$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d8bfb6b8-de7d-38e3-b9d2-cebfeda0a125.roa File: d8bfb6b8-de7d-38e3-b9d2-cebfeda0a125.roa (raw, json) Hash identifier: 82r/6lsLae5jJKM6e5M3mg8V/CngY2FbmV+/pY0H4ao= Subject key identifier: 29:5D:03:13:E9:B9:3D:AE:72:69:3C:3A:1C:52:FC:51:2A:11:E0:00 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F78E83831B8FD43CADB86F800 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d8bfb6b8-de7d-38e3-b9d2-cebfeda0a125.roa Signing time: Mon 12 Oct 2026 01:00:13 +0000 ROA not before: Mon 12 Oct 2026 01:00:13 +0000 ROA not after: Sun 10 Jan 2027 02:00:13 +0000 asID: 63023 IP address blocks: 136.176.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:78:e8:38:31:b8:fd:43:ca:db:86:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 12 01:00:13 2026 GMT Not After : Jan 10 02:00:13 2027 GMT Subject: CN=55a8e3bb-2125-4acb-9b08-7aa8a91bc77f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f0:23:ce:c2:9e:2d:a5:dc:06:55:2b:19:42: 85:80:0a:7b:be:4d:15:cc:63:70:42:2f:83:2b:6f: e2:1f:0f:42:8c:b7:76:29:fe:db:ba:fb:cb:2d:40: d0:f3:ef:22:d9:0c:95:e1:7b:de:9d:59:c2:c0:4c: 5b:db:1d:73:25:c4:ee:67:10:e1:75:21:20:3c:42: 63:7c:79:ab:ae:6b:75:68:7d:d0:6c:f8:9a:6c:b9: 6d:6c:25:28:d2:04:11:83:72:93:69:ce:01:33:7a: 30:12:81:34:fb:0a:5b:e6:54:c0:e7:3c:59:a1:ca: ca:d7:77:9e:64:56:de:e6:9f:83:23:41:b7:67:bc: 23:13:d8:2c:2c:e8:b3:5b:ca:08:53:12:e5:ec:c7: 89:ac:42:b0:ac:6f:51:ff:f9:d3:33:44:5e:bc:bc: 33:7c:eb:62:92:9c:fb:55:cc:fc:35:f5:f2:b9:f3: 2d:e5:7f:3a:b5:82:ce:a7:97:65:37:5b:5f:b1:ad: 1d:3a:5c:43:a7:0c:26:0c:bc:5d:26:cb:dc:f0:d2: 4b:1c:ca:7d:d7:ac:9a:cc:33:93:9f:a8:ce:42:c6: 56:6f:4f:47:11:1c:62:c4:df:70:d9:45:09:42:f5: c5:16:ed:b0:5b:68:e2:47:4d:3a:12:c0:40:f6:49: a4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5D:03:13:E9:B9:3D:AE:72:69:3C:3A:1C:52:FC:51:2A:11:E0:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d8bfb6b8-de7d-38e3-b9d2-cebfeda0a125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:9d:c7:c3:bd:e3:4c:44:64:9f:31:a6:d0:70:41:5c:fb:f0: dc:7c:c8:61:2f:53:24:2b:58:47:e2:de:7c:80:27:75:1e:1b: fe:1f:b9:96:c8:f1:7a:3c:1d:b9:cb:d8:c5:ea:3f:78:af:a3: d0:87:cc:37:7f:cc:56:b5:bb:cc:0f:c5:3a:7a:bd:9b:7a:c4: 91:6e:74:07:05:b4:9f:8c:29:02:c8:14:2b:52:65:6c:21:de: e8:0e:e0:5e:49:26:6d:5b:7a:d6:b0:ea:57:a9:c9:e1:52:62: 8b:9c:65:90:71:16:ff:44:0c:13:60:65:0f:0a:3a:84:1c:50: 91:6d:d8:0e:0d:04:cc:9a:c3:23:6d:68:dc:f1:27:bc:74:34: 96:47:61:f6:bf:8c:36:d5:37:23:c3:13:47:f1:8a:51:cd:18: fe:98:16:63:e8:df:59:46:9a:7b:90:27:87:24:c5:db:41:75: 63:c3:65:47:15:59:bb:d5:4c:bf:8b:08:1c:f5:03:79:de:0e: 10:e1:8c:7a:b8:35:5b:55:37:8b:fc:5a:dc:37:11:62:3c:f7: 58:57:0f:d3:99:0a:2f:08:b9:80:1e:02:6e:d3:54:45:78:7c: 36:aa:c6:f4:0c:eb:d5:2b:b8:d3:cd:c5:99:f7:4f:d4:fc:43: b7:f5:01:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE946DgxuP1DytuG+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAxMjAxMDAxM1oXDTI3MDExMDAyMDAxM1owLzEtMCsGA1UEAxMk NTVhOGUzYmItMjEyNS00YWNiLTliMDgtN2FhOGE5MWJjNzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPAjzsKeLaXcBlUrGUKFgAp7vk0VzGNwQi+D K2/iHw9CjLd2Kf7buvvLLUDQ8+8i2QyV4XvenVnCwExb2x1zJcTuZxDhdSEgPEJj fHmrrmt1aH3QbPiabLltbCUo0gQRg3KTac4BM3owEoE0+wpb5lTA5zxZocrK13ee ZFbe5p+DI0G3Z7wjE9gsLOizW8oIUxLl7MeJrEKwrG9R//nTM0RevLwzfOtikpz7 Vcz8NfXyufMt5X86tYLOp5dlN1tfsa0dOlxDpwwmDLxdJsvc8NJLHMp916yazDOT n6jOQsZWb09HERxixN9w2UUJQvXFFu2wW2jiR006EsBA9kmkBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCldAxPpuT2ucmk8OhxS/FEqEeAAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZDhiZmI2YjgtZGU3ZC0z OGUzLWI5ZDItY2ViZmVkYTBhMTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqdx8O940xEZJ8xptBwQVz78Nx8yGEvUyQrWEfi3nyAJ3UeG/4fuZbI 8Xo8HbnL2MXqP3ivo9CHzDd/zFa1u8wPxTp6vZt6xJFudAcFtJ+MKQLIFCtSZWwh 3ugO4F5JJm1betaw6lepyeFSYoucZZBxFv9EDBNgZQ8KOoQcUJFt2A4NBMyawyNt aNzxJ7x0NJZHYfa/jDbVNyPDE0fxilHNGP6YFmPo31lGmnuQJ4ckxdtBdWPDZUcV WbvVTL+LCBz1A3neDhDhjHq4NVtVN4v8Wtw3EWI891hXD9OZCi8IuYAeAm7TVEV4 fDaqxvQM69UruNPNxZn3T9T8Q7f1AeE= -----END CERTIFICATE-----Generated at Tue Oct 27 16:39:56 2026 by rpki-client