$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f31eabaf-6e0e-375a-a7f1-d9a0117d9f0c.roa File: f31eabaf-6e0e-375a-a7f1-d9a0117d9f0c.roa (raw, json) Hash identifier: y7nAncIhb3W6QmoUEkFc8SIngkjC8NTmlpHVVcagAHc= Subject key identifier: 6D:1B:D8:D9:E4:78:34:88:D8:90:6C:DB:84:67:0A:4A:FA:F9:B8:E3 Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584F31B7B7D7B4F4A8F54BB6AE00 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f31eabaf-6e0e-375a-a7f1-d9a0117d9f0c.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 63023 IP address blocks: 170.101.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:b7:d7:b4:f4:a8:f5:4b:b6:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=7104d847-43dc-40cf-9550-7917aadea03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f8:a7:26:a6:0d:10:c8:5e:95:74:d0:04:46: c4:80:4d:47:3f:ce:d8:ac:16:af:c0:e0:b2:eb:f1: 21:e7:80:23:fe:fc:6c:11:af:a4:4e:2a:56:a7:66: cd:24:74:09:88:9d:bb:60:95:ab:28:86:2f:ba:32: f0:6f:2e:66:5b:45:49:2b:78:03:2d:cc:68:bb:53: 48:46:f2:43:43:0d:04:8d:ce:bc:43:07:01:87:85: dc:2b:54:18:a1:1f:74:85:a0:c6:a9:d3:d4:ef:8e: 95:e4:de:b6:68:d1:36:d8:a7:c0:de:9f:aa:01:ab: 2a:64:96:cd:17:a9:d7:41:84:1f:e3:9b:1f:bf:47: 9d:ae:de:df:af:8c:86:76:c4:a5:70:46:5f:91:9a: 38:e8:23:94:2e:ec:c0:7a:6a:f2:c3:f9:dc:a8:21: 2b:be:28:e6:ea:44:32:8b:df:71:bc:53:2b:84:3a: 2a:eb:8f:ad:7a:0b:f2:af:0e:a3:6d:a0:e0:b2:49: e9:40:9f:85:16:25:f8:53:56:30:57:a6:f0:7c:61: 57:7e:00:a9:7a:ed:51:a0:5a:ae:a0:e8:ff:6e:08: f2:27:06:0a:50:29:1f:dd:ab:ce:2e:cc:86:b4:b4: 04:be:a8:b9:b7:6b:e7:6c:41:c5:a9:23:e8:ff:78: 33:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1B:D8:D9:E4:78:34:88:D8:90:6C:DB:84:67:0A:4A:FA:F9:B8:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f31eabaf-6e0e-375a-a7f1-d9a0117d9f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:1d:e2:c4:d2:38:ca:62:3d:c0:05:f1:81:50:45:71:73:2c: a3:da:73:9e:10:8e:47:f9:b3:b3:b8:ba:63:c2:a6:4f:7f:8b: e2:83:a3:25:6d:cc:9b:fa:f6:68:b0:d3:d2:85:40:c8:ec:c2: a9:f6:5a:05:58:31:c3:17:a6:54:a2:63:f2:df:09:80:39:e2: 90:f8:62:fa:93:f1:87:1d:6a:13:3a:22:7d:71:fb:dd:8a:55: 9f:f7:9b:d0:8a:72:99:99:53:1e:89:15:bd:2b:3c:a4:de:fe: a2:61:d3:27:1b:95:e9:84:f8:44:c4:3c:52:99:a7:7c:4e:5c: 0a:97:a9:49:ee:c9:b4:4c:62:28:87:19:64:57:0a:d3:59:92: f8:e0:be:14:0e:ee:45:d5:54:ca:79:a9:07:73:b5:d7:e4:fe: 85:32:39:20:a7:6d:56:1e:40:72:84:37:61:84:d9:5a:6d:97: 1a:b5:0b:52:75:ad:41:6c:10:db:99:2e:71:94:8b:f9:4c:55: f4:6c:03:3a:3c:5c:55:6f:c6:8f:80:bf:48:87:89:76:cc:41: 9f:5e:b7:b3:ac:c7:70:fe:03:f3:5f:98:c3:4c:94:1f:8a:59: 6c:4f:a0:f0:93:cc:4a:2f:52:a1:91:f9:74:71:6f:9b:8b:2a: 1c:b3:d0:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt7fXtPSo9Uu2rgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk NzEwNGQ4NDctNDNkYy00MGNmLTk1NTAtNzkxN2FhZGVhMDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfinJqYNEMhelXTQBEbEgE1HP87YrBavwOCy 6/Eh54Aj/vxsEa+kTipWp2bNJHQJiJ27YJWrKIYvujLwby5mW0VJK3gDLcxou1NI RvJDQw0Ejc68QwcBh4XcK1QYoR90haDGqdPU746V5N62aNE22KfA3p+qAasqZJbN F6nXQYQf45sfv0edrt7fr4yGdsSlcEZfkZo46COULuzAemryw/ncqCErvijm6kQy i99xvFMrhDoq64+tegvyrw6jbaDgsknpQJ+FFiX4U1YwV6bwfGFXfgCpeu1RoFqu oOj/bgjyJwYKUCkf3avOLsyGtLQEvqi5t2vnbEHFqSPo/3gz6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0b2NnkeDSI2JBs24RnCkr6+bjjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZjMxZWFiYWYtNmUwZS0z NzVhLWE3ZjEtZDlhMDExN2Q5ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmVtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8d4sTSOMpiPcAF8YFQRXFzLKPac54Qjkf5s7O4umPCpk9/i+KDoyVt zJv69miw09KFQMjswqn2WgVYMcMXplSiY/LfCYA54pD4YvqT8YcdahM6In1x+92K VZ/3m9CKcpmZUx6JFb0rPKTe/qJh0ycblemE+ETEPFKZp3xOXAqXqUnuybRMYiiH GWRXCtNZkvjgvhQO7kXVVMp5qQdztdfk/oUyOSCnbVYeQHKEN2GE2Vptlxq1C1J1 rUFsENuZLnGUi/lMVfRsAzo8XFVvxo+Av0iHiXbMQZ9et7Osx3D+A/NfmMNMlB+K WWxPoPCTzEovUqGR+XRxb5uLKhyz0HA= -----END CERTIFICATE-----Generated at Sat Sep 26 03:47:30 2026 by rpki-client