$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/bf1d15c2-3c70-396d-9335-106129f3b19d.roa File: bf1d15c2-3c70-396d-9335-106129f3b19d.roa (raw, json) Hash identifier: w0SZLMsTrng81ZH+eOMF3BFiQIdM3EEgDShzoyeYH7M= Subject key identifier: 46:E9:AF:9A:78:56:C1:A4:0F:2C:9C:42:93:55:A6:A1:24:E4:71:DF Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F78E8358618423F22EB837394 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/bf1d15c2-3c70-396d-9335-106129f3b19d.roa Signing time: Mon 12 Oct 2026 01:00:13 +0000 ROA not before: Mon 12 Oct 2026 01:00:13 +0000 ROA not after: Sun 10 Jan 2027 02:00:13 +0000 asID: 63023 IP address blocks: 136.176.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:78:e8:35:86:18:42:3f:22:eb:83:73:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 12 01:00:13 2026 GMT Not After : Jan 10 02:00:13 2027 GMT Subject: CN=0c4beefd-3b95-4d7b-a8f6-1e88acd3942b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f7:60:a5:a1:8e:85:e3:18:f6:39:b2:bd:10: 2b:5c:ee:5f:c7:0a:0a:05:ac:c7:7e:ac:76:1a:dd: fd:6b:74:01:85:f6:b2:cc:14:85:3e:e8:89:e2:5a: ed:48:87:92:8b:27:b7:cd:ac:ff:16:84:5d:aa:36: b3:37:da:d7:c4:c1:a7:a3:92:4b:1b:5f:d3:f8:78: f1:04:f3:76:ce:92:0c:58:01:d9:a8:95:f2:03:c3: c5:89:3f:a0:ae:d9:a3:15:ac:c1:53:3f:df:df:7a: 06:ca:19:78:0f:53:b5:ed:34:42:64:a2:ad:90:c6: d0:d8:b8:45:20:72:35:f6:18:7d:81:c6:e1:41:74: b4:95:2e:cc:05:90:ee:72:ee:14:74:24:28:eb:9f: 4c:64:67:d7:d6:49:e8:c9:5e:02:19:75:71:d2:38: 5e:df:5e:68:98:c4:5a:7a:5e:57:42:ef:bc:cf:11: 66:02:b6:3e:c1:37:c9:b1:74:58:22:83:37:aa:09: 65:dd:92:1a:6e:f0:ed:0f:7d:ab:fd:e0:64:f0:60: 23:fc:bf:b1:7a:0d:76:18:ca:94:7a:f3:57:2a:7c: 8a:af:2a:91:7e:9a:c8:3a:9d:36:2b:15:c2:db:81: 0c:f9:e1:fb:3f:b3:68:7a:c5:8e:b6:4a:27:9a:74: 76:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E9:AF:9A:78:56:C1:A4:0F:2C:9C:42:93:55:A6:A1:24:E4:71:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/bf1d15c2-3c70-396d-9335-106129f3b19d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b4:21:7e:1c:01:0a:5b:f3:ae:76:98:9d:71:39:81:8d:ce: ab:a4:37:90:26:65:52:6a:94:21:4a:c7:39:ff:94:3e:4e:3d: e6:78:ab:d2:a9:5b:4f:6e:03:fe:82:a4:05:4c:2f:82:36:e0: 44:fc:df:72:64:49:92:6e:d1:60:cb:a9:e6:61:99:11:f3:ef: 69:93:60:36:a9:9c:17:45:71:18:07:4f:9c:c4:cb:77:70:8f: a5:e9:5b:97:23:70:29:78:17:6e:ef:0e:ee:8e:8e:13:fd:00: 3e:b9:6f:18:a9:ef:58:7a:3d:0c:d0:b3:37:9b:db:48:01:49: e9:2d:79:2d:84:71:cc:f8:6b:d7:0f:a8:d5:09:b0:05:cd:00: 56:a9:6c:be:55:cb:fc:14:59:53:37:1b:0a:f3:fd:f3:e5:9e: 3b:cd:d1:99:13:9e:1c:2b:ec:1f:f7:77:66:de:a3:13:16:f7: 46:48:b3:5a:09:5c:6a:1b:f3:24:03:4f:51:1a:38:81:f1:47: c1:de:98:36:ff:ac:d5:a9:e1:83:8e:db:47:da:fe:4d:82:09: 0f:0c:d8:47:04:da:50:64:63:53:a8:50:5b:69:e1:a6:fc:b8: 11:e5:57:5e:cb:c1:cf:82:6e:b9:37:57:83:fe:3e:52:51:6c: 25:45:26:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE946DWGGEI/IuuDc5QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAxMjAxMDAxM1oXDTI3MDExMDAyMDAxM1owLzEtMCsGA1UEAxMk MGM0YmVlZmQtM2I5NS00ZDdiLWE4ZjYtMWU4OGFjZDM5NDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPdgpaGOheMY9jmyvRArXO5fxwoKBazHfqx2 Gt39a3QBhfayzBSFPuiJ4lrtSIeSiye3zaz/FoRdqjazN9rXxMGno5JLG1/T+Hjx BPN2zpIMWAHZqJXyA8PFiT+grtmjFazBUz/f33oGyhl4D1O17TRCZKKtkMbQ2LhF IHI19hh9gcbhQXS0lS7MBZDucu4UdCQo659MZGfX1knoyV4CGXVx0jhe315omMRa el5XQu+8zxFmArY+wTfJsXRYIoM3qgll3ZIabvDtD32r/eBk8GAj/L+xeg12GMqU evNXKnyKryqRfprIOp02KxXC24EM+eH7P7NoesWOtkonmnR2KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbpr5p4VsGkDyycQpNVpqEk5HHfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvYmYxZDE1YzItM2M3MC0z OTZkLTkzMzUtMTA2MTI5ZjNiMTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLB0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGO0IX4cAQpb8652mJ1xOYGNzqukN5AmZVJqlCFKxzn/lD5OPeZ4q9Kp W09uA/6CpAVML4I24ET833JkSZJu0WDLqeZhmRHz72mTYDapnBdFcRgHT5zEy3dw j6XpW5cjcCl4F27vDu6OjhP9AD65bxip71h6PQzQszeb20gBSekteS2Eccz4a9cP qNUJsAXNAFapbL5Vy/wUWVM3Gwrz/fPlnjvN0ZkTnhwr7B/3d2beoxMW90ZIs1oJ XGob8yQDT1EaOIHxR8HemDb/rNWp4YOO20fa/k2CCQ8M2EcE2lBkY1OoUFtp4ab8 uBHlV17Lwc+Cbrk3V4P+PlJRbCVFJqE= -----END CERTIFICATE-----Generated at Tue Oct 27 15:53:23 2026 by rpki-client