$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cd6241f8-2917-3949-b8cc-44a35746d65f.roa File: cd6241f8-2917-3949-b8cc-44a35746d65f.roa (raw, json) Hash identifier: wjvrzwTDhI3J5u2THd5JIoYITkSVF6IvUAz6+zZAzoM= Subject key identifier: 40:D2:8D:7C:4F:76:48:CF:8F:4C:7D:BE:33:75:23:AB:A3:DB:5E:79 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F7783665C7B4AFB985210E000 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cd6241f8-2917-3949-b8cc-44a35746d65f.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 63023 IP address blocks: 136.176.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:66:5c:7b:4a:fb:98:52:10:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=09b3a628-1b80-42dd-a6e8-15541146b15c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:63:01:c8:91:97:4f:58:0b:da:cf:4f:61:83: f2:3f:c6:a8:82:60:8a:30:23:f0:13:20:7e:ec:3f: e6:ed:9b:04:20:20:22:50:0c:34:9c:fd:8a:db:5d: 27:68:cd:5c:8e:25:1b:ee:5a:f0:80:e3:7e:85:b9: 5f:46:ce:7d:d1:6e:60:44:70:e1:95:5e:f8:3e:61: 92:25:54:38:4b:c9:2f:6e:da:6c:b5:8e:9e:e9:e0: ff:7d:11:5d:f6:b6:d5:8e:79:29:71:e3:b9:7d:f4: bc:ed:8f:38:28:3b:e2:29:56:09:90:0d:48:58:77: 5a:25:7f:a1:b2:41:1a:ee:25:e4:8d:e3:ef:7d:d0: ae:c4:af:ce:b0:d1:aa:1d:38:5f:37:32:80:4c:42: 88:fb:ef:0d:67:36:69:ff:d9:69:16:2b:29:59:52: 5a:90:f1:9f:71:2d:5c:c0:97:74:53:45:a5:8e:bd: d6:43:ff:22:ed:1c:34:2a:1b:8d:bb:0e:60:04:41: 92:cd:81:c5:aa:d9:d4:cf:ca:7d:04:7c:f8:bd:6d: 2e:67:2f:0a:ca:7b:f0:bd:56:7a:e7:f8:17:0e:e5: 12:03:e4:e1:09:3e:db:b0:c2:bf:aa:3f:18:60:a2: 2f:a0:e1:4e:ad:23:1f:7b:2a:b6:cb:13:ad:d4:aa: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D2:8D:7C:4F:76:48:CF:8F:4C:7D:BE:33:75:23:AB:A3:DB:5E:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cd6241f8-2917-3949-b8cc-44a35746d65f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:f9:f6:ce:1a:29:68:ae:e7:14:26:f4:d5:11:30:42:8f:16: 79:98:15:df:bd:cf:a6:a2:24:d5:0b:23:32:f3:6f:00:19:84: ea:16:1e:cf:17:c1:df:db:8e:9a:ad:9f:1a:86:c2:29:66:e1: e2:0a:4e:8c:02:cf:a6:69:93:26:8c:e7:15:d9:6b:59:5c:17: 53:dc:99:c1:7e:50:e4:d2:97:53:b8:70:fb:bb:1b:ba:73:ed: f7:da:ff:3e:ce:f1:96:ef:59:8a:4a:97:c6:f0:94:29:be:bc: bb:49:19:b9:48:b9:78:e6:51:ce:05:7a:8c:fc:f0:18:90:4c: 40:f6:80:bc:70:2d:08:bc:d1:bf:de:ce:77:17:6a:9f:d3:ca: 48:31:d6:44:f8:88:35:c1:a9:ca:7b:56:56:05:8d:dd:d5:d5: c0:df:47:c2:15:4d:5c:dc:52:c8:f6:aa:be:b7:5d:28:da:a8: 9e:ab:a5:80:95:3d:6f:83:0a:1b:c5:78:4d:08:98:67:51:75: 80:f3:e1:6f:e9:4e:a5:70:dc:61:ee:2e:4a:57:a7:9c:5f:9e: 97:89:3f:5a:33:2b:0a:a4:bc:49:2c:13:97:67:cc:33:af:45: 40:bf:fa:35:5f:ba:bf:88:35:68:cf:4d:65:74:49:c5:5b:1f: 26:50:92:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g2Zce0r7mFIQ4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk MDliM2E2MjgtMWI4MC00MmRkLWE2ZTgtMTU1NDExNDZiMTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWMByJGXT1gL2s9PYYPyP8aogmCKMCPwEyB+ 7D/m7ZsEICAiUAw0nP2K210naM1cjiUb7lrwgON+hblfRs590W5gRHDhlV74PmGS JVQ4S8kvbtpstY6e6eD/fRFd9rbVjnkpceO5ffS87Y84KDviKVYJkA1IWHdaJX+h skEa7iXkjePvfdCuxK/OsNGqHThfNzKATEKI++8NZzZp/9lpFispWVJakPGfcS1c wJd0U0Wljr3WQ/8i7Rw0KhuNuw5gBEGSzYHFqtnUz8p9BHz4vW0uZy8KynvwvVZ6 5/gXDuUSA+ThCT7bsMK/qj8YYKIvoOFOrSMfeyq2yxOt1KrAlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDSjXxPdkjPj0x9vjN1I6uj2155MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvY2Q2MjQxZjgtMjkxNy0z OTQ5LWI4Y2MtNDRhMzU3NDZkNjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLBtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGf59s4aKWiu5xQm9NURMEKPFnmYFd+9z6aiJNULIzLzbwAZhOoWHs8X wd/bjpqtnxqGwilm4eIKTowCz6ZpkyaM5xXZa1lcF1PcmcF+UOTSl1O4cPu7G7pz 7ffa/z7O8ZbvWYpKl8bwlCm+vLtJGblIuXjmUc4Feoz88BiQTED2gLxwLQi80b/e zncXap/Tykgx1kT4iDXBqcp7VlYFjd3V1cDfR8IVTVzcUsj2qr63XSjaqJ6rpYCV PW+DChvFeE0ImGdRdYDz4W/pTqVw3GHuLkpXp5xfnpeJP1ozKwqkvEksE5dnzDOv RUC/+jVfur+INWjPTWV0ScVbHyZQklw= -----END CERTIFICATE-----Generated at Mon Oct 19 20:53:27 2026 by rpki-client