$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/58406468-89cd-381d-b1f8-5ffef3cc1aca.roa File: 58406468-89cd-381d-b1f8-5ffef3cc1aca.roa (raw, json) Hash identifier: a+VXLM7NgI69K3HcXFD4Ht8XUXcvyIQiHOTOro+mWG8= Subject key identifier: FC:19:64:B4:D3:BE:E6:C0:06:72:92:15:79:C2:32:55:67:AB:32:A9 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F49730EEAAF25C562E9DEE400 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/58406468-89cd-381d-b1f8-5ffef3cc1aca.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 63023 IP address blocks: 66.163.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:0e:ea:af:25:c5:62:e9:de:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3ff7a6a3-8e10-4d9d-88e6-dfa0812be83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f9:7a:aa:e9:84:4b:52:1f:89:b1:ae:2b:41: f3:65:6f:2e:5e:dd:14:b2:e5:34:49:d0:ee:2c:ee: c4:b9:4a:4f:df:70:28:25:2a:18:ae:c7:49:d6:f7: 0d:f9:6e:bd:3c:b6:01:14:fc:53:f7:a9:14:f5:cb: 5c:13:3a:35:cc:32:2e:9e:de:d3:52:17:ca:fe:df: bc:96:51:c7:c7:71:31:09:dd:aa:e4:6e:94:38:16: b9:45:ff:e1:e7:a8:bb:82:ac:90:5f:1b:f8:1c:43: 5d:b8:28:c0:5d:a1:55:e8:cf:1a:0b:19:09:8c:b7: 08:1e:68:ee:ae:9a:a2:bb:61:9b:4d:90:c5:b5:98: 23:0c:46:b7:35:90:16:7a:df:2f:8a:d5:cf:04:01: 72:0e:1d:77:c1:5f:c6:93:de:5a:05:2e:00:8f:4a: 7f:92:5b:cb:99:14:0b:0b:1b:28:dd:bc:ab:82:be: 47:13:38:28:18:ed:e6:eb:d1:19:f3:71:aa:3b:4a: 99:f6:1a:18:5b:01:58:3e:a7:64:4e:78:e7:f1:fe: a8:de:28:83:a5:68:e7:f8:3f:a1:8d:14:b1:dc:b4: 86:cc:bc:76:93:50:f5:53:31:4b:eb:8e:72:88:d0: 63:1d:41:4a:ec:42:74:ae:65:cb:5b:9a:f8:b0:da: 58:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:19:64:B4:D3:BE:E6:C0:06:72:92:15:79:C2:32:55:67:AB:32:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/58406468-89cd-381d-b1f8-5ffef3cc1aca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 66.163.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:6b:5f:ef:9a:f5:f0:b6:67:64:d5:9d:9f:16:39:1c:82:dd: 3d:c0:e1:02:3d:d3:85:51:5e:97:76:19:c9:c3:45:0a:e6:73: c6:73:45:58:03:63:be:b3:50:62:00:0d:bf:6f:46:9c:0a:97: 3f:76:b8:a1:a4:27:18:b3:11:60:04:cc:37:c4:cf:27:e4:c4: a3:0b:2f:cd:67:f5:15:b5:82:71:4c:26:22:71:b4:88:d4:75: 5d:0c:80:c8:24:3d:5a:50:09:13:f4:1b:96:62:23:3f:86:8d: 7f:d0:dc:d3:4e:ef:c0:a9:5c:1c:06:e7:83:72:1d:51:75:73: 9e:31:2a:b4:0c:31:1b:19:1b:94:3a:76:ab:0c:b4:b0:35:c3: 38:99:d8:37:59:cd:b8:c7:e4:d6:ee:d3:ec:7d:3b:0b:11:84: f4:59:e0:8a:cb:fb:b3:f6:82:af:b4:5a:40:ad:62:28:d2:26: 2f:75:da:35:f3:79:e8:76:29:b8:ea:56:c0:b6:24:77:36:d3: cb:09:86:96:ef:35:5b:ab:50:2d:5b:cd:09:01:90:f4:08:7e: 95:f9:c7:14:ad:3e:25:f5:7a:84:05:08:95:b8:67:ea:8c:d7: be:b2:95:82:a8:60:3b:d0:53:5f:7a:bb:0a:64:6f:4a:85:65: 4f:55:f2:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcw7qryXFYune5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2ZmN2E2YTMtOGUxMC00ZDlkLTg4ZTYtZGZhMDgxMmJlODNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPl6qumES1IfibGuK0HzZW8uXt0UsuU0SdDu LO7EuUpP33AoJSoYrsdJ1vcN+W69PLYBFPxT96kU9ctcEzo1zDIunt7TUhfK/t+8 llHHx3ExCd2q5G6UOBa5Rf/h56i7gqyQXxv4HENduCjAXaFV6M8aCxkJjLcIHmju rpqiu2GbTZDFtZgjDEa3NZAWet8vitXPBAFyDh13wV/Gk95aBS4Aj0p/klvLmRQL Cxso3byrgr5HEzgoGO3m69EZ83GqO0qZ9hoYWwFYPqdkTnjn8f6o3iiDpWjn+D+h jRSx3LSGzLx2k1D1UzFL645yiNBjHUFK7EJ0rmXLW5r4sNpY1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwZZLTTvubABnKSFXnCMlVnqzKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNTg0MDY0NjgtODljZC0z ODFkLWIxZjgtNWZmZWYzY2MxYWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqN1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFrX++a9fC2Z2TVnZ8WORyC3T3A4QI904VRXpd2GcnDRQrmc8ZzRVgD Y76zUGIADb9vRpwKlz92uKGkJxizEWAEzDfEzyfkxKMLL81n9RW1gnFMJiJxtIjU dV0MgMgkPVpQCRP0G5ZiIz+GjX/Q3NNO78CpXBwG54NyHVF1c54xKrQMMRsZG5Q6 dqsMtLA1wziZ2DdZzbjH5Nbu0+x9OwsRhPRZ4IrL+7P2gq+0WkCtYijSJi912jXz eeh2KbjqVsC2JHc208sJhpbvNVurUC1bzQkBkPQIfpX5xxStPiX1eoQFCJW4Z+qM 176ylYKoYDvQU196uwpkb0qFZU9V8lM= -----END CERTIFICATE-----Generated at Sun Sep 27 08:58:29 2026 by rpki-client