$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/8f1fb9f4-f2bd-39a7-a60a-77057537f198.roa File: 8f1fb9f4-f2bd-39a7-a60a-77057537f198.roa (raw, json) Hash identifier: aMxRs9Yq7QjnPLV5ZOUeU2tmAJLYV43d+QBJTI1ZU9s= Subject key identifier: 50:C9:F5:13:99:F0:AA:57:EF:2D:46:DB:BE:64:5D:9E:6B:2C:37:C1 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F31B7D08899B6774BC07AB800 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/8f1fb9f4-f2bd-39a7-a60a-77057537f198.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 63023 IP address blocks: 170.101.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:d0:88:99:b6:77:4b:c0:7a:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=6ee13e80-c022-4f65-849d-932fbfbb2113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3f:e7:01:1e:2c:e5:b1:14:ad:f0:85:e7:70: 06:1a:bf:47:dd:c5:15:80:41:34:d6:ee:2b:09:f3: 68:37:05:e2:e2:33:76:d7:bf:06:32:08:73:80:37: bb:82:10:0d:8b:4b:1f:7e:c5:2c:74:aa:2f:b6:82: 39:b8:9f:6c:ec:a4:7e:e2:b9:80:46:93:fb:d2:dd: 29:14:fd:1c:8e:21:1d:96:c9:2a:6e:23:58:3e:c2: af:cf:73:23:bb:e7:cd:ad:92:a3:8a:ba:ee:1c:ab: f1:0e:d1:59:a7:3f:ea:cb:e5:66:e9:43:fd:43:c3: 3e:00:b1:04:f8:8e:95:2e:78:62:2f:ce:fc:ff:93: 84:9f:61:87:a5:41:0c:d5:6f:d6:dc:f7:97:0c:d9: c6:c6:a3:5c:e8:a0:74:0d:04:1a:30:47:a3:e0:e4: 37:3c:79:89:a3:10:ec:7a:60:d8:fe:5b:b3:63:d9: 5c:df:8d:4e:b2:39:0e:5a:59:25:21:0a:9d:44:c3: 15:e2:63:79:b4:52:bf:06:3a:d0:74:98:56:4d:9b: e3:f8:4e:99:6e:34:56:f6:1c:c0:38:31:5f:f2:d8: ad:13:56:10:5c:ff:c4:3d:bc:e0:0c:4c:75:08:c8: 4f:a8:df:bd:f2:cf:71:cf:c4:08:6e:14:90:4a:37: 42:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C9:F5:13:99:F0:AA:57:EF:2D:46:DB:BE:64:5D:9E:6B:2C:37:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/8f1fb9f4-f2bd-39a7-a60a-77057537f198.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:07:11:32:a6:a3:17:da:8e:a1:d5:55:e1:62:e0:b4:7f:e8: 0e:53:4d:07:9b:cf:30:93:39:38:b9:6a:0c:82:6a:35:4b:44: 98:fe:38:99:65:0f:2f:03:d4:0b:65:99:90:bb:e7:c4:ed:27: af:f1:1f:c0:ab:00:2a:4c:a1:04:9d:c0:c4:48:dc:ff:77:b6: 28:8a:b0:97:f1:13:56:ed:42:c1:cb:4e:8d:0e:9e:a0:6b:77: 0c:73:15:ed:dd:18:f3:2a:24:5f:90:4e:f1:ca:25:ee:ee:3b: 27:29:46:0e:43:4d:34:de:91:9f:1b:36:7d:50:ee:cf:6a:aa: 46:07:1a:50:ab:5f:ca:ac:94:f5:52:38:ed:25:53:ce:10:49: 62:e3:e4:85:26:ca:55:0c:9c:44:4e:98:99:6f:a4:95:6e:c9: 1c:3f:24:e0:a8:41:9f:7d:22:22:d2:92:3e:a4:df:89:6e:2e: 33:92:94:40:3d:43:a5:a2:ab:96:fb:f3:a7:d2:85:3b:77:05: 33:d5:4b:1b:a6:3d:6a:96:35:68:cd:5b:23:93:78:5f:fc:de: 64:ae:ab:10:12:d6:ed:06:32:65:53:8d:3b:8b:82:20:79:12: 6e:05:64:d0:e7:8d:74:0e:56:6c:c7:c5:17:19:e1:a8:e8:a6: 6c:f9:0c:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt9CImbZ3S8B6uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk NmVlMTNlODAtYzAyMi00ZjY1LTg0OWQtOTMyZmJmYmIyMTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz/nAR4s5bEUrfCF53AGGr9H3cUVgEE01u4r CfNoNwXi4jN2178GMghzgDe7ghANi0sffsUsdKovtoI5uJ9s7KR+4rmARpP70t0p FP0cjiEdlskqbiNYPsKvz3Mju+fNrZKjirruHKvxDtFZpz/qy+Vm6UP9Q8M+ALEE +I6VLnhiL878/5OEn2GHpUEM1W/W3PeXDNnGxqNc6KB0DQQaMEej4OQ3PHmJoxDs emDY/luzY9lc341OsjkOWlklIQqdRMMV4mN5tFK/BjrQdJhWTZvj+E6ZbjRW9hzA ODFf8titE1YQXP/EPbzgDEx1CMhPqN+98s9xz8QIbhSQSjdC+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDJ9ROZ8KpX7y1G275kXZ5rLDfBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvOGYxZmI5ZjQtZjJiZC0z OWE3LWE2MGEtNzcwNTc1MzdmMTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmVhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAHETKmoxfajqHVVeFi4LR/6A5TTQebzzCTOTi5agyCajVLRJj+OJll Dy8D1AtlmZC758TtJ6/xH8CrACpMoQSdwMRI3P93tiiKsJfxE1btQsHLTo0OnqBr dwxzFe3dGPMqJF+QTvHKJe7uOycpRg5DTTTekZ8bNn1Q7s9qqkYHGlCrX8qslPVS OO0lU84QSWLj5IUmylUMnEROmJlvpJVuyRw/JOCoQZ99IiLSkj6k34luLjOSlEA9 Q6Wiq5b786fShTt3BTPVSxumPWqWNWjNWyOTeF/83mSuqxAS1u0GMmVTjTuLgiB5 Em4FZNDnjXQOVmzHxRcZ4ajopmz5DNU= -----END CERTIFICATE-----Generated at Sun Sep 27 05:57:32 2026 by rpki-client