$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/2c4c36f1-6360-3294-844b-6d4bffed2a72.roa File: 2c4c36f1-6360-3294-844b-6d4bffed2a72.roa (raw, json) Hash identifier: CsF0wnfPNigmqthBUR2ycZgvHhGHCZlpvXkjCdzxQlY= Subject key identifier: 35:FC:9C:86:E0:61:9B:6E:49:C7:EC:42:E3:CC:DB:33:27:E5:34:EF Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584D4A9E2A8CFE86CABED475B000 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/2c4c36f1-6360-3294-844b-6d4bffed2a72.roa Signing time: Thu 26 Mar 2026 01:30:05 +0000 ROA not before: Thu 26 Mar 2026 01:30:05 +0000 ROA not after: Wed 24 Jun 2026 01:30:05 +0000 asID: 63023 IP address blocks: 216.152.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:9e:2a:8c:fe:86:ca:be:d4:75:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Mar 26 01:30:05 2026 GMT Not After : Jun 24 01:30:05 2026 GMT Subject: CN=937e65f5-8ab3-4b14-8022-cbb2c6e0e652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0d:e1:91:2d:5d:3a:dc:d7:12:9e:aa:de:c7: 70:e3:12:64:58:a4:49:fd:9b:c3:f9:b4:28:dd:1c: 7e:5a:5d:49:92:7e:3e:89:46:06:01:3c:88:8f:69: 44:11:07:8b:b3:b7:8c:4a:69:0a:26:10:66:4a:c7: e4:25:6e:d6:ba:aa:60:f1:cc:0a:78:1d:87:24:66: cf:6c:93:dc:c3:2c:b0:77:b3:17:6b:d0:9e:13:0e: de:27:15:fe:88:07:1b:8f:d1:d8:65:e1:02:4e:bf: e9:c6:7b:22:84:73:06:5a:b1:8e:af:d4:dd:0b:94: 9e:fc:b6:ba:6a:c5:f0:fc:df:2b:21:b2:0a:7f:5e: e6:07:50:c9:65:a2:10:f7:31:e2:c3:4b:28:dd:55: 47:bf:f4:c2:34:9a:07:65:7c:eb:b0:2b:61:03:78: af:74:86:04:70:c4:30:e7:ff:24:35:70:79:9c:d4: 4d:33:30:95:c5:2b:c6:bf:1a:de:d8:54:68:b3:5b: b9:4c:af:70:ee:6f:7b:62:81:b6:cf:c7:c6:5a:e4: ec:d0:c4:80:83:fc:d1:80:bf:c1:c1:bd:e2:be:5d: bd:9a:d8:08:cf:45:9f:ae:22:8b:d0:f3:85:00:5a: ba:d0:a4:b2:cb:0b:c0:70:75:9e:00:d0:a5:33:ec: 8e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FC:9C:86:E0:61:9B:6E:49:C7:EC:42:E3:CC:DB:33:27:E5:34:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/2c4c36f1-6360-3294-844b-6d4bffed2a72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.152.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:fb:70:42:ee:63:27:3a:2e:28:b4:69:11:d1:5b:24:10:d8: fb:1e:69:54:59:c3:48:e7:7a:3e:fa:8a:a1:54:7b:50:1f:aa: ef:7d:c4:82:d3:3a:33:3b:79:8c:d8:f1:6e:66:02:0b:d6:be: 2c:c2:47:db:ef:ad:2a:50:a8:28:85:e1:3d:8c:ce:ee:01:43: 00:d3:a5:7f:50:c8:1d:1b:a0:df:62:6a:d1:0d:c9:ea:d9:ae: ef:3e:0a:89:50:12:07:d2:89:d4:e5:03:68:fb:e8:6e:13:81: d2:19:45:5d:f7:e4:45:fb:04:18:69:b5:5d:fd:90:ce:94:0d: a2:17:c6:53:48:cb:c8:92:a8:a7:67:f6:68:8b:2a:a4:ac:60: 4c:67:6a:3f:35:17:41:7f:25:23:4f:6e:35:0a:a1:64:11:07: b4:27:0f:47:e5:cb:6d:4b:4b:dc:6a:69:8e:e8:6a:f6:e9:3d: 6e:12:08:f4:9e:24:79:32:50:99:8b:0f:c7:61:16:ef:ec:14: eb:c1:4f:79:15:34:c9:ff:fe:b2:5c:e2:c0:6a:00:70:e2:bf: d9:82:1d:e1:45:03:f4:2b:24:4c:6a:db:26:4b:0f:f7:2a:f2: fd:ed:87:ea:de:e3:8d:11:ac:61:2d:4f:83:80:15:39:ae:93: 2c:70:fb:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1KniqM/obKvtR1sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDMyNjAxMzAwNVoXDTI2MDYyNDAxMzAwNVowLzEtMCsGA1UEAxMk OTM3ZTY1ZjUtOGFiMy00YjE0LTgwMjItY2JiMmM2ZTBlNjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw3hkS1dOtzXEp6q3sdw4xJkWKRJ/ZvD+bQo 3Rx+Wl1Jkn4+iUYGATyIj2lEEQeLs7eMSmkKJhBmSsfkJW7Wuqpg8cwKeB2HJGbP bJPcwyywd7MXa9CeEw7eJxX+iAcbj9HYZeECTr/pxnsihHMGWrGOr9TdC5Se/La6 asXw/N8rIbIKf17mB1DJZaIQ9zHiw0so3VVHv/TCNJoHZXzrsCthA3ivdIYEcMQw 5/8kNXB5nNRNMzCVxSvGvxre2FRos1u5TK9w7m97YoG2z8fGWuTs0MSAg/zRgL/B wb3ivl29mtgIz0WfriKL0POFAFq60KSyywvAcHWeANClM+yOuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDX8nIbgYZtuScfsQuPM2zMn5TTvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMmM0YzM2ZjEtNjM2MC0z Mjk0LTg0NGItNmQ0YmZmZWQyYTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JibMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED7cELuYyc6Lii0aRHRWyQQ2PseaVRZw0jnej76iqFUe1Afqu99xILT OjM7eYzY8W5mAgvWvizCR9vvrSpQqCiF4T2Mzu4BQwDTpX9QyB0boN9iatENyerZ ru8+ColQEgfSidTlA2j76G4TgdIZRV335EX7BBhptV39kM6UDaIXxlNIy8iSqKdn 9miLKqSsYExnaj81F0F/JSNPbjUKoWQRB7QnD0fly21LS9xqaY7oavbpPW4SCPSe JHkyUJmLD8dhFu/sFOvBT3kVNMn//rJc4sBqAHDiv9mCHeFFA/QrJExq2yZLD/cq 8v3th+re440RrGEtT4OAFTmukyxw+wY= -----END CERTIFICATE-----Generated at Fri Apr 17 13:31:11 2026 by rpki-client