$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/9b69a72d-de61-31b4-b687-dbf74a1732de.roa File: 9b69a72d-de61-31b4-b687-dbf74a1732de.roa (raw, json) Hash identifier: zXKROhz4Umkifclg/r6hsu5LpeOydJwIhUidlHbq2ig= Subject key identifier: 72:82:72:97:AF:A7:42:AE:70:E1:E8:17:79:17:09:47:92:8F:0E:87 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F78E83519227853FEECABD0B0 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/9b69a72d-de61-31b4-b687-dbf74a1732de.roa Signing time: Mon 12 Oct 2026 01:00:13 +0000 ROA not before: Mon 12 Oct 2026 01:00:13 +0000 ROA not after: Sun 10 Jan 2027 02:00:13 +0000 asID: 63023 IP address blocks: 136.176.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:78:e8:35:19:22:78:53:fe:ec:ab:d0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 12 01:00:13 2026 GMT Not After : Jan 10 02:00:13 2027 GMT Subject: CN=9dd51fe4-bf8a-48e2-ae83-82d62e009fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:20:01:aa:10:0d:da:80:c0:c6:b5:1e:d7:b1: cf:d4:ed:7b:d7:da:98:c5:53:59:1f:0a:df:ee:86: a0:02:4f:bf:51:aa:67:9f:d2:40:39:be:e7:46:fe: 6c:80:9f:b8:1b:93:0c:ba:84:f0:0d:9c:68:47:79: 69:4a:32:9d:f7:fd:b2:95:4c:c7:85:4b:dd:58:d7: 27:24:8a:0f:65:82:76:02:62:84:8a:3a:dc:45:97: 52:b6:0d:76:4d:82:8b:14:5a:06:22:26:c1:e7:e9: 73:67:05:09:12:9e:bd:d3:2f:fd:1c:25:ee:27:e8: 14:c8:9a:f3:a5:a2:97:eb:f9:09:81:85:49:b8:e2: 87:b4:b1:24:e9:24:10:82:fd:4d:bf:83:34:b8:31: ec:29:5d:9b:ed:51:43:f9:be:98:eb:65:5b:51:5e: ab:26:2e:b9:24:07:a6:24:fb:86:2b:c0:91:e0:a3: 2b:b4:f9:9a:e5:65:93:72:03:af:67:6a:3e:00:18: ac:d1:f2:9c:05:45:9c:68:66:71:17:ae:9a:eb:36: 5b:f6:99:b4:17:e9:29:2b:95:2c:65:f2:fa:74:b6: 9f:bb:c1:4f:62:26:79:1a:43:e3:92:e5:8a:07:37: c7:15:6f:8f:e5:67:93:fb:9a:fe:3d:aa:4c:e7:6a: ae:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:82:72:97:AF:A7:42:AE:70:E1:E8:17:79:17:09:47:92:8F:0E:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/9b69a72d-de61-31b4-b687-dbf74a1732de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:1a:5b:b0:65:8d:1e:7a:b4:bf:06:14:48:9d:0e:1a:a2:ba: 66:f1:3e:9a:22:d9:dd:be:34:d6:e8:fc:4a:34:27:63:4d:bb: 8b:b1:4d:48:4b:e1:bd:8e:8d:ef:d2:d2:56:52:57:8f:5a:cf: 80:17:35:1e:6d:39:91:1a:33:d6:3a:32:29:e1:8e:f9:53:dc: 24:35:4b:92:ad:be:2b:90:e6:14:76:82:d3:74:07:ad:c7:4f: 7b:b8:0e:5c:b1:9d:c3:7e:f4:a0:8d:25:e9:59:79:69:d9:92: 63:99:7c:12:f7:10:90:cf:fd:6c:25:a7:58:c0:41:88:84:cf: dd:ac:8e:03:3c:b5:93:56:b8:cf:2f:3c:b1:9f:26:db:18:6c: 93:f9:d8:ad:ed:83:2a:62:b1:55:da:92:58:ec:38:eb:ef:fb: 3f:b0:cf:e4:5c:1c:93:4f:e2:1e:81:0f:21:db:76:8a:92:17: 7b:ce:25:1a:0e:11:a1:16:ca:99:b1:d0:5f:fe:29:05:5d:f6: 4e:9d:10:7b:de:9f:ec:4c:65:0e:f5:20:15:5b:5f:d5:36:76: 38:a5:67:77:77:9a:54:01:7e:02:9d:77:d0:ae:79:41:90:ae: b9:80:98:3c:60:50:a0:d8:2f:d0:f3:eb:07:7a:8a:6a:5b:ca: 5c:b3:3e:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE946DUZInhT/uyr0LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAxMjAxMDAxM1oXDTI3MDExMDAyMDAxM1owLzEtMCsGA1UEAxMk OWRkNTFmZTQtYmY4YS00OGUyLWFlODMtODJkNjJlMDA5ZmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyABqhAN2oDAxrUe17HP1O1719qYxVNZHwrf 7oagAk+/Uapnn9JAOb7nRv5sgJ+4G5MMuoTwDZxoR3lpSjKd9/2ylUzHhUvdWNcn JIoPZYJ2AmKEijrcRZdStg12TYKLFFoGIibB5+lzZwUJEp690y/9HCXuJ+gUyJrz paKX6/kJgYVJuOKHtLEk6SQQgv1Nv4M0uDHsKV2b7VFD+b6Y62VbUV6rJi65JAem JPuGK8CR4KMrtPma5WWTcgOvZ2o+ABis0fKcBUWcaGZxF66a6zZb9pm0F+kpK5Us ZfL6dLafu8FPYiZ5GkPjkuWKBzfHFW+P5WeT+5r+PapM52qu7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKCcpevp0KucOHoF3kXCUeSjw6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvOWI2OWE3MmQtZGU2MS0z MWI0LWI2ODctZGJmNzRhMTczMmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLB6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMaW7BljR56tL8GFEidDhqiumbxPpoi2d2+NNbo/Eo0J2NNu4uxTUhL 4b2Oje/S0lZSV49az4AXNR5tOZEaM9Y6MinhjvlT3CQ1S5KtviuQ5hR2gtN0B63H T3u4DlyxncN+9KCNJelZeWnZkmOZfBL3EJDP/Wwlp1jAQYiEz92sjgM8tZNWuM8v PLGfJtsYbJP52K3tgypisVXakljsOOvv+z+wz+RcHJNP4h6BDyHbdoqSF3vOJRoO EaEWypmx0F/+KQVd9k6dEHven+xMZQ71IBVbX9U2djilZ3d3mlQBfgKdd9CueUGQ rrmAmDxgUKDYL9Dz6wd6impbylyzPss= -----END CERTIFICATE-----Generated at Tue Oct 27 18:15:45 2026 by rpki-client