$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/601a777f-8ece-4f43-8ae4-a315c5029333/526d8e72-063d-3758-a58d-661857144991.roa File: 526d8e72-063d-3758-a58d-661857144991.roa (raw, json) Hash identifier: NZFbhXlo7QUiWilM8blZB1+1T8sK9PC/WF4IOcW3yxY= Subject key identifier: 7F:EF:DC:94:41:7B:A4:41:0C:04:25:FD:B8:DD:99:11:FF:F5:1C:00 Certificate issuer: /CN=601a777f-8ece-4f43-8ae4-a315c5029333 Certificate serial: 010D0C9F4328584F7826172B9A4B2834508C1000 Authority key identifier: 4A:6A:C4:53:A8:09:E6:D0:8F:B5:D8:FF:DB:CB:50:D6:0F:58:00:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/601a777f-8ece-4f43-8ae4-a315c5029333.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/601a777f-8ece-4f43-8ae4-a315c5029333/526d8e72-063d-3758-a58d-661857144991.roa Signing time: Sun 11 Oct 2026 18:29:12 +0000 ROA not before: Sun 11 Oct 2026 18:29:12 +0000 ROA not after: Sat 09 Jan 2027 19:29:12 +0000 asID: 0 IP address blocks: 204.68.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/601a777f-8ece-4f43-8ae4-a315c5029333/601a777f-8ece-4f43-8ae4-a315c5029333.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/601a777f-8ece-4f43-8ae4-a315c5029333/601a777f-8ece-4f43-8ae4-a315c5029333.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/601a777f-8ece-4f43-8ae4-a315c5029333.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:78:26:17:2b:9a:4b:28:34:50:8c:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601a777f-8ece-4f43-8ae4-a315c5029333 Validity Not Before: Oct 11 18:29:12 2026 GMT Not After : Jan 9 19:29:12 2027 GMT Subject: CN=af2ec4e5-1a84-45cf-8332-9ce858bd7344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:32:5c:32:22:7d:6f:b9:0b:04:9d:96:74:73: 27:61:f7:82:bc:2f:88:e0:2d:77:39:c2:23:6e:d4: 99:08:cc:22:35:4e:98:93:0d:f6:e4:38:c7:e2:d3: 98:bc:e2:08:31:ea:5c:8a:78:19:a8:9e:ec:a6:31: 28:10:7b:91:da:44:a0:e2:4b:5d:b9:f2:a8:0f:3c: 4f:55:aa:1c:20:cf:96:03:cc:c8:44:51:f6:c8:2f: ed:6e:a8:16:da:6d:74:fa:a5:f1:c8:f4:85:85:e5: f5:a8:47:43:46:15:ab:af:e9:26:c0:4f:71:c1:60: d7:58:aa:3a:5a:8a:7e:c7:78:4c:36:1a:62:92:fb: fe:f7:c7:2e:51:17:e8:69:d6:75:00:c0:60:ae:6f: 3f:75:a7:1b:5b:fe:b2:83:68:0f:c9:67:07:de:07: 08:11:3a:a8:ce:8d:3f:7f:18:e2:fd:7e:5f:b7:ba: 4b:bd:0c:9f:47:e7:f7:6b:8f:b3:a2:36:a6:b1:33: 50:1c:5b:17:6b:65:40:2c:7f:5d:d9:ea:55:2a:dc: ab:67:51:0b:d4:11:1b:6d:0e:10:b2:66:76:f5:dd: 57:e3:99:f9:7d:9d:5d:9f:6e:65:76:34:f6:0a:50: 25:7e:1a:3a:bd:60:f6:8b:e5:d2:74:60:fc:be:87: e1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EF:DC:94:41:7B:A4:41:0C:04:25:FD:B8:DD:99:11:FF:F5:1C:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/601a777f-8ece-4f43-8ae4-a315c5029333/526d8e72-063d-3758-a58d-661857144991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/601a777f-8ece-4f43-8ae4-a315c5029333/601a777f-8ece-4f43-8ae4-a315c5029333.crl X509v3 Authority Key Identifier: keyid:4A:6A:C4:53:A8:09:E6:D0:8F:B5:D8:FF:DB:CB:50:D6:0F:58:00:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/601a777f-8ece-4f43-8ae4-a315c5029333.cer sbgp-ipAddrBlock: critical IPv4: 204.68.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:3c:f9:ec:8d:30:61:d6:89:5e:23:95:df:ec:e0:e1:d6:95: 97:3b:13:ad:35:5c:50:04:ec:60:67:0e:4b:a5:c6:65:8e:3a: 57:2f:0a:4e:80:3b:05:97:44:90:8c:99:5b:ac:9e:4e:74:21: 19:da:37:d5:12:bd:96:a6:91:0c:83:69:2b:6c:11:ec:5b:d5: 0a:bd:0c:f4:9f:8d:e5:8c:eb:74:5f:e7:9c:af:d7:b9:8f:21: f1:f7:8b:cf:1a:cc:59:a0:21:e6:4d:fd:e3:10:70:7f:d4:f5: ef:06:fa:5c:33:ee:03:9e:2d:42:30:ed:c8:43:53:b5:5c:29: d7:8f:b9:3f:c7:c7:05:c6:82:3a:46:cc:f3:07:2c:dc:e0:54: 87:4d:23:9f:5c:69:d2:9a:15:fd:c5:a2:98:66:e5:83:d3:b8: df:16:41:8b:2d:15:45:43:2d:9b:99:00:75:8b:db:96:40:51: 98:55:72:54:b8:1b:8f:98:49:2f:24:87:6b:89:bc:8f:b2:13: 54:7c:7b:0f:29:ca:21:25:14:c0:ba:fd:39:e5:56:2c:73:cd: 2f:92:f3:f3:ef:1f:86:80:91:ae:b2:f6:af:00:95:77:4b:de: 30:1a:30:c3:fb:6e:83:2d:a7:5d:6b:7a:36:78:43:81:e2:fd: 89:5f:0b:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE94JhcrmksoNFCMEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxYTc3N2YtOGVjZS00ZjQzLThhZTQtYTMxNWM1MDI5 MzMzMB4XDTI2MTAxMTE4MjkxMloXDTI3MDEwOTE5MjkxMlowLzEtMCsGA1UEAxMk YWYyZWM0ZTUtMWE4NC00NWNmLTgzMzItOWNlODU4YmQ3MzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDJcMiJ9b7kLBJ2WdHMnYfeCvC+I4C13OcIj btSZCMwiNU6Ykw325DjH4tOYvOIIMepcingZqJ7spjEoEHuR2kSg4ktdufKoDzxP VaocIM+WA8zIRFH2yC/tbqgW2m10+qXxyPSFheX1qEdDRhWrr+kmwE9xwWDXWKo6 Wop+x3hMNhpikvv+98cuURfoadZ1AMBgrm8/dacbW/6yg2gPyWcH3gcIETqozo0/ fxji/X5ft7pLvQyfR+f3a4+zojamsTNQHFsXa2VALH9d2epVKtyrZ1EL1BEbbQ4Q smZ29d1X45n5fZ1dn25ldjT2ClAlfho6vWD2i+XSdGD8vofhLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/v3JRBe6RBDAQl/bjdmRH/9RwAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS82MDFh Nzc3Zi04ZWNlLTRmNDMtOGFlNC1hMzE1YzUwMjkzMzMvNTI2ZDhlNzItMDYzZC0z NzU4LWE1OGQtNjYxODU3MTQ0OTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNjAxYTc3N2YtOGVjZS00ZjQzLThh ZTQtYTMxNWM1MDI5MzMzLzYwMWE3NzdmLThlY2UtNGY0My04YWU0LWEzMTVjNTAy OTMzMy5jcmwwHwYDVR0jBBgwFoAUSmrEU6gJ5tCPtdj/28tQ1g9YAIUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS82MDFhNzc3Zi04ZWNlLTRmNDMtOGFlNC1hMzE1 YzUwMjkzMzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzETsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIk8+eyNMGHWiV4jld/s4OHWlZc7E601XFAE7GBnDkulxmWOOlcvCk6A OwWXRJCMmVusnk50IRnaN9USvZamkQyDaStsEexb1Qq9DPSfjeWM63Rf55yv17mP IfH3i88azFmgIeZN/eMQcH/U9e8G+lwz7gOeLUIw7chDU7VcKdePuT/HxwXGgjpG zPMHLNzgVIdNI59cadKaFf3Fophm5YPTuN8WQYstFUVDLZuZAHWL25ZAUZhVclS4 G4+YSS8kh2uJvI+yE1R8ew8pyiElFMC6/TnlVixzzS+S8/PvH4aAka6y9q8AlXdL 3jAaMMP7boMtp11rejZ4Q4Hi/YlfCx0= -----END CERTIFICATE-----Generated at Mon Oct 19 19:59:09 2026 by rpki-client