$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/99c1fae4-7977-3aee-9001-3727a0dd1757.roa File: 99c1fae4-7977-3aee-9001-3727a0dd1757.roa (raw, json) Hash identifier: vmO2fZ1fhHC59v7k2tJ8eGnn1u4G1h5+dCEpMbWe70w= Subject key identifier: E0:2A:9C:AA:76:38:4A:EC:B0:3E:D0:3E:69:4C:A2:80:92:40:98:0F Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584DAF1C321EB750A791B78B7580 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/99c1fae4-7977-3aee-9001-3727a0dd1757.roa Signing time: Fri 01 May 2026 01:24:51 +0000 ROA not before: Fri 01 May 2026 01:24:51 +0000 ROA not after: Thu 30 Jul 2026 01:24:51 +0000 asID: 63023 IP address blocks: 170.101.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:1c:32:1e:b7:50:a7:91:b7:8b:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: May 1 01:24:51 2026 GMT Not After : Jul 30 01:24:51 2026 GMT Subject: CN=6f29c337-cf10-4ba9-9a36-7710dd13aa27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:82:e9:d8:e6:b6:e4:1b:48:1c:36:ae:a0:aa: 3a:fb:03:8b:18:b5:23:f3:c1:34:31:24:76:d5:85: 9e:78:6c:08:4c:8f:8c:e0:b7:f5:9f:64:eb:34:b6: 8a:ab:82:b2:a1:2c:cd:d2:20:80:05:73:fa:35:c0: 0a:8e:0d:69:07:c5:91:32:67:4a:11:35:5e:01:a6: 83:d6:d9:90:f1:31:6b:12:08:de:37:9e:11:3b:85: a7:f3:5b:71:9b:97:12:7c:ed:8a:38:46:0a:85:48: f8:0e:c9:b1:e0:c9:54:90:7c:ea:15:d3:4a:e9:f7: 9b:5e:ac:ac:6e:3b:32:4a:4b:98:e7:ac:2b:c4:71: bf:a7:b8:a6:c7:b1:06:40:0a:81:01:6c:dc:a9:b1: 67:21:51:54:31:1b:6e:43:d5:54:27:a6:a3:a6:53: d1:07:90:fb:41:b3:9b:33:f5:e8:30:8a:21:a6:b6: 3c:32:3a:f8:c5:d1:0a:c7:62:52:9a:f1:55:1f:09: 5d:f3:9b:7a:56:4c:3e:0b:d8:43:96:50:fc:f6:d1: e9:e3:1f:76:40:48:0c:e7:aa:5d:93:b9:4c:38:e5: c8:aa:03:d4:70:17:bb:cc:c7:95:bd:a5:66:6c:bd: 84:14:d6:6c:e8:b3:6b:9c:5e:77:9e:06:80:5f:28: e0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2A:9C:AA:76:38:4A:EC:B0:3E:D0:3E:69:4C:A2:80:92:40:98:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/99c1fae4-7977-3aee-9001-3727a0dd1757.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:62:33:d3:90:93:e5:31:8f:f8:86:3d:74:ae:14:ad:42:bd: 0e:21:3a:59:19:18:56:e0:c4:a6:25:1d:93:6d:9e:e7:2f:24: fa:27:29:ef:ec:55:fb:92:b9:24:72:aa:b0:5f:0a:fe:79:ee: 2d:02:ed:28:b8:f2:5c:02:70:2b:cb:6e:28:9f:3d:a7:7d:e1: 37:ac:05:c6:71:e1:b0:ce:a6:33:a7:2c:78:52:01:d6:03:c8: 76:df:4f:1e:8b:83:61:5a:17:45:4d:18:49:82:ac:66:13:c5: 87:72:76:b2:87:c9:ce:4f:49:fe:51:e8:7b:e0:ca:fa:eb:94: c5:68:c7:22:7e:16:a0:87:f0:5c:a9:61:f7:88:6b:b2:a0:ae: 44:a6:46:d8:35:fb:0d:9d:12:c9:6c:33:2d:de:20:c8:ab:d5: 98:7f:72:2e:56:8e:8c:f8:64:7d:28:53:57:a8:f0:2a:3f:3b: 61:a2:9b:c8:68:77:49:87:4b:ce:b6:64:5e:47:bd:86:d7:f5: 4d:d9:b1:85:e1:69:11:90:58:9e:ec:51:d7:4d:c0:8a:d8:68: 62:56:23:6a:1c:44:66:b7:f6:2a:67:86:9f:70:12:b1:29:b1: 08:b8:05:07:f1:eb:59:4f:4c:d5:9d:5a:29:ea:f0:17:11:25: 44:98:e4:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vHDIet1CnkbeLdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDUwMTAxMjQ1MVoXDTI2MDczMDAxMjQ1MVowLzEtMCsGA1UEAxMk NmYyOWMzMzctY2YxMC00YmE5LTlhMzYtNzcxMGRkMTNhYTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYLp2Oa25BtIHDauoKo6+wOLGLUj88E0MSR2 1YWeeGwITI+M4Lf1n2TrNLaKq4KyoSzN0iCABXP6NcAKjg1pB8WRMmdKETVeAaaD 1tmQ8TFrEgjeN54RO4Wn81txm5cSfO2KOEYKhUj4Dsmx4MlUkHzqFdNK6febXqys bjsySkuY56wrxHG/p7imx7EGQAqBAWzcqbFnIVFUMRtuQ9VUJ6ajplPRB5D7QbOb M/XoMIohprY8Mjr4xdEKx2JSmvFVHwld85t6Vkw+C9hDllD89tHp4x92QEgM56pd k7lMOOXIqgPUcBe7zMeVvaVmbL2EFNZs6LNrnF53ngaAXyjgBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAqnKp2OErssD7QPmlMooCSQJgPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvOTljMWZhZTQtNzk3Ny0z YWVlLTkwMDEtMzcyN2EwZGQxNzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmV6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEViM9OQk+Uxj/iGPXSuFK1CvQ4hOlkZGFbgxKYlHZNtnucvJPonKe/s VfuSuSRyqrBfCv557i0C7Si48lwCcCvLbiifPad94TesBcZx4bDOpjOnLHhSAdYD yHbfTx6Lg2FaF0VNGEmCrGYTxYdydrKHyc5PSf5R6HvgyvrrlMVoxyJ+FqCH8Fyp YfeIa7KgrkSmRtg1+w2dEslsMy3eIMir1Zh/ci5Wjoz4ZH0oU1eo8Co/O2Gim8ho d0mHS862ZF5HvYbX9U3ZsYXhaRGQWJ7sUddNwIrYaGJWI2ocRGa39ipnhp9wErEp sQi4BQfx61lPTNWdWinq8BcRJUSY5GU= -----END CERTIFICATE-----Generated at Wed May 13 12:18:10 2026 by rpki-client