$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/b48de1a2-6828-3cb9-a56f-ac97faafb960.roa File: b48de1a2-6828-3cb9-a56f-ac97faafb960.roa (raw, json) Hash identifier: vtVP1vRdNF41k30S8LWyEcuX1zpW1v+7Ngtogif7yqg= Subject key identifier: 6D:F8:74:C6:ED:79:42:58:9C:71:FE:9D:59:39:B1:CE:86:36:85:D1 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F31B7CF8D0DE82A7B686DA840 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/b48de1a2-6828-3cb9-a56f-ac97faafb960.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 63023 IP address blocks: 170.101.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:cf:8d:0d:e8:2a:7b:68:6d:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=cc6c42e0-ca79-4195-965e-03743daecb42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:9d:52:92:0b:5b:df:86:65:91:44:e3:0e: 82:98:13:18:9e:49:53:dc:75:e8:46:cc:ea:15:97: 52:35:07:f7:c8:c6:eb:21:11:3b:30:12:d8:36:33: 7e:a9:45:be:c2:5e:27:cd:58:66:07:c3:d3:de:30: 6b:20:55:08:82:a3:a2:d6:f4:39:e5:d1:63:7a:fe: 3a:11:ef:6f:cb:0a:c0:b1:05:1e:0a:f8:27:23:de: e8:2d:cb:98:d4:b7:e0:ea:6c:81:e5:dd:d9:79:cd: be:58:74:ed:5e:03:cf:d1:b6:96:6d:fb:c5:ff:5c: 49:92:51:8f:55:58:77:07:f6:a9:3d:fc:10:2f:cb: 18:00:03:ea:7d:f7:99:07:42:33:af:8c:3f:9e:c4: 64:d8:1a:17:27:e8:f1:bd:f4:87:0c:0e:78:a6:c9: 46:ce:de:68:fb:2e:72:c5:8a:59:32:ae:fe:ab:10: 4f:4a:1c:77:cd:9c:a5:8c:17:df:18:06:b1:a1:38: 41:4c:d2:8b:9f:32:7f:dd:0b:fb:fc:be:42:fb:f8: ce:32:ca:dc:85:f4:e2:26:ca:ec:fb:2f:d4:56:d9: 65:33:0e:5c:bf:46:bd:43:54:52:39:df:ac:5f:73: a1:77:0b:91:6f:5d:ef:b4:13:42:5a:b8:b1:49:ac: fc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F8:74:C6:ED:79:42:58:9C:71:FE:9D:59:39:B1:CE:86:36:85:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/b48de1a2-6828-3cb9-a56f-ac97faafb960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:30:cb:e7:31:80:40:b9:b6:5d:8d:09:5a:5e:9d:46:ad:d7: 12:49:d1:ab:e1:5a:15:39:bf:9b:eb:3b:82:27:f8:3c:20:2b: 77:bd:c1:42:49:01:c2:d1:04:20:57:38:bf:88:3b:54:eb:41: 6b:44:ac:46:8a:79:d5:a2:41:c9:de:68:30:60:0c:8b:20:4e: c5:dc:6c:a5:18:7c:15:8b:92:26:2a:3b:eb:dc:f0:83:ea:5e: 04:50:45:e7:6e:0e:c0:ae:60:17:3d:7e:2a:39:d1:fe:c5:0a: 3f:4a:e0:45:83:42:2e:64:a9:e0:5e:e8:f3:c8:26:47:b5:f4: d4:fe:ad:e6:1c:e0:de:f9:ef:55:3f:53:6a:0a:d7:40:01:d3: e6:fd:bb:60:8f:f6:d0:95:a5:bd:65:be:e1:07:d8:a9:cb:df: d6:11:72:4e:b1:2a:d8:e8:4a:11:60:4f:3c:24:12:ec:fb:0d: 0b:d4:a4:32:ca:cf:c5:45:bc:48:2d:16:01:b5:f9:2f:05:dc: 0e:25:8e:bb:c6:94:2b:eb:10:3f:50:fb:34:c8:8e:66:b9:bb: 10:19:9d:41:05:26:aa:76:91:c9:8b:78:b2:6a:ec:f1:85:fe: e4:e4:70:be:31:e7:7d:81:9d:09:c2:af:ee:2d:e6:67:11:ea: 18:4b:d2:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8+NDegqe2htqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk Y2M2YzQyZTAtY2E3OS00MTk1LTk2NWUtMDM3NDNkYWVjYjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0WdUpILW9+GZZFE4w6CmBMYnklT3HXoRszq FZdSNQf3yMbrIRE7MBLYNjN+qUW+wl4nzVhmB8PT3jBrIFUIgqOi1vQ55dFjev46 Ee9vywrAsQUeCvgnI97oLcuY1Lfg6myB5d3Zec2+WHTtXgPP0baWbfvF/1xJklGP VVh3B/apPfwQL8sYAAPqffeZB0Izr4w/nsRk2BoXJ+jxvfSHDA54pslGzt5o+y5y xYpZMq7+qxBPShx3zZyljBffGAaxoThBTNKLnzJ/3Qv7/L5C+/jOMsrchfTiJsrs +y/UVtllMw5cv0a9Q1RSOd+sX3OhdwuRb13vtBNCWrixSaz82QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG34dMbteUJYnHH+nVk5sc6GNoXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvYjQ4ZGUxYTItNjgyOC0z Y2I5LWE1NmYtYWM5N2ZhYWZiOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmVyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUwy+cxgEC5tl2NCVpenUat1xJJ0avhWhU5v5vrO4In+DwgK3e9wUJJ AcLRBCBXOL+IO1TrQWtErEaKedWiQcneaDBgDIsgTsXcbKUYfBWLkiYqO+vc8IPq XgRQReduDsCuYBc9fio50f7FCj9K4EWDQi5kqeBe6PPIJke19NT+reYc4N7571U/ U2oK10AB0+b9u2CP9tCVpb1lvuEH2KnL39YRck6xKtjoShFgTzwkEuz7DQvUpDLK z8VFvEgtFgG1+S8F3A4ljrvGlCvrED9Q+zTIjma5uxAZnUEFJqp2kcmLeLJq7PGF /uTkcL4x532BnQnCr+4t5mcR6hhL0nE= -----END CERTIFICATE-----Generated at Mon Sep 21 07:03:45 2026 by rpki-client