$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/da955696-dea7-3dd2-af68-edc0474b21cc.roa File: da955696-dea7-3dd2-af68-edc0474b21cc.roa (raw, json) Hash identifier: 8GmTSlsk4EuByF7DaEMRBWQ8vDdQ8rlJl7M7OlBYoqs= Subject key identifier: D2:2D:A1:53:3E:1A:5A:BC:84:0A:72:89:C1:43:7F:E6:F5:63:FA:49 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F6D0B354C53D99ACB9FCBDEC0 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/da955696-dea7-3dd2-af68-edc0474b21cc.roa Signing time: Wed 07 Oct 2026 19:01:09 +0000 ROA not before: Wed 07 Oct 2026 19:01:09 +0000 ROA not after: Tue 05 Jan 2027 20:01:09 +0000 asID: 63023 IP address blocks: 204.28.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:0b:35:4c:53:d9:9a:cb:9f:cb:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 7 19:01:09 2026 GMT Not After : Jan 5 20:01:09 2027 GMT Subject: CN=2deee706-bc6f-4f51-b693-cd5c07ca46e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:29:f1:a0:cd:4a:8d:63:56:65:45:6c:ef:34: 3f:52:c8:19:cf:39:d0:73:44:62:1e:97:6c:42:aa: 6a:d5:d4:7a:40:dc:30:29:77:d6:d6:11:cb:da:6c: 02:94:99:2f:44:67:bf:76:64:0e:7b:43:df:00:52: 0d:0f:26:0c:1f:4e:d8:06:84:5a:01:af:be:d9:13: b1:bf:2d:6c:a0:f9:b2:1a:c1:c8:d5:e8:61:54:75: 23:c3:d7:22:a8:a8:47:26:c4:02:4b:09:05:2e:32: 53:40:e0:d0:a1:81:53:ae:e1:46:cc:d7:60:de:19: 1a:6a:46:cb:5b:96:3b:9b:ac:d2:70:fe:ae:f7:02: b7:dd:9e:29:a7:96:8d:a2:d7:3c:36:84:a2:bf:31: 9d:15:a0:22:03:96:c4:86:f3:0e:13:fc:ea:65:7c: d1:49:67:40:66:70:96:32:bc:6e:47:2c:7f:18:25: e9:3b:56:1f:51:25:9b:d3:53:52:59:86:31:6b:d3: 6d:c1:2d:b5:57:4d:d6:99:88:40:20:41:31:c1:a0: 61:44:5a:5a:0d:dc:04:80:b4:a4:6f:f7:43:8f:ed: 14:a8:b7:f5:f1:ee:02:5b:1f:a6:d8:51:b1:85:e0: 3e:98:d2:76:68:7d:39:20:91:dd:93:97:20:67:68: 62:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2D:A1:53:3E:1A:5A:BC:84:0A:72:89:C1:43:7F:E6:F5:63:FA:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/da955696-dea7-3dd2-af68-edc0474b21cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 204.28.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:55:03:b4:3b:8a:13:32:76:1a:53:09:2f:9f:eb:ec:4b:fc: 09:69:53:07:62:20:e6:83:f9:10:03:aa:32:42:56:a9:73:9c: 30:09:7e:59:fc:e8:f5:e8:1a:85:06:c8:0c:59:61:d5:98:f0: d2:fc:c5:6e:53:27:cc:73:78:2d:cb:a6:30:3d:db:57:5d:3f: 80:f1:66:22:df:6f:74:18:1c:eb:1b:15:bd:6f:9e:5e:8a:70: 27:b6:60:4d:d3:57:f9:31:39:ae:ef:5c:ef:35:b8:ae:8f:56: 54:f6:e6:27:55:15:5c:62:c4:e2:dd:07:28:33:9c:f0:22:48: a0:f9:88:19:87:ef:2b:6d:22:c0:95:76:d7:70:b3:35:ef:31: ff:a8:d4:a4:a3:c6:4a:92:eb:e5:54:c6:1d:22:5d:7b:74:ae: 86:4a:15:46:dc:02:fc:1d:6b:43:4c:6e:44:83:09:e1:94:b7: aa:f2:e5:95:a5:3e:50:76:4b:bf:96:d7:d0:f5:c5:96:f5:16: af:7e:2b:2c:03:7d:0a:53:78:6c:2d:aa:ec:e0:e8:2f:b1:5b: 35:58:d6:a9:65:24:7e:93:d7:c3:32:24:27:2d:72:e5:da:77: 48:ce:f1:41:dc:48:fe:bc:e5:ea:0f:c1:fa:1e:27:e2:a1:77: 54:8f:60:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9tCzVMU9may5/L3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAwNzE5MDEwOVoXDTI3MDEwNTIwMDEwOVowLzEtMCsGA1UEAxMk MmRlZWU3MDYtYmM2Zi00ZjUxLWI2OTMtY2Q1YzA3Y2E0NmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtynxoM1KjWNWZUVs7zQ/UsgZzznQc0RiHpds Qqpq1dR6QNwwKXfW1hHL2mwClJkvRGe/dmQOe0PfAFINDyYMH07YBoRaAa++2ROx vy1soPmyGsHI1ehhVHUjw9ciqKhHJsQCSwkFLjJTQODQoYFTruFGzNdg3hkaakbL W5Y7m6zScP6u9wK33Z4pp5aNotc8NoSivzGdFaAiA5bEhvMOE/zqZXzRSWdAZnCW MrxuRyx/GCXpO1YfUSWb01NSWYYxa9NtwS21V03WmYhAIEExwaBhRFpaDdwEgLSk b/dDj+0UqLf18e4CWx+m2FGxheA+mNJ2aH05IJHdk5cgZ2hicwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNItoVM+Glq8hApyicFDf+b1Y/pJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZGE5NTU2OTYtZGVhNy0z ZGQyLWFmNjgtZWRjMDQ3NGIyMWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzByNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdVA7Q7ihMydhpTCS+f6+xL/AlpUwdiIOaD+RADqjJCVqlznDAJfln8 6PXoGoUGyAxZYdWY8NL8xW5TJ8xzeC3LpjA921ddP4DxZiLfb3QYHOsbFb1vnl6K cCe2YE3TV/kxOa7vXO81uK6PVlT25idVFVxixOLdBygznPAiSKD5iBmH7yttIsCV dtdwszXvMf+o1KSjxkqS6+VUxh0iXXt0roZKFUbcAvwda0NMbkSDCeGUt6ry5ZWl PlB2S7+W19D1xZb1Fq9+KywDfQpTeGwtquzg6C+xWzVY1qllJH6T18MyJCctcuXa d0jO8UHcSP685eoPwfoeJ+Khd1SPYC4= -----END CERTIFICATE-----Generated at Mon Oct 19 00:09:58 2026 by rpki-client