$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/b946cee1-7bde-373d-9dfd-72eb30c9e7b9.roa File: b946cee1-7bde-373d-9dfd-72eb30c9e7b9.roa (raw, json) Hash identifier: 5cjc4lLO8vdnoreZ6Ug1/J8d6LJiqIdLWb8NWO3TCGs= Subject key identifier: 86:FE:84:2D:CE:58:80:F2:F3:EF:2A:2A:4E:87:33:1F:E2:86:25:D2 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F77835E0974158140C56E6C40 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/b946cee1-7bde-373d-9dfd-72eb30c9e7b9.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 63023 IP address blocks: 136.176.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:5e:09:74:15:81:40:c5:6e:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=822c09b3-d0d4-49eb-af16-0d35731dff2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4f:a0:6d:ac:3d:2f:fe:8c:e0:f7:60:8b:99: 7a:06:3b:e3:cd:57:5e:41:87:b2:e9:0a:f0:e3:2b: 37:fe:e6:e9:96:f8:16:70:ca:60:02:48:d4:5f:a7: 50:d2:57:df:cd:04:00:5e:2b:bc:31:d6:55:b6:11: 13:ea:9d:71:83:fe:2e:70:21:a6:ae:f3:36:d0:22: d8:8a:ba:61:41:b1:e4:d6:cc:3c:b3:8d:55:5c:65: 26:bf:b4:e2:2b:51:82:2e:be:be:ac:00:d1:34:a0: 99:05:58:d0:b4:22:69:2b:aa:94:6d:5c:79:20:81: ab:97:93:12:78:4b:80:ed:b6:9e:1c:44:cd:8c:67: 37:58:da:1e:9a:1e:ca:61:11:ee:b9:74:6c:26:6d: d5:23:3f:cf:99:99:91:86:83:82:17:46:39:f5:26: fe:18:f5:d8:5f:58:04:b7:cc:62:c4:c1:64:62:76: 4c:cf:89:d7:5f:cf:a8:92:f4:1f:70:3e:6c:72:de: d6:4e:ca:c6:e8:63:a6:42:6c:8f:d1:bf:bd:85:e4: 3f:46:a4:34:3d:a7:40:1d:31:7d:93:2b:a4:21:bf: 11:e7:15:65:68:d4:fb:07:86:38:62:d9:a3:93:6c: 78:3f:06:ab:46:5f:b9:a4:bd:49:c5:95:41:8f:df: a4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FE:84:2D:CE:58:80:F2:F3:EF:2A:2A:4E:87:33:1F:E2:86:25:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/b946cee1-7bde-373d-9dfd-72eb30c9e7b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:10:c7:1b:6a:0b:12:c0:f7:11:6a:f3:64:75:fe:0f:04:80: c7:2d:35:f0:9c:a1:d8:4c:92:aa:91:a9:4d:93:a9:8b:20:66: f8:53:49:01:e5:29:23:1e:0e:aa:ca:67:90:82:ac:24:f7:ba: 21:bb:a2:46:64:06:ee:d4:40:b5:d2:dd:3a:87:26:10:68:51: 25:f4:a1:78:f6:5d:0e:15:56:9c:b4:7b:ae:6f:bc:3e:80:bf: 73:a5:22:94:5a:cd:35:3b:57:dc:2c:05:86:7b:84:8f:90:b6: 49:ad:e8:11:87:ec:62:04:ce:25:3c:2d:6f:b8:e4:ea:89:5a: fe:1e:0c:c1:11:2d:d5:8d:10:2f:2b:37:db:2a:1c:60:e5:00: 24:13:96:ea:e7:d0:30:fb:a4:bd:13:02:5e:0b:07:85:db:c5: 5c:8c:bb:a5:f6:b7:a8:1b:d1:ef:ac:7b:89:21:14:08:69:36: 08:63:9e:bd:81:60:70:f1:9e:4d:a4:e9:45:23:70:33:c1:7d: 5b:06:d7:9b:e7:41:02:cb:8e:8b:f2:3a:1c:ab:bb:ad:53:9f: e8:2e:02:69:9c:28:2f:ea:14:c6:18:c8:70:39:42:a0:ca:06: 0b:0a:87:34:9d:fa:8b:57:3a:ef:29:22:3f:40:0e:26:89:85: a1:c7:e0:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g14JdBWBQMVubEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ODIyYzA5YjMtZDBkNC00OWViLWFmMTYtMGQzNTczMWRmZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU+gbaw9L/6M4Pdgi5l6BjvjzVdeQYey6Qrw 4ys3/ubplvgWcMpgAkjUX6dQ0lffzQQAXiu8MdZVthET6p1xg/4ucCGmrvM20CLY irphQbHk1sw8s41VXGUmv7TiK1GCLr6+rADRNKCZBVjQtCJpK6qUbVx5IIGrl5MS eEuA7baeHETNjGc3WNoemh7KYRHuuXRsJm3VIz/PmZmRhoOCF0Y59Sb+GPXYX1gE t8xixMFkYnZMz4nXX8+okvQfcD5sct7WTsrG6GOmQmyP0b+9heQ/RqQ0PadAHTF9 kyukIb8R5xVlaNT7B4Y4Ytmjk2x4PwarRl+5pL1JxZVBj9+kiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIb+hC3OWIDy8+8qKk6HMx/ihiXSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvYjk0NmNlZTEtN2JkZS0z NzNkLTlkZmQtNzJlYjMwYzllN2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMQxxtqCxLA9xFq82R1/g8EgMctNfCcodhMkqqRqU2TqYsgZvhTSQHl KSMeDqrKZ5CCrCT3uiG7okZkBu7UQLXS3TqHJhBoUSX0oXj2XQ4VVpy0e65vvD6A v3OlIpRazTU7V9wsBYZ7hI+Qtkmt6BGH7GIEziU8LW+45OqJWv4eDMERLdWNEC8r N9sqHGDlACQTlurn0DD7pL0TAl4LB4XbxVyMu6X2t6gb0e+se4khFAhpNghjnr2B YHDxnk2k6UUjcDPBfVsG15vnQQLLjovyOhyru61Tn+guAmmcKC/qFMYYyHA5QqDK BgsKhzSd+otXOu8pIj9ADiaJhaHH4JQ= -----END CERTIFICATE-----Generated at Mon Oct 19 19:46:28 2026 by rpki-client