$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/41de00c9-537e-3dad-b5c6-633d840612f6.roa File: 41de00c9-537e-3dad-b5c6-633d840612f6.roa (raw, json) Hash identifier: tYARDsuvjBMV7kY2Hyz1yi4o29oCdzhQtCbkdvwoMS4= Subject key identifier: 1F:BF:5A:46:EC:47:AB:4D:B7:FE:F4:55:89:64:55:F7:2B:89:33:68 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584CAE49F50919CEEE0FB2D39E80 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/41de00c9-537e-3dad-b5c6-633d840612f6.roa Signing time: Thu 29 Jan 2026 01:34:18 +0000 ROA not before: Thu 29 Jan 2026 01:34:18 +0000 ROA not after: Wed 29 Apr 2026 00:34:18 +0000 asID: 62563 IP address blocks: 66.163.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:49:f5:09:19:ce:ee:0f:b2:d3:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Jan 29 01:34:18 2026 GMT Not After : Apr 29 00:34:18 2026 GMT Subject: CN=33dff03e-e642-4903-b88a-28725feb3112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:59:ff:40:f1:32:60:6f:62:0d:80:c1:78:94: 72:81:7c:27:57:4a:2e:e3:d4:b8:6c:5e:cb:68:f8: 17:04:31:ce:27:12:7c:e1:3b:f7:e2:a4:48:be:ed: d1:b3:e0:d0:4f:b2:fb:24:5c:be:84:97:73:a8:3c: 0b:27:92:73:56:91:e8:a0:1c:1c:41:66:c4:d8:65: 33:50:55:62:eb:22:f0:77:61:fb:1e:bd:8c:69:ee: 5f:8e:d7:d6:5f:ae:da:13:db:e3:e0:2a:d4:8b:71: cd:20:7f:14:a6:3d:be:a5:78:33:6d:4f:0d:4a:a5: 8c:60:87:6b:62:7b:f2:e0:0f:37:58:ec:49:2f:fa: e2:30:cb:5c:40:c4:2c:75:02:86:44:31:ad:ae:ca: 0a:b5:70:22:3b:43:6d:b0:72:e7:c7:9c:a0:3f:26: 45:44:40:25:2a:ff:eb:93:d0:00:ba:8f:08:ec:2d: 13:35:f8:4d:eb:b8:55:44:6a:0b:13:a7:35:a0:05: 98:e7:c4:94:43:75:e3:be:06:77:a7:79:cc:06:d5: f4:44:87:a8:70:e1:85:ac:2c:77:ae:62:8f:fd:da: eb:85:3d:3a:9e:ef:37:12:e0:cb:98:ed:3f:72:e5: 2b:e0:14:15:46:1a:7d:03:99:6b:52:77:d0:96:49: 2f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BF:5A:46:EC:47:AB:4D:B7:FE:F4:55:89:64:55:F7:2B:89:33:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/41de00c9-537e-3dad-b5c6-633d840612f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 66.163.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:96:d9:d6:92:59:e9:0a:af:91:c1:d7:c4:aa:c3:be:2c:29: e7:c4:49:4a:11:e9:9c:46:a4:5a:2a:dc:82:fb:b7:e3:55:8f: 45:84:19:04:d3:c2:bc:d5:76:c6:1f:1f:b4:df:19:06:62:4b: 52:b8:68:9e:10:0d:4e:6e:7d:ad:91:eb:53:41:bf:fc:b6:7d: 47:0a:4d:84:15:c5:6d:a0:88:a2:1b:cf:29:14:01:e7:56:71: 55:98:dd:f8:c2:23:7b:cc:94:4a:7b:ea:0c:d6:43:ca:de:c0: b5:f3:6d:70:b0:16:d9:0a:6c:24:79:0a:10:b1:02:35:ac:13: c2:42:1c:4a:45:c1:77:12:02:c7:12:b9:2b:93:67:06:bb:0d: d3:98:70:cc:d3:ad:ad:38:ed:e2:f5:95:7f:73:35:c8:52:eb: ad:a4:8e:53:26:7d:90:5b:b4:b3:c7:e7:f9:6c:bb:35:25:e4: 57:74:49:03:bc:54:b6:83:9b:19:1e:48:82:4c:85:18:7e:fb: 7a:a6:75:97:87:55:6c:ce:9c:eb:32:40:69:2a:6c:02:e3:f0: 79:a6:bb:47:a6:81:7e:4b:a4:cd:44:58:f0:78:74:16:a2:8d: b7:e6:ca:31:f8:53:41:5e:34:08:64:6d:e7:9b:c5:14:0e:f5: 62:9e:34:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuSfUJGc7uD7LTnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDEyOTAxMzQxOFoXDTI2MDQyOTAwMzQxOFowLzEtMCsGA1UEAxMk MzNkZmYwM2UtZTY0Mi00OTAzLWI4OGEtMjg3MjVmZWIzMTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Fn/QPEyYG9iDYDBeJRygXwnV0ou49S4bF7L aPgXBDHOJxJ84Tv34qRIvu3Rs+DQT7L7JFy+hJdzqDwLJ5JzVpHooBwcQWbE2GUz UFVi6yLwd2H7Hr2Mae5fjtfWX67aE9vj4CrUi3HNIH8Upj2+pXgzbU8NSqWMYIdr Ynvy4A83WOxJL/riMMtcQMQsdQKGRDGtrsoKtXAiO0NtsHLnx5ygPyZFREAlKv/r k9AAuo8I7C0TNfhN67hVRGoLE6c1oAWY58SUQ3XjvgZ3p3nMBtX0RIeocOGFrCx3 rmKP/drrhT06nu83EuDLmO0/cuUr4BQVRhp9A5lrUnfQlkkvHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+/WkbsR6tNt/70VYlkVfcriTNoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNDFkZTAwYzktNTM3ZS0z ZGFkLWI1YzYtNjMzZDg0MDYxMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqN8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6W2daSWekKr5HB18Sqw74sKefESUoR6ZxGpFoq3IL7t+NVj0WEGQTT wrzVdsYfH7TfGQZiS1K4aJ4QDU5ufa2R61NBv/y2fUcKTYQVxW2giKIbzykUAedW cVWY3fjCI3vMlEp76gzWQ8rewLXzbXCwFtkKbCR5ChCxAjWsE8JCHEpFwXcSAscS uSuTZwa7DdOYcMzTra047eL1lX9zNchS662kjlMmfZBbtLPH5/lsuzUl5Fd0SQO8 VLaDmxkeSIJMhRh++3qmdZeHVWzOnOsyQGkqbALj8Hmmu0emgX5LpM1EWPB4dBai jbfmyjH4U0FeNAhkbeebxRQO9WKeNCg= -----END CERTIFICATE-----Generated at Mon Mar 2 07:31:18 2026 by rpki-client