$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/559f8463-0228-31bb-8307-63ffe90ad1a8.roa File: 559f8463-0228-31bb-8307-63ffe90ad1a8.roa (raw, json) Hash identifier: ra2hBL6MVkzOXiSoOff+ezuK0ztkP6kebbVK4bSCHYI= Subject key identifier: 56:58:7B:83:66:37:0F:F9:66:33:39:42:04:80:64:00:56:E7:B7:6E Certificate issuer: /CN=601d8cf8-4cca-4295-8f3b-916dcd50b673 Certificate serial: 010D0C9F4328584A84672DEC332BA72684A08780 Authority key identifier: B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/559f8463-0228-31bb-8307-63ffe90ad1a8.roa Signing time: Mon 14 Jul 2025 15:55:21 +0000 ROA not before: Mon 14 Jul 2025 15:55:21 +0000 ROA not after: Sun 12 Oct 2025 15:55:21 +0000 asID: 26037 IP address blocks: 204.209.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:67:2d:ec:33:2b:a7:26:84:a0:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601d8cf8-4cca-4295-8f3b-916dcd50b673 Validity Not Before: Jul 14 15:55:21 2025 GMT Not After : Oct 12 15:55:21 2025 GMT Subject: CN=27cb61b6-30ac-421f-a2f6-7c065cf66c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4c:21:44:0f:42:b0:0c:3d:f5:c8:42:b7:12: f5:6b:93:74:95:a0:d6:7b:cc:db:43:58:e4:ac:32: 4d:86:81:54:f4:50:13:fd:ce:c7:c1:ab:b8:7e:83: 1d:ee:36:93:44:a6:13:34:24:00:69:89:5d:b2:a6: 16:3d:3d:29:5d:26:72:c3:67:5e:9e:69:9e:36:cb: 5f:9f:66:68:8e:50:ab:02:91:87:cf:2f:d8:df:a1: 28:80:19:31:90:ed:d0:8e:fd:92:c5:e0:30:0c:f0: 5b:89:ce:2c:c5:db:8d:48:5d:34:ad:13:08:1b:9f: 60:84:8d:01:23:66:ea:e7:a0:97:ca:74:59:3c:d4: 60:a5:57:2a:07:53:5f:9f:a3:36:78:06:9f:33:2b: d3:ee:ec:19:64:f8:7a:39:5d:dc:8f:5d:05:16:c9: 4c:cc:f5:d9:52:5e:54:88:5e:32:cd:83:48:50:87: b8:83:21:a1:f9:67:9c:c6:33:f3:97:6c:d1:b7:92: 82:2f:81:3f:8a:19:da:92:7f:f7:8e:40:50:3b:f4: 82:ea:79:36:73:23:3b:65:3e:14:48:aa:9e:e3:54: 9c:44:b1:25:92:e7:35:24:64:81:0c:33:57:09:f5: 65:68:33:6e:45:05:38:ac:a9:3c:98:36:b2:e6:04: dd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:58:7B:83:66:37:0F:F9:66:33:39:42:04:80:64:00:56:E7:B7:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/559f8463-0228-31bb-8307-63ffe90ad1a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl X509v3 Authority Key Identifier: keyid:B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer sbgp-ipAddrBlock: critical IPv4: 204.209.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:55:86:25:f9:35:d4:68:63:21:98:bc:24:ab:42:a4:64:ae: 19:23:72:01:0e:c5:8f:ab:2a:86:97:6d:e8:7d:ab:f8:74:51: ce:b5:db:b5:2d:1d:e0:50:4a:b8:35:44:b5:9c:ab:71:1d:04: 9b:be:fa:28:24:0c:b6:1d:63:6e:a0:75:7e:91:b2:3d:a6:dc: 4c:5d:d7:ba:e8:cf:fa:01:7e:43:09:08:4e:73:97:96:76:d1: 49:1b:46:ab:f3:bb:37:21:e5:55:d9:32:20:b6:36:bf:55:65: b7:f3:b9:61:0a:9b:5e:60:85:2d:dd:75:29:37:75:4b:bd:4a: 57:78:59:8a:9a:f7:fa:48:14:f0:d3:3e:9e:71:1d:b5:7a:c7: b6:db:3b:64:19:87:16:5c:97:d3:cf:9b:c2:73:1a:3f:33:3a: 87:6f:e0:16:26:7d:af:69:37:a3:8a:75:7c:3e:81:53:15:5a: 2b:95:98:e4:04:02:4e:90:af:58:9c:76:c8:76:aa:da:76:81: b3:71:8f:7a:39:28:08:6b:f6:68:83:b9:6c:55:4c:a7:c8:af: 7d:04:a7:1f:9f:40:59:6b:c2:e9:98:fb:fa:8e:f5:f9:88:37: c7:c1:54:32:41:95:21:7c:5d:47:b6:4a:15:a4:a0:e1:f3:ef: 93:fe:d9:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEZy3sMyunJoSgh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZDhjZjgtNGNjYS00Mjk1LThmM2ItOTE2ZGNkNTBi NjczMB4XDTI1MDcxNDE1NTUyMVoXDTI1MTAxMjE1NTUyMVowLzEtMCsGA1UEAxMk MjdjYjYxYjYtMzBhYy00MjFmLWEyZjYtN2MwNjVjZjY2Yzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUwhRA9CsAw99chCtxL1a5N0laDWe8zbQ1jk rDJNhoFU9FAT/c7Hwau4foMd7jaTRKYTNCQAaYldsqYWPT0pXSZyw2denmmeNstf n2ZojlCrApGHzy/Y36EogBkxkO3Qjv2SxeAwDPBbic4sxduNSF00rRMIG59ghI0B I2bq56CXynRZPNRgpVcqB1Nfn6M2eAafMyvT7uwZZPh6OV3cj10FFslMzPXZUl5U iF4yzYNIUIe4gyGh+WecxjPzl2zRt5KCL4E/ihnakn/3jkBQO/SC6nk2cyM7ZT4U SKqe41ScRLElkuc1JGSBDDNXCfVlaDNuRQU4rKk8mDay5gTdGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZYe4NmNw/5ZjM5QgSAZABW57duMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MDFk OGNmOC00Y2NhLTQyOTUtOGYzYi05MTZkY2Q1MGI2NzMvNTU5Zjg0NjMtMDIyOC0z MWJiLTgzMDctNjNmZmU5MGFkMWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjAxZDhjZjgtNGNjYS00Mjk1LThm M2ItOTE2ZGNkNTBiNjczLzYwMWQ4Y2Y4LTRjY2EtNDI5NS04ZjNiLTkxNmRjZDUw YjY3My5jcmwwHwYDVR0jBBgwFoAUtfu5dULYLw99YW7jd6Gh7U33ILswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MDFkOGNmOC00Y2NhLTQyOTUtOGYzYi05MTZk Y2Q1MGI2NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNERMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRVhiX5NdRoYyGYvCSrQqRkrhkjcgEOxY+rKoaXbeh9q/h0Uc6127Ut HeBQSrg1RLWcq3EdBJu++igkDLYdY26gdX6Rsj2m3Exd17roz/oBfkMJCE5zl5Z2 0UkbRqvzuzch5VXZMiC2Nr9VZbfzuWEKm15ghS3ddSk3dUu9Sld4WYqa9/pIFPDT Pp5xHbV6x7bbO2QZhxZcl9PPm8JzGj8zOodv4BYmfa9pN6OKdXw+gVMVWiuVmOQE Ak6Qr1icdsh2qtp2gbNxj3o5KAhr9miDuWxVTKfIr30Epx+fQFlrwumY+/qO9fmI N8fBVDJBlSF8XUe2ShWkoOHz75P+2a0= -----END CERTIFICATE-----Generated at Sun Aug 24 07:41:46 2025 by rpki-client