$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/559f8463-0228-31bb-8307-63ffe90ad1a8.roa File: 559f8463-0228-31bb-8307-63ffe90ad1a8.roa (raw, json) Hash identifier: D2cNRmoCqUL9IuBrcrAu8LwgmCMxvGpBC9xPM6V/ojA= Subject key identifier: 4C:F5:B5:F3:9F:F3:DA:0E:4D:3F:26:1D:94:9F:71:35:FF:8F:C6:93 Certificate issuer: /CN=601d8cf8-4cca-4295-8f3b-916dcd50b673 Certificate serial: 010D0C9F4328584E059C64E53F6DD1EB07AA5140 Authority key identifier: B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/559f8463-0228-31bb-8307-63ffe90ad1a8.roa Signing time: Mon 01 Jun 2026 01:00:10 +0000 ROA not before: Mon 01 Jun 2026 01:00:10 +0000 ROA not after: Sun 30 Aug 2026 01:00:10 +0000 asID: 26037 IP address blocks: 204.209.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:05:9c:64:e5:3f:6d:d1:eb:07:aa:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601d8cf8-4cca-4295-8f3b-916dcd50b673 Validity Not Before: Jun 1 01:00:10 2026 GMT Not After : Aug 30 01:00:10 2026 GMT Subject: CN=e1924263-1699-452f-a400-a9838e8e06e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:27:3b:2a:26:a8:b5:1b:2b:36:59:c3:3b:72: 5a:f0:a8:79:b5:f1:93:0b:08:5a:f1:ec:7e:93:90: 86:ca:ef:ba:3f:12:04:cb:04:30:ca:eb:3c:2f:00: d1:b5:08:7d:00:bb:27:33:9a:69:b9:cb:b2:de:6a: d2:37:52:c0:ab:dd:d0:57:8e:19:4f:86:eb:50:9a: 73:37:e3:f2:3b:74:d1:50:1b:c1:5c:00:b8:e2:d3: c2:be:75:f4:7f:50:8d:4d:8f:99:37:66:37:69:aa: ac:08:66:44:61:68:69:69:b7:12:3b:29:ce:2f:0e: 3b:fe:5b:7d:71:ee:e6:31:a3:86:3a:00:fd:02:77: e3:33:e4:28:4f:bc:d8:69:91:c9:3c:ce:6b:c0:97: 22:b0:99:26:3e:ad:a7:9e:bb:12:d7:2a:42:a4:e9: 8f:04:2d:ea:d2:96:f0:0f:47:86:0f:e7:77:b7:a3: 9c:a4:04:6d:9c:df:5f:85:b6:22:86:a8:4c:0a:a1: 4e:08:ce:94:65:a1:61:36:21:79:4e:cd:ac:17:f4: 0b:37:1d:eb:ae:30:f6:e4:59:5d:9b:14:4c:2e:28: 46:a2:98:78:aa:2c:de:69:d6:5b:23:d3:19:99:bd: 44:a8:e0:8f:a5:68:e5:75:76:0c:c0:7a:42:0b:56: 6d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F5:B5:F3:9F:F3:DA:0E:4D:3F:26:1D:94:9F:71:35:FF:8F:C6:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/559f8463-0228-31bb-8307-63ffe90ad1a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl X509v3 Authority Key Identifier: keyid:B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer sbgp-ipAddrBlock: critical IPv4: 204.209.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:aa:b1:28:a0:b4:bc:01:6c:1f:ba:c2:8d:3c:64:e4:7f:af: a9:dc:ff:84:c2:cc:25:60:d7:58:ff:9e:06:6d:40:6d:d5:e4: 03:b1:c6:4a:a3:a0:bc:e8:7a:4b:64:ab:0c:d3:33:83:b9:2e: ee:99:be:a9:5e:b2:2b:67:7b:71:c9:14:25:43:6a:43:49:a7: 8d:be:3d:43:6e:97:18:d0:f7:cb:16:f6:91:bd:ac:22:a5:03: b0:62:e1:ab:8a:3f:95:a2:90:5c:02:df:78:c3:b5:39:22:fd: c6:73:64:9a:4f:38:46:af:1d:13:3b:ea:e2:6b:c6:26:e6:3b: f4:d9:8b:44:59:55:e8:83:2c:95:8b:fa:6e:8d:82:e8:01:02: cf:f3:a3:5e:06:b1:0b:bd:48:83:88:eb:14:b4:14:07:a2:81: e3:fb:20:ea:0f:5b:d4:fa:42:cf:b6:5b:08:57:f8:54:c0:1b: fc:4e:7f:3f:d7:23:80:a7:83:7c:17:dd:a3:50:c4:d8:ad:31: 4e:cf:54:55:49:4f:b9:7b:2d:c8:20:1b:b1:b5:95:65:fb:62: a8:cf:b3:82:db:94:40:f7:4e:52:de:0d:98:08:69:1c:73:ee: fd:b5:b9:b1:42:88:40:c8:8f:6e:83:6e:2b:6d:26:9c:14:ca: f4:56:b4:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4FnGTlP23R6weqUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZDhjZjgtNGNjYS00Mjk1LThmM2ItOTE2ZGNkNTBi NjczMB4XDTI2MDYwMTAxMDAxMFoXDTI2MDgzMDAxMDAxMFowLzEtMCsGA1UEAxMk ZTE5MjQyNjMtMTY5OS00NTJmLWE0MDAtYTk4MzhlOGUwNmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCc7KiaotRsrNlnDO3Ja8Kh5tfGTCwha8ex+ k5CGyu+6PxIEywQwyus8LwDRtQh9ALsnM5ppucuy3mrSN1LAq93QV44ZT4brUJpz N+PyO3TRUBvBXAC44tPCvnX0f1CNTY+ZN2Y3aaqsCGZEYWhpabcSOynOLw47/lt9 ce7mMaOGOgD9AnfjM+QoT7zYaZHJPM5rwJcisJkmPq2nnrsS1ypCpOmPBC3q0pbw D0eGD+d3t6OcpARtnN9fhbYihqhMCqFOCM6UZaFhNiF5Ts2sF/QLNx3rrjD25Fld mxRMLihGoph4qizeadZbI9MZmb1EqOCPpWjldXYMwHpCC1ZtywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEz1tfOf89oOTT8mHZSfcTX/j8aTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MDFk OGNmOC00Y2NhLTQyOTUtOGYzYi05MTZkY2Q1MGI2NzMvNTU5Zjg0NjMtMDIyOC0z MWJiLTgzMDctNjNmZmU5MGFkMWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjAxZDhjZjgtNGNjYS00Mjk1LThm M2ItOTE2ZGNkNTBiNjczLzYwMWQ4Y2Y4LTRjY2EtNDI5NS04ZjNiLTkxNmRjZDUw YjY3My5jcmwwHwYDVR0jBBgwFoAUtfu5dULYLw99YW7jd6Gh7U33ILswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MDFkOGNmOC00Y2NhLTQyOTUtOGYzYi05MTZk Y2Q1MGI2NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNERMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeqsSigtLwBbB+6wo08ZOR/r6nc/4TCzCVg11j/ngZtQG3V5AOxxkqj oLzoektkqwzTM4O5Lu6Zvqlesitne3HJFCVDakNJp42+PUNulxjQ98sW9pG9rCKl A7Bi4auKP5WikFwC33jDtTki/cZzZJpPOEavHRM76uJrxibmO/TZi0RZVeiDLJWL +m6NgugBAs/zo14GsQu9SIOI6xS0FAeigeP7IOoPW9T6Qs+2WwhX+FTAG/xOfz/X I4Cng3wX3aNQxNitMU7PVFVJT7l7LcggG7G1lWX7YqjPs4LblED3TlLeDZgIaRxz 7v21ubFCiEDIj26DbittJpwUyvRWtDw= -----END CERTIFICATE-----Generated at Sun Jun 14 00:09:53 2026 by rpki-client