$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/c489167d-a8ca-3a0a-85f6-9cbc44396a9e.roa File: c489167d-a8ca-3a0a-85f6-9cbc44396a9e.roa (raw, json) Hash identifier: T0c2l2xBoN74/BhyUuKKSbzRCEuXx3AByNKYtdwLW6M= Subject key identifier: C9:A7:69:AB:71:8F:D7:9F:AC:90:D5:B8:32:18:DA:01:8F:22:79:7B Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F3CE2A74FA25A126E5FA74200 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/c489167d-a8ca-3a0a-85f6-9cbc44396a9e.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 62563 IP address blocks: 170.101.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:a7:4f:a2:5a:12:6e:5f:a7:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=0c43f432-5fa4-4444-a4d0-76c3d9a2b77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5f:b3:46:17:26:16:56:2b:02:c4:fc:2e:5c: e3:33:12:02:84:cc:a1:44:2b:70:3c:de:57:6b:f7: 31:a0:c3:54:08:21:47:94:01:92:f5:40:7b:97:f9: 62:fd:fc:9c:ca:ab:10:64:47:84:9d:22:58:69:bd: 2e:c3:6e:f3:8b:26:0e:28:6a:fe:ec:e0:ba:1c:8c: c8:9c:39:78:86:9c:2d:97:45:8c:8f:5b:28:21:58: ed:ae:63:ac:51:21:0b:41:4d:9a:df:d4:33:4a:70: cc:1a:f7:d5:94:14:bf:58:08:69:65:9f:24:d5:b6: e3:be:b5:68:db:5c:a7:cc:8a:a6:60:3c:2b:71:43: 0c:16:6d:94:3f:e4:88:da:a1:e2:ff:5d:dd:f4:c5: 5a:3a:ad:41:30:d0:98:93:8d:30:48:91:cc:90:cb: 5b:78:5b:2b:b0:c6:c4:17:49:6a:78:f3:9b:0b:56: 2a:40:59:28:81:2c:a4:3e:f9:3c:d9:f3:ae:7b:7b: 15:43:1c:cf:5e:fa:b0:51:0a:33:54:1d:2e:dc:d0: c2:84:b9:a6:04:e4:c2:43:e0:1e:28:82:fc:85:48: a0:05:e1:f4:65:49:99:ab:9c:51:81:55:ff:cf:41: 24:68:a9:85:dd:d5:3f:a4:0c:81:03:a0:ce:b4:cd: 77:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A7:69:AB:71:8F:D7:9F:AC:90:D5:B8:32:18:DA:01:8F:22:79:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/c489167d-a8ca-3a0a-85f6-9cbc44396a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:85:46:55:02:ed:d2:85:3a:0a:84:35:e5:21:68:da:fb:49: 50:45:eb:09:18:d9:d3:ad:bf:40:1f:9d:1a:f4:22:de:46:1f: 87:97:cd:a6:26:a3:33:f7:46:74:88:77:e8:aa:d2:35:a7:23: b1:75:59:b3:5b:e4:05:eb:c0:5e:c3:3f:c3:74:23:ef:37:f8: 0d:63:1c:a9:4f:a7:74:74:95:a6:04:cf:c2:64:40:d4:51:7c: ee:5a:f2:fe:d5:52:30:b9:69:e3:b7:6b:ac:41:47:5b:71:10: 67:a4:16:72:9e:87:3e:a8:ad:19:ba:21:42:d1:2c:2e:53:3a: 6c:01:94:40:06:84:6d:c3:bb:a8:8f:9c:2d:ef:db:58:25:5a: 0a:12:66:80:d3:7f:b3:5e:42:07:b1:41:7c:98:3d:05:17:bd: 2a:66:bf:d6:d7:9d:c4:29:0f:88:9f:fc:5b:45:07:ab:0a:bd: 48:ca:a8:f0:5f:f4:c1:05:06:8e:be:a4:60:5f:5c:a6:37:60: 53:6f:59:b4:25:bd:91:f5:28:7d:ed:6e:d8:23:7c:a3:f5:90: e9:ef:c4:2e:61:ce:46:a0:6d:e1:5f:fb:d1:3f:16:cc:fb:cb: 34:36:7f:d8:de:55:e4:c7:5e:55:4d:e9:58:36:eb:49:01:bb: e5:4d:ae:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884qdPoloSbl+nQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MGM0M2Y0MzItNWZhNC00NDQ0LWE0ZDAtNzZjM2Q5YTJiNzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF+zRhcmFlYrAsT8LlzjMxIChMyhRCtwPN5X a/cxoMNUCCFHlAGS9UB7l/li/fycyqsQZEeEnSJYab0uw27ziyYOKGr+7OC6HIzI nDl4hpwtl0WMj1soIVjtrmOsUSELQU2a39QzSnDMGvfVlBS/WAhpZZ8k1bbjvrVo 21ynzIqmYDwrcUMMFm2UP+SI2qHi/13d9MVaOq1BMNCYk40wSJHMkMtbeFsrsMbE F0lqePObC1YqQFkogSykPvk82fOue3sVQxzPXvqwUQozVB0u3NDChLmmBOTCQ+Ae KIL8hUigBeH0ZUmZq5xRgVX/z0EkaKmF3dU/pAyBA6DOtM13awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmnaatxj9efrJDVuDIY2gGPInl7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvYzQ4OTE2N2QtYThjYS0z YTBhLTg1ZjYtOWNiYzQ0Mzk2YTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmFRlUC7dKFOgqENeUhaNr7SVBF6wkY2dOtv0AfnRr0It5GH4eXzaYm ozP3RnSId+iq0jWnI7F1WbNb5AXrwF7DP8N0I+83+A1jHKlPp3R0laYEz8JkQNRR fO5a8v7VUjC5aeO3a6xBR1txEGekFnKehz6orRm6IULRLC5TOmwBlEAGhG3Du6iP nC3v21glWgoSZoDTf7NeQgexQXyYPQUXvSpmv9bXncQpD4if/FtFB6sKvUjKqPBf 9MEFBo6+pGBfXKY3YFNvWbQlvZH1KH3tbtgjfKP1kOnvxC5hzkagbeFf+9E/Fsz7 yzQ2f9jeVeTHXlVN6Vg260kBu+VNrpc= -----END CERTIFICATE-----Generated at Mon Sep 21 19:27:39 2026 by rpki-client