$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/db60af41-676e-3abc-b757-1c778da8872a.roa File: db60af41-676e-3abc-b757-1c778da8872a.roa (raw, json) Hash identifier: 9buZFEFhyPWtXwqhjjzjToXtU8/RFgX6rLeIG2skiBk= Subject key identifier: 87:4F:D1:57:7B:3A:3B:F9:F9:73:5A:57:F4:F8:91:D8:1E:FE:70:62 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F6C582F83F2D9090FEC5D4D40 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/db60af41-676e-3abc-b757-1c778da8872a.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 63023 IP address blocks: 216.106.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:2f:83:f2:d9:09:0f:ec:5d:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=2232bafb-afb8-4401-b1fe-1238d6fdf075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ed:5e:fa:1c:ec:75:83:20:26:e7:95:44:ff: 83:ef:be:6f:04:18:77:87:7d:5c:da:64:af:eb:e5: f7:ab:be:03:55:d7:bb:53:79:a4:f5:5c:ec:73:02: 47:de:81:83:40:d5:45:5f:90:5f:2e:1d:95:32:a4: 4b:14:06:03:c1:30:39:aa:f5:9e:0e:6d:db:1c:4c: b9:5e:4a:6f:fa:b3:8a:d1:53:8e:5f:78:77:2d:38: ca:25:d0:95:6d:6a:c3:2a:10:d8:df:56:a1:43:30: de:89:93:7e:aa:b7:55:34:86:ab:9b:79:fb:cb:4f: 25:57:d6:74:82:db:c6:0a:17:16:2b:a5:f8:77:44: 6d:51:48:aa:64:b3:5b:ca:91:8f:09:cf:5b:59:80: 23:a9:b5:ca:64:bb:73:23:a9:6b:43:fc:7c:71:a5: a4:06:c4:0a:2f:1f:70:dc:17:2c:13:90:15:c7:70: 3a:3f:cd:46:9e:7a:c5:0e:60:9d:54:56:39:ab:fd: 18:d9:94:03:1d:48:62:d6:9a:cf:17:eb:19:06:c6: b5:e9:75:e8:e5:93:0c:24:be:63:94:b8:17:d1:65: bc:7c:4f:e7:4f:8c:fb:4a:0b:17:a9:2f:c2:c6:8b: 53:33:84:fb:a1:b8:8a:44:e0:67:39:79:9b:e9:d0: bd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4F:D1:57:7B:3A:3B:F9:F9:73:5A:57:F4:F8:91:D8:1E:FE:70:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/db60af41-676e-3abc-b757-1c778da8872a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.106.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:b6:43:5b:be:dc:2b:99:ea:c3:be:4b:c2:03:57:94:8e:19: 1b:33:28:ff:2d:4d:9d:36:8c:74:04:21:73:54:e3:31:2a:ce: 00:d6:05:42:65:9a:fa:71:11:3c:09:11:1f:f4:29:ea:34:f8: 6d:59:c8:60:2a:14:34:72:94:21:99:3f:0c:5c:49:5d:ee:5a: c2:9f:d5:a4:c6:31:a8:57:9d:64:94:bd:d3:b7:b0:33:c6:bf: 9c:73:af:65:b4:86:ac:e3:84:e7:6c:4e:d5:82:eb:03:22:9c: 89:30:b2:a5:5e:e3:90:72:12:40:91:c2:19:18:b3:0a:2b:47: b6:43:32:61:9b:18:ff:de:a4:f0:d0:d8:df:3e:7e:60:bd:3b: 50:9a:0f:3a:68:05:b2:f6:ef:31:9a:66:89:68:2b:6e:2d:b7: c6:fb:92:29:b6:da:4c:2d:89:64:e8:01:45:48:65:86:10:23: ed:86:11:b8:08:b8:59:ba:95:80:ad:b9:0b:63:8e:b5:76:77: 23:2a:b6:48:14:a7:b0:ea:b9:58:7c:e4:7c:5c:02:8c:c4:4f: 7d:b8:24:01:de:30:4f:51:79:8a:c4:99:5b:59:45:3f:4e:b3: a5:8b:2a:cf:71:94:4b:fc:33:8c:82:fa:26:65:e9:76:06:5c: 6c:75:23:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWC+D8tkJD+xdTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk MjIzMmJhZmItYWZiOC00NDAxLWIxZmUtMTIzOGQ2ZmRmMDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+1e+hzsdYMgJueVRP+D775vBBh3h31c2mSv 6+X3q74DVde7U3mk9VzscwJH3oGDQNVFX5BfLh2VMqRLFAYDwTA5qvWeDm3bHEy5 Xkpv+rOK0VOOX3h3LTjKJdCVbWrDKhDY31ahQzDeiZN+qrdVNIarm3n7y08lV9Z0 gtvGChcWK6X4d0RtUUiqZLNbypGPCc9bWYAjqbXKZLtzI6lrQ/x8caWkBsQKLx9w 3BcsE5AVx3A6P81GnnrFDmCdVFY5q/0Y2ZQDHUhi1prPF+sZBsa16XXo5ZMMJL5j lLgX0WW8fE/nT4z7SgsXqS/CxotTM4T7obiKROBnOXmb6dC9mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdP0Vd7Ojv5+XNaV/T4kdge/nBiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZGI2MGFmNDEtNjc2ZS0z YWJjLWI3NTctMWM3NzhkYTg4NzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GqyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIW2Q1u+3CuZ6sO+S8IDV5SOGRszKP8tTZ02jHQEIXNU4zEqzgDWBUJl mvpxETwJER/0Keo0+G1ZyGAqFDRylCGZPwxcSV3uWsKf1aTGMahXnWSUvdO3sDPG v5xzr2W0hqzjhOdsTtWC6wMinIkwsqVe45ByEkCRwhkYsworR7ZDMmGbGP/epPDQ 2N8+fmC9O1CaDzpoBbL27zGaZoloK24tt8b7kim22kwtiWToAUVIZYYQI+2GEbgI uFm6lYCtuQtjjrV2dyMqtkgUp7DquVh85HxcAozET324JAHeME9ReYrEmVtZRT9O s6WLKs9xlEv8M4yC+iZl6XYGXGx1Izw= -----END CERTIFICATE-----Generated at Wed Oct 28 00:56:12 2026 by rpki-client