$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d903ab03-4d5e-30aa-847c-85b607543c17.roa File: d903ab03-4d5e-30aa-847c-85b607543c17.roa (raw, json) Hash identifier: JNMMl6mX8pvcj1eqTzP8+r6FvTRsH4A5PBpBIy5iVgU= Subject key identifier: 6E:83:07:15:19:41:DC:47:17:FC:0E:EA:99:B1:E2:A7:66:C5:D2:C1 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584ECD37197ED8212AC2FC517040 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d903ab03-4d5e-30aa-847c-85b607543c17.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 63023 IP address blocks: 216.152.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:19:7e:d8:21:2a:c2:fc:51:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=03287d51-bba0-4d48-b779-0a33d67ba305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6d:e7:8f:d5:10:2e:22:cd:e1:48:be:0e:bf: 08:d1:3c:f0:88:fd:ef:2f:d9:26:d0:9d:4d:71:f8: 0d:8f:d3:2a:30:ea:2f:18:b9:6d:30:18:ad:4a:bf: 79:f5:4d:0e:06:12:17:2d:a2:39:16:68:d2:c5:6e: 50:e9:52:98:81:7f:5a:47:0b:98:27:be:3d:20:1c: 88:31:2a:7a:8b:45:05:44:2b:31:56:1c:82:b1:e7: 3d:af:7a:54:d8:0d:bd:01:6f:b1:3e:d5:22:fa:69: 37:be:91:fc:d8:4c:87:76:c0:a2:01:35:ce:91:b6: 33:69:95:6a:6a:bd:ec:04:60:c0:e4:a4:14:c2:9f: 56:be:fc:65:ac:dd:cd:db:f5:5f:42:98:4a:1d:f1: 02:52:37:a9:fd:ff:7c:7f:73:da:5f:06:35:e2:1c: ef:56:b3:71:45:2a:d9:cf:bc:6e:1b:00:de:73:2b: 5a:13:4f:17:21:fc:7c:c8:22:44:5e:ef:42:3c:99: 08:ec:91:e6:e2:e9:f0:91:28:5d:dd:bd:bd:e2:b0: e3:e4:6b:1d:96:61:1b:96:28:c0:15:58:9b:31:a0: 71:e2:a4:e6:e3:9c:92:9b:a3:e3:1e:12:a3:d9:e6: 2e:7b:30:4c:b5:d2:aa:7b:1d:23:bb:ca:ca:08:8c: 75:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:83:07:15:19:41:DC:47:17:FC:0E:EA:99:B1:E2:A7:66:C5:D2:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d903ab03-4d5e-30aa-847c-85b607543c17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.152.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:11:6e:7e:d4:90:80:48:b6:f4:61:6e:59:64:98:4c:32:f0: 0c:b3:62:14:92:7e:36:7f:a3:55:fa:75:39:12:33:41:66:81: 28:d2:10:ae:57:f6:50:c5:32:7b:29:f5:c3:69:e4:9b:69:55: b9:6d:5e:b1:2e:bf:1e:1b:b0:92:bf:de:24:20:22:e2:9a:a0: 62:8e:c4:e3:4f:c2:59:f2:e4:1f:cb:bc:d4:84:b9:af:0b:cd: b0:9e:f1:a1:8d:7e:ac:ba:b0:75:29:8e:ad:af:38:79:c3:61: 5d:05:8c:91:3a:c5:16:7b:47:64:93:67:2a:2d:26:fc:3f:69: b1:8b:61:da:c4:61:07:47:eb:2a:b8:0c:27:3b:26:f9:b0:5a: c6:29:34:bd:4a:2b:dd:ca:61:97:f7:78:b6:c5:4c:ca:70:9c: 9c:a9:16:74:ce:66:83:e8:55:fb:2c:a7:b8:6c:b3:95:9b:2d: 0a:f9:73:99:83:7e:82:d0:19:7d:2f:14:7d:45:66:01:47:4f: db:57:20:5c:1b:f2:0d:06:a9:e9:77:c1:a5:32:d7:91:a2:e8: ed:62:76:2f:e3:a9:6b:1e:c9:93:c2:20:4e:4b:ff:90:d9:d5: 5f:aa:71:b2:3c:69:7e:ad:72:3d:2f:aa:6a:08:43:c3:ca:26: b6:c2:71:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNxl+2CEqwvxRcEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk MDMyODdkNTEtYmJhMC00ZDQ4LWI3NzktMGEzM2Q2N2JhMzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm3nj9UQLiLN4Ui+Dr8I0TzwiP3vL9km0J1N cfgNj9MqMOovGLltMBitSr959U0OBhIXLaI5FmjSxW5Q6VKYgX9aRwuYJ749IByI MSp6i0UFRCsxVhyCsec9r3pU2A29AW+xPtUi+mk3vpH82EyHdsCiATXOkbYzaZVq ar3sBGDA5KQUwp9WvvxlrN3N2/VfQphKHfECUjep/f98f3PaXwY14hzvVrNxRSrZ z7xuGwDecytaE08XIfx8yCJEXu9CPJkI7JHm4unwkShd3b294rDj5GsdlmEblijA FVibMaBx4qTm45ySm6PjHhKj2eYuezBMtdKqex0ju8rKCIx1BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6DBxUZQdxHF/wO6pmx4qdmxdLBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZDkwM2FiMDMtNGQ1ZS0z MGFhLTg0N2MtODViNjA3NTQzYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JiaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHURbn7UkIBItvRhbllkmEwy8AyzYhSSfjZ/o1X6dTkSM0FmgSjSEK5X 9lDFMnsp9cNp5JtpVbltXrEuvx4bsJK/3iQgIuKaoGKOxONPwlny5B/LvNSEua8L zbCe8aGNfqy6sHUpjq2vOHnDYV0FjJE6xRZ7R2STZyotJvw/abGLYdrEYQdH6yq4 DCc7JvmwWsYpNL1KK93KYZf3eLbFTMpwnJypFnTOZoPoVfssp7hss5WbLQr5c5mD foLQGX0vFH1FZgFHT9tXIFwb8g0Gqel3waUy15Gi6O1idi/jqWseyZPCIE5L/5DZ 1V+qcbI8aX6tcj0vqmoIQ8PKJrbCcbA= -----END CERTIFICATE-----Generated at Thu Sep 10 18:44:45 2026 by rpki-client