$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/559f8463-0228-31bb-8307-63ffe90ad1a8.roa File: 559f8463-0228-31bb-8307-63ffe90ad1a8.roa (raw, json) Hash identifier: YCh5v9/t+4XHckMePyfMPdZcUiss0xxzaIp75/9jEqA= Subject key identifier: D2:C1:E0:93:C3:2E:8F:E3:86:51:0C:2E:2F:76:4B:01:21:AD:E8:FF Certificate issuer: /CN=601d8cf8-4cca-4295-8f3b-916dcd50b673 Certificate serial: 010D0C9F4328584F4988BD860835912C6CB0E5C0 Authority key identifier: B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/559f8463-0228-31bb-8307-63ffe90ad1a8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 26037 IP address blocks: 204.209.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:bd:86:08:35:91:2c:6c:b0:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601d8cf8-4cca-4295-8f3b-916dcd50b673 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0741a948-f6cc-4687-a512-9519e447e9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2c:f4:d0:8e:24:f0:7a:69:07:ba:0c:e3:ba: 37:ce:d7:2b:f6:50:e5:e0:88:10:b1:8a:d5:3a:19: 59:5d:97:59:32:37:dc:c5:93:2f:c1:8e:48:a2:bf: 64:95:c9:7b:5e:b1:96:24:e0:dc:66:5c:f1:f2:e1: b5:b4:27:ff:f9:ef:c0:87:9e:d2:20:83:51:4f:6f: cd:f8:c8:be:38:3c:46:96:d7:c1:fd:5c:8b:fa:be: 1c:e7:a8:53:8a:27:82:c8:95:83:98:b9:2f:b8:36: 80:eb:ff:1d:c4:ad:37:38:8e:eb:85:8f:1b:6b:b4: 18:f2:67:e0:f6:c8:09:0e:1c:6f:14:b9:f3:e6:5b: 4a:56:5e:f8:c8:8c:83:aa:f8:3a:3f:c3:7b:bf:18: 21:25:df:17:28:2b:bf:e0:56:3f:39:5e:fd:84:5d: 55:61:85:03:ae:80:11:c9:9b:3f:a3:cc:e7:0c:6e: ef:06:b5:af:2d:65:8e:bd:d3:23:4c:86:46:f1:50: 37:c2:37:17:5d:67:15:2b:d1:4d:41:85:31:6c:91: 7b:fb:65:28:d8:e2:4a:9f:e3:82:59:68:03:28:b9: 66:6a:eb:26:25:19:03:2b:11:ab:2d:10:df:bd:48: 5e:ec:eb:11:0b:3b:7f:e2:39:5e:b2:d9:92:2a:dc: ad:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C1:E0:93:C3:2E:8F:E3:86:51:0C:2E:2F:76:4B:01:21:AD:E8:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/559f8463-0228-31bb-8307-63ffe90ad1a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl X509v3 Authority Key Identifier: keyid:B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer sbgp-ipAddrBlock: critical IPv4: 204.209.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:0c:2a:13:40:82:37:8c:74:9f:2a:0f:e0:31:81:2e:94:82: c3:48:7c:54:46:1d:c9:fc:4b:9e:37:5a:8c:dd:70:fc:9d:02: 39:56:cc:71:6c:03:e9:ae:1a:7e:1a:ea:8f:df:36:95:a8:6d: f8:2a:54:24:a4:45:77:24:c7:2a:45:af:28:ca:4e:b3:65:71: 89:82:c5:44:7f:16:b1:41:d9:e9:54:4b:a2:f6:e8:24:52:6f: 6f:27:ef:c9:0f:b1:a5:fe:67:53:1e:70:d2:21:7f:45:14:b6: 1b:e3:b8:94:3b:18:36:c7:20:06:1e:53:99:d2:3d:f0:55:db: 05:c3:98:d6:d5:0a:3e:ee:3e:3b:73:45:b4:66:7a:c7:47:63: 7d:7b:f8:8a:e1:f0:fb:37:08:96:cc:a4:8f:e6:93:83:c5:7c: d3:ed:59:79:6a:da:e3:32:7d:45:fc:d7:46:1d:bc:31:96:11: e1:2c:81:62:fb:58:c2:13:96:52:67:44:30:96:d5:a7:81:0e: b5:ef:7c:2d:10:34:f1:c1:1c:83:43:f8:6a:dd:fb:8a:86:25: df:a6:00:c2:47:78:9f:4e:30:cb:5a:91:c8:84:fb:23:fd:22: 4c:2d:81:a2:bf:17:3e:34:62:d3:58:07:bd:e0:f1:23:3c:b8: e0:de:b6:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiL2GCDWRLGyw5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZDhjZjgtNGNjYS00Mjk1LThmM2ItOTE2ZGNkNTBi NjczMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDc0MWE5NDgtZjZjYy00Njg3LWE1MTItOTUxOWU0NDdlOWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSz00I4k8HppB7oM47o3ztcr9lDl4IgQsYrV OhlZXZdZMjfcxZMvwY5Ior9klcl7XrGWJODcZlzx8uG1tCf/+e/Ah57SIINRT2/N +Mi+ODxGltfB/VyL+r4c56hTiieCyJWDmLkvuDaA6/8dxK03OI7rhY8ba7QY8mfg 9sgJDhxvFLnz5ltKVl74yIyDqvg6P8N7vxghJd8XKCu/4FY/OV79hF1VYYUDroAR yZs/o8znDG7vBrWvLWWOvdMjTIZG8VA3wjcXXWcVK9FNQYUxbJF7+2Uo2OJKn+OC WWgDKLlmausmJRkDKxGrLRDfvUhe7OsRCzt/4jlestmSKtytkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLB4JPDLo/jhlEMLi92SwEhrej/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MDFk OGNmOC00Y2NhLTQyOTUtOGYzYi05MTZkY2Q1MGI2NzMvNTU5Zjg0NjMtMDIyOC0z MWJiLTgzMDctNjNmZmU5MGFkMWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjAxZDhjZjgtNGNjYS00Mjk1LThm M2ItOTE2ZGNkNTBiNjczLzYwMWQ4Y2Y4LTRjY2EtNDI5NS04ZjNiLTkxNmRjZDUw YjY3My5jcmwwHwYDVR0jBBgwFoAUtfu5dULYLw99YW7jd6Gh7U33ILswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MDFkOGNmOC00Y2NhLTQyOTUtOGYzYi05MTZk Y2Q1MGI2NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNERMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0MKhNAgjeMdJ8qD+AxgS6UgsNIfFRGHcn8S543WozdcPydAjlWzHFs A+muGn4a6o/fNpWobfgqVCSkRXckxypFryjKTrNlcYmCxUR/FrFB2elUS6L26CRS b28n78kPsaX+Z1MecNIhf0UUthvjuJQ7GDbHIAYeU5nSPfBV2wXDmNbVCj7uPjtz RbRmesdHY317+Irh8Ps3CJbMpI/mk4PFfNPtWXlq2uMyfUX810YdvDGWEeEsgWL7 WMITllJnRDCW1aeBDrXvfC0QNPHBHIND+Grd+4qGJd+mAMJHeJ9OMMtakciE+yP9 IkwtgaK/Fz40YtNYB73g8SM8uODetmE= -----END CERTIFICATE-----Generated at Sat Oct 10 16:53:18 2026 by rpki-client