$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/559f8463-0228-31bb-8307-63ffe90ad1a8.roa File: 559f8463-0228-31bb-8307-63ffe90ad1a8.roa (raw, json) Hash identifier: ZqZbSRpv+uXxJUQWIDOz8D/4lm6uIL3/kkQLiZRYrGw= Subject key identifier: A8:C8:19:83:B5:87:D2:CF:BD:C0:DA:00:CA:BF:4C:44:0E:A6:F5:61 Certificate issuer: /CN=601d8cf8-4cca-4295-8f3b-916dcd50b673 Certificate serial: 010D0C9F4328584EA7A0B623432B355378B93400 Authority key identifier: B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/559f8463-0228-31bb-8307-63ffe90ad1a8.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 26037 IP address blocks: 204.209.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:a0:b6:23:43:2b:35:53:78:b9:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601d8cf8-4cca-4295-8f3b-916dcd50b673 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c0e36c55-5618-49ec-a1fe-cbf19c45e1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:29:0a:b5:44:d4:d3:9b:c6:ed:de:4b:7a:8a: 80:45:25:e4:7d:80:4b:3f:f6:ee:30:bd:4c:a3:e5: 9d:5d:38:56:ea:4a:69:ba:f3:1d:9a:0f:b1:79:03: a0:8b:cb:59:37:a6:8c:7d:9c:2a:2c:c5:68:42:f1: c1:05:79:f6:7c:ec:40:31:c3:9f:be:39:97:a1:9e: 87:e2:04:e3:61:2b:f6:0e:52:38:e3:5e:06:04:69: e9:8b:dd:5c:a6:45:a4:f9:4e:8b:a6:ae:2e:a5:02: dc:11:b5:ee:67:ee:36:2f:90:e8:2c:d6:53:b2:5c: 7e:e1:02:ab:11:e2:4b:a2:dd:9a:88:8c:3d:45:7e: 24:88:ca:5c:ef:5d:db:fc:79:aa:c5:7b:12:5a:c5: 0c:7d:f6:9d:18:56:8b:7e:fa:e7:f1:00:ca:7c:9c: 25:c0:f9:17:da:79:dd:ad:6b:b9:78:91:1b:dc:2a: 2b:a0:20:70:ec:38:3f:07:4a:00:af:9d:f1:c9:29: 52:a5:4b:67:dc:d7:84:61:dc:7b:38:4e:d0:3c:7a: 66:de:24:79:88:72:39:51:b4:92:9d:57:aa:73:e0: 40:e7:d6:71:14:3a:14:0e:21:bc:ee:22:9d:8e:be: 68:97:3b:41:6a:a1:3b:12:66:04:c7:dd:77:4d:16: 5f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C8:19:83:B5:87:D2:CF:BD:C0:DA:00:CA:BF:4C:44:0E:A6:F5:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/559f8463-0228-31bb-8307-63ffe90ad1a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl X509v3 Authority Key Identifier: keyid:B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer sbgp-ipAddrBlock: critical IPv4: 204.209.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b3:e2:6f:bc:8d:a8:ce:e0:30:3e:26:09:0f:8f:f9:6d:7a: 9c:e9:a1:59:dd:12:8d:13:ae:bd:f5:46:54:da:69:ba:d9:35: b4:87:10:ba:b6:e4:41:3c:50:46:5e:26:a1:8f:ba:e7:ec:0b: bb:67:cc:4f:bf:88:68:34:f0:b4:fe:e6:ed:8b:25:f6:2c:c0: 65:22:c8:f4:5a:e0:c9:e9:33:20:d6:53:a2:6f:7c:5e:df:2b: 48:b5:7a:d2:ec:13:b6:51:bf:a2:03:b0:d7:37:4c:66:43:c7: 01:13:0b:43:78:3b:88:c1:17:61:a9:65:ed:5c:f8:40:3b:10: b5:bc:66:4f:9e:96:4a:aa:a6:cd:34:a4:be:b6:0d:45:ad:16: 53:b2:68:0f:c5:2b:e3:d8:e1:58:4e:23:1b:7f:b2:02:b1:5e: e3:47:36:7d:ae:5f:68:6f:60:70:11:cd:5a:c6:6a:d0:c2:3c: 1d:ba:62:b9:c8:7a:bd:5b:ea:bf:af:f5:95:a0:22:f4:28:fd: 7d:1c:6b:b3:96:dc:0f:e6:dc:75:ca:4a:84:db:3b:eb:dc:a3: 29:8e:59:92:37:a5:de:11:97:d0:1d:11:43:83:6b:19:02:6a: 1d:a6:b0:cd:ec:18:f9:2c:1a:8a:9b:44:9b:8b:40:0c:65:29: c5:da:75:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6noLYjQys1U3i5NAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZDhjZjgtNGNjYS00Mjk1LThmM2ItOTE2ZGNkNTBi NjczMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzBlMzZjNTUtNTYxOC00OWVjLWExZmUtY2JmMTljNDVlMWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlykKtUTU05vG7d5LeoqARSXkfYBLP/buML1M o+WdXThW6kppuvMdmg+xeQOgi8tZN6aMfZwqLMVoQvHBBXn2fOxAMcOfvjmXoZ6H 4gTjYSv2DlI4414GBGnpi91cpkWk+U6Lpq4upQLcEbXuZ+42L5DoLNZTslx+4QKr EeJLot2aiIw9RX4kiMpc713b/HmqxXsSWsUMffadGFaLfvrn8QDKfJwlwPkX2nnd rWu5eJEb3CoroCBw7Dg/B0oAr53xySlSpUtn3NeEYdx7OE7QPHpm3iR5iHI5UbSS nVeqc+BA59ZxFDoUDiG87iKdjr5olztBaqE7EmYEx913TRZfhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjIGYO1h9LPvcDaAMq/TEQOpvVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MDFk OGNmOC00Y2NhLTQyOTUtOGYzYi05MTZkY2Q1MGI2NzMvNTU5Zjg0NjMtMDIyOC0z MWJiLTgzMDctNjNmZmU5MGFkMWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjAxZDhjZjgtNGNjYS00Mjk1LThm M2ItOTE2ZGNkNTBiNjczLzYwMWQ4Y2Y4LTRjY2EtNDI5NS04ZjNiLTkxNmRjZDUw YjY3My5jcmwwHwYDVR0jBBgwFoAUtfu5dULYLw99YW7jd6Gh7U33ILswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MDFkOGNmOC00Y2NhLTQyOTUtOGYzYi05MTZk Y2Q1MGI2NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNERMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2z4m+8jajO4DA+JgkPj/ltepzpoVndEo0Trr31RlTaabrZNbSHELq2 5EE8UEZeJqGPuufsC7tnzE+/iGg08LT+5u2LJfYswGUiyPRa4MnpMyDWU6JvfF7f K0i1etLsE7ZRv6IDsNc3TGZDxwETC0N4O4jBF2GpZe1c+EA7ELW8Zk+elkqqps00 pL62DUWtFlOyaA/FK+PY4VhOIxt/sgKxXuNHNn2uX2hvYHARzVrGatDCPB26YrnI er1b6r+v9ZWgIvQo/X0ca7OW3A/m3HXKSoTbO+vcoymOWZI3pd4Rl9AdEUODaxkC ah2msM3sGPksGoqbRJuLQAxlKcXadSs= -----END CERTIFICATE-----Generated at Wed Jul 29 10:37:43 2026 by rpki-client