$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d99f11d9-c5c1-32cc-85bd-650c16d9a43e.roa File: d99f11d9-c5c1-32cc-85bd-650c16d9a43e.roa (raw, json) Hash identifier: VxpaTzcKI9Iv0lze4gxu5CjMq3hTQMDnnl1dK5GkloM= Subject key identifier: F6:F6:90:CD:2E:A7:10:88:03:27:7B:F4:72:2A:F9:BF:C7:B1:04:B6 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584D4A9E50009922A0D5683B9540 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d99f11d9-c5c1-32cc-85bd-650c16d9a43e.roa Signing time: Thu 26 Mar 2026 01:30:22 +0000 ROA not before: Thu 26 Mar 2026 01:30:22 +0000 ROA not after: Wed 24 Jun 2026 01:30:22 +0000 asID: 63023 IP address blocks: 216.152.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:9e:50:00:99:22:a0:d5:68:3b:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Mar 26 01:30:22 2026 GMT Not After : Jun 24 01:30:22 2026 GMT Subject: CN=531b16e0-e1d8-4c66-9a48-38c2f9169bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7a:de:79:03:91:fa:e4:0a:18:d1:14:4f:df: ab:f0:8b:09:bd:ac:bf:eb:04:9c:60:8f:8f:63:cd: d2:94:7e:92:04:a3:da:29:d7:8c:cb:29:ef:27:a3: 93:56:8a:e3:fc:ec:c4:71:93:a6:bb:16:50:0a:ab: 29:97:69:d2:01:59:e9:96:1c:c8:41:e3:6e:e6:53: bd:5f:f6:f6:61:50:be:10:30:d9:0b:03:af:fa:1a: b8:53:cb:5d:0b:50:09:4d:b9:6e:e6:8f:8a:de:1a: 96:9a:d7:ce:c6:e6:ce:ef:6d:83:e8:e5:54:52:2d: 62:8d:a9:2b:82:00:dc:d4:50:c1:35:d7:58:47:12: 27:fa:88:16:0b:ff:35:12:97:47:a8:a0:ba:71:23: 2d:d1:da:ee:f0:f6:39:9e:fc:6e:90:ee:ec:d1:14: ee:f2:15:84:25:5d:eb:ea:75:03:79:4c:b2:82:2c: 49:ee:9d:94:1d:3f:fd:98:27:e7:c8:bb:bb:fe:69: be:ea:d0:c4:aa:ac:64:f5:35:89:39:85:62:ce:d3: a0:77:9a:17:54:fa:b5:b2:c1:90:27:2b:30:29:35: 01:9c:5b:36:ff:12:22:9c:b4:2f:b2:81:6d:94:40: ce:10:86:8b:ac:ad:5e:cb:f7:ff:f8:c6:5e:01:28: 21:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F6:90:CD:2E:A7:10:88:03:27:7B:F4:72:2A:F9:BF:C7:B1:04:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d99f11d9-c5c1-32cc-85bd-650c16d9a43e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.152.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:14:e2:7d:eb:4e:eb:07:8b:4f:16:06:89:f0:36:14:74:79: 4b:f1:94:bb:ec:2b:ed:ec:7f:98:b9:86:68:51:d0:0b:63:86: 54:9a:33:f1:8c:21:ef:19:c9:3b:4a:55:c3:1b:52:72:07:f7: 3e:14:b2:f4:f8:02:29:61:5d:f4:9c:0b:15:ab:e4:0d:c9:66: d3:26:a4:91:0c:b2:b1:39:c7:60:7a:ec:4a:17:35:f9:06:f0: e5:c4:de:c5:34:9c:6c:ac:9a:83:60:9b:59:29:9d:80:46:42: 15:d2:b2:e3:63:b0:4b:dd:a2:d7:80:ac:99:82:47:47:18:0d: 30:44:67:79:22:4a:4f:c1:aa:2f:d2:89:75:20:cd:bc:d0:6c: d5:4e:e4:0c:1f:b6:cc:35:e8:f5:a8:99:5b:6f:2c:51:9e:ab: 8f:4b:da:88:9f:6e:a7:11:6e:2c:43:26:09:f9:de:9e:5d:1b: 7d:45:ee:0b:e3:f9:8e:b8:0f:ab:31:a2:e8:c2:37:89:da:70: 1a:53:69:42:c0:1b:4c:0a:16:2a:08:52:09:14:d9:ed:c8:ca: 67:d4:5f:24:27:f3:09:21:0a:57:97:1c:12:09:5f:b2:e5:ef: 06:56:85:ee:e3:58:00:b5:66:64:a0:df:d8:9a:b6:9f:9c:8d: a3:c5:05:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1KnlAAmSKg1Wg7lUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDMyNjAxMzAyMloXDTI2MDYyNDAxMzAyMlowLzEtMCsGA1UEAxMk NTMxYjE2ZTAtZTFkOC00YzY2LTlhNDgtMzhjMmY5MTY5YmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnreeQOR+uQKGNEUT9+r8IsJvay/6wScYI+P Y83SlH6SBKPaKdeMyynvJ6OTVorj/OzEcZOmuxZQCqspl2nSAVnplhzIQeNu5lO9 X/b2YVC+EDDZCwOv+hq4U8tdC1AJTblu5o+K3hqWmtfOxubO722D6OVUUi1ijakr ggDc1FDBNddYRxIn+ogWC/81EpdHqKC6cSMt0dru8PY5nvxukO7s0RTu8hWEJV3r 6nUDeUyygixJ7p2UHT/9mCfnyLu7/mm+6tDEqqxk9TWJOYViztOgd5oXVPq1ssGQ JyswKTUBnFs2/xIinLQvsoFtlEDOEIaLrK1ey/f/+MZeASghoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPb2kM0upxCIAyd79HIq+b/HsQS2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZDk5ZjExZDktYzVjMS0z MmNjLTg1YmQtNjUwYzE2ZDlhNDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JicMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIU4n3rTusHi08WBonwNhR0eUvxlLvsK+3sf5i5hmhR0AtjhlSaM/GM Ie8ZyTtKVcMbUnIH9z4UsvT4AilhXfScCxWr5A3JZtMmpJEMsrE5x2B67EoXNfkG 8OXE3sU0nGysmoNgm1kpnYBGQhXSsuNjsEvdoteArJmCR0cYDTBEZ3kiSk/Bqi/S iXUgzbzQbNVO5Awftsw16PWomVtvLFGeq49L2oifbqcRbixDJgn53p5dG31F7gvj +Y64D6sxoujCN4nacBpTaULAG0wKFioIUgkU2e3IymfUXyQn8wkhCleXHBIJX7Ll 7wZWhe7jWAC1ZmSg39iatp+cjaPFBVI= -----END CERTIFICATE-----Generated at Fri Apr 17 11:18:31 2026 by rpki-client