$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f613540b-de36-377b-b7f4-b7fee8139d0f.roa File: f613540b-de36-377b-b7f4-b7fee8139d0f.roa (raw, json) Hash identifier: E75gk3i3yb1oDSk11xOFTsAE8mo1UdY5dCvv5izQPrs= Subject key identifier: 22:8C:84:49:10:DC:93:0A:24:A8:24:3D:C8:21:29:B7:2B:81:CA:38 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584ECD373651F264133EB5F18100 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f613540b-de36-377b-b7f4-b7fee8139d0f.roa Signing time: Tue 11 Aug 2026 13:00:11 +0000 ROA not before: Tue 11 Aug 2026 13:00:11 +0000 ROA not after: Mon 09 Nov 2026 14:00:11 +0000 asID: 63023 IP address blocks: 216.152.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:37:36:51:f2:64:13:3e:b5:f1:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Aug 11 13:00:11 2026 GMT Not After : Nov 9 14:00:11 2026 GMT Subject: CN=4303a7a1-2c7c-4179-b148-267f2b0ccd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:89:ae:e2:db:df:2b:e0:cc:32:23:c7:a8:1e: 5e:98:a4:c8:59:24:a7:10:f2:d6:2d:d9:8c:bc:2b: 24:f8:a8:3d:df:fa:88:64:10:bb:23:bd:7e:9a:a0: 68:28:42:50:66:3c:7b:b3:bf:1a:5c:63:88:ca:98: 3a:3b:54:53:99:21:de:ad:12:af:e5:2c:3b:64:26: 7e:80:bd:7d:59:98:eb:94:6e:4f:14:d4:88:f5:e0: 0a:42:5e:4c:0c:0a:b4:b3:34:51:e7:68:f5:b6:88: f5:cb:2a:c0:25:dd:81:de:34:cb:f5:33:29:ed:d7: ec:be:e0:f5:4b:26:17:cf:bf:c1:5c:3c:76:68:dd: bb:62:74:2f:31:3e:45:fe:36:d8:32:f7:0f:fe:20: db:65:ea:cb:72:32:ea:de:2e:2b:26:07:86:b5:b4: 07:40:ca:a2:0f:f2:d7:3b:5c:bc:fb:03:25:ae:96: 61:20:73:db:a5:f2:23:fe:f4:c6:a9:60:bc:0e:52: e4:97:6c:31:48:81:d0:1e:f3:01:d1:e2:70:8b:51: 9c:a1:bd:d6:13:05:e1:46:f9:47:c4:d2:8d:1b:9d: 36:3f:13:b7:7a:d2:ad:dc:51:86:cb:b6:9b:fb:45: 11:67:b9:65:2a:4e:00:31:4a:2a:ee:9d:3a:1e:a1: 18:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8C:84:49:10:DC:93:0A:24:A8:24:3D:C8:21:29:B7:2B:81:CA:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f613540b-de36-377b-b7f4-b7fee8139d0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.152.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:14:95:84:45:40:28:9c:03:65:61:fa:9c:9d:b9:66:25:fd: 40:b7:0d:d2:32:4b:e2:2b:d7:53:47:6b:5f:fd:c7:f3:e5:1f: fd:96:28:65:e8:3f:5f:7b:b8:0a:68:b9:5f:4e:28:02:19:d3: bd:34:0f:b6:fd:51:58:34:0f:5f:74:d0:8e:31:dc:ab:82:ef: ae:d5:fc:07:62:a2:56:c2:21:fb:67:a7:b1:38:03:1b:ec:7f: eb:9b:d8:a4:e3:6a:ee:4f:49:66:bd:d1:3a:a5:31:22:67:91: 70:71:4a:28:d1:e5:ac:9b:2d:d3:fd:9b:a4:53:85:e5:5a:ff: c8:af:47:aa:60:14:95:34:68:c6:22:6d:2f:ee:57:08:c2:95: 9b:18:74:8c:14:9e:25:f8:92:3e:b3:c0:e1:d8:a3:62:c6:3a: e0:ef:77:78:a8:61:58:15:f4:d2:0e:df:fb:b8:58:37:14:25: 1e:fa:dc:6e:32:27:66:8e:75:ee:dd:46:66:01:03:8a:4a:36: 44:c4:c7:74:1c:bd:4d:17:4b:46:93:2a:0e:5e:ca:9d:79:48: 76:a4:7f:b2:f0:7c:a4:23:e3:f8:7b:e5:18:e2:0e:83:88:39: 4b:42:bf:ed:72:b6:e4:5d:39:f3:b0:a3:1d:d0:3a:3f:5b:80: 56:da:61:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7NNzZR8mQTPrXxgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDgxMTEzMDAxMVoXDTI2MTEwOTE0MDAxMVowLzEtMCsGA1UEAxMk NDMwM2E3YTEtMmM3Yy00MTc5LWIxNDgtMjY3ZjJiMGNjZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4mu4tvfK+DMMiPHqB5emKTIWSSnEPLWLdmM vCsk+Kg93/qIZBC7I71+mqBoKEJQZjx7s78aXGOIypg6O1RTmSHerRKv5Sw7ZCZ+ gL19WZjrlG5PFNSI9eAKQl5MDAq0szRR52j1toj1yyrAJd2B3jTL9TMp7dfsvuD1 SyYXz7/BXDx2aN27YnQvMT5F/jbYMvcP/iDbZerLcjLq3i4rJgeGtbQHQMqiD/LX O1y8+wMlrpZhIHPbpfIj/vTGqWC8DlLkl2wxSIHQHvMB0eJwi1Gcob3WEwXhRvlH xNKNG502PxO3etKt3FGGy7ab+0URZ7llKk4AMUoq7p06HqEYzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKMhEkQ3JMKJKgkPcghKbcrgco4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZjYxMzU0MGItZGUzNi0z NzdiLWI3ZjQtYjdmZWU4MTM5ZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JiZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoUlYRFQCicA2Vh+pyduWYl/UC3DdIyS+Ir11NHa1/9x/PlH/2WKGXo P197uApouV9OKAIZ0700D7b9UVg0D1900I4x3KuC767V/AdiolbCIftnp7E4Axvs f+ub2KTjau5PSWa90TqlMSJnkXBxSijR5aybLdP9m6RTheVa/8ivR6pgFJU0aMYi bS/uVwjClZsYdIwUniX4kj6zwOHYo2LGOuDvd3ioYVgV9NIO3/u4WDcUJR763G4y J2aOde7dRmYBA4pKNkTEx3QcvU0XS0aTKg5eyp15SHakf7LwfKQj4/h75RjiDoOI OUtCv+1ytuRdOfOwox3QOj9bgFbaYQ0= -----END CERTIFICATE-----Generated at Thu Sep 10 18:44:31 2026 by rpki-client