$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/b0b50b9c-0303-3342-a6c0-4790facebc46.roa File: b0b50b9c-0303-3342-a6c0-4790facebc46.roa (raw, json) Hash identifier: gfAXgGwPs4OdugLEwVcMPCDn3HAjswnHgqkKSe6iT+Q= Subject key identifier: 01:DE:3F:17:B0:13:88:8D:88:D5:B3:52:A0:90:9E:98:8A:5A:07:B1 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F78E82F5F4E006DCEC692EBC0 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/b0b50b9c-0303-3342-a6c0-4790facebc46.roa Signing time: Mon 12 Oct 2026 01:00:13 +0000 ROA not before: Mon 12 Oct 2026 01:00:13 +0000 ROA not after: Sun 10 Jan 2027 02:00:13 +0000 asID: 63023 IP address blocks: 136.176.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:78:e8:2f:5f:4e:00:6d:ce:c6:92:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 12 01:00:13 2026 GMT Not After : Jan 10 02:00:13 2027 GMT Subject: CN=e81c0cbe-c490-4a54-97a7-d95d453388d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f2:bb:71:6b:6c:c4:f8:bb:9d:55:07:52:12: 60:81:62:80:2c:46:23:87:8d:b9:a3:50:3f:69:11: 41:d4:70:3e:a0:76:b0:3c:a2:af:93:d8:c5:55:2e: 10:cd:59:5f:18:4e:61:b4:07:16:65:7e:e8:46:0b: ed:75:7c:d3:72:88:92:66:e7:d2:fb:93:4a:24:1b: 9c:c5:d7:17:03:24:de:4f:8e:90:3b:3a:1d:89:02: f4:98:dd:f9:77:fe:53:4a:b5:f5:c3:e8:25:8f:04: fd:16:01:dc:18:4c:88:88:94:40:be:61:ee:6f:f6: 06:93:d4:88:04:34:ee:97:49:ba:dc:c1:cd:08:a3: ac:ca:92:95:d3:b8:b3:6a:8c:84:71:e5:aa:22:8a: 95:94:97:3b:1e:50:da:bf:8b:18:58:96:63:7e:c5: 2f:78:f5:ec:b5:87:4b:a5:7e:47:ca:0a:9b:89:4d: df:2c:df:8f:a3:8c:66:f2:54:72:bc:9e:5a:71:15: 81:08:a0:34:15:58:54:4f:24:39:b9:7d:33:d2:bc: be:21:f7:58:e2:71:fa:26:a7:31:64:26:7b:5e:1e: d0:fa:f7:a2:a2:d2:ee:d9:18:3e:3b:7a:67:9a:6c: 1d:05:10:dd:c4:16:50:af:c2:b5:20:dc:93:6f:9e: 49:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:DE:3F:17:B0:13:88:8D:88:D5:B3:52:A0:90:9E:98:8A:5A:07:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/b0b50b9c-0303-3342-a6c0-4790facebc46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:c4:9d:14:0f:65:f6:f0:86:fd:e5:68:59:53:d9:ed:f7:2c: 96:3f:08:42:39:2f:bd:37:12:71:1d:d4:f8:20:34:73:80:59: 6f:fc:3e:cd:e6:b6:0a:34:2c:19:76:46:48:db:9e:b9:a0:15: 83:02:1f:bf:99:64:46:6e:11:b3:fb:97:52:8b:ab:d8:e2:2e: e0:b8:02:38:bb:64:2d:94:e1:21:bf:79:08:f2:19:ba:d5:84: 16:b9:96:aa:7e:cc:9d:f4:ef:9c:b0:74:03:c8:0c:c2:9d:33: ea:46:18:b7:93:8b:c5:f7:7a:61:dd:c8:d1:9e:47:c1:dd:e8: 57:cb:ff:97:7a:ad:2a:cd:60:a8:38:b7:e4:0d:ec:8e:95:25: 23:b9:5b:8d:d1:9f:5b:97:29:32:4f:d8:71:69:da:2e:02:72: 9c:52:71:36:fd:26:2a:b3:c9:db:69:d4:68:e2:4b:98:48:7b: 04:df:92:c5:30:66:1d:2a:b0:7f:53:80:95:55:22:78:eb:ee: 2b:31:f9:ca:4b:f2:0c:c9:59:8e:d5:f4:51:f1:63:33:fc:ef: 6b:88:59:d5:35:a1:0a:63:e8:04:a0:35:4e:ff:5a:76:9b:48: dd:48:e8:93:03:03:3e:8d:b2:f6:7e:17:bb:76:7d:e6:d7:96: 0d:9d:b7:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE946C9fTgBtzsaS68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAxMjAxMDAxM1oXDTI3MDExMDAyMDAxM1owLzEtMCsGA1UEAxMk ZTgxYzBjYmUtYzQ5MC00YTU0LTk3YTctZDk1ZDQ1MzM4OGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPK7cWtsxPi7nVUHUhJggWKALEYjh425o1A/ aRFB1HA+oHawPKKvk9jFVS4QzVlfGE5htAcWZX7oRgvtdXzTcoiSZufS+5NKJBuc xdcXAyTeT46QOzodiQL0mN35d/5TSrX1w+gljwT9FgHcGEyIiJRAvmHub/YGk9SI BDTul0m63MHNCKOsypKV07izaoyEceWqIoqVlJc7HlDav4sYWJZjfsUvePXstYdL pX5HygqbiU3fLN+Po4xm8lRyvJ5acRWBCKA0FVhUTyQ5uX0z0ry+IfdY4nH6Jqcx ZCZ7Xh7Q+veiotLu2Rg+O3pnmmwdBRDdxBZQr8K1INyTb55JBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHePxewE4iNiNWzUqCQnpiKWgexMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvYjBiNTBiOWMtMDMwMy0z MzQyLWE2YzAtNDc5MGZhY2ViYzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLBzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfEnRQPZfbwhv3laFlT2e33LJY/CEI5L703EnEd1PggNHOAWW/8Ps3m tgo0LBl2RkjbnrmgFYMCH7+ZZEZuEbP7l1KLq9jiLuC4Aji7ZC2U4SG/eQjyGbrV hBa5lqp+zJ3075ywdAPIDMKdM+pGGLeTi8X3emHdyNGeR8Hd6FfL/5d6rSrNYKg4 t+QN7I6VJSO5W43Rn1uXKTJP2HFp2i4CcpxScTb9Jiqzydtp1GjiS5hIewTfksUw Zh0qsH9TgJVVInjr7isx+cpL8gzJWY7V9FHxYzP872uIWdU1oQpj6ASgNU7/Wnab SN1I6JMDAz6NsvZ+F7t2febXlg2dt0U= -----END CERTIFICATE-----Generated at Tue Oct 27 17:34:21 2026 by rpki-client