$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cd015de5-e411-3c95-b3a3-c2422fc62697.roa File: cd015de5-e411-3c95-b3a3-c2422fc62697.roa (raw, json) Hash identifier: eYmNUeyisWhdOcOwRjv8wdfYsJBfv9DneLJOvMgBiu8= Subject key identifier: 74:0B:1E:09:F9:C5:B8:5F:C0:AE:44:46:A3:8B:A0:7E:DF:B2:F9:00 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F6D0CEE0634DE64AB729AA740 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cd015de5-e411-3c95-b3a3-c2422fc62697.roa Signing time: Wed 07 Oct 2026 19:04:37 +0000 ROA not before: Wed 07 Oct 2026 19:04:37 +0000 ROA not after: Tue 05 Jan 2027 20:04:37 +0000 asID: 63023 IP address blocks: 204.28.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:0c:ee:06:34:de:64:ab:72:9a:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 7 19:04:37 2026 GMT Not After : Jan 5 20:04:37 2027 GMT Subject: CN=18e318c4-e1e3-486b-b89d-ab27f631cde4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2e:a0:31:83:da:97:9d:00:60:d1:5f:35:05: 40:bc:17:7f:69:81:c0:fe:f1:2b:5a:93:7c:8c:8d: b6:d6:27:b8:1e:7a:3c:4c:2a:93:1e:83:ad:12:4a: 7e:b0:6b:48:e0:19:a5:53:3a:e2:44:b0:ac:80:52: 36:9a:96:de:f4:31:81:7b:1d:8f:58:af:52:67:55: c6:a8:fe:12:46:6b:7d:2b:e8:3a:2f:5b:2a:26:e3: 87:bd:14:f2:86:ac:b0:91:28:b0:07:56:52:16:a6: 41:d9:8b:98:69:86:ff:f1:79:3e:1d:27:d2:a9:bb: 4c:75:c6:c3:03:38:7e:b0:59:d1:23:a9:24:1c:4b: cc:c2:96:35:43:24:06:e4:54:83:98:b0:84:48:e4: aa:df:f2:f7:28:f2:f3:71:31:95:00:26:c6:32:fe: 5c:ed:e3:e5:f8:b5:b7:9b:0e:4e:09:75:26:2b:47: 81:26:2f:aa:11:a5:71:8b:cb:c1:4a:c4:7f:49:30: a5:f5:17:a0:95:a1:c3:46:42:37:21:ae:c0:03:b9: 97:6a:3e:9d:e2:12:0b:b3:ab:32:e9:cb:d5:ac:d2: 5f:d0:53:0c:3c:9b:f3:48:9e:68:ce:84:7b:86:4b: d8:65:d3:04:0f:ad:c0:4e:bf:ae:c1:75:02:01:17: 76:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0B:1E:09:F9:C5:B8:5F:C0:AE:44:46:A3:8B:A0:7E:DF:B2:F9:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cd015de5-e411-3c95-b3a3-c2422fc62697.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 204.28.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:0e:1f:dc:4d:50:4b:2c:53:4a:fd:6d:30:ff:f7:cc:c3:79: af:0b:a3:ee:db:eb:d1:49:43:82:d2:96:0e:c7:3b:ff:ed:ca: f1:1f:4c:21:45:3c:04:a5:51:ed:cc:73:44:0e:96:2c:04:59: d1:ed:5c:57:04:88:14:ab:16:67:35:fe:5d:0b:f2:72:bc:29: b9:ed:de:84:e3:5e:34:20:51:68:c3:b0:9d:68:f0:98:89:70: 13:cd:35:cf:79:ff:f1:07:fc:f8:99:ba:41:5a:36:e2:82:96: a3:a0:3f:76:b2:47:7e:b4:ce:45:90:e0:27:fd:c9:0b:e3:32: 50:80:a0:12:5c:5c:6e:eb:54:9d:82:39:82:46:e1:88:c1:61: 16:58:7f:34:79:2e:3d:ab:10:28:b8:b2:92:28:42:7a:e3:59: 8f:02:9d:5b:29:5a:81:b0:a8:cb:38:38:57:87:90:ad:61:95: 91:c7:b3:fd:a4:f1:97:31:98:de:75:cb:6c:d3:b4:c7:f9:62: 98:80:3e:74:32:22:4f:d8:63:50:d6:1d:5b:e4:5f:82:43:8b: 3a:59:03:19:0e:a3:43:c2:d0:09:b9:e9:08:a2:2c:86:76:ea: 73:71:81:7a:03:8f:ff:4d:c1:ef:65:37:e2:5b:17:d5:e2:13: 4a:88:7e:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9tDO4GNN5kq3Kap0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAwNzE5MDQzN1oXDTI3MDEwNTIwMDQzN1owLzEtMCsGA1UEAxMk MThlMzE4YzQtZTFlMy00ODZiLWI4OWQtYWIyN2Y2MzFjZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuy6gMYPal50AYNFfNQVAvBd/aYHA/vErWpN8 jI221ie4Hno8TCqTHoOtEkp+sGtI4BmlUzriRLCsgFI2mpbe9DGBex2PWK9SZ1XG qP4SRmt9K+g6L1sqJuOHvRTyhqywkSiwB1ZSFqZB2YuYaYb/8Xk+HSfSqbtMdcbD Azh+sFnRI6kkHEvMwpY1QyQG5FSDmLCESOSq3/L3KPLzcTGVACbGMv5c7ePl+LW3 mw5OCXUmK0eBJi+qEaVxi8vBSsR/STCl9ReglaHDRkI3Ia7AA7mXaj6d4hILs6sy 6cvVrNJf0FMMPJvzSJ5ozoR7hkvYZdMED63ATr+uwXUCARd20QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQLHgn5xbhfwK5ERqOLoH7fsvkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvY2QwMTVkZTUtZTQxMS0z Yzk1LWIzYTMtYzI0MjJmYzYyNjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzByZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoOH9xNUEssU0r9bTD/98zDea8Lo+7b69FJQ4LSlg7HO//tyvEfTCFF PASlUe3Mc0QOliwEWdHtXFcEiBSrFmc1/l0L8nK8Kbnt3oTjXjQgUWjDsJ1o8JiJ cBPNNc95//EH/PiZukFaNuKClqOgP3ayR360zkWQ4Cf9yQvjMlCAoBJcXG7rVJ2C OYJG4YjBYRZYfzR5Lj2rECi4spIoQnrjWY8CnVspWoGwqMs4OFeHkK1hlZHHs/2k 8ZcxmN51y2zTtMf5YpiAPnQyIk/YY1DWHVvkX4JDizpZAxkOo0PC0Am56QiiLIZ2 6nNxgXoDj/9Nwe9lN+JbF9XiE0qIfng= -----END CERTIFICATE-----Generated at Tue Oct 20 08:34:07 2026 by rpki-client