$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/31912e9a-77a4-32d5-8d87-bb69cf974e29.roa File: 31912e9a-77a4-32d5-8d87-bb69cf974e29.roa (raw, json) Hash identifier: TSCPZlWUrUq85gIym8UTo6k4OREkhztgE1l1SRUBmKk= Subject key identifier: 94:BE:85:45:8F:60:10:C7:B7:73:89:AF:72:B5:34:2E:06:46:3A:A0 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F31B7BF5C226402ED9E31A9B0 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/31912e9a-77a4-32d5-8d87-bb69cf974e29.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 63023 IP address blocks: 170.101.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:bf:5c:22:64:02:ed:9e:31:a9:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=1bfe85d2-eace-492d-a686-a5a97ccd9103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d5:d3:6d:e5:dc:ee:36:29:84:aa:92:16:f3: 55:d8:f7:c5:99:b4:68:6d:bf:f9:38:04:35:b2:93: fd:b7:61:ee:b9:70:54:f8:3e:95:31:4d:cc:b7:8d: 41:6f:4a:f3:0e:c4:97:6d:3a:b3:41:80:0e:2d:13: 58:46:c4:00:05:b1:c1:c5:02:dc:a9:8d:26:7c:62: 9e:37:29:39:5d:8f:5f:85:92:d8:ed:b8:7f:17:9c: f3:e7:a5:f1:ae:ff:93:a3:1b:bf:d9:b5:04:86:c6: d6:d7:dd:2b:9f:12:10:20:ca:61:6c:b3:6e:84:5f: 1c:d2:b5:11:22:4f:a2:d7:97:21:cc:45:d4:ee:95: 0d:39:10:a6:54:ba:12:35:c3:37:78:e0:a8:d2:6b: 81:7b:a7:58:49:f6:75:8b:e8:64:90:3c:86:7d:78: 7d:7a:87:05:1e:e5:9e:41:f0:f2:e0:1b:bb:5b:ac: 56:cd:64:4f:eb:af:91:f2:b6:68:64:48:53:12:94: c2:c8:14:1a:7a:37:a3:fc:76:97:fc:a1:ac:aa:58: b4:4a:0d:b2:73:02:e7:23:b2:5d:44:84:c8:22:da: eb:d2:9e:83:bb:4b:28:db:8d:c9:0a:00:d8:e0:9a: 3f:d5:72:83:7f:4c:60:6d:f2:91:93:c3:e4:7f:c3: f8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BE:85:45:8F:60:10:C7:B7:73:89:AF:72:B5:34:2E:06:46:3A:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/31912e9a-77a4-32d5-8d87-bb69cf974e29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:b9:1b:d4:32:3e:dd:4a:bf:f7:22:2f:9e:5d:b4:b0:a2:ef: 67:49:20:95:55:88:9f:1c:aa:e2:1a:99:86:db:f8:a2:ab:1b: 3f:cf:ce:3b:6e:9d:ab:2b:b6:75:a7:4d:35:f5:06:8b:fd:70: a5:63:7b:77:e5:f0:e8:23:d1:97:3f:68:5f:e1:7b:33:ab:8b: 8b:01:d0:8e:bb:65:46:bd:0b:e6:35:ca:cc:71:ce:34:74:a1: 42:37:87:8f:35:6f:4d:6b:76:03:ec:49:4e:5f:e6:11:08:31: 77:6f:fe:86:70:24:55:55:80:7c:c0:9f:3e:43:0a:70:54:63: 4a:5c:fd:1c:4c:de:74:44:db:c1:21:55:19:09:b5:e4:f8:2f: 6d:67:3d:66:c4:cd:64:4d:58:01:85:f2:9a:5b:fc:0f:69:c7: 32:81:be:f1:3b:11:d3:88:c3:b4:93:54:b3:e7:57:86:3e:80: 22:7b:34:f3:79:30:e9:2c:f6:48:20:9e:47:9e:60:bf:32:63: d0:b7:74:62:89:0e:57:b2:da:99:06:f7:00:fe:19:50:2c:bd: 51:5f:f7:01:08:76:2a:0f:1c:09:58:40:89:ef:b6:fd:51:9d: b4:fe:bf:59:ec:b8:0d:5c:96:90:3e:3a:a5:56:73:99:1a:55: 54:9d:9c:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt79cImQC7Z4xqbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk MWJmZTg1ZDItZWFjZS00OTJkLWE2ODYtYTVhOTdjY2Q5MTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9XTbeXc7jYphKqSFvNV2PfFmbRobb/5OAQ1 spP9t2HuuXBU+D6VMU3Mt41Bb0rzDsSXbTqzQYAOLRNYRsQABbHBxQLcqY0mfGKe Nyk5XY9fhZLY7bh/F5zz56Xxrv+Toxu/2bUEhsbW190rnxIQIMphbLNuhF8c0rUR Ik+i15chzEXU7pUNORCmVLoSNcM3eOCo0muBe6dYSfZ1i+hkkDyGfXh9eocFHuWe QfDy4Bu7W6xWzWRP66+R8rZoZEhTEpTCyBQaejej/HaX/KGsqli0Sg2ycwLnI7Jd RITIItrr0p6Du0so243JCgDY4Jo/1XKDf0xgbfKRk8Pkf8P4KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJS+hUWPYBDHt3OJr3K1NC4GRjqgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvMzE5MTJlOWEtNzdhNC0z MmQ1LThkODctYmI2OWNmOTc0ZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmVmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABW5G9QyPt1Kv/ciL55dtLCi72dJIJVViJ8cquIamYbb+KKrGz/Pzjtu nasrtnWnTTX1Bov9cKVje3fl8Ogj0Zc/aF/hezOri4sB0I67ZUa9C+Y1ysxxzjR0 oUI3h481b01rdgPsSU5f5hEIMXdv/oZwJFVVgHzAnz5DCnBUY0pc/RxM3nRE28Eh VRkJteT4L21nPWbEzWRNWAGF8ppb/A9pxzKBvvE7EdOIw7STVLPnV4Y+gCJ7NPN5 MOks9kggnkeeYL8yY9C3dGKJDley2pkG9wD+GVAsvVFf9wEIdioPHAlYQInvtv1R nbT+v1nsuA1clpA+OqVWc5kaVVSdnAA= -----END CERTIFICATE-----Generated at Sat Sep 26 00:18:25 2026 by rpki-client