$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/db2847cc-8a3b-3d76-a68b-33995ed76b97.roa File: db2847cc-8a3b-3d76-a68b-33995ed76b97.roa (raw, json) Hash identifier: UgNuoxgMCAbMhtAR7tADc7Vm1kVLpm5jO139ZklPm4Q= Subject key identifier: 03:05:9B:82:62:DB:97:91:81:C9:A6:10:91:84:E4:52:C4:26:11:C4 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F778359464BB51089ACC30200 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/db2847cc-8a3b-3d76-a68b-33995ed76b97.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 63023 IP address blocks: 136.176.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:59:46:4b:b5:10:89:ac:c3:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=81426837-271d-476b-b2e3-7480ffbe565b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:aa:2e:e1:71:a5:37:76:b3:ce:aa:cd:5a:ba: a8:d3:38:53:68:21:cc:32:75:45:3c:23:f5:f7:39: c3:5c:30:0a:74:7c:45:83:f6:48:67:27:a9:63:d9: e2:32:3f:ec:1e:e4:b2:d1:09:cd:a3:2f:c6:3e:84: fb:a6:54:2c:7e:8d:ef:34:b3:51:34:ec:27:01:15: e7:a3:31:35:bf:a4:33:ac:44:50:9e:a0:c3:95:56: 2a:cb:b0:aa:be:3c:23:77:6e:a9:f7:64:0e:19:e9: b3:b6:2e:f4:22:99:f1:a4:12:9e:ea:d4:e7:d8:78: 54:96:e2:51:53:71:33:73:83:99:40:7e:cb:d6:8e: 00:2c:15:21:f0:26:b0:78:94:81:4d:c3:86:e3:65: 3e:aa:fe:da:d3:95:08:f1:30:20:92:60:cf:83:84: 2e:c4:bc:38:e1:d2:52:d4:8c:e2:b5:c0:be:da:eb: 6c:09:5f:07:b6:04:2a:bf:82:e5:bf:07:c8:1e:ca: 71:48:38:f5:f1:81:88:38:25:17:3c:73:62:20:65: 67:ca:d9:3b:36:2a:35:c8:12:53:7b:0e:19:ed:00: 26:4a:f2:c6:5a:3c:ff:c8:a3:f8:0d:e8:cc:ff:51: d1:4e:52:da:00:65:e7:37:f8:d8:41:45:fc:78:cb: 1b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:05:9B:82:62:DB:97:91:81:C9:A6:10:91:84:E4:52:C4:26:11:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/db2847cc-8a3b-3d76-a68b-33995ed76b97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 136.176.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:6d:da:15:c9:a4:b6:fa:c3:4a:9c:bf:b3:54:b7:ce:23:90: 34:51:46:59:57:53:e4:2e:cc:c0:91:88:b6:01:55:00:c6:55: fa:bf:3c:dc:b7:f6:2d:7d:b1:a1:4c:20:3e:28:24:d5:4c:87: 0a:02:a8:19:98:15:a8:32:37:ce:f5:32:f6:1c:71:dc:83:d9: 37:57:1e:a4:0c:b7:a7:fa:14:db:3d:42:9e:67:7b:ac:ef:02: 8d:db:34:57:2c:8e:18:5a:7f:8e:61:58:d5:e8:c7:4f:8d:d0: 93:d6:ef:e9:4f:c6:ce:9e:92:3f:59:54:3a:1c:dd:38:9f:94: 55:dd:b2:eb:25:91:bc:84:a7:88:ce:c7:c8:33:df:db:21:8d: 50:7b:4b:e8:c0:04:2e:e1:f4:b0:a9:1b:a5:c7:19:8a:7e:ee: a7:e6:f1:73:4c:4c:ba:8b:26:76:12:d5:aa:29:b6:8e:52:dc: 07:25:9d:e1:1f:5b:d5:74:75:f5:3c:fc:7b:a3:80:8b:b1:07: 6c:73:93:8a:f0:46:c9:63:d1:ce:36:a9:df:d2:e3:14:fe:1b: d1:e2:69:82:1d:6b:7f:4d:17:ea:e3:76:a2:6c:1c:51:7a:f1: b2:55:88:0c:69:68:24:df:e6:a9:af:7a:4a:b8:d3:6f:ba:75: a0:80:da:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g1lGS7UQiazDAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ODE0MjY4MzctMjcxZC00NzZiLWIyZTMtNzQ4MGZmYmU1NjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKou4XGlN3azzqrNWrqo0zhTaCHMMnVFPCP1 9znDXDAKdHxFg/ZIZyepY9niMj/sHuSy0QnNoy/GPoT7plQsfo3vNLNRNOwnARXn ozE1v6QzrERQnqDDlVYqy7Cqvjwjd26p92QOGemzti70IpnxpBKe6tTn2HhUluJR U3Ezc4OZQH7L1o4ALBUh8CaweJSBTcOG42U+qv7a05UI8TAgkmDPg4QuxLw44dJS 1IzitcC+2utsCV8HtgQqv4LlvwfIHspxSDj18YGIOCUXPHNiIGVnytk7Nio1yBJT ew4Z7QAmSvLGWjz/yKP4DejM/1HRTlLaAGXnN/jYQUX8eMsb5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMFm4Ji25eRgcmmEJGE5FLEJhHEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZGIyODQ3Y2MtOGEzYi0z ZDc2LWE2OGItMzM5OTVlZDc2Yjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLBPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1t2hXJpLb6w0qcv7NUt84jkDRRRllXU+QuzMCRiLYBVQDGVfq/PNy3 9i19saFMID4oJNVMhwoCqBmYFagyN871MvYccdyD2TdXHqQMt6f6FNs9Qp5ne6zv Ao3bNFcsjhhaf45hWNXox0+N0JPW7+lPxs6ekj9ZVDoc3TiflFXdsuslkbyEp4jO x8gz39shjVB7S+jABC7h9LCpG6XHGYp+7qfm8XNMTLqLJnYS1aopto5S3AclneEf W9V0dfU8/HujgIuxB2xzk4rwRslj0c42qd/S4xT+G9HiaYIda39NF+rjdqJsHFF6 8bJViAxpaCTf5qmvekq402+6daCA2sA= -----END CERTIFICATE-----Generated at Tue Oct 20 18:34:53 2026 by rpki-client