$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d99f11d9-c5c1-32cc-85bd-650c16d9a43e.roa File: d99f11d9-c5c1-32cc-85bd-650c16d9a43e.roa (raw, json) Hash identifier: BcbzR9LDPQp46Nmo9Dl7W/QrLcDfC2POPkskA9k9te0= Subject key identifier: 35:AB:A2:F3:11:69:AB:47:0F:45:31:32:F2:23:42:88:4E:FB:5F:4D Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F6F2316176D8AB7C7C52F7540 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d99f11d9-c5c1-32cc-85bd-650c16d9a43e.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 63023 IP address blocks: 216.152.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:16:17:6d:8a:b7:c7:c5:2f:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=dfaeaed7-ce29-4127-b6f9-45074356f39a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:73:cd:86:fe:e8:ac:cc:c0:9a:0d:14:4d:56: ad:16:c0:10:d5:8b:db:03:07:e0:0a:e3:4a:4c:2b: 24:c2:93:c5:37:a5:08:3a:05:55:0d:8e:f4:a0:15: e6:5f:b3:88:40:7c:a2:95:c7:cf:dc:6e:c5:73:d3: 0c:ea:4e:59:82:89:0a:bd:7b:56:59:5c:99:25:a3: 60:7b:c5:ae:76:b7:ea:7d:b8:df:b9:c8:ad:8f:e6: 89:f0:7d:0d:5e:de:5b:3e:f3:76:bf:37:ed:e2:8f: a8:5a:af:ea:42:dd:73:f9:a6:82:23:83:1f:a9:00: 0b:ba:34:f0:a5:b0:ad:71:da:57:2f:88:05:ab:09: 0b:83:8e:88:6a:e3:93:71:68:84:73:18:ce:ab:8e: a3:b3:61:52:26:8f:e8:35:f5:da:3f:ba:80:4d:72: 44:86:64:49:f1:af:77:f4:25:86:66:37:4e:66:2b: 08:af:65:e8:35:cb:17:4f:53:46:73:c0:52:28:9b: 3d:29:e5:92:0c:bb:10:96:5f:b6:11:69:72:1f:01: 36:2a:f8:e6:c9:3d:e0:51:0b:f2:ae:7e:87:7c:ac: cf:b4:a9:d1:1d:48:15:ce:64:a6:07:d7:30:d0:bf: 41:c8:58:19:92:34:0f:79:3a:02:00:ad:38:9b:d5: 7b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AB:A2:F3:11:69:AB:47:0F:45:31:32:F2:23:42:88:4E:FB:5F:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d99f11d9-c5c1-32cc-85bd-650c16d9a43e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.152.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ee:6f:38:07:79:54:26:83:84:b2:cc:2e:ce:9c:cb:4a:fd: dd:c5:87:fd:1f:c5:7e:ee:41:d9:dc:b7:5d:2b:69:3d:df:99: 78:fe:67:ce:db:ef:4d:74:a5:38:ba:4e:f3:d1:43:0b:98:3e: 31:f5:60:75:34:7b:d6:1f:82:87:15:fe:ba:b4:b0:fd:18:af: 18:c6:b5:95:eb:7f:69:15:07:3e:46:b1:e3:22:ea:54:cd:85: 3d:38:56:e8:fd:1b:bc:f7:1c:4e:a9:96:90:88:bf:b2:0b:e2: 67:de:54:18:3f:60:0d:4d:63:75:36:31:da:90:17:b7:7b:24: c4:9d:a2:db:d9:74:8d:b0:a9:75:50:ca:ef:f5:5d:cf:b4:8c: 3c:ba:1f:10:f5:ba:00:31:06:68:72:ec:f2:60:47:3a:cf:3d: 3b:1a:14:76:3a:98:02:93:a7:a6:c1:ff:be:a9:81:5c:63:75: 29:71:0d:f9:e5:af:ea:d6:f9:a2:a7:db:b9:b9:cc:96:53:f9: 0d:9e:62:a9:88:c0:21:d3:ed:26:98:76:8c:ea:68:62:fd:d3: 8e:43:73:bd:e8:e4:e5:4b:ad:01:c9:e8:e3:f1:93:b6:1b:b0: 19:bb:e9:2b:fc:54:7f:cd:e3:3c:bf:97:29:09:fc:f7:bc:10: 20:91:d6:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIxYXbYq3x8UvdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZGZhZWFlZDctY2UyOS00MTI3LWI2ZjktNDUwNzQzNTZmMzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHPNhv7orMzAmg0UTVatFsAQ1YvbAwfgCuNK TCskwpPFN6UIOgVVDY70oBXmX7OIQHyilcfP3G7Fc9MM6k5ZgokKvXtWWVyZJaNg e8Wudrfqfbjfucitj+aJ8H0NXt5bPvN2vzft4o+oWq/qQt1z+aaCI4MfqQALujTw pbCtcdpXL4gFqwkLg46IauOTcWiEcxjOq46js2FSJo/oNfXaP7qATXJEhmRJ8a93 9CWGZjdOZisIr2XoNcsXT1NGc8BSKJs9KeWSDLsQll+2EWlyHwE2KvjmyT3gUQvy rn6HfKzPtKnRHUgVzmSmB9cw0L9ByFgZkjQPeToCAK04m9V79wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWrovMRaatHD0UxMvIjQohO+19NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZDk5ZjExZDktYzVjMS0z MmNjLTg1YmQtNjUwYzE2ZDlhNDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JicMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjubzgHeVQmg4SyzC7OnMtK/d3Fh/0fxX7uQdnct10raT3fmXj+Z87b 7010pTi6TvPRQwuYPjH1YHU0e9YfgocV/rq0sP0YrxjGtZXrf2kVBz5GseMi6lTN hT04Vuj9G7z3HE6plpCIv7IL4mfeVBg/YA1NY3U2MdqQF7d7JMSdotvZdI2wqXVQ yu/1Xc+0jDy6HxD1ugAxBmhy7PJgRzrPPTsaFHY6mAKTp6bB/76pgVxjdSlxDfnl r+rW+aKn27m5zJZT+Q2eYqmIwCHT7SaYdozqaGL9045Dc73o5OVLrQHJ6OPxk7Yb sBm76Sv8VH/N4zy/lykJ/Pe8ECCR1v4= -----END CERTIFICATE-----Generated at Tue Oct 27 20:36:52 2026 by rpki-client