$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/db60af41-676e-3abc-b757-1c778da8872a.roa File: db60af41-676e-3abc-b757-1c778da8872a.roa (raw, json) Hash identifier: b7qq/U8L9cWQGLsHZ80EAXYYYCu9gq1M6iBV8aX1EAk= Subject key identifier: 72:CF:DF:78:7F:1E:FA:C9:01:9D:1A:06:DE:50:CC:59:9E:A8:36:DC Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584D465F9CA05012BAE39FD387C0 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/db60af41-676e-3abc-b757-1c778da8872a.roa Signing time: Tue 24 Mar 2026 13:00:41 +0000 ROA not before: Tue 24 Mar 2026 13:00:41 +0000 ROA not after: Mon 22 Jun 2026 13:00:41 +0000 asID: 63023 IP address blocks: 216.106.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:5f:9c:a0:50:12:ba:e3:9f:d3:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Mar 24 13:00:41 2026 GMT Not After : Jun 22 13:00:41 2026 GMT Subject: CN=5f5fed0f-69ef-48dc-b99f-f7e3addc8eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:d8:ae:d0:0f:6a:3d:94:f0:f1:4c:da:ad:93: 53:b4:d9:aa:29:fc:51:38:a9:46:48:e4:67:5e:42: 1a:dd:93:41:b8:0d:2c:af:72:54:7a:e2:1e:3d:dd: 5a:bf:c3:9c:4b:b1:c6:46:f2:d9:cf:ec:ad:ae:c8: 88:cc:c4:dd:87:5b:7d:a3:61:8e:d4:63:16:a0:6e: 10:33:1b:74:3d:1a:8a:12:14:81:d8:76:89:99:40: 17:88:14:da:04:d7:24:0e:4a:fb:e9:4f:bb:b0:cc: 7b:f8:ec:c1:73:cb:a2:83:e8:f8:46:92:5f:75:48: 75:66:f7:17:28:f4:10:0d:4b:1b:3c:e9:83:28:12: a8:8b:03:87:7c:70:b9:cc:f7:5a:bf:0d:87:4b:b5: 45:5e:55:c8:50:49:29:e3:be:92:6b:bb:50:79:38: c7:0d:05:c1:30:f7:3a:48:c2:bb:fb:a9:38:22:33: 87:21:1f:2f:7f:68:b3:83:ba:ea:2e:ae:a6:59:7e: 9a:41:c0:a6:77:13:34:65:a6:67:c0:b3:f6:bb:66: e4:55:95:47:48:9f:f8:9c:5f:f5:09:11:6e:2e:0a: fb:b5:f2:b8:3f:0e:a0:cb:10:e6:f8:5a:20:33:7a: 3e:7c:89:a9:4e:58:c3:b0:f6:ba:90:d2:8e:08:ae: 12:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CF:DF:78:7F:1E:FA:C9:01:9D:1A:06:DE:50:CC:59:9E:A8:36:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/db60af41-676e-3abc-b757-1c778da8872a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 216.106.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d0:d6:39:0a:1c:59:2c:88:27:c1:b9:54:81:d9:1e:02:71: cd:53:8d:a3:6e:66:2a:b4:d4:9a:f4:5b:1f:0e:b0:97:02:fc: f4:73:8d:2c:da:c9:dd:87:98:f1:a9:d3:30:40:e3:24:22:4f: c1:e5:2d:80:6f:d4:ae:03:f6:d1:3d:eb:9b:5a:b8:f0:66:29: 80:77:e0:08:42:47:ee:19:4d:be:46:84:45:40:5d:36:2e:d2: 55:7e:02:43:26:0a:00:5b:2d:79:32:ad:d1:e9:e2:13:15:bd: 25:3e:3e:e7:aa:ab:64:73:16:7f:58:01:2e:c2:f3:75:00:90: 7e:36:bb:a6:03:66:2c:b0:14:5d:13:4c:14:8a:63:80:bb:fb: b9:59:22:f7:72:ed:75:de:be:77:2f:1b:20:c8:f7:e3:1a:8c: a9:1b:d0:db:fd:49:3f:9f:d7:0a:05:62:46:b8:6f:0c:0d:36: 3b:8f:2a:9a:af:3b:41:3b:79:ec:be:cc:f5:75:07:2b:d3:31: 5c:07:ab:45:d5:47:30:bf:1b:b5:05:17:36:99:f7:13:e1:79: a4:91:01:c0:6d:e3:83:f7:54:ca:17:a9:24:80:76:b5:3d:74: a4:33:c4:a8:21:3e:bc:85:59:12:f3:f6:42:67:17:e4:8a:25: 2b:9c:3f:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1GX5ygUBK645/Th8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDMyNDEzMDA0MVoXDTI2MDYyMjEzMDA0MVowLzEtMCsGA1UEAxMk NWY1ZmVkMGYtNjllZi00OGRjLWI5OWYtZjdlM2FkZGM4ZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Niu0A9qPZTw8UzarZNTtNmqKfxROKlGSORn XkIa3ZNBuA0sr3JUeuIePd1av8OcS7HGRvLZz+ytrsiIzMTdh1t9o2GO1GMWoG4Q Mxt0PRqKEhSB2HaJmUAXiBTaBNckDkr76U+7sMx7+OzBc8uig+j4RpJfdUh1ZvcX KPQQDUsbPOmDKBKoiwOHfHC5zPdavw2HS7VFXlXIUEkp476Sa7tQeTjHDQXBMPc6 SMK7+6k4IjOHIR8vf2izg7rqLq6mWX6aQcCmdxM0ZaZnwLP2u2bkVZVHSJ/4nF/1 CRFuLgr7tfK4Pw6gyxDm+FogM3o+fImpTljDsPa6kNKOCK4SkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLP33h/HvrJAZ0aBt5QzFmeqDbcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZGI2MGFmNDEtNjc2ZS0z YWJjLWI3NTctMWM3NzhkYTg4NzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GqyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnQ1jkKHFksiCfBuVSB2R4Ccc1TjaNuZiq01Jr0Wx8OsJcC/PRzjSza yd2HmPGp0zBA4yQiT8HlLYBv1K4D9tE965tauPBmKYB34AhCR+4ZTb5GhEVAXTYu 0lV+AkMmCgBbLXkyrdHp4hMVvSU+Pueqq2RzFn9YAS7C83UAkH42u6YDZiywFF0T TBSKY4C7+7lZIvdy7XXevncvGyDI9+MajKkb0Nv9ST+f1woFYka4bwwNNjuPKpqv O0E7eey+zPV1ByvTMVwHq0XVRzC/G7UFFzaZ9xPheaSRAcBt44P3VMoXqSSAdrU9 dKQzxKghPryFWRLz9kJnF+SKJSucP2c= -----END CERTIFICATE-----Generated at Thu Mar 26 12:47:17 2026 by rpki-client