$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/c792a50c-14bc-3b63-8933-133c7c3acacc.roa File: c792a50c-14bc-3b63-8933-133c7c3acacc.roa (raw, json) Hash identifier: tatv96BoeqASxLJmwYtQHaA343NxxGRBtDItrn6TD+4= Subject key identifier: B6:A6:C8:C4:B8:2F:21:53:1B:B7:36:1F:5C:7D:C2:14:1D:A4:F0:F7 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F6D0B51FA06A8AF3F59620380 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/c792a50c-14bc-3b63-8933-133c7c3acacc.roa Signing time: Wed 07 Oct 2026 19:01:22 +0000 ROA not before: Wed 07 Oct 2026 19:01:22 +0000 ROA not after: Tue 05 Jan 2027 20:01:22 +0000 asID: 63023 IP address blocks: 204.28.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:0b:51:fa:06:a8:af:3f:59:62:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 7 19:01:22 2026 GMT Not After : Jan 5 20:01:22 2027 GMT Subject: CN=249b36d8-11cd-496c-8a52-ed18012ff904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:17:5d:1f:cc:a6:1d:45:4c:dd:d8:7a:64:10: fe:99:73:ee:b1:1a:d8:c7:79:8a:c8:14:00:ed:c7: 00:b2:e6:12:d6:60:f5:4a:14:87:39:5c:ac:3b:2a: 62:2d:36:a2:ad:37:ee:aa:21:95:22:29:d3:10:19: e8:b0:fa:74:a8:e6:1d:8c:55:ef:23:29:c1:04:b6: e5:63:92:f9:fa:c6:89:ca:e6:e6:45:04:00:56:c1: 42:36:a5:bb:76:bd:4e:97:24:cb:94:52:5d:ee:1a: cf:db:d0:bc:04:c0:de:12:ea:4e:52:f6:21:91:22: 06:e1:4a:d8:fb:ca:df:e9:f7:4c:12:14:a3:0c:87: 73:45:3c:51:7e:ef:95:d8:02:fc:d7:c6:b1:96:d3: 09:da:5b:11:77:92:4a:4b:c4:de:30:2f:bb:30:d2: d9:3d:15:55:d7:59:1f:56:c8:45:61:95:14:85:80: 39:b8:9d:0a:89:79:8c:44:c4:41:37:07:11:a5:b2: d8:41:6b:10:7c:03:2f:1c:fc:b8:39:87:cb:d7:3e: c1:38:09:d2:b8:0b:43:14:41:f8:59:db:52:f6:d8: b9:53:db:54:35:4a:16:aa:6d:de:2f:04:79:e8:a7: 01:3a:16:1c:2d:bf:77:af:8f:94:7e:df:e9:fc:70: 50:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A6:C8:C4:B8:2F:21:53:1B:B7:36:1F:5C:7D:C2:14:1D:A4:F0:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/c792a50c-14bc-3b63-8933-133c7c3acacc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 204.28.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:9f:ad:51:af:75:cb:e8:4d:6a:13:5d:19:f1:c3:82:21:14: db:e2:b2:d7:27:4b:ce:a2:f4:4d:4d:12:87:2e:37:34:e6:8d: 51:17:d3:91:7d:53:ca:15:cc:bc:09:c7:72:0a:f1:1e:5f:b8: 73:3e:9b:3e:86:31:46:ee:f1:9d:b4:7e:ea:43:33:65:21:01: c5:e5:aa:21:19:c0:c6:90:89:48:17:d6:c8:4c:97:69:6e:f9: 1f:cf:dc:4c:97:ab:92:a6:1c:d9:bb:1c:14:db:1b:63:fc:fe: 24:34:7f:fb:4d:50:bb:98:da:34:09:4d:4c:9e:a7:a7:2f:55: 02:e9:bd:f0:cb:d2:84:ad:8b:23:3a:ea:8a:e5:58:49:8a:76: 44:34:d9:34:7b:be:eb:2e:63:22:d1:40:7e:38:1a:cb:e1:37: 27:32:11:96:3a:ac:b8:16:3c:fc:37:2f:44:a2:46:3d:7d:96: 5e:89:e6:a4:c5:a3:f6:d2:9d:e8:17:20:b2:a6:90:af:29:b5: f4:db:bc:19:31:76:50:5d:29:0f:0a:85:63:8b:08:30:c1:09: 54:b9:b4:08:ce:57:f7:bb:5e:63:21:1e:66:ae:d1:1e:95:b8: 56:e9:2e:4d:c9:22:23:7d:b4:3f:08:29:19:a9:da:0c:de:a7: 0d:6f:81:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9tC1H6BqivP1liA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAwNzE5MDEyMloXDTI3MDEwNTIwMDEyMlowLzEtMCsGA1UEAxMk MjQ5YjM2ZDgtMTFjZC00OTZjLThhNTItZWQxODAxMmZmOTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRddH8ymHUVM3dh6ZBD+mXPusRrYx3mKyBQA 7ccAsuYS1mD1ShSHOVysOypiLTairTfuqiGVIinTEBnosPp0qOYdjFXvIynBBLbl Y5L5+saJyubmRQQAVsFCNqW7dr1OlyTLlFJd7hrP29C8BMDeEupOUvYhkSIG4UrY +8rf6fdMEhSjDIdzRTxRfu+V2AL818axltMJ2lsRd5JKS8TeMC+7MNLZPRVV11kf VshFYZUUhYA5uJ0KiXmMRMRBNwcRpbLYQWsQfAMvHPy4OYfL1z7BOAnSuAtDFEH4 WdtS9ti5U9tUNUoWqm3eLwR56KcBOhYcLb93r4+Uft/p/HBQWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLamyMS4LyFTG7c2H1x9whQdpPD3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvYzc5MmE1MGMtMTRiYy0z YjYzLTg5MzMtMTMzYzdjM2FjYWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzByOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWfrVGvdcvoTWoTXRnxw4IhFNvistcnS86i9E1NEocuNzTmjVEX05F9 U8oVzLwJx3IK8R5fuHM+mz6GMUbu8Z20fupDM2UhAcXlqiEZwMaQiUgX1shMl2lu +R/P3EyXq5KmHNm7HBTbG2P8/iQ0f/tNULuY2jQJTUyep6cvVQLpvfDL0oStiyM6 6orlWEmKdkQ02TR7vusuYyLRQH44GsvhNycyEZY6rLgWPPw3L0SiRj19ll6J5qTF o/bSnegXILKmkK8ptfTbvBkxdlBdKQ8KhWOLCDDBCVS5tAjOV/e7XmMhHmau0R6V uFbpLk3JIiN9tD8IKRmp2gzepw1vgXU= -----END CERTIFICATE-----Generated at Mon Oct 19 00:10:53 2026 by rpki-client