$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/27cd812a-efbe-3ee6-a50b-0c2c8746a89e.roa File: 27cd812a-efbe-3ee6-a50b-0c2c8746a89e.roa (raw, json) Hash identifier: TNT18q4WuRKR3Q3NXIleOKUtYqwJQ4FTI47ZNIag8o8= Subject key identifier: 21:FA:45:5C:16:A5:C3:9B:88:3B:E9:23:B0:A5:EF:48:81:3D:8D:C1 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F31B7BF3DCB7E33E1F7ABE440 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/27cd812a-efbe-3ee6-a50b-0c2c8746a89e.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 63023 IP address blocks: 170.101.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:bf:3d:cb:7e:33:e1:f7:ab:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=a21a9b43-ae2f-4d59-9ae6-2a51e5c5d7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e0:fe:fc:4a:9f:54:8e:1b:e8:fc:cc:b6:65: 02:3a:b2:b3:d6:0b:6e:17:54:9c:a5:fd:6b:c9:79: 99:db:69:62:b1:e9:bc:ad:ab:fa:08:98:a8:7d:d7: b5:b2:61:2c:44:4c:84:3b:3f:9c:d4:15:da:f6:ed: a6:99:98:43:eb:2a:8c:61:0f:a0:87:5b:12:ef:41: 57:ec:97:e9:dd:6a:c4:18:fa:4a:4e:3f:4f:bb:7a: 33:19:30:9b:b0:3b:35:0e:ca:ec:b1:3d:08:88:c9: 9f:d2:31:f6:01:15:97:07:d3:90:02:28:89:ff:eb: 9b:5d:e5:88:90:b5:cd:51:23:40:38:ea:19:d4:a0: e3:4b:4d:b2:31:a8:c9:e7:62:e8:2a:bd:e9:eb:90: d5:66:e1:ca:69:84:c2:ef:cc:8d:fd:a2:68:97:e9: b5:78:4c:13:f1:5e:f4:4b:23:eb:80:67:cd:c2:8d: f2:95:06:65:85:02:65:01:d1:02:38:a1:c6:7a:e9: 4e:29:cc:5d:d5:dc:06:66:0c:57:a0:d8:93:f8:bb: a7:38:03:77:1d:08:25:89:63:e9:2b:00:c9:3d:81: 1e:64:fb:9e:4f:1f:f4:a8:7b:d3:89:3d:43:f4:85: e4:db:9e:49:3b:96:87:d6:df:e9:9d:e6:81:91:be: 11:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FA:45:5C:16:A5:C3:9B:88:3B:E9:23:B0:A5:EF:48:81:3D:8D:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/27cd812a-efbe-3ee6-a50b-0c2c8746a89e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:12:6a:d3:f6:d9:50:89:86:6c:94:90:bc:4b:8d:4f:1d:6f: d2:7d:68:56:34:aa:65:0f:ad:5e:e6:a8:b9:5f:97:5e:15:7f: 2e:11:43:36:04:0f:e6:03:0b:cc:e9:1b:17:0b:8e:87:de:2b: 79:0e:18:1b:e0:ed:cd:94:37:d1:12:e2:bd:92:4e:50:22:1c: 9b:28:e3:23:f2:61:fb:a7:13:58:7d:30:35:a2:ce:a7:ed:cf: 6b:c3:c7:83:cd:3e:30:c1:a0:7b:79:3b:be:49:a7:bd:6b:a1: 26:b3:8f:b0:86:8a:f8:f5:42:61:32:28:ac:28:6e:bc:b5:fc: 7c:5c:ae:db:61:3c:ea:9c:6b:18:67:40:78:38:bf:99:6d:c7: bf:9b:56:01:a9:cf:8e:b2:85:90:2d:1d:c0:fe:aa:af:61:69: 85:61:87:04:78:bf:55:0b:f0:24:76:63:9a:96:22:84:9b:7e: ef:35:a8:db:50:f7:6a:64:3e:08:8b:3b:ee:fd:a9:ab:cb:a6: ca:a9:54:a1:4f:d3:4e:17:31:25:86:b0:d4:8c:60:2a:e6:0f: 65:13:a3:4b:d5:cd:cc:8b:aa:0e:40:72:da:ec:a6:8f:4d:63: d4:36:2c:d7:be:8c:fd:8c:35:a2:8e:45:da:43:a3:09:a8:14: 78:bd:fd:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt789y34z4fer5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk YTIxYTliNDMtYWUyZi00ZDU5LTlhZTYtMmE1MWU1YzVkN2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOD+/EqfVI4b6PzMtmUCOrKz1gtuF1Scpf1r yXmZ22lisem8rav6CJiofde1smEsREyEOz+c1BXa9u2mmZhD6yqMYQ+gh1sS70FX 7Jfp3WrEGPpKTj9Pu3ozGTCbsDs1DsrssT0IiMmf0jH2ARWXB9OQAiiJ/+ubXeWI kLXNUSNAOOoZ1KDjS02yMajJ52LoKr3p65DVZuHKaYTC78yN/aJol+m1eEwT8V70 SyPrgGfNwo3ylQZlhQJlAdECOKHGeulOKcxd1dwGZgxXoNiT+LunOAN3HQgliWPp KwDJPYEeZPueTx/0qHvTiT1D9IXk255JO5aH1t/pneaBkb4RUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCH6RVwWpcObiDvpI7Cl70iBPY3BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMjdjZDgxMmEtZWZiZS0z ZWU2LWE1MGItMGMyYzg3NDZhODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsSatP22VCJhmyUkLxLjU8db9J9aFY0qmUPrV7mqLlfl14Vfy4RQzYE D+YDC8zpGxcLjofeK3kOGBvg7c2UN9ES4r2STlAiHJso4yPyYfunE1h9MDWizqft z2vDx4PNPjDBoHt5O75Jp71roSazj7CGivj1QmEyKKwobry1/HxcrtthPOqcaxhn QHg4v5ltx7+bVgGpz46yhZAtHcD+qq9haYVhhwR4v1UL8CR2Y5qWIoSbfu81qNtQ 92pkPgiLO+79qavLpsqpVKFP004XMSWGsNSMYCrmD2UTo0vVzcyLqg5Actrspo9N Y9Q2LNe+jP2MNaKORdpDowmoFHi9/Y0= -----END CERTIFICATE-----Generated at Sat Sep 26 18:18:24 2026 by rpki-client