$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f4205ebe-a1d3-329f-814f-2486e3f077fc.roa File: f4205ebe-a1d3-329f-814f-2486e3f077fc.roa (raw, json) Hash identifier: fkmuVoChwivKut6ne+rKEwIwgDSsZHcjAzT+z8hXRDA= Subject key identifier: 53:8F:2D:F2:1E:8F:5B:F0:43:FA:21:19:44:17:69:D8:B2:A5:C7:0C Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F6D0D0C49F2AA84C3271C7180 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f4205ebe-a1d3-329f-814f-2486e3f077fc.roa Signing time: Wed 07 Oct 2026 19:04:51 +0000 ROA not before: Wed 07 Oct 2026 19:04:51 +0000 ROA not after: Tue 05 Jan 2027 20:04:51 +0000 asID: 63023 IP address blocks: 204.28.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:0d:0c:49:f2:aa:84:c3:27:1c:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 7 19:04:51 2026 GMT Not After : Jan 5 20:04:51 2027 GMT Subject: CN=66396412-5df4-4db9-8827-1cf1160825a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3a:f7:6f:7f:96:20:bd:e0:ce:64:1b:71:8f: 93:4d:37:88:88:3b:76:44:be:28:d3:db:1c:6d:bc: 20:40:99:90:fd:44:90:51:18:9d:11:33:bd:59:1a: 55:9a:73:57:de:79:f0:77:52:af:12:74:e6:5d:54: f6:fe:1e:81:35:1f:76:8c:a7:52:62:42:71:65:70: 62:ce:f9:c0:b7:a6:ab:2b:bf:15:aa:68:41:57:d9: 02:c3:91:5e:fa:64:57:e1:50:8f:e4:29:02:58:6e: 6b:73:6f:ff:c2:bb:02:91:5e:3b:41:4c:4e:09:1a: 79:51:46:f7:7c:99:35:f8:b1:32:64:12:1e:49:43: 3b:d6:85:b6:bb:ab:66:0a:c7:df:1a:ea:21:ea:91: c1:1b:0a:37:f5:34:f3:1d:59:f8:1c:ce:ec:5e:bb: bb:ed:77:d8:a9:d7:e6:ab:4f:85:81:dc:f1:48:cd: ff:4c:ea:c8:f4:c5:0a:08:1b:23:fa:d3:94:72:60: 4c:15:7d:ce:0a:fc:c8:d2:bf:d4:5c:50:9d:aa:d1: 7c:cd:30:3e:59:83:22:ef:79:0a:1b:e8:1c:af:da: 77:e8:50:4d:6d:29:49:0a:21:e6:c5:8a:59:4b:8d: 5d:d7:a5:86:5d:f0:12:14:98:92:13:f0:cc:83:2b: fd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:8F:2D:F2:1E:8F:5B:F0:43:FA:21:19:44:17:69:D8:B2:A5:C7:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f4205ebe-a1d3-329f-814f-2486e3f077fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 204.28.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:2d:98:06:07:92:9c:bf:3f:66:db:6d:33:ba:2e:76:cb:b3: ca:3f:e9:0c:f2:81:d7:e7:25:f5:5a:b0:a1:fe:57:23:c5:22: 0e:6f:de:c0:60:c1:89:fe:2e:62:d3:85:ae:86:08:dc:b7:33: 16:37:8c:ed:06:01:27:a7:d9:ae:70:99:ff:0e:c9:64:3c:ec: 34:d8:75:6c:f1:a9:44:6d:1c:3b:2c:22:ff:aa:4b:85:9c:0d: a3:cf:12:41:1b:72:70:5d:f0:75:dd:16:2b:dd:43:91:38:8b: f2:90:51:df:b5:4a:5e:0d:02:28:d3:eb:17:b7:6c:2c:1e:1c: 46:b7:fe:e0:7c:d1:3d:c7:49:81:38:ab:bb:90:34:48:74:eb: 28:b9:39:89:3e:eb:9c:eb:a2:aa:c8:15:0e:76:82:a3:ad:ab: af:48:c5:5a:44:9c:50:b0:dd:ff:d5:ae:e3:03:52:ea:ed:6d: 7e:b3:d1:4c:06:19:f3:44:44:7f:47:7a:d2:80:64:4a:70:c1: 40:08:e4:45:ee:9d:a2:d3:db:9b:7c:8f:46:30:33:aa:83:aa: ae:b3:bf:65:c9:11:ee:4d:bf:eb:ed:99:63:b1:22:c5:2f:9b: e0:e9:9f:f6:0c:03:89:72:98:d6:74:c4:0a:99:b2:86:79:74: a5:31:b4:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9tDQxJ8qqEwycccYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAwNzE5MDQ1MVoXDTI3MDEwNTIwMDQ1MVowLzEtMCsGA1UEAxMk NjYzOTY0MTItNWRmNC00ZGI5LTg4MjctMWNmMTE2MDgyNWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjr3b3+WIL3gzmQbcY+TTTeIiDt2RL4o09sc bbwgQJmQ/USQURidETO9WRpVmnNX3nnwd1KvEnTmXVT2/h6BNR92jKdSYkJxZXBi zvnAt6arK78VqmhBV9kCw5Fe+mRX4VCP5CkCWG5rc2//wrsCkV47QUxOCRp5UUb3 fJk1+LEyZBIeSUM71oW2u6tmCsffGuoh6pHBGwo39TTzHVn4HM7sXru77XfYqdfm q0+FgdzxSM3/TOrI9MUKCBsj+tOUcmBMFX3OCvzI0r/UXFCdqtF8zTA+WYMi73kK G+gcr9p36FBNbSlJCiHmxYpZS41d16WGXfASFJiSE/DMgyv98wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOPLfIej1vwQ/ohGUQXadiypccMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZjQyMDVlYmUtYTFkMy0z MjlmLTgxNGYtMjQ4NmUzZjA3N2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzByaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgtmAYHkpy/P2bbbTO6LnbLs8o/6QzygdfnJfVasKH+VyPFIg5v3sBg wYn+LmLTha6GCNy3MxY3jO0GASen2a5wmf8OyWQ87DTYdWzxqURtHDssIv+qS4Wc DaPPEkEbcnBd8HXdFivdQ5E4i/KQUd+1Sl4NAijT6xe3bCweHEa3/uB80T3HSYE4 q7uQNEh06yi5OYk+65zroqrIFQ52gqOtq69IxVpEnFCw3f/VruMDUurtbX6z0UwG GfNERH9HetKAZEpwwUAI5EXunaLT25t8j0YwM6qDqq6zv2XJEe5Nv+vtmWOxIsUv m+Dpn/YMA4lymNZ0xAqZsoZ5dKUxtCo= -----END CERTIFICATE-----Generated at Mon Oct 19 22:46:11 2026 by rpki-client