$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/680b45f1-7184-3fc7-be16-b4ee3d61e98b.roa File: 680b45f1-7184-3fc7-be16-b4ee3d61e98b.roa (raw, json) Hash identifier: +kNST28NRQiCytCdPgwwX7ogTl3zzlYGysCvHq2DVKE= Subject key identifier: AF:A0:D1:BD:A9:57:DC:7E:40:2A:50:40:88:E9:82:A2:A3:DD:90:26 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F31B7BF05F14FAF8CF6802BA0 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/680b45f1-7184-3fc7-be16-b4ee3d61e98b.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 63023 IP address blocks: 170.101.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:bf:05:f1:4f:af:8c:f6:80:2b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=468c385b-f4b7-471c-9fb9-1f5cae5fff37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7f:87:ee:ba:0d:9d:b6:5d:f2:89:74:ee:88: 5e:87:d2:0f:67:45:25:6a:51:58:bf:73:32:5a:82: ca:ac:9d:64:1e:db:76:a6:1b:e0:50:9d:60:0c:f9: 1a:5b:17:11:35:69:b5:e5:92:41:ee:b0:5c:4b:8f: 49:67:99:4c:7e:73:2f:77:58:28:86:ad:13:20:15: 3d:94:9b:55:fb:aa:65:17:bc:78:4f:5d:10:5a:55: 00:05:64:e8:b4:c2:11:ce:8a:0b:3c:c5:02:93:b3: c9:b3:c1:55:8c:d7:0b:96:ea:4d:41:62:97:3c:6c: 06:2f:62:2e:d1:64:40:aa:89:58:97:81:7f:a3:a8: b7:c8:96:bc:80:80:a1:9a:25:c3:e5:b9:53:83:06: 2d:53:e9:aa:3d:fa:48:19:74:1e:be:f6:fd:67:d9: 52:2f:4d:bd:a9:41:e9:aa:40:04:81:b4:72:96:55: 90:22:73:ed:34:0a:46:bb:c2:1a:5a:a8:f7:d4:00: 98:61:ee:ce:82:69:5b:38:03:d9:5d:f5:10:7f:b3: b5:15:cd:92:d4:fa:79:15:f3:c5:99:40:90:3e:74: 87:71:b4:63:5c:1f:31:0d:53:c0:73:97:a6:6e:6e: 63:cf:1e:90:f4:dc:3c:28:19:9b:b1:81:a2:77:7d: 5c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A0:D1:BD:A9:57:DC:7E:40:2A:50:40:88:E9:82:A2:A3:DD:90:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/680b45f1-7184-3fc7-be16-b4ee3d61e98b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:57:de:57:39:c7:5d:f5:7b:c6:b7:2e:21:a7:03:b6:07:fa: ec:93:81:65:1b:eb:1f:ad:99:66:f0:54:54:31:90:d2:e4:f9: 04:a6:d8:29:dc:67:95:68:2a:72:d9:df:a7:aa:c5:99:01:de: de:1a:2b:00:a2:3b:cb:27:e4:cb:a4:29:04:53:3f:5b:74:fc: eb:0c:2a:59:d5:63:22:5e:ec:ee:b1:49:3c:b8:e1:3a:0c:05: 2c:b7:18:9e:2f:05:f8:6d:e1:92:03:3a:85:3b:2b:45:ec:5e: 1c:6b:c7:2a:45:9d:2c:06:4c:5a:cb:a9:c5:e6:42:e9:27:57: 5f:ed:46:1c:5a:28:33:e9:86:74:15:00:e9:62:ea:65:4e:f2: 8b:6e:41:d9:ba:8b:65:be:e2:78:85:26:6f:5a:43:9b:7d:ce: 6d:f5:54:fa:1c:18:84:88:04:9d:44:fe:a4:c4:db:fb:5d:c5: 6d:2a:5a:07:9c:97:ed:4c:bc:9b:5f:48:47:be:70:fb:bc:6c: 98:c8:00:44:14:f3:16:ea:e4:ff:7d:fc:ed:45:66:9d:3e:6a: d0:7a:07:55:e1:35:25:6b:6b:fe:33:d8:4a:a7:d0:36:3d:6d: de:ab:72:62:08:06:d7:37:3f:8e:6a:a3:c9:8d:fd:05:55:71: 3a:3e:e7:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt78F8U+vjPaAK6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk NDY4YzM4NWItZjRiNy00NzFjLTlmYjktMWY1Y2FlNWZmZjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjX+H7roNnbZd8ol07oheh9IPZ0UlalFYv3My WoLKrJ1kHtt2phvgUJ1gDPkaWxcRNWm15ZJB7rBcS49JZ5lMfnMvd1gohq0TIBU9 lJtV+6plF7x4T10QWlUABWTotMIRzooLPMUCk7PJs8FVjNcLlupNQWKXPGwGL2Iu 0WRAqolYl4F/o6i3yJa8gIChmiXD5blTgwYtU+mqPfpIGXQevvb9Z9lSL029qUHp qkAEgbRyllWQInPtNApGu8IaWqj31ACYYe7OgmlbOAPZXfUQf7O1Fc2S1Pp5FfPF mUCQPnSHcbRjXB8xDVPAc5embm5jzx6Q9Nw8KBmbsYGid31c4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+g0b2pV9x+QCpQQIjpgqKj3ZAmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNjgwYjQ1ZjEtNzE4NC0z ZmM3LWJlMTYtYjRlZTNkNjFlOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmVjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtX3lc5x131e8a3LiGnA7YH+uyTgWUb6x+tmWbwVFQxkNLk+QSm2Cnc Z5VoKnLZ36eqxZkB3t4aKwCiO8sn5MukKQRTP1t0/OsMKlnVYyJe7O6xSTy44ToM BSy3GJ4vBfht4ZIDOoU7K0XsXhxrxypFnSwGTFrLqcXmQuknV1/tRhxaKDPphnQV AOli6mVO8otuQdm6i2W+4niFJm9aQ5t9zm31VPocGISIBJ1E/qTE2/tdxW0qWgec l+1MvJtfSEe+cPu8bJjIAEQU8xbq5P99/O1FZp0+atB6B1XhNSVra/4z2Eqn0DY9 bd6rcmIIBtc3P45qo8mN/QVVcTo+5/o= -----END CERTIFICATE-----Generated at Sun Sep 20 20:03:36 2026 by rpki-client