$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a7131538-1299-33d0-8358-4be5a488b087.roa File: a7131538-1299-33d0-8358-4be5a488b087.roa (raw, json) Hash identifier: 17blZJ3exQrn8D62LBiYUtIMliAZnM27hltyHcITCGs= Subject key identifier: 42:77:79:8A:47:2C:B0:FE:03:93:B5:69:64:7C:5B:E9:BF:98:9A:F9 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584EA788B8B446FEFF455F2C0500 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a7131538-1299-33d0-8358-4be5a488b087.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 63023 IP address blocks: 66.163.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:b8:b4:46:fe:ff:45:5f:2c:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d1387263-c211-4c38-80e9-d73d56e5c7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:de:8c:98:22:8f:26:ba:76:9a:e8:f0:65:92: 2d:56:5e:84:24:a4:55:e7:43:58:d6:0f:37:d3:c3: 0f:bf:63:59:3c:78:11:e3:77:dd:c5:76:04:60:5a: 71:58:4e:31:66:da:cd:74:e0:2a:14:b1:61:a8:0b: 12:b6:2e:cb:af:5a:a5:72:8e:27:c1:c5:70:51:67: 08:1a:dd:10:4e:69:44:47:6a:0f:62:6e:a5:f3:f3: b3:55:a4:8d:39:0c:42:a5:64:ed:b8:84:d2:6b:09: 9c:75:56:1f:68:07:26:61:c3:93:93:f8:5f:b2:ae: f3:ea:44:5d:93:77:96:f4:dd:3a:10:d7:f9:f1:ee: 45:4b:1a:f0:0e:bd:c5:66:14:66:7c:55:48:dc:96: b9:2a:3d:d8:52:d5:1b:c1:9e:5e:73:24:97:a5:2d: 75:fd:78:e8:02:ee:30:c4:7b:1b:6e:e9:3e:4a:d7: d8:5f:3a:7c:e1:a9:cd:71:26:38:f7:42:db:29:a3: d1:e6:51:7e:fe:7f:8f:e3:1c:14:09:7c:81:01:98: fe:38:85:06:47:5f:a8:af:20:7c:9e:b2:4d:cf:2b: b1:25:46:0e:30:4d:61:52:40:c6:ff:ad:27:e7:da: 3e:df:c3:e4:89:ad:24:c5:2c:3a:21:b6:e2:2f:53: 95:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:77:79:8A:47:2C:B0:FE:03:93:B5:69:64:7C:5B:E9:BF:98:9A:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a7131538-1299-33d0-8358-4be5a488b087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 66.163.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:9c:cd:ae:51:ff:e8:b0:7f:d7:0f:80:c9:26:f1:f6:07:d3: f5:a5:c9:7b:6d:64:fd:6b:dd:fb:ce:06:cb:68:db:36:98:eb: cd:3d:0f:1c:93:42:8d:40:19:0c:e2:99:d8:e4:3e:70:93:10: f6:6e:32:c0:a2:a0:d4:80:29:b8:21:25:f7:3c:93:82:d8:39: 76:43:ef:8f:77:80:21:08:da:2a:96:c3:0e:1a:ab:df:15:0f: 69:4f:25:64:8c:18:84:ec:15:3e:d1:db:59:f7:d7:dc:47:c7: da:b3:5c:d9:56:03:24:64:c8:ae:62:a9:87:45:d3:fe:27:7e: e4:32:b8:12:5b:cc:85:e7:b0:ed:54:d1:b1:01:08:b5:28:64: 3e:be:4b:07:ae:5a:33:cc:96:0f:c4:d4:74:cf:e4:ea:b1:fb: 2e:c6:c4:dc:98:e1:a8:5e:81:3b:2c:b7:19:37:32:3b:94:59: f7:eb:10:60:f9:5e:a1:c2:1b:32:8a:e2:b8:1c:07:e3:5f:55: 42:17:f4:19:6d:71:56:1e:59:71:fe:45:b1:c2:72:87:59:65: 90:90:bb:b9:4e:f3:7d:4c:98:29:f1:86:0d:ad:a5:b4:8b:9a: 3f:fd:56:0c:3f:d9:fc:e0:d8:51:b7:20:63:52:e9:29:49:fd: 0a:9b:23:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niLi0Rv7/RV8sBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDEzODcyNjMtYzIxMS00YzM4LTgwZTktZDczZDU2ZTVjN2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr96MmCKPJrp2mujwZZItVl6EJKRV50NY1g83 08MPv2NZPHgR43fdxXYEYFpxWE4xZtrNdOAqFLFhqAsSti7Lr1qlco4nwcVwUWcI Gt0QTmlER2oPYm6l8/OzVaSNOQxCpWTtuITSawmcdVYfaAcmYcOTk/hfsq7z6kRd k3eW9N06ENf58e5FSxrwDr3FZhRmfFVI3Ja5Kj3YUtUbwZ5ecySXpS11/XjoAu4w xHsbbuk+StfYXzp84anNcSY490LbKaPR5lF+/n+P4xwUCXyBAZj+OIUGR1+oryB8 nrJNzyuxJUYOME1hUkDG/60n59o+38Pkia0kxSw6IbbiL1OVMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ3eYpHLLD+A5O1aWR8W+m/mJr5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvYTcxMzE1MzgtMTI5OS0z M2QwLTgzNTgtNGJlNWE0ODhiMDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqN5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWcza5R/+iwf9cPgMkm8fYH0/WlyXttZP1r3fvOBsto2zaY6809DxyT Qo1AGQzimdjkPnCTEPZuMsCioNSAKbghJfc8k4LYOXZD7493gCEI2iqWww4aq98V D2lPJWSMGITsFT7R21n319xHx9qzXNlWAyRkyK5iqYdF0/4nfuQyuBJbzIXnsO1U 0bEBCLUoZD6+SweuWjPMlg/E1HTP5Oqx+y7GxNyY4ahegTsstxk3MjuUWffrEGD5 XqHCGzKK4rgcB+NfVUIX9BltcVYeWXH+RbHCcodZZZCQu7lO831MmCnxhg2tpbSL mj/9Vgw/2fzg2FG3IGNS6SlJ/QqbI50= -----END CERTIFICATE-----Generated at Thu Sep 10 19:29:31 2026 by rpki-client