$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5bc88940-6061-3911-99db-8f1685160272.roa File: 5bc88940-6061-3911-99db-8f1685160272.roa (raw, json) Hash identifier: i+GPhKYghf0fNBmR01BpZHGYyfdHQOiknTdvnqMMGxI= Subject key identifier: 53:E7:55:81:75:93:C8:32:B2:7C:7C:D3:91:73:1A:C5:84:71:3F:7A Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F31B7BECF34F08A97289295C0 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5bc88940-6061-3911-99db-8f1685160272.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 63023 IP address blocks: 170.101.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:be:cf:34:f0:8a:97:28:92:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=1955985e-fc37-4331-a6b6-f8c4fdc9fe62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:99:19:e2:5e:95:b5:f6:eb:b7:06:82:87:09: 41:ed:3b:48:bd:9f:4e:5d:ae:06:95:f4:1d:af:77: fe:84:e0:fe:d1:c3:83:9b:f1:0d:8b:4f:4f:97:f7: a7:d3:32:12:91:21:ef:67:ba:de:20:e5:48:ef:b9: e7:8e:2b:b3:69:8f:e0:41:9b:11:79:52:4e:dc:4d: 73:ef:3a:11:84:14:ff:cf:55:5d:8a:70:ad:5e:4a: 88:96:59:e3:51:b1:b7:77:ab:7d:aa:e8:7c:18:f4: 23:33:57:01:c6:fe:c9:66:11:fa:17:0f:61:8e:ac: b9:31:40:42:e2:3d:e9:e2:06:46:c5:a3:fc:08:64: 8b:c0:c1:a9:d4:a0:4d:69:dc:42:54:66:34:d6:61: d5:79:93:b8:4e:f8:29:2f:bd:7c:21:fe:b1:e1:ca: 7c:fe:e7:e7:35:fb:07:59:90:da:51:28:9d:b7:ef: c7:bd:d5:30:f5:64:56:c5:76:68:40:fb:42:a3:24: 1f:e9:c6:46:09:60:13:7f:35:03:a1:73:d6:0d:4f: 78:67:19:94:c1:5a:0a:e8:b9:57:62:15:66:b4:5b: 1e:cc:3d:41:9d:49:c0:87:2f:aa:2f:11:54:7a:7e: 2d:ce:c6:fd:d5:ca:a0:af:99:3b:5b:f8:30:ae:45: 46:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E7:55:81:75:93:C8:32:B2:7C:7C:D3:91:73:1A:C5:84:71:3F:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5bc88940-6061-3911-99db-8f1685160272.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:07:35:22:fc:3f:53:19:25:9b:8e:09:99:4c:3b:91:a5:3d: 17:55:61:47:5c:c1:3d:4b:bd:25:f7:ff:d6:04:e8:7f:02:d9: 7e:f6:53:b7:6c:57:94:a9:3d:0a:3a:f7:11:c7:d4:4c:fe:fb: 1c:ea:50:d0:77:b4:cf:3e:eb:b5:11:fc:25:bc:fa:a1:bc:cd: 5b:d5:e3:33:52:d1:be:85:55:cf:a2:75:a6:37:69:f4:dc:61: 33:df:90:8b:54:06:b2:9c:3c:17:44:28:4a:08:b6:6e:40:8a: ba:74:57:04:25:6f:e0:87:41:1d:fe:df:fc:19:ed:e1:86:39: 47:4e:f2:27:1c:df:f9:b1:22:1e:4a:ad:c9:04:30:16:d2:eb: 7c:81:c7:c4:c7:fa:06:fd:fe:6c:d4:93:4f:05:c5:49:1a:8e: a0:cb:6b:fa:01:82:dc:7e:71:f1:7b:0a:71:9b:e8:cc:6c:90: 75:e0:66:cb:d6:71:75:88:42:50:3a:c7:81:f7:fe:0e:8c:d1: db:10:e5:25:84:6b:5b:75:1e:cd:29:19:2b:dc:2d:14:79:43: 2a:73:db:d8:4d:a6:e3:9c:5c:a6:be:49:69:a6:fb:8d:c6:53: 92:1c:86:cc:13:84:59:bb:7c:9d:c1:a8:99:4e:a7:06:19:40: 24:4b:d9:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt77PNPCKlyiSlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk MTk1NTk4NWUtZmMzNy00MzMxLWE2YjYtZjhjNGZkYzlmZTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppkZ4l6VtfbrtwaChwlB7TtIvZ9OXa4GlfQd r3f+hOD+0cODm/ENi09Pl/en0zISkSHvZ7reIOVI77nnjiuzaY/gQZsReVJO3E1z 7zoRhBT/z1VdinCtXkqIllnjUbG3d6t9quh8GPQjM1cBxv7JZhH6Fw9hjqy5MUBC 4j3p4gZGxaP8CGSLwMGp1KBNadxCVGY01mHVeZO4TvgpL718If6x4cp8/ufnNfsH WZDaUSidt+/HvdUw9WRWxXZoQPtCoyQf6cZGCWATfzUDoXPWDU94ZxmUwVoK6LlX YhVmtFsezD1BnUnAhy+qLxFUen4tzsb91cqgr5k7W/gwrkVGowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPnVYF1k8gysnx805FzGsWEcT96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvNWJjODg5NDAtNjA2MS0z OTExLTk5ZGItOGYxNjg1MTYwMjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmV3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoHNSL8P1MZJZuOCZlMO5GlPRdVYUdcwT1LvSX3/9YE6H8C2X72U7ds V5SpPQo69xHH1Ez++xzqUNB3tM8+67UR/CW8+qG8zVvV4zNS0b6FVc+idaY3afTc YTPfkItUBrKcPBdEKEoItm5Airp0VwQlb+CHQR3+3/wZ7eGGOUdO8icc3/mxIh5K rckEMBbS63yBx8TH+gb9/mzUk08FxUkajqDLa/oBgtx+cfF7CnGb6MxskHXgZsvW cXWIQlA6x4H3/g6M0dsQ5SWEa1t1Hs0pGSvcLRR5Qypz29hNpuOcXKa+SWmm+43G U5IchswThFm7fJ3BqJlOpwYZQCRL2ac= -----END CERTIFICATE-----Generated at Thu Oct 8 16:18:00 2026 by rpki-client