$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/870d0c27-e843-348a-b285-4817a8b3c1eb.roa File: 870d0c27-e843-348a-b285-4817a8b3c1eb.roa (raw, json) Hash identifier: iVbcPu8LlKZHk42GegAzOY+id8bSSxkGW+YU+VtdTNU= Subject key identifier: A1:3B:20:CC:E9:69:B2:D2:3B:19:A3:09:9B:52:CD:C7:9D:5C:15:F4 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F31B7BE7F88EF61FF5840B600 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/870d0c27-e843-348a-b285-4817a8b3c1eb.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 63023 IP address blocks: 170.101.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:be:7f:88:ef:61:ff:58:40:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=ac721bce-9de3-4875-8026-6c528260384b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f9:f0:22:42:1d:33:d3:c4:b4:ce:3d:2e:45: 69:74:74:9a:bf:3b:2d:01:7a:6d:b0:64:ab:c9:dd: 04:0a:12:01:0b:f1:7b:91:bb:6c:04:c7:dc:a9:44: 38:35:ec:8a:f7:30:54:3f:c4:c4:52:e6:29:4b:41: 64:2d:64:bb:57:bc:65:d6:5f:72:30:c2:af:f3:ae: 29:69:c1:03:08:a1:ea:7e:27:16:ea:0b:71:52:13: 75:50:fd:ac:8b:87:ec:58:75:87:97:6e:70:84:26: 37:9a:1c:89:f6:1a:4b:77:db:4e:8f:90:7c:0b:d1: b4:4c:c9:95:be:98:a9:38:b4:d9:0b:98:01:2e:1e: 36:bc:66:db:bb:07:40:c5:04:83:a7:07:f3:69:34: 0c:40:4e:65:f7:9a:31:00:33:40:20:81:c6:b5:ac: 94:19:81:7a:d8:db:6d:cc:dc:7e:f1:3d:26:c6:0c: 6a:3d:f1:76:f5:ed:75:90:16:3a:cf:d4:a9:9b:2d: dc:f2:e4:c3:72:f2:28:ec:55:c8:b9:43:92:a4:3c: df:d5:4e:15:18:e8:9b:ae:3d:ba:ac:80:a5:7f:e2: f9:44:d2:34:ff:6e:15:08:41:df:32:0c:04:65:74: b9:15:33:09:30:3c:84:14:23:f3:ea:5a:05:34:23: a3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3B:20:CC:E9:69:B2:D2:3B:19:A3:09:9B:52:CD:C7:9D:5C:15:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/870d0c27-e843-348a-b285-4817a8b3c1eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:9f:5e:a4:62:8d:25:7c:f4:4a:9a:d7:fa:b9:67:c6:b5:34: 26:20:b1:d7:fc:04:d4:a9:1e:d9:5d:52:ee:f5:27:9b:74:39: 6a:35:f4:6a:49:4d:11:11:60:81:5b:1a:54:61:b3:7c:b2:44: 70:58:8f:b6:30:1f:4a:f7:22:6a:95:b6:a2:52:f9:8c:57:f4: ad:22:20:a8:ef:94:27:72:37:33:59:60:38:3a:06:45:a0:07: 87:b9:30:79:31:7f:e5:06:ef:8d:07:00:2b:af:48:38:cf:b8: 3c:42:16:c2:da:ec:47:54:30:5e:a2:7f:c7:bf:61:aa:e8:98: 23:30:45:a0:5b:66:8d:e8:52:2c:31:19:97:6a:4d:ea:89:d9: 34:cf:f9:72:9a:61:3e:6e:11:ad:dd:df:06:e4:95:1a:57:31: c3:e6:46:c3:33:95:25:25:0b:aa:1e:99:9a:cd:39:8c:4c:53: da:62:6f:42:75:21:80:3a:f1:5e:f6:b1:59:fc:ad:ff:b5:87: 3c:78:01:96:8c:d1:8a:fd:11:eb:d4:47:00:88:01:d5:20:f9: 0e:6c:26:df:52:65:46:70:b1:36:24:16:92:36:e2:9c:da:f3: 5c:fb:d0:92:0f:6d:07:52:a1:fb:d9:23:14:20:5e:e1:62:0a: 32:20:f0:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt75/iO9h/1hAtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk YWM3MjFiY2UtOWRlMy00ODc1LTgwMjYtNmM1MjgyNjAzODRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfnwIkIdM9PEtM49LkVpdHSavzstAXptsGSr yd0EChIBC/F7kbtsBMfcqUQ4NeyK9zBUP8TEUuYpS0FkLWS7V7xl1l9yMMKv864p acEDCKHqficW6gtxUhN1UP2si4fsWHWHl25whCY3mhyJ9hpLd9tOj5B8C9G0TMmV vpipOLTZC5gBLh42vGbbuwdAxQSDpwfzaTQMQE5l95oxADNAIIHGtayUGYF62Ntt zNx+8T0mxgxqPfF29e11kBY6z9Spmy3c8uTDcvIo7FXIuUOSpDzf1U4VGOibrj26 rIClf+L5RNI0/24VCEHfMgwEZXS5FTMJMDyEFCPz6loFNCOjYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKE7IMzpabLSOxmjCZtSzcedXBX0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvODcwZDBjMjctZTg0My0z NDhhLWIyODUtNDgxN2E4YjNjMWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSfXqRijSV89Eqa1/q5Z8a1NCYgsdf8BNSpHtldUu71J5t0OWo19GpJ TRERYIFbGlRhs3yyRHBYj7YwH0r3ImqVtqJS+YxX9K0iIKjvlCdyNzNZYDg6BkWg B4e5MHkxf+UG740HACuvSDjPuDxCFsLa7EdUMF6if8e/YaromCMwRaBbZo3oUiwx GZdqTeqJ2TTP+XKaYT5uEa3d3wbklRpXMcPmRsMzlSUlC6oemZrNOYxMU9pib0J1 IYA68V72sVn8rf+1hzx4AZaM0Yr9EevURwCIAdUg+Q5sJt9SZUZwsTYkFpI24pza 81z70JIPbQdSofvZIxQgXuFiCjIg8N8= -----END CERTIFICATE-----Generated at Tue Sep 22 20:44:21 2026 by rpki-client