$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cfbfac3f-1557-30d6-a7b8-a5f7a0311b22.roa File: cfbfac3f-1557-30d6-a7b8-a5f7a0311b22.roa (raw, json) Hash identifier: jIypniDcOni/K689E318a6Z9W76V2jlCj3nEcLbrgLA= Subject key identifier: 22:81:AF:AB:45:B8:CA:61:C0:4E:03:C9:07:CA:53:F3:CE:0C:62:CA Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584DAF1CC6157F045385B2A19080 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cfbfac3f-1557-30d6-a7b8-a5f7a0311b22.roa Signing time: Fri 01 May 2026 01:26:01 +0000 ROA not before: Fri 01 May 2026 01:26:01 +0000 ROA not after: Thu 30 Jul 2026 01:26:01 +0000 asID: 63023 IP address blocks: 170.101.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:1c:c6:15:7f:04:53:85:b2:a1:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: May 1 01:26:01 2026 GMT Not After : Jul 30 01:26:01 2026 GMT Subject: CN=84093c9e-0c1b-4b4c-8e87-a08b8bf29920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:56:a8:48:0a:1a:ae:86:e6:29:21:63:b5:d9: c9:e4:bd:ca:92:85:20:9b:a7:23:2b:4d:16:a2:ac: 56:19:48:d4:eb:47:61:fd:56:d4:89:fe:49:03:58: 75:69:ab:b8:c9:95:7f:0a:82:ba:72:bb:36:91:c6: 77:bc:df:37:63:38:10:d1:95:37:5f:49:6a:88:85: 31:0c:c2:bc:e0:df:67:1c:59:61:5c:5e:6b:95:47: 80:97:e4:79:ce:7d:e5:ce:30:d8:81:27:cc:33:d6: 38:7f:c1:32:59:56:37:60:04:df:e1:87:ad:59:ec: 0a:98:be:5e:9c:de:af:82:5a:14:da:18:cc:f0:8c: 72:68:a9:8d:7d:af:a5:30:2e:09:46:b9:02:bd:14: ae:b2:30:45:f5:37:ee:00:83:d8:19:18:f4:c8:cf: 3b:b7:4e:aa:1a:22:01:31:36:16:98:7c:b7:59:78: cb:bd:13:bf:35:40:0d:69:4c:1a:8b:1d:09:f4:a8: 8b:09:5c:3b:ab:92:8a:c3:67:e2:19:20:37:21:a3: 8f:b8:73:8a:71:1e:81:92:59:60:99:79:e0:6b:be: 21:50:9b:59:8b:3d:c9:ca:ae:2b:f9:d7:0d:56:02: 29:f2:c6:16:6e:c3:6c:bf:06:c4:f2:b0:46:0c:7b: 0e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:81:AF:AB:45:B8:CA:61:C0:4E:03:C9:07:CA:53:F3:CE:0C:62:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cfbfac3f-1557-30d6-a7b8-a5f7a0311b22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:99:36:d6:af:da:bd:be:04:f0:f1:45:31:72:d9:3a:0f:8f: 34:24:05:e1:27:a2:09:24:61:74:4f:6a:e7:cd:53:88:bf:a0: 31:1e:f0:8f:6f:52:a2:56:46:ed:61:93:78:2f:78:45:4b:77: 1f:f6:da:60:43:37:b1:15:44:69:c3:b4:d8:05:4a:f4:d2:98: 71:14:5e:24:f9:26:32:1e:fe:1e:38:8f:82:c5:c3:65:0c:c5: 07:25:30:13:19:76:ee:c8:8f:7d:2b:5c:3a:64:24:31:32:e4: bc:8d:c1:45:3b:a2:b4:51:83:15:0f:09:b2:b6:f6:41:b9:dc: 34:64:de:80:ff:f9:0b:47:00:44:b5:9c:2b:b0:dc:3c:9d:29: e4:95:2c:5c:63:71:72:ff:df:78:70:77:d4:b8:ef:d8:50:3d: 5c:e9:e0:9d:5c:6e:3c:f8:8b:e4:7a:38:4f:86:08:9f:f8:d5: 1a:79:2c:66:ea:22:fc:6d:16:04:4f:61:58:7e:45:e5:71:18: d5:2e:d0:a7:da:73:ee:6f:66:1f:50:ae:42:68:25:d0:e3:2a: 41:3d:83:af:7e:3f:6c:b9:52:91:3b:f5:58:49:f9:1b:9e:51: 70:6a:34:b0:de:6c:00:61:ae:17:b9:ab:a7:01:b7:e4:c7:78: 17:45:5f:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vHMYVfwRThbKhkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDUwMTAxMjYwMVoXDTI2MDczMDAxMjYwMVowLzEtMCsGA1UEAxMk ODQwOTNjOWUtMGMxYi00YjRjLThlODctYTA4YjhiZjI5OTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFaoSAoarobmKSFjtdnJ5L3KkoUgm6cjK00W oqxWGUjU60dh/VbUif5JA1h1aau4yZV/CoK6crs2kcZ3vN83YzgQ0ZU3X0lqiIUx DMK84N9nHFlhXF5rlUeAl+R5zn3lzjDYgSfMM9Y4f8EyWVY3YATf4YetWewKmL5e nN6vgloU2hjM8IxyaKmNfa+lMC4JRrkCvRSusjBF9TfuAIPYGRj0yM87t06qGiIB MTYWmHy3WXjLvRO/NUANaUwaix0J9KiLCVw7q5KKw2fiGSA3IaOPuHOKcR6Bkllg mXnga74hUJtZiz3Jyq4r+dcNVgIp8sYWbsNsvwbE8rBGDHsOowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKBr6tFuMphwE4DyQfKU/PODGLKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvY2ZiZmFjM2YtMTU1Ny0z MGQ2LWE3YjgtYTVmN2EwMzExYjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmV/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGZNtav2r2+BPDxRTFy2ToPjzQkBeEnogkkYXRPaufNU4i/oDEe8I9v UqJWRu1hk3gveEVLdx/22mBDN7EVRGnDtNgFSvTSmHEUXiT5JjIe/h44j4LFw2UM xQclMBMZdu7Ij30rXDpkJDEy5LyNwUU7orRRgxUPCbK29kG53DRk3oD/+QtHAES1 nCuw3DydKeSVLFxjcXL/33hwd9S479hQPVzp4J1cbjz4i+R6OE+GCJ/41Rp5LGbq IvxtFgRPYVh+ReVxGNUu0Kfac+5vZh9QrkJoJdDjKkE9g69+P2y5UpE79VhJ+Rue UXBqNLDebABhrhe5q6cBt+THeBdFX80= -----END CERTIFICATE-----Generated at Wed May 13 07:56:49 2026 by rpki-client