027 GMT Subject: CN=61a0d273-c0e3-4457-b09d-f85f26903517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cc:9a:87:ab:08:f7:5c:2c:70:3f:26:22:e2: 53:82:4c:39:80:dd:32:fa:d0:23:cf:42:d2:a6:af: 9c:11:82:3d:9a:a6:7d:0b:25:b5:aa:0a:4f:ad:11: c1:e9:20:24:9b:44:b3:4e:ee:04:fd:56:b7:21:57: 83:a8:15:01:89:24:a6:3e:1f:57:c4:e3:37:dd:f7: 82:79:82:ea:80:1f:9b:b3:90:cb:8b:2c:7d:83:1f: 8c:e6:2a:ac:ae:38:13:ff:29:fb:d1:c0:09:3f:80: e9:78:e7:c4:e0:89:c3:b4:95:1a:2a:37:f9:dc:99: 27:08:d9:9e:b6:e9:c5:eb:5e:db:45:e5:0d:e5:1e: 46:60:b9:25:6a:58:20:12:e8:e1:5d:99:58:15:33: ee:f7:df:c4:60:a6:d9:05:36:cb:f7:ef:b8:b2:68: ae:b2:2b:76:a8:e1:a0:6f:00:d6:66:c5:01:45:cc: 0e:d9:17:6d:fb:03:2b:4e:a2:db:6d:87:b7:e3:d7: ab:c3:02:21:a5:3a:0a:da:f1:c5:ba:1d:b4:02:65: 94:d1:81:2a:5e:78:7c:b9:ec:33:38:3a:c8:2c:b9: 3b:4e:51:3b:4b:0f:42:f6:cc:ce:c1:7c:6f:d9:a0: 07:11:7b:cc:d5:b1:d4:9f:fe:02:4b:66:9d:44:49: b1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:98:17:F8:77:1D:7D:4A:E6:73:77:8C:DD:4D:51:E4:99:14:BD:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/99f96a92-20b5-38a2-87d1-93697f5b3b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:34:c8:9b:27:5c:33:06:b6:d2:af:e3:00:37:c6:b3:3d:6e: 3d:0b:a6:e2:5a:a0:c4:c4:54:a4:9c:a5:9c:e3:dd:36:dd:a2: fe:12:31:39:63:7e:7d:45:ff:30:32:f1:eb:70:62:fb:d9:66: f4:c6:14:0f:d0:57:6e:09:0b:5f:7b:41:ee:31:01:74:f7:bf: e9:95:65:89:54:ee:5f:20:ed:e6:23:ec:41:9c:44:56:b7:de: fd:ba:84:1d:12:b7:d6:1e:90:bb:42:d3:87:6b:18:cd:58:c4: 69:22:61:52:f8:94:7b:69:6e:54:ad:75:3e:77:58:54:88:4a: 88:73:fd:b8:98:48:29:f1:ac:8f:c0:a2:e2:e1:00:ee:71:60: 97:a6:df:2d:39:28:b3:e9:03:76:9e:71:45:8c:64:26:da:d2: de:08:30:2c:c7:16:76:7d:f0:62:4f:49:3e:17:ca:a6:55:d3: 14:9d:f5:b9:a1:a3:69:c4:75:c0:0c:5c:b5:35:cb:d9:3b:83: 48:9d:4c:12:6c:dc:51:c6:35:08:a0:64:b6:1e:06:dd:17:c6: f3:e1:77:8d:84:35:3a:36:63:1d:0d:e4:d5:64:57:f0:e1:21: 93:75:e2:b0:9d:2e:6f:cc:25:b2:63:b4:87:3e:81:fa:9f:2a: 31:cc:fa:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE946DBuXFbeeE6qIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAxMjAxMDAxM1oXDTI3MDExMDAyMDAxM1owLzEtMCsGA1UEAxMk NjFhMGQyNzMtYzBlMy00NDU3LWIwOWQtZjg1ZjI2OTAzNTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMyah6sI91wscD8mIuJTgkw5gN0y+tAjz0LS pq+cEYI9mqZ9CyW1qgpPrRHB6SAkm0SzTu4E/Va3IVeDqBUBiSSmPh9XxOM33feC eYLqgB+bs5DLiyx9gx+M5iqsrjgT/yn70cAJP4DpeOfE4InDtJUaKjf53JknCNme tunF617bReUN5R5GYLklalggEujhXZlYFTPu99/EYKbZBTbL9++4smiusit2qOGg bwDWZsUBRcwO2Rdt+wMrTqLbbYe349erwwIhpToK2vHFuh20AmWU0YEqXnh8uewz ODrILLk7TlE7Sw9C9szOwXxv2aAHEXvM1bHUn/4CS2adREmxtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyYF/h3HX1K5nN3jN1NUeSZFL2TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvOTlmOTZhOTItMjBiNS0z OGEyLTg3ZDEtOTM2OTdmNWIzYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAw0yJsnXDMGttKv4wA3xrM9bj0LpuJaoMTEVKScpZzj3Tbdov4SMTlj fn1F/zAy8etwYvvZZvTGFA/QV24JC197Qe4xAXT3v+mVZYlU7l8g7eYj7EGcRFa3 3v26hB0St9YekLtC04drGM1YxGkiYVL4lHtpblStdT53WFSISohz/biYSCnxrI/A ouLhAO5xYJem3y05KLPpA3aecUWMZCba0t4IMCzHFnZ98GJPST4XyqZV0xSd9bmh o2nEdcAMXLU1y9k7g0idTBJs3FHGNQigZLYeBt0XxvPhd42ENTo2Yx0N5NVkV/Dh IZN14rCdLm/MJbJjtIc+gfqfKjHM+tA= -----END CERTIFICATE-----Generated at Tue Oct 27 15:52:51 2026 by rpki-client