$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cfbfac3f-1557-30d6-a7b8-a5f7a0311b22.roa File: cfbfac3f-1557-30d6-a7b8-a5f7a0311b22.roa (raw, json) Hash identifier: pZrvV+VrGwHh4zObCJDNqYvTh+jrI5snI2L2qjqyr3c= Subject key identifier: A5:00:90:66:D2:55:26:3D:CA:01:8D:BE:C1:71:B4:53:74:E5:11:91 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F31B7D058EA10909387AA2B80 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cfbfac3f-1557-30d6-a7b8-a5f7a0311b22.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 63023 IP address blocks: 170.101.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:d0:58:ea:10:90:93:87:aa:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=dbb6a385-a21d-4a0a-b79d-3dd2d3a08c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:dc:02:ae:33:fe:02:bc:b7:db:1b:a4:d0:85: d1:7d:47:19:7d:be:b2:10:c0:9f:b1:c1:62:78:76: 70:f2:ea:cc:b1:f7:50:5f:d7:93:5b:c0:a2:1f:98: 9d:90:b4:fb:f3:c3:c2:b6:25:2a:09:3b:fe:62:80: 70:56:35:a6:89:44:4b:fa:85:88:37:1c:cc:6d:2c: 8c:ac:19:7b:7e:49:8f:fb:6f:0c:10:e7:7a:0b:48: 9c:b4:2b:c4:e1:60:88:f2:bb:40:71:2b:c5:14:e4: 78:76:e7:ae:a1:eb:ac:c4:2d:04:c4:98:16:dc:31: d3:f8:15:b6:0a:de:4b:4c:38:ea:9d:b7:b7:11:b4: 54:92:d1:7f:24:ef:4b:b7:62:88:e2:d3:2c:be:6a: e9:a6:f1:ed:1c:6e:39:a0:87:4a:8c:5c:f1:2f:a1: fa:8c:77:7e:5c:05:0c:2f:ae:73:ec:f3:bc:fd:9c: c0:d9:ce:bf:76:cd:c9:75:ce:84:b3:99:72:c2:37: 01:c0:6d:ca:74:c6:5d:93:36:90:b0:96:83:ba:62: e6:f3:8c:f0:2d:4c:fa:d7:62:65:27:46:3d:e4:a7: 5d:79:ac:04:4e:8a:2c:f7:4f:6b:3a:2d:91:e9:97: d2:c4:cd:09:9a:2d:f9:52:03:bb:24:6c:78:c7:e1: d6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:00:90:66:D2:55:26:3D:CA:01:8D:BE:C1:71:B4:53:74:E5:11:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/cfbfac3f-1557-30d6-a7b8-a5f7a0311b22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:bc:03:32:dc:84:4c:3f:b5:29:ba:26:1f:e7:fe:cb:80:e2: 55:11:bf:19:c0:76:1f:88:0c:ba:7f:bb:a4:3f:2c:aa:63:09: 0f:a9:48:6e:39:cc:03:9a:f3:22:38:66:e5:5c:96:07:14:31: a1:0e:18:60:d0:3d:b1:65:82:9b:bc:14:22:d9:d4:d1:a1:64: e0:2c:84:5d:33:01:2f:5a:8a:a2:22:d1:51:e2:c0:e1:3a:39: f8:fc:7f:e4:c9:00:fb:b0:8b:46:d9:14:d3:da:17:c7:25:3a: fb:6c:3f:c4:d7:0c:5d:9d:6f:a4:25:f3:d8:cd:82:12:56:95: 05:f6:f7:d9:20:4b:33:ab:3a:c9:1c:88:31:8c:8b:8a:d0:ba: 60:d1:88:f6:04:2b:15:30:61:88:e6:28:b5:c9:7d:7e:94:55: d2:3a:38:2a:6c:2b:7b:7a:8f:24:c6:46:1d:1c:cb:7e:22:04: 3d:89:1c:7c:84:cb:85:05:d8:c6:2d:58:0f:dd:19:b2:66:d3: c3:8e:2b:a9:f5:54:e7:4f:fc:f8:89:08:67:36:9c:be:a9:06: fb:91:70:23:8d:c4:3a:6f:23:ad:e2:da:31:d4:f1:55:fd:fb: 98:0f:27:3b:72:bc:8b:bd:3a:b1:9c:50:73:5d:4c:f8:4a:6f: 42:6d:90:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt9BY6hCQk4eqK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk ZGJiNmEzODUtYTIxZC00YTBhLWI3OWQtM2RkMmQzYTA4YzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9wCrjP+Ary32xuk0IXRfUcZfb6yEMCfscFi eHZw8urMsfdQX9eTW8CiH5idkLT788PCtiUqCTv+YoBwVjWmiURL+oWINxzMbSyM rBl7fkmP+28MEOd6C0ictCvE4WCI8rtAcSvFFOR4dueuoeusxC0ExJgW3DHT+BW2 Ct5LTDjqnbe3EbRUktF/JO9Lt2KI4tMsvmrppvHtHG45oIdKjFzxL6H6jHd+XAUM L65z7PO8/ZzA2c6/ds3Jdc6Es5lywjcBwG3KdMZdkzaQsJaDumLm84zwLUz612Jl J0Y95KddeawEToos909rOi2R6ZfSxM0Jmi35UgO7JGx4x+HWzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUAkGbSVSY9ygGNvsFxtFN05RGRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvY2ZiZmFjM2YtMTU1Ny0z MGQ2LWE3YjgtYTVmN2EwMzExYjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmV/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+8AzLchEw/tSm6Jh/n/suA4lURvxnAdh+IDLp/u6Q/LKpjCQ+pSG45 zAOa8yI4ZuVclgcUMaEOGGDQPbFlgpu8FCLZ1NGhZOAshF0zAS9aiqIi0VHiwOE6 Ofj8f+TJAPuwi0bZFNPaF8clOvtsP8TXDF2db6Ql89jNghJWlQX299kgSzOrOskc iDGMi4rQumDRiPYEKxUwYYjmKLXJfX6UVdI6OCpsK3t6jyTGRh0cy34iBD2JHHyE y4UF2MYtWA/dGbJm08OOK6n1VOdP/PiJCGc2nL6pBvuRcCONxDpvI63i2jHU8VX9 +5gPJztyvIu9OrGcUHNdTPhKb0JtkCU= -----END CERTIFICATE-----Generated at Fri Sep 25 18:45:57 2026 by rpki-client