$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d47de329-5f15-3af4-bf79-b5ce37f2c64a.roa File: d47de329-5f15-3af4-bf79-b5ce37f2c64a.roa (raw, json) Hash identifier: HLrHWIr20nadp4SOmxRfs2J9ZVVdZqF6hqaSH5ZD3bU= Subject key identifier: 65:FC:8E:36:34:90:39:36:20:0B:90:AA:12:CB:CD:F5:8C:56:2F:26 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F77835B63DDDDFDA17CEF3E80 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d47de329-5f15-3af4-bf79-b5ce37f2c64a.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 63023 IP address blocks: 136.176.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:5b:63:dd:dd:fd:a1:7c:ef:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=a224e6b7-d816-4d17-bf95-864764b1de42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7a:a8:aa:d2:3c:76:25:c8:be:98:fc:e8:45: 4c:02:4f:8a:ef:fd:92:f1:7b:c0:f8:56:42:67:24: 0a:22:c7:48:91:6d:f6:8c:53:d0:8c:d7:63:72:73: 85:73:16:95:3a:a7:f0:3a:ad:36:3f:bb:6e:7e:e7: 2f:77:52:8b:95:75:a3:40:93:b9:ab:4a:d5:f8:f8: 77:44:d4:84:c7:ff:2f:9c:04:e9:dd:09:c0:bf:ca: b8:8d:e5:27:ea:79:aa:63:e9:22:32:3c:e5:43:dc: 65:fd:8b:08:51:a6:c9:dc:92:48:18:c1:fc:be:dd: 80:04:48:a8:99:8e:b9:3f:3d:a7:72:d6:94:9c:95: 21:b1:aa:c1:9d:ff:cb:ea:42:bd:98:af:75:3a:43: 8c:0d:a4:88:3e:23:d3:46:35:a6:b7:66:38:3d:48: dc:90:75:55:bf:75:9c:b0:b9:dc:c6:2c:18:97:7e: 06:6c:e5:82:74:58:df:3f:73:7a:ae:f2:71:58:8e: a3:ef:30:ca:1c:7e:97:ff:64:39:69:d5:43:d5:a1: 3d:0b:06:c8:af:45:55:a9:5d:39:32:23:4e:1a:ec: d5:cd:e4:a8:73:41:d9:e6:b0:dd:27:8c:0d:02:5f: 9f:60:a0:ca:49:79:de:63:f6:53:b5:44:8a:af:00: b2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FC:8E:36:34:90:39:36:20:0B:90:AA:12:CB:CD:F5:8C:56:2F:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d47de329-5f15-3af4-bf79-b5ce37f2c64a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:79:25:61:b8:8d:06:a4:72:b3:43:7c:a7:bc:55:d2:a6:6a: 25:06:90:0f:77:3c:e9:7d:14:e7:c0:ac:e4:fd:54:79:13:2e: 67:f6:54:69:69:36:12:dc:6c:df:c8:44:c8:67:84:7e:b7:ef: d8:8a:23:f9:83:f7:24:de:5f:5e:9f:3f:a3:3f:95:0a:6e:5e: f0:10:29:eb:39:a1:8e:59:fc:39:1b:17:78:91:31:38:84:eb: 86:4a:0e:f1:73:c1:de:2b:7e:46:84:d5:7e:e8:fa:b6:5f:ac: 73:7a:1e:3a:5c:f4:40:43:f5:bc:b2:f3:7a:e1:dc:ea:13:35: fc:61:8c:23:12:5c:6b:b3:35:81:fb:b1:34:09:c5:b0:ce:cd: 82:56:67:07:1d:db:c0:98:8e:68:46:66:1e:1c:a3:00:90:03: 90:0d:8f:08:a2:40:f0:e6:60:f1:a2:a2:10:ec:fd:65:64:71: 00:e0:15:70:f4:5f:e4:2c:bd:2d:72:f8:fc:60:c2:65:0d:16: 0e:1a:cd:11:48:6a:b9:7b:de:5e:c8:45:d4:1f:f9:e8:f4:9e: a7:2f:9b:95:36:7d:2e:25:cd:32:f3:8e:4d:28:83:b8:48:79: da:ff:15:96:a9:58:b1:91:4a:59:19:1c:1a:45:b9:f8:8a:a6: 12:69:fd:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g1tj3d39oXzvPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk YTIyNGU2YjctZDgxNi00ZDE3LWJmOTUtODY0NzY0YjFkZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnqoqtI8diXIvpj86EVMAk+K7/2S8XvA+FZC ZyQKIsdIkW32jFPQjNdjcnOFcxaVOqfwOq02P7tufucvd1KLlXWjQJO5q0rV+Ph3 RNSEx/8vnATp3QnAv8q4jeUn6nmqY+kiMjzlQ9xl/YsIUabJ3JJIGMH8vt2ABEio mY65Pz2nctaUnJUhsarBnf/L6kK9mK91OkOMDaSIPiPTRjWmt2Y4PUjckHVVv3Wc sLncxiwYl34GbOWCdFjfP3N6rvJxWI6j7zDKHH6X/2Q5adVD1aE9CwbIr0VVqV05 MiNOGuzVzeSoc0HZ5rDdJ4wNAl+fYKDKSXneY/ZTtUSKrwCyWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGX8jjY0kDk2IAuQqhLLzfWMVi8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZDQ3ZGUzMjktNWYxNS0z YWY0LWJmNzktYjVjZTM3ZjJjNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD15JWG4jQakcrNDfKe8VdKmaiUGkA93POl9FOfArOT9VHkTLmf2VGlp NhLcbN/IRMhnhH6379iKI/mD9yTeX16fP6M/lQpuXvAQKes5oY5Z/DkbF3iRMTiE 64ZKDvFzwd4rfkaE1X7o+rZfrHN6Hjpc9EBD9byy83rh3OoTNfxhjCMSXGuzNYH7 sTQJxbDOzYJWZwcd28CYjmhGZh4cowCQA5ANjwiiQPDmYPGiohDs/WVkcQDgFXD0 X+QsvS1y+PxgwmUNFg4azRFIarl73l7IRdQf+ej0nqcvm5U2fS4lzTLzjk0og7hI edr/FZapWLGRSlkZHBpFufiKphJp/ZE= -----END CERTIFICATE-----Generated at Wed Oct 28 08:33:53 2026 by rpki-client