$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/c489167d-a8ca-3a0a-85f6-9cbc44396a9e.roa File: c489167d-a8ca-3a0a-85f6-9cbc44396a9e.roa (raw, json) Hash identifier: FeoNarRMINe/Tq/v0uiG22/KfTYdjMPu2K0M2dhdkCI= Subject key identifier: 30:09:06:90:0D:FD:FD:7E:5E:5B:F0:C7:9E:77:16:BE:2E:0B:36:A9 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584E9A7FA9034BF992FCDE74E340 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/c489167d-a8ca-3a0a-85f6-9cbc44396a9e.roa Signing time: Fri 24 Jul 2026 09:00:12 +0000 ROA not before: Fri 24 Jul 2026 09:00:12 +0000 ROA not after: Thu 22 Oct 2026 09:00:12 +0000 asID: 62563 IP address blocks: 170.101.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9a:7f:a9:03:4b:f9:92:fc:de:74:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Jul 24 09:00:12 2026 GMT Not After : Oct 22 09:00:12 2026 GMT Subject: CN=29cda656-5324-4db2-869b-1fc37ac2a96f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:34:2f:df:59:8d:2d:30:75:3d:2a:39:5d:f0: 41:1b:ad:04:5b:81:36:7d:75:fd:b4:84:79:9d:e0: 6d:60:76:60:fd:1e:d3:00:76:1b:ad:9a:00:8a:06: a4:c0:06:b5:34:fe:94:7c:b4:3c:24:d6:5b:32:7c: d0:98:98:ff:2d:4e:ff:3d:54:82:75:21:25:0f:03: 3c:5f:bb:e4:c4:5e:3c:ab:a5:d1:0d:ae:ad:fe:9a: eb:b8:8d:1b:2b:cc:2f:bb:91:1a:76:b4:60:cc:16: e8:a4:6d:ba:48:9c:13:98:b2:91:9f:a1:4a:ef:48: 10:53:c6:df:fe:a1:15:65:50:65:c3:2d:c0:0c:a0: 19:7d:94:2a:44:bc:b2:4e:3f:7e:bf:f4:cb:2f:75: 58:61:54:44:cb:f1:b3:16:ec:e7:ee:78:57:8f:1e: c9:74:c9:91:22:79:b8:8c:05:89:c1:23:4f:2a:69: 97:8a:57:c2:43:f1:d8:f2:be:f0:4b:31:79:50:82: 2c:9f:be:4d:64:9d:cf:28:78:44:01:81:1e:37:29: f7:cc:a2:6c:01:52:ac:a1:87:9c:54:1a:e8:ec:09: b5:29:44:26:2c:3c:82:76:d5:73:90:56:df:c1:fb: 21:21:a2:d5:c3:a0:a0:4f:8e:7d:a5:c9:d9:20:c4: b9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:09:06:90:0D:FD:FD:7E:5E:5B:F0:C7:9E:77:16:BE:2E:0B:36:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/c489167d-a8ca-3a0a-85f6-9cbc44396a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e2:3e:61:70:81:da:62:87:f6:ca:d5:5f:d8:80:8f:3f:ab: 69:fb:29:6c:f9:a7:46:fb:3e:5b:69:73:75:fe:72:64:06:9a: af:84:f4:1f:94:c4:86:54:07:0e:57:1d:e2:ac:5f:c0:87:6b: 53:64:a0:c0:f5:4a:42:4a:dd:7d:68:40:dd:2d:77:9a:1b:d3: 0e:c5:d3:1b:b0:d0:3a:48:27:ae:f2:d7:e6:44:5a:27:87:45: cd:85:2e:44:7e:04:5f:e9:40:b7:7e:6d:2e:c5:df:dd:73:13: b3:0d:97:17:3c:02:c2:6d:43:93:10:50:b0:31:d1:e5:cd:15: e6:99:f9:e1:b5:d2:15:af:26:c5:80:a7:d6:2b:4d:a7:da:0f: 89:3d:ae:45:02:61:d6:62:99:9d:a0:84:0f:db:d5:18:34:79: 66:fe:b5:6a:23:53:6a:73:57:49:53:39:74:c8:b2:31:12:15: 5e:d2:82:d1:50:29:b5:b4:d1:6a:82:03:3c:e0:a3:fe:ab:80: f4:c0:57:d4:e6:39:18:05:c0:e6:c7:62:22:60:ae:04:fc:8a: 5e:87:6f:73:cd:c1:18:fc:ea:62:33:2e:d8:11:3e:64:81:fd: 4c:b9:d9:1e:68:c4:81:62:89:24:4f:ea:cb:58:17:50:5c:3d: 68:04:eb:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6af6kDS/mS/N5040AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDcyNDA5MDAxMloXDTI2MTAyMjA5MDAxMlowLzEtMCsGA1UEAxMk MjljZGE2NTYtNTMyNC00ZGIyLTg2OWItMWZjMzdhYzJhOTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjQv31mNLTB1PSo5XfBBG60EW4E2fXX9tIR5 neBtYHZg/R7TAHYbrZoAigakwAa1NP6UfLQ8JNZbMnzQmJj/LU7/PVSCdSElDwM8 X7vkxF48q6XRDa6t/prruI0bK8wvu5EadrRgzBbopG26SJwTmLKRn6FK70gQU8bf /qEVZVBlwy3ADKAZfZQqRLyyTj9+v/TLL3VYYVREy/GzFuzn7nhXjx7JdMmRInm4 jAWJwSNPKmmXilfCQ/HY8r7wSzF5UIIsn75NZJ3PKHhEAYEeNyn3zKJsAVKsoYec VBro7Am1KUQmLDyCdtVzkFbfwfshIaLVw6CgT459pcnZIMS5gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDAJBpAN/f1+Xlvwx553Fr4uCzapMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvYzQ4OTE2N2QtYThjYS0z YTBhLTg1ZjYtOWNiYzQ0Mzk2YTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbiPmFwgdpih/bK1V/YgI8/q2n7KWz5p0b7Pltpc3X+cmQGmq+E9B+U xIZUBw5XHeKsX8CHa1NkoMD1SkJK3X1oQN0td5ob0w7F0xuw0DpIJ67y1+ZEWieH Rc2FLkR+BF/pQLd+bS7F391zE7MNlxc8AsJtQ5MQULAx0eXNFeaZ+eG10hWvJsWA p9YrTafaD4k9rkUCYdZimZ2ghA/b1Rg0eWb+tWojU2pzV0lTOXTIsjESFV7SgtFQ KbW00WqCAzzgo/6rgPTAV9TmORgFwObHYiJgrgT8il6Hb3PNwRj86mIzLtgRPmSB /Uy52R5oxIFiiSRP6stYF1BcPWgE66k= -----END CERTIFICATE-----Generated at Mon Jul 27 06:53:12 2026 by rpki-client