$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d17c8f87-bf0a-3daa-92b6-943ceef2fd3a.roa File: d17c8f87-bf0a-3daa-92b6-943ceef2fd3a.roa (raw, json) Hash identifier: iX958unzKDj0gVRiuxfrrgjWTMnWoYxtZ7G46/NYmcc= Subject key identifier: 3A:F6:44:24:04:4A:99:77:AF:B6:B1:4A:DF:45:F7:5D:45:F0:EB:A9 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584D4A5AAAE0A3411F97B686F780 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d17c8f87-bf0a-3daa-92b6-943ceef2fd3a.roa Signing time: Wed 25 Mar 2026 23:14:05 +0000 ROA not before: Wed 25 Mar 2026 23:14:05 +0000 ROA not after: Tue 23 Jun 2026 23:14:05 +0000 asID: 63023 IP address blocks: 216.152.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:5a:aa:e0:a3:41:1f:97:b6:86:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Mar 25 23:14:05 2026 GMT Not After : Jun 23 23:14:05 2026 GMT Subject: CN=81190810-d2de-42e1-882c-227ab9465661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d8:89:16:7e:f9:b7:28:9d:1d:5f:95:e8:3f: ce:8b:22:a3:64:f8:ad:6c:b2:ae:14:8e:6b:ef:2b: e4:7a:3e:27:0a:61:8b:8a:19:ab:7d:f0:61:ea:05: 13:d4:ea:ec:cd:bb:c4:a1:3c:04:db:33:fb:67:a8: f5:b3:c8:ab:6e:6e:61:ef:2c:47:9f:57:a5:38:ec: 30:e3:c6:1e:a5:0a:de:0b:70:28:60:7f:43:ee:ad: 28:7c:ea:cd:5e:5e:94:ea:a9:a1:8e:8b:a6:76:5d: c3:fa:74:7c:4e:18:0d:e2:83:2b:8a:fd:74:44:04: 36:00:e7:94:64:66:72:49:a5:d5:32:e3:ff:38:3c: 7f:7d:41:dc:82:7f:f8:cc:eb:d3:7e:fc:2d:e2:01: f4:cf:b0:54:f3:79:52:64:f6:73:a0:6e:c3:79:1f: 54:e1:f5:ef:73:aa:4d:39:81:79:12:37:6d:bf:08: 70:8c:68:8d:0e:fd:8f:b1:b9:b7:4e:37:cf:d4:3f: 4d:bf:4b:31:e7:b5:de:89:de:e9:67:7e:32:61:a7: af:a9:9a:d4:7c:12:e2:50:1f:9b:dc:7d:03:13:ce: dd:f4:5a:c3:2c:07:71:64:ff:5d:e4:6b:47:3d:fa: ae:a0:77:03:de:4d:95:af:92:eb:49:6d:b1:51:46: d3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F6:44:24:04:4A:99:77:AF:B6:B1:4A:DF:45:F7:5D:45:F0:EB:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/d17c8f87-bf0a-3daa-92b6-943ceef2fd3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.152.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:04:5c:13:da:50:a3:a8:e4:1c:3a:85:90:eb:b6:ec:00:d9: 6d:58:d8:07:49:80:64:ba:e8:0e:a4:9b:61:67:56:98:fa:66: 12:44:47:ad:05:45:f3:92:be:fc:3d:ce:6e:db:b2:e7:8a:82: 87:d4:a3:83:d6:e9:56:bd:45:4d:a9:49:87:87:f2:9f:1b:4f: bf:ff:d5:2b:ec:88:36:8d:e2:32:75:7e:22:f3:06:e2:46:98: 2a:05:3c:99:0d:75:4e:73:da:b0:a6:14:63:81:ba:c3:fc:ab: 4d:63:23:d2:7b:bf:01:87:15:22:77:5f:51:98:b7:39:b7:f4: a7:24:32:20:77:2c:6e:7a:d9:60:20:9d:67:20:f8:96:7a:07: be:6c:27:25:34:96:f6:ba:10:8d:99:bc:60:95:a3:4c:41:0b: 8c:97:09:5a:d8:49:c3:88:e1:ef:e7:89:ea:87:24:83:41:30: a0:d2:cb:78:a9:33:9e:8a:ce:72:21:28:26:50:6b:39:a7:a2: aa:88:be:16:f4:4e:af:a3:18:4b:dc:07:8e:8e:ae:00:d4:f1: 6f:bf:18:8e:76:a1:04:80:bf:23:56:96:ac:21:7e:7f:21:bc: 56:e1:fe:35:b4:d4:f1:c9:9d:b2:29:16:2c:ed:c4:3a:6f:5d: bc:bd:3e:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1KWqrgo0Efl7aG94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDMyNTIzMTQwNVoXDTI2MDYyMzIzMTQwNVowLzEtMCsGA1UEAxMk ODExOTA4MTAtZDJkZS00MmUxLTg4MmMtMjI3YWI5NDY1NjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NiJFn75tyidHV+V6D/OiyKjZPitbLKuFI5r 7yvkej4nCmGLihmrffBh6gUT1OrszbvEoTwE2zP7Z6j1s8irbm5h7yxHn1elOOww 48YepQreC3AoYH9D7q0ofOrNXl6U6qmhjoumdl3D+nR8ThgN4oMriv10RAQ2AOeU ZGZySaXVMuP/ODx/fUHcgn/4zOvTfvwt4gH0z7BU83lSZPZzoG7DeR9U4fXvc6pN OYF5EjdtvwhwjGiNDv2Psbm3TjfP1D9Nv0sx57Xeid7pZ34yYaevqZrUfBLiUB+b 3H0DE87d9FrDLAdxZP9d5GtHPfquoHcD3k2Vr5LrSW2xUUbTbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDr2RCQESpl3r7axSt9F911F8OupMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZDE3YzhmODctYmYwYS0z ZGFhLTkyYjYtOTQzY2VlZjJmZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JiVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEEXBPaUKOo5Bw6hZDrtuwA2W1Y2AdJgGS66A6km2FnVpj6ZhJER60F RfOSvvw9zm7bsueKgofUo4PW6Va9RU2pSYeH8p8bT7//1SvsiDaN4jJ1fiLzBuJG mCoFPJkNdU5z2rCmFGOBusP8q01jI9J7vwGHFSJ3X1GYtzm39KckMiB3LG562WAg nWcg+JZ6B75sJyU0lva6EI2ZvGCVo0xBC4yXCVrYScOI4e/nieqHJINBMKDSy3ip M56KznIhKCZQazmnoqqIvhb0Tq+jGEvcB46OrgDU8W+/GI52oQSAvyNWlqwhfn8h vFbh/jW01PHJnbIpFiztxDpvXby9PuE= -----END CERTIFICATE-----Generated at Thu Mar 26 14:03:18 2026 by rpki-client