$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/adef067a-51de-3ed9-ae03-83d819d3e28e.roa File: adef067a-51de-3ed9-ae03-83d819d3e28e.roa (raw, json) Hash identifier: mqposx/6aegefcQrSVlp3Kd6sKVPThN1TG9hlJ75688= Subject key identifier: 69:6E:B1:47:EA:F7:98:7B:FE:9B:B9:A5:7D:37:7A:35:D4:DB:4D:86 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F31B7BF22AD87238F5B248A80 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/adef067a-51de-3ed9-ae03-83d819d3e28e.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 63023 IP address blocks: 170.101.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:bf:22:ad:87:23:8f:5b:24:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=73cd7d45-c249-4cc5-b499-fda118749314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b7:d2:43:9a:6d:f1:19:4b:cd:7e:c7:cb:1e: 89:ff:8c:1b:1e:f2:9a:22:e6:bb:fb:b6:c5:35:75: 24:49:78:3d:09:24:34:34:21:9c:49:60:20:85:25: 21:29:ce:64:f9:30:9e:cd:67:39:c7:50:cb:ce:af: 4c:70:94:94:1b:ae:e0:12:d0:fb:c0:0e:25:5b:fd: 2d:e5:b3:ed:5d:c3:5c:b1:2e:74:c5:3e:f6:28:ae: 7f:55:58:49:9f:48:34:3b:a9:60:3f:f6:78:cd:b4: 19:ec:8a:e1:93:4a:38:9d:56:5d:9b:a1:8b:c3:0d: e4:83:2f:04:d3:1d:4c:3a:b2:51:31:93:74:dc:8e: 86:b1:1c:61:50:b8:cb:09:7e:32:04:10:bf:91:de: 08:80:87:6a:17:2b:dd:91:11:e6:16:b2:01:e3:35: 98:82:c1:33:c6:77:84:3e:b5:74:f4:bf:fb:05:84: e5:4f:43:9e:66:32:08:f7:99:31:a0:87:40:cc:0e: b5:d7:98:ae:34:12:fc:eb:32:9d:73:dc:46:5c:1d: 78:85:04:4a:d7:9c:20:f1:92:30:76:e9:30:a3:d6: df:e0:9b:77:d7:40:40:f8:13:63:83:26:10:06:5a: 0d:1a:25:99:6b:2e:d6:1a:a1:1e:37:11:7a:01:2c: 8a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6E:B1:47:EA:F7:98:7B:FE:9B:B9:A5:7D:37:7A:35:D4:DB:4D:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/adef067a-51de-3ed9-ae03-83d819d3e28e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:fb:89:47:a4:5a:be:b9:69:d8:9e:88:00:4f:54:e0:ff:ee: cd:9c:de:9b:53:53:11:ad:fb:e8:d9:63:06:0d:87:98:49:df: fa:8f:a1:6c:c4:6b:bb:d0:9f:79:75:4a:21:bd:d2:25:8a:f3: 6e:01:43:eb:08:7a:c9:c6:87:be:56:ba:29:f0:c6:51:44:7b: 94:b5:f5:eb:ca:68:e1:b4:c4:8f:b3:a0:3c:63:25:3b:dd:74: 49:96:ad:a2:29:a2:fb:20:99:82:09:b5:1a:d3:86:2b:8d:34: 60:7d:8d:b1:48:41:5f:23:e9:13:4c:78:b9:50:5a:0b:15:35: 5c:63:93:f1:26:f4:5b:59:c4:17:8b:d4:f4:b5:4b:60:5a:b0: 14:5b:bb:01:47:fe:7a:ef:8b:3f:95:cf:b4:59:d0:ba:da:0d: 99:13:46:84:44:e2:60:3d:5e:a5:e7:15:fc:ca:2d:37:dc:c5: 1b:3c:d3:e9:34:ce:b0:6a:89:52:07:2a:2d:68:93:b1:25:92: 59:34:1b:cf:3b:d2:7d:ac:da:13:a8:68:2c:b8:8b:8e:ec:d5: cc:9d:86:c3:21:08:2e:db:37:b5:a2:36:c3:a9:10:05:3c:64: c6:ab:bd:bf:a2:94:ec:08:a3:86:38:57:e3:a8:cc:1d:62:16: 21:68:7c:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt78irYcjj1skioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk NzNjZDdkNDUtYzI0OS00Y2M1LWI0OTktZmRhMTE4NzQ5MzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrfSQ5pt8RlLzX7Hyx6J/4wbHvKaIua7+7bF NXUkSXg9CSQ0NCGcSWAghSUhKc5k+TCezWc5x1DLzq9McJSUG67gEtD7wA4lW/0t 5bPtXcNcsS50xT72KK5/VVhJn0g0O6lgP/Z4zbQZ7Irhk0o4nVZdm6GLww3kgy8E 0x1MOrJRMZN03I6GsRxhULjLCX4yBBC/kd4IgIdqFyvdkRHmFrIB4zWYgsEzxneE PrV09L/7BYTlT0OeZjII95kxoIdAzA6115iuNBL86zKdc9xGXB14hQRK15wg8ZIw dukwo9bf4Jt310BA+BNjgyYQBloNGiWZay7WGqEeNxF6ASyKUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlusUfq95h7/pu5pX03ejXU202GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvYWRlZjA2N2EtNTFkZS0z ZWQ5LWFlMDMtODNkODE5ZDNlMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmV9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADr7iUekWr65adieiABPVOD/7s2c3ptTUxGt++jZYwYNh5hJ3/qPoWzE a7vQn3l1SiG90iWK824BQ+sIesnGh75WuinwxlFEe5S19evKaOG0xI+zoDxjJTvd dEmWraIpovsgmYIJtRrThiuNNGB9jbFIQV8j6RNMeLlQWgsVNVxjk/Em9FtZxBeL 1PS1S2BasBRbuwFH/nrviz+Vz7RZ0LraDZkTRoRE4mA9XqXnFfzKLTfcxRs80+k0 zrBqiVIHKi1ok7Elklk0G8870n2s2hOoaCy4i47s1cydhsMhCC7bN7WiNsOpEAU8 ZMarvb+ilOwIo4Y4V+OozB1iFiFofNA= -----END CERTIFICATE-----Generated at Mon Sep 21 17:15:25 2026 by rpki-client