$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f9b2e489-029b-3c0e-80b4-12604ecbcbe2.roa File: f9b2e489-029b-3c0e-80b4-12604ecbcbe2.roa (raw, json) Hash identifier: SCkSJJVpLHkhMW/RrfWXNmw7HDoZKd6hJdc2sM5lMeA= Subject key identifier: E5:18:56:0C:92:61:47:CC:96:FA:C7:D2:66:C3:E4:84:1D:9E:B9:1D Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F6D0A0B1F11487F1678CCE8D0 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f9b2e489-029b-3c0e-80b4-12604ecbcbe2.roa Signing time: Wed 07 Oct 2026 18:58:48 +0000 ROA not before: Wed 07 Oct 2026 18:58:48 +0000 ROA not after: Tue 05 Jan 2027 19:58:48 +0000 asID: 63023 IP address blocks: 204.28.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:0a:0b:1f:11:48:7f:16:78:cc:e8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Oct 7 18:58:48 2026 GMT Not After : Jan 5 19:58:48 2027 GMT Subject: CN=7955f76d-93e5-42c1-b9be-8f1bf3c38b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:17:a7:b3:40:c6:8c:ae:36:27:82:18:0f:42: 34:69:9e:ce:89:ac:4b:7f:55:c0:e2:87:24:f1:2c: 04:25:a8:4c:c3:39:bd:70:06:0c:1c:e6:54:27:8d: 2b:d4:13:70:bd:f1:43:7d:2e:02:96:7d:68:d0:6e: ca:9c:6b:7d:4e:8e:e3:5e:43:ed:33:d9:61:31:ec: 98:75:8c:3e:73:99:5d:ba:e0:f6:cd:5e:9d:ee:7f: a3:0e:08:a8:9d:55:1b:e2:69:96:56:e4:64:6d:08: e3:b8:94:56:22:f8:a1:5a:4d:12:4a:ae:58:02:0e: 8d:79:20:71:81:1a:10:0e:f5:d0:21:7f:09:a8:29: 15:c5:9b:69:f2:59:39:e7:c5:f7:07:2b:dd:a2:cd: ef:58:6e:72:22:0b:0f:43:7f:3e:94:b3:57:e3:fd: ed:b0:c4:d2:7f:be:41:f8:5b:b3:78:a0:59:69:0c: 3b:35:a8:de:8e:b5:c9:8e:57:60:60:99:68:04:ad: 65:b9:a3:37:e9:0f:64:15:b0:1e:ff:98:9f:ba:19: 51:f2:c7:aa:36:e2:48:f2:28:ba:47:82:4c:f1:8e: 57:2e:0b:15:47:70:5b:62:3b:ce:3b:dc:6e:fd:00: 4a:93:fa:9d:94:eb:02:17:a8:46:84:12:4d:94:d7: 78:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:18:56:0C:92:61:47:CC:96:FA:C7:D2:66:C3:E4:84:1D:9E:B9:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f9b2e489-029b-3c0e-80b4-12604ecbcbe2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 204.28.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:79:21:ec:87:b3:57:f0:8d:b2:80:01:2f:67:7f:f0:2d:c9: 12:f4:bd:2f:b4:f7:21:85:41:bb:2a:12:86:5a:a0:0d:02:d2: c7:7c:97:dd:21:de:7b:92:06:99:cf:77:1b:f3:33:d0:c3:b9: 2f:48:c4:01:8e:6b:07:27:65:55:88:ef:66:f3:93:d6:7e:45: 2c:2c:50:7a:c4:55:a1:49:14:a2:90:47:12:de:d3:ad:25:77: fd:f4:2d:a7:32:7f:93:8e:b3:d3:3d:82:57:2d:db:00:65:fe: 33:26:43:d2:53:4f:2b:87:08:d3:59:e9:ea:3f:21:14:cd:d3: d0:8e:e5:4b:fd:59:83:fb:73:ab:72:f1:08:cc:cf:3d:b1:ba: 07:54:68:e0:fe:7a:17:73:d8:24:c9:fb:4f:08:4c:ff:66:97: 29:a9:92:85:98:40:4f:a6:9a:de:a5:ea:db:61:91:78:a0:d7: 54:66:4e:be:89:be:2b:22:83:24:8c:36:7f:7d:1a:e0:f2:a3: 56:25:4f:af:f8:24:60:0c:d3:73:14:2c:31:fd:50:fb:60:8b: fa:75:02:d7:d6:93:68:af:d1:c2:18:05:aa:38:da:d2:f0:1b: e2:60:b6:9c:75:6d:e0:4b:9b:16:4f:20:42:7d:0d:0d:c3:e3: 62:f3:34:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9tCgsfEUh/FnjM6NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MTAwNzE4NTg0OFoXDTI3MDEwNTE5NTg0OFowLzEtMCsGA1UEAxMk Nzk1NWY3NmQtOTNlNS00MmMxLWI5YmUtOGYxYmYzYzM4YjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxens0DGjK42J4IYD0I0aZ7OiaxLf1XA4ock 8SwEJahMwzm9cAYMHOZUJ40r1BNwvfFDfS4Cln1o0G7KnGt9To7jXkPtM9lhMeyY dYw+c5lduuD2zV6d7n+jDgionVUb4mmWVuRkbQjjuJRWIvihWk0SSq5YAg6NeSBx gRoQDvXQIX8JqCkVxZtp8lk558X3Byvdos3vWG5yIgsPQ38+lLNX4/3tsMTSf75B +FuzeKBZaQw7NajejrXJjldgYJloBK1luaM36Q9kFbAe/5ifuhlR8seqNuJI8ii6 R4JM8Y5XLgsVR3BbYjvOO9xu/QBKk/qdlOsCF6hGhBJNlNd40wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOUYVgySYUfMlvrH0mbD5IQdnrkdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZjliMmU0ODktMDI5Yi0z YzBlLTgwYjQtMTI2MDRlY2JjYmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzByDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHN5IeyHs1fwjbKAAS9nf/AtyRL0vS+09yGFQbsqEoZaoA0C0sd8l90h 3nuSBpnPdxvzM9DDuS9IxAGOawcnZVWI72bzk9Z+RSwsUHrEVaFJFKKQRxLe060l d/30Lacyf5OOs9M9glct2wBl/jMmQ9JTTyuHCNNZ6eo/IRTN09CO5Uv9WYP7c6ty 8QjMzz2xugdUaOD+ehdz2CTJ+08ITP9mlympkoWYQE+mmt6l6tthkXig11RmTr6J visigySMNn99GuDyo1YlT6/4JGAM03MULDH9UPtgi/p1AtfWk2iv0cIYBao42tLw G+Jgtpx1beBLmxZPIEJ9DQ3D42LzNFE= -----END CERTIFICATE-----Generated at Mon Oct 19 09:06:13 2026 by rpki-client