$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/4f8524cb-ef21-3ec3-ae95-dff2758a0a3f.roa File: 4f8524cb-ef21-3ec3-ae95-dff2758a0a3f.roa (raw, json) Hash identifier: 0BbgtwFpT+N4KPt9PS3n2CPvX9jEuWU1up3qp6Zm/V0= Subject key identifier: 59:C8:48:78:67:BB:56:85:99:CA:63:2B:49:1F:19:D6:68:5F:0C:25 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584D465F99D5D96D87A490884100 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/4f8524cb-ef21-3ec3-ae95-dff2758a0a3f.roa Signing time: Tue 24 Mar 2026 13:00:41 +0000 ROA not before: Tue 24 Mar 2026 13:00:41 +0000 ROA not after: Mon 22 Jun 2026 13:00:41 +0000 asID: 63023 IP address blocks: 216.106.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:5f:99:d5:d9:6d:87:a4:90:88:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Mar 24 13:00:41 2026 GMT Not After : Jun 22 13:00:41 2026 GMT Subject: CN=8d9e8a85-0aa5-4367-94f8-adfc77a69750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:23:7d:6f:a5:39:00:09:af:e4:26:fd:98:5f: 92:51:89:36:fe:9f:2e:76:93:8a:aa:2d:61:5e:6f: 3a:7f:4a:74:e1:6d:ce:8b:23:f8:ca:65:bd:bc:c9: 09:86:2c:3c:1f:7e:7f:8a:50:e4:ee:c6:63:50:2d: 48:af:d7:89:f9:b6:58:0a:8d:87:2c:00:a7:06:b3: c6:f7:99:b6:db:62:ef:7c:14:70:85:69:79:cc:c6: 80:cd:c4:68:fb:d3:e6:da:5a:f5:a3:22:68:0a:06: 0e:47:91:90:08:17:b5:bc:fd:a2:1d:ac:fe:e0:4d: 28:a0:a7:40:17:44:f3:53:7a:2f:50:27:29:c1:5c: 79:b7:96:d4:6c:2a:d7:eb:5f:2a:c1:04:1f:10:fc: d1:35:21:bd:7c:12:95:f8:30:b2:e0:e2:5c:93:11: 85:2e:f8:4c:2d:c8:f1:ba:65:12:b4:58:a5:44:92: 66:ee:31:f5:f7:16:27:29:70:1c:6b:7c:49:73:7e: 40:a9:93:80:27:38:82:b6:97:bd:76:11:eb:ce:85: 3a:4a:fa:b1:f7:39:28:51:49:da:c9:9e:3c:7a:e6: 6d:f4:b5:eb:a7:b8:f0:5c:30:69:4e:16:74:0f:d9: 54:55:b5:d1:41:c0:8e:bd:3c:92:f2:cf:88:ca:3e: cb:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C8:48:78:67:BB:56:85:99:CA:63:2B:49:1F:19:D6:68:5F:0C:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/4f8524cb-ef21-3ec3-ae95-dff2758a0a3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.106.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:9c:5f:ad:6d:56:34:9f:f4:f9:01:38:5e:ba:19:14:c8:3b: 98:65:c3:3d:48:d5:57:e1:04:99:8b:12:3b:a1:5b:66:c7:00: 17:d6:3c:7f:0a:98:75:e4:5e:29:bc:48:86:34:72:5c:85:e3: 5b:2b:79:c9:58:82:14:8f:15:fb:46:a7:2b:f3:06:2b:a3:ce: 31:60:95:a4:ec:7a:6e:9e:4a:33:c0:c6:ae:ac:c0:3a:ed:1a: 2f:e4:cd:ec:bd:c1:1e:54:c4:fd:2f:26:8b:e6:e4:b3:de:6c: d1:da:b6:ad:7b:c8:fb:85:1e:13:e8:13:fd:9f:fd:2c:7b:f4: e1:7c:d5:75:d1:5e:03:61:4b:ad:7b:73:f4:27:2b:f1:75:28: 14:73:d4:2e:ca:82:e0:23:87:2b:05:d9:93:d3:56:71:d9:a0: 38:94:cd:d8:9a:7d:e7:90:57:ca:fe:42:53:e0:d2:78:0b:d9: 3c:3b:d0:59:88:bf:c3:0a:8b:61:8b:38:23:44:d9:12:78:f6: 5c:87:b8:cf:2c:38:f8:28:00:17:7a:19:29:db:21:35:e3:50: 34:93:3f:63:39:25:f8:22:eb:7a:e1:05:0e:bc:a2:a9:67:6b: 04:a8:98:71:21:2b:f1:bb:f6:78:43:b0:e3:ab:ae:7a:98:6d: ca:57:09:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GX5nV2W2HpJCIQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDMyNDEzMDA0MVoXDTI2MDYyMjEzMDA0MVowLzEtMCsGA1UEAxMk OGQ5ZThhODUtMGFhNS00MzY3LTk0ZjgtYWRmYzc3YTY5NzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyN9b6U5AAmv5Cb9mF+SUYk2/p8udpOKqi1h Xm86f0p04W3OiyP4ymW9vMkJhiw8H35/ilDk7sZjUC1Ir9eJ+bZYCo2HLACnBrPG 95m222LvfBRwhWl5zMaAzcRo+9Pm2lr1oyJoCgYOR5GQCBe1vP2iHaz+4E0ooKdA F0TzU3ovUCcpwVx5t5bUbCrX618qwQQfEPzRNSG9fBKV+DCy4OJckxGFLvhMLcjx umUStFilRJJm7jH19xYnKXAca3xJc35AqZOAJziCtpe9dhHrzoU6Svqx9zkoUUna yZ48euZt9LXrp7jwXDBpThZ0D9lUVbXRQcCOvTyS8s+Iyj7LdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnISHhnu1aFmcpjK0kfGdZoXwwlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNGY4NTI0Y2ItZWYyMS0z ZWMzLWFlOTUtZGZmMjc1OGEwYTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Gq3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2cX61tVjSf9PkBOF66GRTIO5hlwz1I1VfhBJmLEjuhW2bHABfWPH8K mHXkXim8SIY0clyF41sreclYghSPFftGpyvzBiujzjFglaTsem6eSjPAxq6swDrt Gi/kzey9wR5UxP0vJovm5LPebNHatq17yPuFHhPoE/2f/Sx79OF81XXRXgNhS617 c/QnK/F1KBRz1C7KguAjhysF2ZPTVnHZoDiUzdiafeeQV8r+QlPg0ngL2Tw70FmI v8MKi2GLOCNE2RJ49lyHuM8sOPgoABd6GSnbITXjUDSTP2M5Jfgi63rhBQ68oqln awSomHEhK/G79nhDsOOrrnqYbcpXCW4= -----END CERTIFICATE-----Generated at Thu Mar 26 06:23:07 2026 by rpki-client