$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a7131538-1299-33d0-8358-4be5a488b087.roa File: a7131538-1299-33d0-8358-4be5a488b087.roa (raw, json) Hash identifier: 45IQz7jV0RrDngDyru91OHxTaTZbbizfArAbXz8Uivg= Subject key identifier: 8B:E6:34:72:E1:21:47:79:C5:92:5A:76:4B:B1:0B:EF:90:1A:9D:75 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F4972DF149BB5BDF5B2113140 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a7131538-1299-33d0-8358-4be5a488b087.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 63023 IP address blocks: 66.163.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:df:14:9b:b5:bd:f5:b2:11:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d7751f31-595b-452b-af7f-fe1e65250dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a0:16:92:5d:4c:14:4d:ab:60:c6:9d:57:1a: 3e:0f:c0:1c:2d:a4:a5:5c:d6:92:13:72:cb:14:c0: 43:28:9b:4f:94:87:05:4c:09:b8:7c:fc:1f:f9:44: 12:48:85:ba:6f:08:ae:e8:09:72:4f:16:0a:04:8e: 36:56:e5:19:7e:3e:45:88:5d:ae:a7:f4:74:57:09: d0:a3:f0:86:75:e5:1f:9f:ba:68:40:8d:4d:b5:a7: 84:2e:ad:64:82:3c:fb:98:5c:f1:3b:11:c9:c6:7f: 75:31:af:89:df:25:ba:04:e0:0e:22:5b:4d:1b:d0: 6c:82:0d:43:28:21:c2:ee:c9:0d:90:41:cf:de:80: f2:38:51:92:9c:fc:0b:43:97:6d:ca:6c:d5:b5:b5: 91:bd:2f:fa:07:42:4c:f4:10:64:c7:70:80:6f:60: f7:1a:62:5d:56:8e:1d:6a:9d:fe:f9:60:7b:17:64: 52:38:1b:3c:cc:4f:8d:81:48:d4:eb:43:b4:65:c9: 95:91:28:73:27:74:4b:48:8f:95:97:a4:23:ed:e1: fb:5d:ce:0a:d2:94:1f:5f:f7:f1:c7:d4:d5:bb:bf: ff:9b:62:55:fb:c5:6e:ca:e5:23:23:5c:46:ee:9d: dd:a4:ba:b9:0a:c0:a1:04:5e:35:73:eb:2c:dc:c8: e1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E6:34:72:E1:21:47:79:C5:92:5A:76:4B:B1:0B:EF:90:1A:9D:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/a7131538-1299-33d0-8358-4be5a488b087.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 66.163.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:2c:7c:3b:42:55:35:46:d5:c8:bc:89:af:8d:1f:9c:f4:6e: aa:b7:bf:0e:dc:a9:7a:c8:a2:1d:55:c0:34:06:6b:39:2f:14: 10:58:21:46:ef:a8:c8:e3:3e:18:8f:2c:a3:6f:6b:49:78:3c: a2:02:62:30:15:c0:06:e8:08:84:72:01:bb:b9:20:6e:5b:4d: 19:e0:5a:7e:ab:c1:33:dd:14:6d:f7:90:4e:3a:f3:ac:ae:9f: 40:91:f2:92:5b:80:c8:9c:1f:65:a6:ae:4c:e1:b0:45:9d:fb: f1:ce:d0:e4:24:c1:fd:c3:c8:a2:f0:dd:29:7b:c7:8f:81:61: a0:8b:eb:3e:7d:77:2b:be:e8:32:35:a2:9b:99:f2:96:08:5f: dd:1f:2d:55:88:32:eb:ed:90:78:e6:8e:04:ff:c5:a6:9e:e8: 79:8b:25:87:60:7e:25:7a:91:4b:8e:16:a7:29:17:52:41:21: db:21:e5:e5:d6:81:98:d6:93:5d:1f:1a:b8:9b:d0:02:07:56: c5:a1:e1:d1:25:a2:d4:ee:cf:94:bd:9d:ac:13:14:b6:62:67: ec:1d:fe:88:0c:7c:11:28:09:f7:49:0a:a4:60:fa:40:49:49: c6:95:ed:ab:bd:ec:27:0f:f9:ef:36:92:af:45:41:2b:30:29: 50:60:a5:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jct8Um7W99bIRMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDc3NTFmMzEtNTk1Yi00NTJiLWFmN2YtZmUxZTY1MjUwZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqAWkl1MFE2rYMadVxo+D8AcLaSlXNaSE3LL FMBDKJtPlIcFTAm4fPwf+UQSSIW6bwiu6AlyTxYKBI42VuUZfj5FiF2up/R0VwnQ o/CGdeUfn7poQI1NtaeELq1kgjz7mFzxOxHJxn91Ma+J3yW6BOAOIltNG9Bsgg1D KCHC7skNkEHP3oDyOFGSnPwLQ5dtymzVtbWRvS/6B0JM9BBkx3CAb2D3GmJdVo4d ap3++WB7F2RSOBs8zE+NgUjU60O0ZcmVkShzJ3RLSI+Vl6Qj7eH7Xc4K0pQfX/fx x9TVu7//m2JV+8VuyuUjI1xG7p3dpLq5CsChBF41c+ss3MjhMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvmNHLhIUd5xZJadkuxC++QGp11MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvYTcxMzE1MzgtMTI5OS0z M2QwLTgzNTgtNGJlNWE0ODhiMDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQqN5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQsfDtCVTVG1ci8ia+NH5z0bqq3vw7cqXrIoh1VwDQGazkvFBBYIUbv qMjjPhiPLKNva0l4PKICYjAVwAboCIRyAbu5IG5bTRngWn6rwTPdFG33kE4686yu n0CR8pJbgMicH2WmrkzhsEWd+/HO0OQkwf3DyKLw3Sl7x4+BYaCL6z59dyu+6DI1 opuZ8pYIX90fLVWIMuvtkHjmjgT/xaae6HmLJYdgfiV6kUuOFqcpF1JBIdsh5eXW gZjWk10fGrib0AIHVsWh4dElotTuz5S9nawTFLZiZ+wd/ogMfBEoCfdJCqRg+kBJ ScaV7au97CcP+e82kq9FQSswKVBgpc8= -----END CERTIFICATE-----Generated at Sun Sep 27 04:04:07 2026 by rpki-client