$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a7bc0ccb-0335-34de-bfa9-c684ec6aa3ca.roa File: a7bc0ccb-0335-34de-bfa9-c684ec6aa3ca.roa (raw, json) Hash identifier: NrWmW4RQ1+xD1tQP8Q5ETa4nCJnyegLhBNKaOznLJzI= Subject key identifier: AE:3B:27:76:88:CD:34:15:3A:06:5F:80:E0:02:95:07:2E:71:EA:01 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F7782D835C9E149346BCAE980 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a7bc0ccb-0335-34de-bfa9-c684ec6aa3ca.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 63023 IP address blocks: 136.176.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:d8:35:c9:e1:49:34:6b:ca:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=4952319f-7848-4d6e-b29c-dc8c29873367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:37:a8:3a:32:6e:4e:78:c0:b7:40:86:98:eb: a8:20:39:ea:50:77:09:fa:2e:1f:c6:0e:dc:96:eb: 8a:e4:41:3a:34:7b:aa:70:46:7d:33:32:c9:4f:53: 91:30:9c:20:86:8d:ba:ac:34:9a:fa:02:25:9b:a1: a0:90:bd:83:3f:c1:52:3f:2b:1b:7a:46:73:ce:99: 93:b2:84:c3:41:f7:62:27:d9:c9:e5:71:0b:f2:0b: 02:97:f7:1c:50:d5:17:c8:3f:b3:dc:f5:3f:d3:ba: 4f:39:83:56:9b:b7:98:a2:2c:70:7a:71:85:12:df: 94:2e:73:20:e9:6d:1f:b8:2a:df:8f:d9:d3:13:0e: 8a:62:99:e9:2f:08:32:bf:d1:e7:a6:b8:8c:ef:37: d7:7e:e5:6b:eb:68:d3:b0:fa:a1:22:e0:c5:de:be: 7f:a7:b6:b7:9a:b6:68:56:a7:c8:81:e3:26:40:f2: 26:8a:d8:ef:3d:6d:b8:13:07:3d:78:73:96:08:e8: 36:8c:bd:8b:55:14:ed:9d:90:ff:08:7a:a1:48:7a: d0:af:da:dd:3e:06:06:b3:67:5d:e7:f5:76:88:fd: dc:5a:bf:25:de:26:94:e1:94:c1:6f:37:ff:15:76: 9c:d1:30:95:e5:6b:6f:05:0d:c0:1b:ee:da:9d:92: 56:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3B:27:76:88:CD:34:15:3A:06:5F:80:E0:02:95:07:2E:71:EA:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a7bc0ccb-0335-34de-bfa9-c684ec6aa3ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:02:e4:f3:27:59:ff:82:ab:95:2d:86:c8:76:52:5f:d9:1e: 65:98:2e:5a:45:bb:45:e5:44:f7:48:74:77:d8:b7:ae:68:6e: 5f:06:b0:dc:62:b3:28:87:3d:75:54:d1:0c:b4:9e:1a:b1:b4: aa:ea:3e:8d:03:9b:e6:e5:25:34:39:8e:8d:6b:57:6e:40:bd: 07:17:67:b9:36:82:33:f0:a0:b3:ab:41:43:fe:93:70:42:74: 42:a4:dc:c2:a6:e8:bb:2b:24:f6:3a:88:08:46:4a:54:4c:6d: 58:29:37:2f:fa:e9:1c:db:77:99:04:60:db:d7:3a:b1:f2:af: 6d:f1:85:fa:fc:a0:90:6d:4c:d4:9c:5d:e0:7e:cd:2c:1e:8a: a1:4c:39:53:d7:08:bd:e6:58:c8:fe:e8:e2:e4:d9:bc:ba:99: c1:11:29:00:02:21:c2:06:ff:f5:40:27:3a:63:4a:d3:f4:b5: 10:74:d6:8c:4d:94:b1:b6:28:94:18:b1:4d:2b:03:57:bc:ca: 3c:0c:f0:94:01:d3:f3:c8:71:4c:cb:8c:91:01:85:76:e4:f0: 30:fc:f3:4a:e2:36:68:8c:7a:0a:00:2e:02:f3:60:eb:4f:8b: eb:8c:24:cd:dc:eb:38:84:11:f2:8f:3b:f1:90:e1:18:1b:82: 2b:af:46:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gtg1yeFJNGvK6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk NDk1MjMxOWYtNzg0OC00ZDZlLWIyOWMtZGM4YzI5ODczMzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzeoOjJuTnjAt0CGmOuoIDnqUHcJ+i4fxg7c luuK5EE6NHuqcEZ9MzLJT1ORMJwgho26rDSa+gIlm6GgkL2DP8FSPysbekZzzpmT soTDQfdiJ9nJ5XEL8gsCl/ccUNUXyD+z3PU/07pPOYNWm7eYoixwenGFEt+ULnMg 6W0fuCrfj9nTEw6KYpnpLwgyv9HnpriM7zfXfuVr62jTsPqhIuDF3r5/p7a3mrZo VqfIgeMmQPImitjvPW24Ewc9eHOWCOg2jL2LVRTtnZD/CHqhSHrQr9rdPgYGs2dd 5/V2iP3cWr8l3iaU4ZTBbzf/FXac0TCV5WtvBQ3AG+7anZJWBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK47J3aIzTQVOgZfgOAClQcuceoBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvYTdiYzBjY2ItMDMzNS0z NGRlLWJmYTktYzY4NGVjNmFhM2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLBDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkC5PMnWf+Cq5Uthsh2Ul/ZHmWYLlpFu0XlRPdIdHfYt65obl8GsNxi syiHPXVU0Qy0nhqxtKrqPo0Dm+blJTQ5jo1rV25AvQcXZ7k2gjPwoLOrQUP+k3BC dEKk3MKm6LsrJPY6iAhGSlRMbVgpNy/66Rzbd5kEYNvXOrHyr23xhfr8oJBtTNSc XeB+zSweiqFMOVPXCL3mWMj+6OLk2by6mcERKQACIcIG//VAJzpjStP0tRB01oxN lLG2KJQYsU0rA1e8yjwM8JQB0/PIcUzLjJEBhXbk8DD880riNmiMegoALgLzYOtP i+uMJM3c6ziEEfKPO/GQ4RgbgiuvRg4= -----END CERTIFICATE-----Generated at Tue Oct 27 22:35:07 2026 by rpki-client