$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/c30245c8-6d87-3e15-946d-f6564a3a8467.roa File: c30245c8-6d87-3e15-946d-f6564a3a8467.roa (raw, json) Hash identifier: NyDk856Fi92WItZ2BEsdn7IdhiXcoCpXiRbklWlTFEA= Subject key identifier: 76:7B:35:DD:85:47:E1:08:59:A2:C6:DD:BA:55:85:4F:5C:DD:80:59 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F0C078229DF2CD2ED0F3BA900 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/c30245c8-6d87-3e15-946d-f6564a3a8467.roa Signing time: Thu 03 Sep 2026 01:00:12 +0000 ROA not before: Thu 03 Sep 2026 01:00:12 +0000 ROA not after: Wed 02 Dec 2026 02:00:12 +0000 asID: 63023 IP address blocks: 142.202.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:07:82:29:df:2c:d2:ed:0f:3b:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Sep 3 01:00:12 2026 GMT Not After : Dec 2 02:00:12 2026 GMT Subject: CN=0948cb0c-65c8-4f1b-8878-48aed75ab8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:bf:5f:8f:df:d5:dc:dd:a1:b9:60:ab:0e: 8d:13:79:ad:fb:ec:88:8f:f4:73:8d:c5:47:b9:12: 9f:6c:ab:6c:15:cb:a8:0a:cf:a6:0a:d7:d0:95:0a: fc:66:b3:03:8a:b8:60:19:cd:eb:15:5b:2a:6a:7d: 64:d1:b1:27:5d:75:22:32:2b:bd:7e:63:22:f1:6d: 50:2b:4e:97:3e:85:41:5c:d5:71:6b:b5:c8:13:22: 8c:92:b0:42:72:46:16:d2:a6:25:07:f9:e1:c2:1f: c3:5b:2e:9a:bf:98:2c:55:19:22:dd:00:c7:05:1b: 61:28:53:37:fc:63:92:b4:b3:26:97:bd:14:51:a6: 52:93:4f:d1:0f:72:e1:dd:d5:03:ee:c0:dc:c0:62: 4d:d5:6b:26:4a:af:2e:b5:d5:42:f0:e9:1f:73:fa: d8:ba:90:40:20:7c:ce:1a:66:40:3e:1e:9a:dc:34: ae:3f:6d:68:e3:ab:a5:55:2a:a2:1d:54:2e:ae:95: a8:95:b3:34:72:af:fc:ae:1f:5a:54:94:1d:34:4f: 6d:63:c0:3f:3e:5f:62:ca:ff:69:38:61:cd:27:c9: ea:45:f8:cf:49:8f:7a:b4:c4:cc:02:cd:17:0c:30: 1b:50:97:69:6b:40:f2:d7:79:12:92:81:db:d8:49: d6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7B:35:DD:85:47:E1:08:59:A2:C6:DD:BA:55:85:4F:5C:DD:80:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/c30245c8-6d87-3e15-946d-f6564a3a8467.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 142.202.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:0e:bd:0b:f7:83:d1:43:7a:02:d6:1b:fa:b3:b2:89:4f:b6: af:bc:15:96:40:a5:21:c0:ce:84:c7:f1:0d:ba:c2:29:87:d8: d5:78:7b:5b:ac:89:8d:d0:fd:b6:60:5a:a7:57:1a:c2:1c:61: c2:15:b7:fc:8e:9d:06:e5:aa:66:44:81:2f:4c:d4:2f:9d:87: a1:57:50:91:4e:d2:2f:72:9d:94:70:56:2f:93:d4:47:3f:9d: 02:d0:8b:d9:67:a2:9f:fe:ed:1d:2c:76:fd:72:b3:6a:05:af: 91:30:a6:1f:0a:f3:e9:25:a5:43:78:b6:43:38:fd:46:54:f3: 9b:ea:5b:27:81:ef:cf:a5:92:f1:79:a4:f8:93:07:30:38:1c: a8:51:7d:0a:e0:3d:58:3d:1a:56:d0:17:e1:7f:4f:1f:9e:6d: 2c:d3:86:5a:d0:9f:ce:8d:78:3c:e2:93:7e:98:27:f7:98:28: 74:fa:4b:47:0d:9e:23:0b:e5:42:b7:75:2a:c3:58:5e:5c:7c: 63:9d:35:6e:81:42:5b:94:11:c5:65:84:59:5e:98:e8:ef:57: 89:7e:66:c4:12:7a:18:49:b7:cd:8f:dd:14:30:65:20:cd:5c: 48:56:8d:be:95:42:ea:33:b2:41:6b:d1:1c:e1:da:bb:58:ac: 2e:3b:0e:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MB4Ip3yzS7Q87qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDkwMzAxMDAxMloXDTI2MTIwMjAyMDAxMlowLzEtMCsGA1UEAxMk MDk0OGNiMGMtNjVjOC00ZjFiLTg4NzgtNDhhZWQ3NWFiOGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOC/X4/f1dzdoblgqw6NE3mt++yIj/RzjcVH uRKfbKtsFcuoCs+mCtfQlQr8ZrMDirhgGc3rFVsqan1k0bEnXXUiMiu9fmMi8W1Q K06XPoVBXNVxa7XIEyKMkrBCckYW0qYlB/nhwh/DWy6av5gsVRki3QDHBRthKFM3 /GOStLMml70UUaZSk0/RD3Lh3dUD7sDcwGJN1WsmSq8utdVC8Okfc/rYupBAIHzO GmZAPh6a3DSuP21o46ulVSqiHVQurpWolbM0cq/8rh9aVJQdNE9tY8A/Pl9iyv9p OGHNJ8nqRfjPSY96tMTMAs0XDDAbUJdpa0Dy13kSkoHb2EnWMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZ7Nd2FR+EIWaLG3bpVhU9c3YBZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvYzMwMjQ1YzgtNmQ4Ny0z ZTE1LTk0NmQtZjY1NjRhM2E4NDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjsowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUOvQv3g9FDegLWG/qzsolPtq+8FZZApSHAzoTH8Q26wimH2NV4e1us iY3Q/bZgWqdXGsIcYcIVt/yOnQblqmZEgS9M1C+dh6FXUJFO0i9ynZRwVi+T1Ec/ nQLQi9lnop/+7R0sdv1ys2oFr5Ewph8K8+klpUN4tkM4/UZU85vqWyeB78+lkvF5 pPiTBzA4HKhRfQrgPVg9GlbQF+F/Tx+ebSzThlrQn86NeDzik36YJ/eYKHT6S0cN niML5UK3dSrDWF5cfGOdNW6BQluUEcVlhFlemOjvV4l+ZsQSehhJt82P3RQwZSDN XEhWjb6VQuozskFr0Rzh2rtYrC47DmE= -----END CERTIFICATE-----Generated at Thu Sep 10 19:29:09 2026 by rpki-client