$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/4aec40b3-a04e-3363-8f4e-8e6ae19d242e.roa File: 4aec40b3-a04e-3363-8f4e-8e6ae19d242e.roa (raw, json) Hash identifier: HgHfwHf1yTcWJaVfKLzvEQ15FQPZAO0DJFeL0WKtLfU= Subject key identifier: 8A:65:CC:66:2B:4C:74:D4:EF:97:4E:9D:4C:62:81:B6:16:3F:E5:78 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584D04E22E7F0ED20FA31F725A80 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/4aec40b3-a04e-3363-8f4e-8e6ae19d242e.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 62563 IP address blocks: 66.163.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:2e:7f:0e:d2:0f:a3:1f:72:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=cc7e9741-a530-4564-8115-e5138fa58463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:06:91:f8:7a:a9:bf:16:5d:6b:03:11:3f: bd:fb:ea:c4:0f:f7:6d:75:7f:df:6b:da:06:61:6c: 69:6b:9a:04:6b:f0:63:b8:49:28:b4:b1:41:04:0d: 48:46:7f:c1:f1:34:ed:61:1b:fa:40:e1:3f:5e:15: 88:92:a2:22:a1:c5:6e:be:ab:c6:36:a2:6f:de:9f: 37:60:a6:bc:3f:b8:bb:39:df:b1:19:59:f9:1b:a8: c6:16:f8:22:f7:85:0e:2a:10:77:9f:a4:ac:f0:f5: b5:91:ce:30:a0:6a:3d:30:7b:20:da:0a:af:c3:93: 21:19:d1:f7:de:d1:49:8d:3f:22:9e:69:63:26:40: 86:7e:b6:99:e7:6d:7f:e0:d5:52:e3:74:7f:cf:de: b9:1c:49:fb:3f:35:a2:cd:17:50:7f:32:68:4b:07: 06:6d:fb:dd:e2:49:07:67:4a:41:42:78:82:7f:77: 0c:bc:c6:6b:28:e8:73:20:88:8f:bf:23:a1:33:b1: b8:9e:4f:13:92:d3:e2:78:df:83:be:92:9b:c9:a7: e2:98:35:0c:4f:b8:d3:fc:bc:a8:e9:a6:fe:0a:72: 99:92:d4:09:53:89:1b:9d:96:36:03:a3:3c:ac:46: 5d:32:ca:cf:07:87:d9:cb:a6:d6:ed:00:86:53:db: a8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:65:CC:66:2B:4C:74:D4:EF:97:4E:9D:4C:62:81:B6:16:3F:E5:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/4aec40b3-a04e-3363-8f4e-8e6ae19d242e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 66.163.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f9:79:36:e9:1a:12:05:d6:2e:c5:7e:c7:03:a5:8e:e5:20: 78:b7:6b:ba:64:06:99:e8:d8:b8:e8:2c:00:14:70:1b:34:b5: 70:a4:60:d9:03:22:22:ca:73:0b:65:29:e3:4d:63:4a:bb:a0: 74:e9:14:06:0e:cd:cd:36:09:9a:b0:70:39:91:5b:f8:f5:fc: ac:f7:c7:c7:12:d5:04:0b:17:8e:06:a8:cf:9f:45:d4:32:10: 91:e6:82:f9:f1:d9:bb:d0:89:98:cf:ff:98:f2:58:e1:0d:6e: 57:fd:dd:af:8f:93:45:aa:6e:8e:06:7e:96:9d:1d:9a:a6:6b: 9d:bb:7d:60:0d:d5:0d:7b:f9:56:60:f9:55:5b:59:61:9e:cb: b8:a4:4f:22:21:57:4f:e9:29:59:66:5a:c0:69:d0:29:1a:c4: de:bc:e9:db:46:76:40:f3:a5:c8:76:4b:e0:ef:b5:8d:38:7e: 74:db:33:03:fc:79:4d:96:6c:b3:f8:72:d0:b5:68:36:ad:37: 45:46:3b:2b:a5:62:ec:4d:91:e6:83:ff:46:ce:98:44:dd:4e: 7e:0a:c0:1e:62:72:e1:e2:64:87:88:96:2f:32:db:22:ff:1d: ad:07:2d:be:08:76:43:a2:6d:eb:dc:e5:bb:25:b7:50:a3:d7: 83:4f:a6:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0E4i5/DtIPox9yWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk Y2M3ZTk3NDEtYTUzMC00NTY0LTgxMTUtZTUxMzhmYTU4NDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmUGkfh6qb8WXWsDET+9++rED/dtdX/fa9oG YWxpa5oEa/BjuEkotLFBBA1IRn/B8TTtYRv6QOE/XhWIkqIiocVuvqvGNqJv3p83 YKa8P7i7Od+xGVn5G6jGFvgi94UOKhB3n6Ss8PW1kc4woGo9MHsg2gqvw5MhGdH3 3tFJjT8inmljJkCGfraZ521/4NVS43R/z965HEn7PzWizRdQfzJoSwcGbfvd4kkH Z0pBQniCf3cMvMZrKOhzIIiPvyOhM7G4nk8TktPieN+DvpKbyafimDUMT7jT/Lyo 6ab+CnKZktQJU4kbnZY2A6M8rEZdMsrPB4fZy6bW7QCGU9uocQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIplzGYrTHTU75dOnUxigbYWP+V4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNGFlYzQwYjMtYTA0ZS0z MzYzLThmNGUtOGU2YWUxOWQyNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqNxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADL5eTbpGhIF1i7FfscDpY7lIHi3a7pkBpno2LjoLAAUcBs0tXCkYNkD IiLKcwtlKeNNY0q7oHTpFAYOzc02CZqwcDmRW/j1/Kz3x8cS1QQLF44GqM+fRdQy EJHmgvnx2bvQiZjP/5jyWOENblf93a+Pk0Wqbo4GfpadHZqma527fWAN1Q17+VZg +VVbWWGey7ikTyIhV0/pKVlmWsBp0CkaxN686dtGdkDzpch2S+DvtY04fnTbMwP8 eU2WbLP4ctC1aDatN0VGOyulYuxNkeaD/0bOmETdTn4KwB5icuHiZIeIli8y2yL/ Ha0HLb4IdkOibevc5bslt1Cj14NPpqM= -----END CERTIFICATE-----Generated at Mon Mar 2 02:21:06 2026 by rpki-client