$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/7cdca5de-834d-324c-bc2b-9d8710859306.roa File: 7cdca5de-834d-324c-bc2b-9d8710859306.roa (raw, json) Hash identifier: J722z9Go2NId7knHU1GRK6Z5n4N5bYkuCaEiTsk2Qiw= Subject key identifier: 69:1E:1C:3C:A1:85:E1:D9:76:B8:09:51:17:D6:CA:B9:CF:05:78:35 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584D4A625C53978AF430D0E364C0 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/7cdca5de-834d-324c-bc2b-9d8710859306.roa Signing time: Wed 25 Mar 2026 23:29:35 +0000 ROA not before: Wed 25 Mar 2026 23:29:35 +0000 ROA not after: Tue 23 Jun 2026 23:29:35 +0000 asID: 63023 IP address blocks: 216.152.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:62:5c:53:97:8a:f4:30:d0:e3:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Mar 25 23:29:35 2026 GMT Not After : Jun 23 23:29:35 2026 GMT Subject: CN=2872fda6-5459-42f8-a582-d8bcbecb4d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:02:38:e1:f1:58:5f:30:ae:03:0e:3a:30:96: 01:b1:08:da:64:4b:31:65:d0:7e:05:f5:e0:53:8b: 79:c5:91:10:ff:fc:55:7c:e2:17:a8:4b:fb:f6:f3: 04:1f:dc:d4:2b:0d:5b:67:31:03:00:ad:80:7e:da: 28:35:60:bc:cb:45:2c:c2:d4:f3:1e:59:c3:9d:7a: 9f:e8:ab:28:65:55:9f:4c:90:ba:02:0b:f3:a2:07: 84:25:f0:ec:83:e9:b7:ff:e1:34:a0:f8:d4:e2:44: f2:2f:b4:3d:1c:57:25:0b:a0:09:44:12:5a:aa:57: 90:94:62:82:a1:e3:84:52:0a:01:5f:49:71:74:32: 03:ef:1a:89:6e:51:19:0f:b5:0c:d1:b1:47:e0:5a: cf:28:75:30:c9:3d:f1:20:ab:e4:e2:0b:c8:05:10: 45:bf:b9:bb:28:0a:64:1a:35:cc:7e:f9:a0:64:81: 84:23:de:28:57:d9:58:99:77:8e:0e:6c:3d:89:14: d2:be:bc:00:f5:5a:7f:e6:52:99:59:66:d0:f4:e0: 7e:30:48:f6:f6:e7:25:e8:67:30:d5:23:d3:c5:9d: 5b:45:f7:f3:15:09:07:86:66:5e:22:0b:be:7f:03: a7:92:a1:bc:9c:c0:09:55:0e:cb:d6:b8:b6:7d:f3: 01:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1E:1C:3C:A1:85:E1:D9:76:B8:09:51:17:D6:CA:B9:CF:05:78:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/7cdca5de-834d-324c-bc2b-9d8710859306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.152.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:27:0e:53:8a:d2:23:ff:ce:68:5d:58:77:02:0f:58:cf:d4: 21:63:d0:f5:3c:6b:6b:c6:1a:18:26:6c:83:60:33:89:91:80: d0:fc:7b:40:e7:a4:fb:08:76:a1:51:4d:b4:20:ff:e6:08:54: 3c:ac:11:57:86:05:9d:ba:7e:17:28:6b:33:06:ca:20:d1:cd: ca:57:ec:ec:7a:cf:66:c7:57:0c:38:0f:5b:c8:c6:b7:02:bf: 8d:61:93:dd:61:5f:09:c7:a1:14:4c:98:89:b4:e4:a0:da:72: f7:a5:fb:84:17:8c:91:fd:f1:df:df:cf:2f:ff:5b:46:93:02: b3:51:9f:6e:ca:10:56:55:2c:90:7a:b3:0c:83:8e:49:81:6c: 99:fd:cd:93:7e:95:fd:91:a1:e6:13:45:35:f3:c1:9a:cb:90: b4:52:d5:0f:2d:de:29:77:cd:62:14:df:4b:1a:e0:f2:e0:fa: 47:35:c4:01:9c:fa:f7:37:99:24:32:a7:2a:f9:15:ef:41:10: 14:d5:39:e7:96:70:a9:eb:1b:7f:88:e5:be:41:5d:44:29:d8: a8:53:f5:d0:cf:aa:c3:fa:53:97:61:ec:bc:c2:1a:17:26:b9: a4:a5:1a:cf:3f:54:54:6c:4b:98:23:22:ee:55:0e:52:67:57: 95:8f:54:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1KYlxTl4r0MNDjZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDMyNTIzMjkzNVoXDTI2MDYyMzIzMjkzNVowLzEtMCsGA1UEAxMk Mjg3MmZkYTYtNTQ1OS00MmY4LWE1ODItZDhiY2JlY2I0ZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwI44fFYXzCuAw46MJYBsQjaZEsxZdB+BfXg U4t5xZEQ//xVfOIXqEv79vMEH9zUKw1bZzEDAK2AftooNWC8y0UswtTzHlnDnXqf 6KsoZVWfTJC6AgvzogeEJfDsg+m3/+E0oPjU4kTyL7Q9HFclC6AJRBJaqleQlGKC oeOEUgoBX0lxdDID7xqJblEZD7UM0bFH4FrPKHUwyT3xIKvk4gvIBRBFv7m7KApk GjXMfvmgZIGEI94oV9lYmXeODmw9iRTSvrwA9Vp/5lKZWWbQ9OB+MEj29ucl6Gcw 1SPTxZ1bRffzFQkHhmZeIgu+fwOnkqG8nMAJVQ7L1ri2ffMB4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkeHDyhheHZdrgJURfWyrnPBXg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvN2NkY2E1ZGUtODM0ZC0z MjRjLWJjMmItOWQ4NzEwODU5MzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JiYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEInDlOK0iP/zmhdWHcCD1jP1CFj0PU8a2vGGhgmbINgM4mRgND8e0Dn pPsIdqFRTbQg/+YIVDysEVeGBZ26fhcoazMGyiDRzcpX7Ox6z2bHVww4D1vIxrcC v41hk91hXwnHoRRMmIm05KDacvel+4QXjJH98d/fzy//W0aTArNRn27KEFZVLJB6 swyDjkmBbJn9zZN+lf2RoeYTRTXzwZrLkLRS1Q8t3il3zWIU30sa4PLg+kc1xAGc +vc3mSQypyr5Fe9BEBTVOeeWcKnrG3+I5b5BXUQp2KhT9dDPqsP6U5dh7LzCGhcm uaSlGs8/VFRsS5gjIu5VDlJnV5WPVIk= -----END CERTIFICATE-----Generated at Thu Mar 26 04:13:06 2026 by rpki-client