$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/4f616f41-a307-318d-bfe2-bea18e4babef.roa File: 4f616f41-a307-318d-bfe2-bea18e4babef.roa (raw, json) Hash identifier: aRborcMnjdZ640FbsVrceFbkq+5FCy7CkeVLxydTmEg= Subject key identifier: 37:F2:40:65:44:59:DD:4F:08:DB:B1:53:EA:FD:68:16:CD:F8:1F:2C Certificate issuer: /CN=601d8cf8-4cca-4295-8f3b-916dcd50b673 Certificate serial: 010D0C9F4328584EA7A091195E8B0A4778916FC0 Authority key identifier: B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/4f616f41-a307-318d-bfe2-bea18e4babef.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 26037 IP address blocks: 204.209.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:91:19:5e:8b:0a:47:78:91:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601d8cf8-4cca-4295-8f3b-916dcd50b673 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=60ecf298-bd22-4723-b498-273abc88b565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5f:c9:06:75:31:7c:c8:03:e1:97:ee:b1:ad: 23:4e:ed:bb:c2:66:4e:3b:c4:c1:38:c2:c0:3f:9b: 58:b5:7f:cc:0b:68:05:35:9a:0c:94:39:48:85:79: 84:cd:28:92:c8:ab:e6:a4:56:4d:4e:ab:b2:5c:e0: 75:86:c1:61:4a:90:5f:5c:b7:2e:b6:45:58:c0:b5: e7:d8:3c:10:d7:84:eb:89:eb:8f:06:0a:5c:43:92: c9:24:26:c0:cc:0e:4f:c4:2a:41:b3:ff:4b:b0:5d: 5b:23:eb:50:7b:ab:db:87:e5:2f:bf:74:a2:97:39: e2:58:f3:c8:45:6f:9f:53:5a:0f:88:b7:85:4f:6d: bc:9c:2e:4f:08:34:44:ce:33:36:04:6e:e2:2a:b9: fd:76:6d:53:dd:2d:8b:7c:54:88:dd:6c:ba:06:33: 19:6e:f3:f9:1d:45:d2:5e:c9:14:c1:ce:5b:c7:b8: 11:03:e9:5d:f8:e2:b3:33:a7:e2:86:b9:7c:68:a6: 18:15:1a:41:ad:2a:78:51:a0:ff:e7:be:62:81:cb: 40:dc:1d:0d:1d:80:8c:40:0c:30:10:34:b7:98:6b: 9e:75:bd:ec:91:1b:1b:0c:59:17:7a:7a:c2:df:a8: 70:7d:e5:94:19:7c:ee:9a:4c:95:bc:8d:4b:2a:8f: 71:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F2:40:65:44:59:DD:4F:08:DB:B1:53:EA:FD:68:16:CD:F8:1F:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/4f616f41-a307-318d-bfe2-bea18e4babef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl X509v3 Authority Key Identifier: keyid:B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer sbgp-ipAddrBlock: critical IPv4: 204.209.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:03:43:2a:fd:f1:56:b7:6e:3f:f5:e4:4b:db:62:23:d6:fa: 27:44:c0:53:ab:53:4b:8f:b6:64:ea:45:cd:24:09:41:9b:28: 89:e7:83:70:1e:6f:bd:86:d1:40:87:99:5a:5c:10:62:9e:dc: 1d:fd:16:fe:7e:eb:7a:57:0c:22:2e:82:7c:b7:e5:45:f5:3a: 52:52:d6:18:ba:80:20:78:ee:dc:8e:5c:2c:51:99:98:5f:2f: 4c:aa:2c:15:8c:15:a9:d5:33:14:d1:f3:15:a7:1f:6a:49:52: 2a:35:0a:a6:44:45:1f:e1:52:c8:db:39:ee:02:1b:3a:11:5a: 58:cd:de:4f:9d:36:15:46:c5:d1:a1:3f:d9:74:6a:1c:e1:a8: f8:e9:d3:4f:40:7e:84:8c:97:f0:21:da:52:d7:c3:60:7c:d3: 91:64:83:23:ff:ed:86:a9:0b:4c:86:e0:d9:f9:93:b9:e0:6f: d4:d3:93:c9:8f:ba:b4:2e:ad:e0:73:15:cd:5a:ee:76:b2:8e: 1e:77:4f:b4:e7:01:67:b8:0b:8f:03:e5:f2:3a:be:fc:68:09: b3:d6:57:bb:c2:8e:47:bc:6a:25:fa:ec:64:47:1c:82:ba:2a: f2:ca:57:84:2d:0f:6f:bb:35:4e:d0:7b:9f:f2:1b:e9:96:d4: f9:48:94:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noJEZXosKR3iRb8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZDhjZjgtNGNjYS00Mjk1LThmM2ItOTE2ZGNkNTBi NjczMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NjBlY2YyOTgtYmQyMi00NzIzLWI0OTgtMjczYWJjODhiNTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1/JBnUxfMgD4Zfusa0jTu27wmZOO8TBOMLA P5tYtX/MC2gFNZoMlDlIhXmEzSiSyKvmpFZNTquyXOB1hsFhSpBfXLcutkVYwLXn 2DwQ14TrieuPBgpcQ5LJJCbAzA5PxCpBs/9LsF1bI+tQe6vbh+Uvv3SilzniWPPI RW+fU1oPiLeFT228nC5PCDREzjM2BG7iKrn9dm1T3S2LfFSI3Wy6BjMZbvP5HUXS XskUwc5bx7gRA+ld+OKzM6fihrl8aKYYFRpBrSp4UaD/575igctA3B0NHYCMQAww EDS3mGuedb3skRsbDFkXenrC36hwfeWUGXzumkyVvI1LKo9xrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfyQGVEWd1PCNuxU+r9aBbN+B8sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MDFk OGNmOC00Y2NhLTQyOTUtOGYzYi05MTZkY2Q1MGI2NzMvNGY2MTZmNDEtYTMwNy0z MThkLWJmZTItYmVhMThlNGJhYmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjAxZDhjZjgtNGNjYS00Mjk1LThm M2ItOTE2ZGNkNTBiNjczLzYwMWQ4Y2Y4LTRjY2EtNDI5NS04ZjNiLTkxNmRjZDUw YjY3My5jcmwwHwYDVR0jBBgwFoAUtfu5dULYLw99YW7jd6Gh7U33ILswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MDFkOGNmOC00Y2NhLTQyOTUtOGYzYi05MTZk Y2Q1MGI2NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEDQyr98Va3bj/15EvbYiPW+idEwFOrU0uPtmTqRc0kCUGbKInng3Ae b72G0UCHmVpcEGKe3B39Fv5+63pXDCIugny35UX1OlJS1hi6gCB47tyOXCxRmZhf L0yqLBWMFanVMxTR8xWnH2pJUio1CqZERR/hUsjbOe4CGzoRWljN3k+dNhVGxdGh P9l0ahzhqPjp009AfoSMl/Ah2lLXw2B805FkgyP/7YapC0yG4Nn5k7ngb9TTk8mP urQureBzFc1a7nayjh53T7TnAWe4C48D5fI6vvxoCbPWV7vCjke8aiX67GRHHIK6 KvLKV4QtD2+7NU7Qe5/yG+mW1PlIlJA= -----END CERTIFICATE-----Generated at Wed Jul 29 11:45:15 2026 by rpki-client