$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/b9dfb36b-4adb-30c6-bba6-6377ff47a8e5.roa File: b9dfb36b-4adb-30c6-bba6-6377ff47a8e5.roa (raw, json) Hash identifier: ZaFfErhdw+wseg4kvKhllP8ToY35Hx/jobWQT+dLQCA= Subject key identifier: EB:87:7F:28:37:80:73:75:42:6B:82:DD:34:CD:45:6D:E5:98:7D:86 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584DAF1C6FA1AE0CB22787EFF080 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/b9dfb36b-4adb-30c6-bba6-6377ff47a8e5.roa Signing time: Fri 01 May 2026 01:25:20 +0000 ROA not before: Fri 01 May 2026 01:25:20 +0000 ROA not after: Thu 30 Jul 2026 01:25:20 +0000 asID: 63023 IP address blocks: 170.101.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:1c:6f:a1:ae:0c:b2:27:87:ef:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: May 1 01:25:20 2026 GMT Not After : Jul 30 01:25:20 2026 GMT Subject: CN=48ec7da9-f10a-4940-b8ba-a1cadc27504a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bc:86:9d:a1:85:4f:ca:0c:5a:20:34:2e:51: bb:48:53:b5:1b:dc:38:df:a9:5e:ae:d5:bd:1d:b6: 30:35:df:0b:b1:97:2b:59:7e:ca:8c:10:bc:8c:35: e5:f2:48:c2:62:be:2f:7f:c0:5b:f5:e1:73:1f:56: 9f:bf:17:39:ff:d5:f8:0c:09:99:58:7f:9a:da:c1: d5:b6:4c:8d:dd:8c:1d:d8:1a:97:e2:01:77:15:23: e3:bc:3d:46:ec:4c:ed:cc:7d:a7:ec:2f:5e:7d:4b: 54:2d:7a:36:c0:08:0a:3d:94:5f:02:79:4e:bd:a1: 14:f1:1f:f1:35:40:23:77:0e:17:eb:e9:bd:c0:01: a1:cd:67:56:59:e9:a7:56:fd:97:8a:e6:76:8e:1d: 15:ec:31:7c:4a:93:c5:ad:fe:12:21:d0:b8:89:83: f0:78:c2:9d:1b:d7:50:5e:0e:93:67:3c:79:85:fe: 80:50:b3:32:ca:72:c9:28:9c:76:dc:cb:fd:b9:c0: de:cb:15:72:e2:e8:a4:46:c4:23:18:29:68:39:ad: 69:ef:43:88:a3:b0:77:80:8d:8c:17:7c:b2:69:9e: 9d:eb:3b:4e:c7:c6:6a:7b:dd:b3:e4:58:cb:7b:56: 77:2f:6a:50:8c:ed:78:13:83:c6:68:b3:2a:a7:18: 9e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:87:7F:28:37:80:73:75:42:6B:82:DD:34:CD:45:6D:E5:98:7D:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/b9dfb36b-4adb-30c6-bba6-6377ff47a8e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:5f:b4:5b:6e:2a:f3:fa:51:c9:f0:13:29:82:69:39:c6:9a: a7:47:df:6b:12:72:f9:6e:fd:ba:22:00:06:54:07:7e:c5:b7: 59:5e:f9:b1:3e:cf:78:1d:07:de:2e:f5:07:7a:77:3b:eb:23: 0a:76:7a:b1:d5:b1:81:43:d8:45:25:39:b1:14:34:a4:69:ef: e4:a0:da:be:91:11:f2:79:5f:93:f1:d4:b3:5d:f5:54:b3:62: 57:f3:ec:f5:ca:4d:7c:8c:85:cc:a0:83:14:06:c0:31:ca:95: 27:5b:fc:75:02:21:c3:93:9a:5b:1b:23:0a:21:f6:07:aa:9f: c0:a5:77:13:c6:6a:29:90:7e:7c:d5:fc:e5:ef:bc:dc:83:67: 49:a3:4c:a4:4c:66:1f:6b:29:3b:b3:14:fa:55:a6:4f:37:5f: b5:ab:4c:77:ea:00:d0:7e:91:76:46:10:80:a6:6e:d9:64:8d: 0b:12:4f:10:1e:43:ba:d2:5b:39:b9:c9:79:7c:65:69:ec:bd: 55:cd:d1:0e:60:53:51:54:3c:d2:f7:bf:ee:a9:b8:57:f1:10: 3f:40:02:a9:e1:dd:4f:56:e9:49:ad:59:67:34:91:1b:ae:0d: 9a:1a:45:46:a0:83:51:2d:f3:b0:36:b7:9d:77:7e:29:38:bd: c7:06:9b:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vHG+hrgyyJ4fv8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDUwMTAxMjUyMFoXDTI2MDczMDAxMjUyMFowLzEtMCsGA1UEAxMk NDhlYzdkYTktZjEwYS00OTQwLWI4YmEtYTFjYWRjMjc1MDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLyGnaGFT8oMWiA0LlG7SFO1G9w436lertW9 HbYwNd8LsZcrWX7KjBC8jDXl8kjCYr4vf8Bb9eFzH1afvxc5/9X4DAmZWH+a2sHV tkyN3Ywd2BqX4gF3FSPjvD1G7EztzH2n7C9efUtULXo2wAgKPZRfAnlOvaEU8R/x NUAjdw4X6+m9wAGhzWdWWemnVv2XiuZ2jh0V7DF8SpPFrf4SIdC4iYPweMKdG9dQ Xg6TZzx5hf6AULMyynLJKJx23Mv9ucDeyxVy4uikRsQjGCloOa1p70OIo7B3gI2M F3yyaZ6d6ztOx8Zqe92z5FjLe1Z3L2pQjO14E4PGaLMqpxieMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOuHfyg3gHN1QmuC3TTNRW3lmH2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvYjlkZmIzNmItNGFkYi0z MGM2LWJiYTYtNjM3N2ZmNDdhOGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmV8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAtftFtuKvP6UcnwEymCaTnGmqdH32sScvlu/boiAAZUB37Ft1le+bE+ z3gdB94u9Qd6dzvrIwp2erHVsYFD2EUlObEUNKRp7+Sg2r6REfJ5X5Px1LNd9VSz Ylfz7PXKTXyMhcyggxQGwDHKlSdb/HUCIcOTmlsbIwoh9geqn8CldxPGaimQfnzV /OXvvNyDZ0mjTKRMZh9rKTuzFPpVpk83X7WrTHfqANB+kXZGEICmbtlkjQsSTxAe Q7rSWzm5yXl8ZWnsvVXN0Q5gU1FUPNL3v+6puFfxED9AAqnh3U9W6UmtWWc0kRuu DZoaRUagg1Et87A2t513fik4vccGmxE= -----END CERTIFICATE-----Generated at Wed May 13 06:12:10 2026 by rpki-client