$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5b788c6c-ad54-3058-ada5-8eebc68e8f95.roa File: 5b788c6c-ad54-3058-ada5-8eebc68e8f95.roa (raw, json) Hash identifier: d+4wjco6dFX1nizObPOh+WU/4mgVMCDXpIqt4b0eFYw= Subject key identifier: F0:4A:E6:00:85:D9:C9:39:BE:1E:A0:30:33:EC:91:03:4F:2C:21:22 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F31B7CD1C06F2AD8EF8874980 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5b788c6c-ad54-3058-ada5-8eebc68e8f95.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 63023 IP address blocks: 170.101.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:cd:1c:06:f2:ad:8e:f8:87:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=8b67c258-22fc-42e3-89a9-af6245b321b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2e:23:36:5a:8c:ae:0f:22:a4:e3:52:19:ad: 92:bd:11:37:c1:bb:63:62:62:b4:18:3d:27:42:d7: d2:22:62:6f:eb:d8:e1:d2:3c:a1:44:81:a5:46:50: de:39:b6:e8:2c:0b:e7:fa:71:2d:51:0e:7f:ba:ba: 82:28:0a:29:d1:05:81:cd:89:39:a2:2d:1f:05:de: ed:0e:b1:6c:83:4d:6d:38:2e:eb:1d:7a:0f:d5:4f: 76:3d:ed:92:44:84:69:df:45:51:d6:3e:e5:ab:ab: d4:a3:d7:1f:de:ca:5f:ea:72:26:30:79:3c:09:83: a3:6d:98:9a:d2:30:91:86:5a:eb:31:31:fa:25:19: 20:db:ef:5d:16:6c:01:fa:c5:02:42:56:b7:5a:f6: a3:f4:a8:5b:d2:85:fa:2a:15:38:b3:e9:12:64:76: 91:b8:4a:44:45:83:a8:13:3f:67:e1:48:60:36:63: 21:f0:eb:31:d7:2b:8d:1f:5b:53:c7:cd:5a:71:5c: 35:7d:15:cc:01:cc:0b:9b:9d:10:52:a1:40:ee:87: bc:d1:1b:9d:6e:a8:11:c3:c5:8e:d9:4f:72:0b:6a: 51:b7:f1:81:87:a7:11:ad:90:dc:bc:0c:9b:14:34: 5e:87:a2:8a:1e:a8:3d:d3:43:2f:03:9f:ce:58:3a: 2e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4A:E6:00:85:D9:C9:39:BE:1E:A0:30:33:EC:91:03:4F:2C:21:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5b788c6c-ad54-3058-ada5-8eebc68e8f95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:73:b7:b3:bf:86:b4:00:91:de:11:71:48:e7:6b:7e:cf:41: f0:44:7d:36:7f:22:cc:b7:b7:dd:75:12:19:6d:19:31:da:47: 69:26:bc:bd:fb:38:b2:da:3f:4a:d9:d5:f6:ac:71:ef:6e:46: 07:30:38:9f:32:a2:2d:48:a7:f8:46:cb:80:74:91:bf:93:87: ec:e8:ac:3b:22:e1:18:5f:f4:53:29:3e:df:10:96:c4:8b:de: 3d:23:38:71:9b:a0:19:98:91:c5:4b:b7:2f:50:5d:90:70:75: ac:99:a0:81:01:c6:d1:46:c6:c9:2d:4e:e1:05:8e:5e:8a:e9: 6c:e6:85:81:6a:c3:e5:28:9f:bc:d7:36:d7:2d:48:48:15:3e: 8e:14:c9:bc:09:2e:a5:1d:c0:74:52:9b:39:eb:e6:31:29:93: 37:5f:11:0a:3b:b3:b6:6b:ab:fe:fb:9d:68:a7:67:d6:78:e2: b2:71:2f:d7:f9:6e:53:d6:4a:b4:9f:ab:81:c4:f9:86:d7:ae: 0f:d5:5d:0a:6a:19:23:40:fb:6e:1d:a1:52:7f:38:25:ab:80: f0:d5:13:24:a6:51:c8:a3:08:43:49:e6:dd:f8:71:39:8c:70: 8f:b8:4b:33:ce:1e:48:70:b2:9d:78:36:50:35:99:dc:17:b3: ce:bd:fe:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt80cBvKtjviHSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk OGI2N2MyNTgtMjJmYy00MmUzLTg5YTktYWY2MjQ1YjMyMWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS4jNlqMrg8ipONSGa2SvRE3wbtjYmK0GD0n QtfSImJv69jh0jyhRIGlRlDeObboLAvn+nEtUQ5/urqCKAop0QWBzYk5oi0fBd7t DrFsg01tOC7rHXoP1U92Pe2SRIRp30VR1j7lq6vUo9cf3spf6nImMHk8CYOjbZia 0jCRhlrrMTH6JRkg2+9dFmwB+sUCQla3Wvaj9Khb0oX6KhU4s+kSZHaRuEpERYOo Ez9n4UhgNmMh8Osx1yuNH1tTx81acVw1fRXMAcwLm50QUqFA7oe80RudbqgRw8WO 2U9yC2pRt/GBh6cRrZDcvAybFDReh6KKHqg900MvA5/OWDoucQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBK5gCF2ck5vh6gMDPskQNPLCEiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNWI3ODhjNmMtYWQ1NC0z MDU4LWFkYTUtOGVlYmM2OGU4Zjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmV2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANzt7O/hrQAkd4RcUjna37PQfBEfTZ/Isy3t911EhltGTHaR2kmvL37 OLLaP0rZ1fasce9uRgcwOJ8yoi1Ip/hGy4B0kb+Th+zorDsi4Rhf9FMpPt8QlsSL 3j0jOHGboBmYkcVLty9QXZBwdayZoIEBxtFGxsktTuEFjl6K6WzmhYFqw+Uon7zX NtctSEgVPo4UybwJLqUdwHRSmznr5jEpkzdfEQo7s7Zrq/77nWinZ9Z44rJxL9f5 blPWSrSfq4HE+YbXrg/VXQpqGSNA+24doVJ/OCWrgPDVEySmUcijCENJ5t34cTmM cI+4SzPOHkhwsp14NlA1mdwXs869/tQ= -----END CERTIFICATE-----Generated at Tue Sep 22 20:05:14 2026 by rpki-client