$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f31eabaf-6e0e-375a-a7f1-d9a0117d9f0c.roa File: f31eabaf-6e0e-375a-a7f1-d9a0117d9f0c.roa (raw, json) Hash identifier: 2ShNoUi1UT8jBBAZIgcsMwpugqs2GlrtZwJJLo6ntuE= Subject key identifier: ED:C9:71:EC:01:D4:B3:A2:B2:F1:34:99:B9:5E:45:86:1A:C3:52:7A Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0 Certificate serial: 010D0C9F4328584DAF1A718D6FFD883D0B588200 Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f31eabaf-6e0e-375a-a7f1-d9a0117d9f0c.roa Signing time: Fri 01 May 2026 01:21:19 +0000 ROA not before: Fri 01 May 2026 01:21:19 +0000 ROA not after: Thu 30 Jul 2026 01:21:19 +0000 asID: 63023 IP address blocks: 170.101.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:1a:71:8d:6f:fd:88:3d:0b:58:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0 Validity Not Before: May 1 01:21:19 2026 GMT Not After : Jul 30 01:21:19 2026 GMT Subject: CN=cdd0ebe4-33e5-4295-80e8-e01ab6f16c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:29:28:98:75:94:82:9d:e5:4c:f2:61:0a:f7: 70:cc:e6:b2:11:69:54:35:45:16:ac:20:4b:c9:7e: e8:57:39:52:d7:b6:6f:10:b5:f7:78:46:8f:00:b7: 58:b3:8b:d0:04:66:d6:1c:9a:a8:d9:88:b7:4a:e8: 99:42:30:7d:58:25:9d:75:ed:ad:fa:08:c6:99:06: b0:ce:d4:2d:01:63:58:f0:14:a9:6a:be:c3:67:96: 90:ca:cc:bd:ac:b5:e0:2d:b5:51:42:09:c8:6a:c6: 81:26:f3:c1:2a:6b:95:c1:cd:35:f7:75:06:bc:2f: fc:47:e6:78:ff:bf:d3:ad:34:b5:7c:f2:ac:b6:7e: 3f:37:0d:7d:15:c2:74:57:a8:f7:8e:8b:6a:7e:2e: 35:67:b4:f5:96:73:79:17:c8:20:dd:8e:75:a6:0a: ef:79:d3:40:e9:43:c7:a1:bd:7f:8d:92:d5:d9:78: dc:50:88:43:10:77:1c:ce:3f:7e:9b:8f:06:18:94: f7:56:8d:c4:b8:ad:f2:a3:51:7d:d3:6c:7b:b7:1d: f8:70:6d:ed:d2:18:6d:c6:ce:5e:1a:7b:77:8f:08: 5a:25:6c:2d:0b:62:c3:f9:5f:bc:ca:72:e5:11:af: f5:53:83:67:ef:07:10:4b:e6:c2:69:72:18:e6:bc: 93:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C9:71:EC:01:D4:B3:A2:B2:F1:34:99:B9:5E:45:86:1A:C3:52:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/f31eabaf-6e0e-375a-a7f1-d9a0117d9f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl X509v3 Authority Key Identifier: keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer sbgp-ipAddrBlock: critical IPv4: 170.101.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a3:d2:52:d9:85:2c:e8:5d:a2:8d:e7:2a:b5:52:46:82:11: 9d:17:d3:8e:1d:22:d4:6d:3a:4c:20:cb:b9:09:83:45:89:d8: 66:3e:2d:05:3d:a0:5b:ee:78:49:cb:14:df:97:a9:02:57:aa: 4d:52:71:37:d3:21:95:3d:c5:1d:4f:cc:30:2a:94:b3:0e:aa: af:cd:08:c9:63:58:ed:77:02:22:6d:c1:9f:47:7e:63:59:e0: d3:7d:84:9d:53:52:63:57:f5:f1:d3:23:5c:73:28:6b:93:25: 64:49:89:eb:0d:76:67:28:12:58:b6:68:77:02:47:cb:95:11: 5f:a1:15:29:42:ec:39:62:72:6f:c1:e3:83:89:da:0d:b4:b4: 73:0d:04:f8:ca:1e:59:37:8f:ed:3b:dc:80:f6:66:71:76:26: 39:8b:c6:25:1e:e8:7f:aa:a7:9c:47:39:36:09:db:3f:42:8e: e8:7a:53:93:2e:f6:18:14:da:63:ed:d2:28:80:3a:d3:31:8c: 5f:6b:c2:0f:b9:6f:6d:ba:ec:a3:6b:60:bd:28:00:79:9f:11: 27:59:de:dd:17:8e:0f:23:e2:bb:34:fc:5c:52:9a:31:f4:a8: 70:34:46:9b:14:87:6c:af:dd:89:ac:d5:72:4b:41:be:34:b9: 9c:13:84:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vGnGNb/2IPQtYggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz OWUwMB4XDTI2MDUwMTAxMjExOVoXDTI2MDczMDAxMjExOVowLzEtMCsGA1UEAxMk Y2RkMGViZTQtMzNlNS00Mjk1LTgwZTgtZTAxYWI2ZjE2YzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkykomHWUgp3lTPJhCvdwzOayEWlUNUUWrCBL yX7oVzlS17ZvELX3eEaPALdYs4vQBGbWHJqo2Yi3SuiZQjB9WCWdde2t+gjGmQaw ztQtAWNY8BSpar7DZ5aQysy9rLXgLbVRQgnIasaBJvPBKmuVwc0193UGvC/8R+Z4 /7/TrTS1fPKstn4/Nw19FcJ0V6j3jotqfi41Z7T1lnN5F8gg3Y51pgrvedNA6UPH ob1/jZLV2XjcUIhDEHcczj9+m48GGJT3Vo3EuK3yo1F902x7tx34cG3t0hhtxs5e Gnt3jwhaJWwtC2LD+V+8ynLlEa/1U4Nn7wcQS+bCaXIY5ryTEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3JcewB1LOisvE0mbleRYYaw1J6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZjMxZWFiYWYtNmUwZS0z NzVhLWE3ZjEtZDlhMDExN2Q5ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5 NDg5YTM5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqmVtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGej0lLZhSzoXaKN5yq1UkaCEZ0X044dItRtOkwgy7kJg0WJ2GY+LQU9 oFvueEnLFN+XqQJXqk1ScTfTIZU9xR1PzDAqlLMOqq/NCMljWO13AiJtwZ9HfmNZ 4NN9hJ1TUmNX9fHTI1xzKGuTJWRJiesNdmcoEli2aHcCR8uVEV+hFSlC7Dlicm/B 44OJ2g20tHMNBPjKHlk3j+073ID2ZnF2JjmLxiUe6H+qp5xHOTYJ2z9Cjuh6U5Mu 9hgU2mPt0iiAOtMxjF9rwg+5b2267KNrYL0oAHmfESdZ3t0Xjg8j4rs0/FxSmjH0 qHA0RpsUh2yv3Yms1XJLQb40uZwThH0= -----END CERTIFICATE-----Generated at Wed May 13 08:39:53 2026 by rpki-client