$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f81bf8d0-f935-35ea-b428-849b31e2e31a.roa File: f81bf8d0-f935-35ea-b428-849b31e2e31a.roa (raw, json) Hash identifier: mhs7lsZpdcgPHJFOcQeV9YWOlsAEPoglstIkr5Lgng0= Subject key identifier: C1:AE:45:8A:D3:57:63:17:32:A0:D8:11:45:0D:07:C6:79:B3:A3:90 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F31B7BD9329357CFBF1450E80 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f81bf8d0-f935-35ea-b428-849b31e2e31a.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 63023 IP address blocks: 170.101.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:bd:93:29:35:7c:fb:f1:45:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=986acb10-8a4a-43d7-8259-c42da3b0d1c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6d:7b:71:e9:57:b9:a4:c3:e5:fb:a9:17:4c: 40:f8:07:17:30:16:f0:c0:b5:af:e6:7d:b6:f6:c9: eb:68:24:f8:ee:fe:aa:93:79:db:4e:1e:92:b6:8e: e2:bd:23:c3:90:b0:d6:cd:32:f0:a1:7b:1c:70:c1: ea:99:dd:56:ef:34:74:a6:fb:ca:c0:f5:cb:bc:78: f3:c4:b6:00:5a:50:0f:52:5b:da:58:ac:9f:57:33: 7c:b0:c5:3e:f9:07:4a:7d:13:79:e9:9d:ef:7d:15: 02:a6:6f:94:ab:b1:d7:80:8a:66:bf:25:87:75:10: ad:ae:60:4b:f2:6d:8f:e8:4c:2c:0a:17:78:07:0a: d3:6d:db:00:b0:f3:18:1d:fc:d4:b2:36:dc:a6:03: e3:20:3f:48:2b:94:14:4a:71:79:d0:b2:53:15:02: 2b:7d:fb:f0:45:9a:c0:d0:2c:29:70:0f:42:4f:21: 31:b4:6d:fa:8e:68:7a:d1:bb:9d:1e:78:50:2b:88: 95:47:6f:0d:19:a0:45:c9:5d:5a:59:c7:8e:86:3f: e0:2c:0a:42:34:1d:f8:b5:25:35:f8:96:c9:f8:6e: b3:60:75:0b:3b:8b:4f:41:a5:4c:83:14:0c:d7:04: ec:43:d2:9e:c4:65:26:68:cc:63:3e:8f:92:08:92: 07:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AE:45:8A:D3:57:63:17:32:A0:D8:11:45:0D:07:C6:79:B3:A3:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f81bf8d0-f935-35ea-b428-849b31e2e31a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:99:ac:8c:34:d3:bf:dc:07:04:24:ae:9d:94:16:bc:9d:56: f2:ec:e7:3b:4a:f0:24:7f:83:5d:27:f4:76:5f:e1:0f:76:31: 61:5b:92:d7:56:69:63:29:49:07:bf:fd:37:f9:03:ac:28:d7: f6:93:bc:5d:0c:23:ec:ee:d0:b9:67:d3:3f:08:ab:90:6b:4f: a1:97:44:3b:91:ef:21:e5:4b:9f:cb:8b:84:e3:75:bf:de:e6: f9:ae:02:03:74:b4:b6:ab:a4:a8:5f:c7:37:71:cf:e4:46:14: 4f:a9:ce:66:16:1e:45:54:a6:14:14:25:04:95:65:79:e2:00: bb:cf:57:9a:7a:3f:45:b7:4d:8f:94:12:68:ca:1b:74:d4:d4: f0:34:c0:0f:e4:9e:87:a9:a1:0a:e9:16:7e:19:be:0c:79:24: 2b:47:4a:7e:f7:b3:a9:b8:b1:25:4c:ab:18:19:9e:9f:af:af: 88:4a:19:62:69:26:33:26:a9:92:a7:2a:7a:45:ef:9d:c5:de: ab:fd:4b:ea:f6:0c:68:47:88:5c:cf:ae:3a:56:f2:5b:9b:0d: 16:21:bd:ea:c7:a5:8f:58:65:0b:ee:8f:5a:92:3b:3b:47:2b: b4:d4:2d:25:1c:2b:56:6a:88:d2:26:87:fe:45:58:73:de:11: 64:b3:d9:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt72TKTV8+/FFDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk OTg2YWNiMTAtOGE0YS00M2Q3LTgyNTktYzQyZGEzYjBkMWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm17celXuaTD5fupF0xA+AcXMBbwwLWv5n22 9snraCT47v6qk3nbTh6Sto7ivSPDkLDWzTLwoXsccMHqmd1W7zR0pvvKwPXLvHjz xLYAWlAPUlvaWKyfVzN8sMU++QdKfRN56Z3vfRUCpm+Uq7HXgIpmvyWHdRCtrmBL 8m2P6EwsChd4BwrTbdsAsPMYHfzUsjbcpgPjID9IK5QUSnF50LJTFQIrffvwRZrA 0CwpcA9CTyExtG36jmh60budHnhQK4iVR28NGaBFyV1aWceOhj/gLApCNB34tSU1 +JbJ+G6zYHULO4tPQaVMgxQM1wTsQ9KexGUmaMxjPo+SCJIHmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGuRYrTV2MXMqDYEUUNB8Z5s6OQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZjgxYmY4ZDAtZjkzNS0z NWVhLWI0MjgtODQ5YjMxZTJlMzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmViMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCZrIw007/cBwQkrp2UFrydVvLs5ztK8CR/g10n9HZf4Q92MWFbktdW aWMpSQe//Tf5A6wo1/aTvF0MI+zu0Lln0z8Iq5BrT6GXRDuR7yHlS5/Li4Tjdb/e 5vmuAgN0tLarpKhfxzdxz+RGFE+pzmYWHkVUphQUJQSVZXniALvPV5p6P0W3TY+U EmjKG3TU1PA0wA/knoepoQrpFn4Zvgx5JCtHSn73s6m4sSVMqxgZnp+vr4hKGWJp JjMmqZKnKnpF753F3qv9S+r2DGhHiFzPrjpW8lubDRYhverHpY9YZQvuj1qSOztH K7TULSUcK1ZqiNImh/5FWHPeEWSz2Tk= -----END CERTIFICATE-----Generated at Sun Sep 20 18:58:09 2026 by rpki-client