$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/4bb77066-c654-3abd-b610-c2335054db90.roa File: 4bb77066-c654-3abd-b610-c2335054db90.roa (raw, json) Hash identifier: vRNl0eRyIwkRIOj1UP1XUwEYKGk39+i3U3BKpvlx4Tw= Subject key identifier: EF:CF:83:A5:37:7D:7C:DE:CE:03:0D:4E:37:E8:A3:A6:A6:CE:31:8E Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F31B7CE273FC7B36F192A8D10 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/4bb77066-c654-3abd-b610-c2335054db90.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 63023 IP address blocks: 170.101.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:ce:27:3f:c7:b3:6f:19:2a:8d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=b6522c9d-dcb0-48d8-8448-3d74578f9f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:52:19:58:4d:97:f4:31:92:6c:0b:2a:5e:9d: e4:54:61:ce:e3:cd:b8:39:cd:15:1b:98:89:dd:59: 99:20:66:04:26:b9:46:64:a9:21:20:a6:06:9a:a2: fc:99:0d:f7:bd:3a:e6:d5:4f:04:01:93:9c:f4:e4: d5:35:7c:19:17:b0:cc:f8:a3:61:68:da:e7:bf:67: 7a:32:e2:c9:39:bc:5d:e8:78:72:32:23:4f:99:a7: 6e:f1:1d:c9:1a:97:a5:fc:4c:c1:19:74:c6:e7:35: 46:00:c2:f0:ba:11:72:c2:5b:2b:df:f4:13:b7:5b: c3:18:18:7b:61:e0:25:3a:e9:ea:f4:df:72:e2:5c: 38:36:b4:58:c8:69:da:5d:b3:27:64:a1:71:0e:f2: 09:8e:ea:8c:05:15:2e:df:f8:73:17:a9:9e:a8:ed: 73:e9:4f:6f:1b:f7:12:6d:ce:47:61:f4:30:da:09: 2e:b6:3f:38:f2:95:aa:89:ad:5e:62:cb:72:37:a7: 56:09:2e:80:9f:6f:da:5a:f3:23:c9:56:3c:9b:2b: 29:f7:10:12:9a:0d:c3:ae:27:a1:04:66:9d:f9:f5: bc:88:67:82:b6:4d:8c:fe:8b:e0:62:83:38:d9:f8: 13:e3:35:b6:07:00:65:1c:72:b8:ba:90:81:d1:4c: 3f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CF:83:A5:37:7D:7C:DE:CE:03:0D:4E:37:E8:A3:A6:A6:CE:31:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/4bb77066-c654-3abd-b610-c2335054db90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ae:35:3b:5f:b2:74:55:1d:f4:de:f1:96:93:22:68:a2:d8: 13:06:df:86:73:7c:07:93:7d:d6:c9:54:3c:a3:a8:e6:51:50: 18:9d:e4:01:3a:b0:97:9e:1c:44:19:38:ea:07:42:8e:0a:e6: fd:3a:13:8b:2c:03:8d:f5:22:b5:d3:e5:01:c3:fb:d5:09:85: 1c:e9:4a:24:1a:5e:3f:b9:a0:0b:6c:e3:36:0f:b9:e5:ee:b6: 9b:45:66:ec:df:13:81:d6:ba:ec:58:69:c6:b1:05:a9:5b:50: 7b:4d:62:14:2d:3c:78:bf:1e:bb:d8:be:b7:a6:5b:8a:e6:95: d9:2d:a1:6f:d9:83:df:d9:ca:aa:b7:9b:97:3e:b2:96:e9:fb: 2f:b4:70:67:7f:91:8d:41:00:ab:e0:44:23:46:cc:c3:f6:a7: 2d:e0:c3:27:ef:3f:7b:dc:70:a7:1f:e0:8b:89:97:b3:09:58: eb:ff:9b:7d:ff:be:77:dd:66:b6:e5:88:9d:b4:12:02:9d:c0: e2:fb:3a:d9:70:d7:82:de:91:02:9b:a2:60:bc:88:1f:1b:d5: 9f:35:19:02:55:ed:77:ca:31:95:70:e5:f8:80:2d:51:fa:ec: 69:90:e8:79:de:92:6a:b9:98:40:69:e4:dd:16:8d:1e:ed:68: da:34:65:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt84nP8ezbxkqjRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk YjY1MjJjOWQtZGNiMC00OGQ4LTg0NDgtM2Q3NDU3OGY5ZjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1IZWE2X9DGSbAsqXp3kVGHO4824Oc0VG5iJ 3VmZIGYEJrlGZKkhIKYGmqL8mQ33vTrm1U8EAZOc9OTVNXwZF7DM+KNhaNrnv2d6 MuLJObxd6HhyMiNPmadu8R3JGpel/EzBGXTG5zVGAMLwuhFywlsr3/QTt1vDGBh7 YeAlOunq9N9y4lw4NrRYyGnaXbMnZKFxDvIJjuqMBRUu3/hzF6meqO1z6U9vG/cS bc5HYfQw2gkutj848pWqia1eYstyN6dWCS6An2/aWvMjyVY8mysp9xASmg3Drieh BGad+fW8iGeCtk2M/ovgYoM42fgT4zW2BwBlHHK4upCB0Uw/WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/Pg6U3fXzezgMNTjfoo6amzjGOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNGJiNzcwNjYtYzY1NC0z YWJkLWI2MTAtYzIzMzUwNTRkYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmV4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGuNTtfsnRVHfTe8ZaTImii2BMG34ZzfAeTfdbJVDyjqOZRUBid5AE6 sJeeHEQZOOoHQo4K5v06E4ssA431IrXT5QHD+9UJhRzpSiQaXj+5oAts4zYPueXu tptFZuzfE4HWuuxYacaxBalbUHtNYhQtPHi/HrvYvremW4rmldktoW/Zg9/Zyqq3 m5c+spbp+y+0cGd/kY1BAKvgRCNGzMP2py3gwyfvP3vccKcf4IuJl7MJWOv/m33/ vnfdZrbliJ20EgKdwOL7Otlw14LekQKbomC8iB8b1Z81GQJV7XfKMZVw5fiALVH6 7GmQ6Hnekmq5mEBp5N0WjR7taNo0Zcc= -----END CERTIFICATE-----Generated at Sun Sep 20 18:55:22 2026 by rpki-client