$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/e4c6bc6f-7b34-3425-8e2f-3086de271db3.roa File: e4c6bc6f-7b34-3425-8e2f-3086de271db3.roa (raw, json) Hash identifier: ulaASO/SaB7ObD5vqR1+jI+ktFb8VYFy64pZbx+BAMQ= Subject key identifier: 4E:93:6F:A4:D3:05:B4:E1:37:4C:14:DD:EF:35:68:E6:02:1F:FC:00 Certificate issuer: /CN=601d8cf8-4cca-4295-8f3b-916dcd50b673 Certificate serial: 010D0C9F4328584D5234EEF9AE39CB389B152300 Authority key identifier: B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/e4c6bc6f-7b34-3425-8e2f-3086de271db3.roa Signing time: Sat 28 Mar 2026 18:44:31 +0000 ROA not before: Sat 28 Mar 2026 18:44:31 +0000 ROA not after: Wed 06 May 2026 19:14:52 +0000 asID: 31898 IP address blocks: 204.209.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:ee:f9:ae:39:cb:38:9b:15:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601d8cf8-4cca-4295-8f3b-916dcd50b673 Validity Not Before: Mar 28 18:44:31 2026 GMT Not After : May 6 19:14:52 2026 GMT Subject: CN=96c87a2e-df98-489a-a15b-dc38019f96e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:14:b1:04:42:c6:e4:11:8a:63:3a:55:40:0c: 43:44:f1:73:0e:89:9a:7d:81:15:3d:db:55:d5:16: b5:59:2e:ae:d0:1a:f8:1d:00:fb:cc:54:a5:9d:e9: 06:89:2d:0f:38:24:fc:17:d5:79:28:d9:12:c8:e4: a8:a0:1f:8d:43:a2:16:a4:63:b7:99:60:58:c2:bb: 07:03:78:3f:3f:73:6d:9b:3b:ee:56:6e:34:33:04: 97:19:48:db:af:89:ae:c9:cf:2c:42:8f:11:53:73: a4:7f:e9:d1:1d:17:0c:f0:2d:ed:5e:65:40:5c:1c: 0b:f5:93:c2:11:a7:6f:ce:0c:b4:27:f8:35:a7:e0: f7:30:e9:1b:55:4d:78:a9:30:56:a4:34:28:3c:93: cb:62:07:3a:2c:dc:c2:b8:09:4e:1a:6c:5a:0a:a4: 5c:33:6c:a9:82:95:fe:7c:2f:94:1f:a5:6b:4d:5b: 6d:87:58:da:56:94:0b:f6:f7:8c:fc:ad:29:31:10: 70:b4:ce:71:6c:45:45:f9:cb:4f:2f:ce:19:09:69: 8b:36:98:7c:fb:23:7b:46:3b:da:db:d9:e5:fb:31: 0c:e5:98:90:21:f7:13:1d:37:04:a1:a0:6d:94:46: 7b:77:0f:ff:0a:c9:ed:7a:aa:fc:94:6f:cd:c9:79: d3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:93:6F:A4:D3:05:B4:E1:37:4C:14:DD:EF:35:68:E6:02:1F:FC:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/e4c6bc6f-7b34-3425-8e2f-3086de271db3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl X509v3 Authority Key Identifier: keyid:B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer sbgp-ipAddrBlock: critical IPv4: 204.209.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:65:a0:76:a6:25:4a:af:b2:2a:3a:0d:61:e0:78:97:62:a2: 9f:f1:88:40:06:82:8e:76:26:df:33:35:a9:75:21:04:eb:0d: 8e:ce:2e:11:41:2e:a4:92:1a:50:fd:e2:d9:cc:bb:7f:1e:6f: b4:29:1d:ee:96:ae:78:03:bb:23:5b:f4:4c:0c:0c:84:3d:e0: b4:4f:8d:f7:2f:68:18:59:89:7f:4b:b7:3f:aa:cb:8d:85:bc: 90:8d:ef:93:51:6c:22:fb:f8:b0:51:d7:bf:c6:7e:0c:a5:61: 83:51:b2:97:08:b3:15:37:92:d8:ce:72:e5:65:dc:90:4f:d2: 8e:ae:c7:b7:38:64:d2:bd:e4:b9:a3:cf:92:47:bf:2e:b6:7f: f6:06:b3:19:b7:39:95:8d:91:73:71:66:ba:19:4c:1a:dc:86: 7c:19:1d:64:be:2e:4d:4a:42:d5:bb:15:37:1d:31:03:2d:79: 3a:ca:05:48:69:4a:7b:7c:c0:a3:25:f4:81:36:d4:31:54:cb: 47:11:6a:ba:0f:a2:fe:db:a0:b1:94:bb:3e:7b:9b:d4:c9:e4: aa:03:70:39:3f:24:1e:98:b8:2f:03:18:83:9e:81:8a:a6:f6: 15:36:87:7e:dc:c8:2a:20:a6:32:5c:c6:5d:23:0c:aa:96:08: 21:05:6c:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SNO75rjnLOJsVIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAxZDhjZjgtNGNjYS00Mjk1LThmM2ItOTE2ZGNkNTBi NjczMB4XDTI2MDMyODE4NDQzMVoXDTI2MDUwNjE5MTQ1MlowLzEtMCsGA1UEAxMk OTZjODdhMmUtZGY5OC00ODlhLWExNWItZGMzODAxOWY5NmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9hSxBELG5BGKYzpVQAxDRPFzDomafYEVPdtV 1Ra1WS6u0Br4HQD7zFSlnekGiS0POCT8F9V5KNkSyOSooB+NQ6IWpGO3mWBYwrsH A3g/P3NtmzvuVm40MwSXGUjbr4muyc8sQo8RU3Okf+nRHRcM8C3tXmVAXBwL9ZPC Eadvzgy0J/g1p+D3MOkbVU14qTBWpDQoPJPLYgc6LNzCuAlOGmxaCqRcM2ypgpX+ fC+UH6VrTVtth1jaVpQL9veM/K0pMRBwtM5xbEVF+ctPL84ZCWmLNph8+yN7Rjva 29nl+zEM5ZiQIfcTHTcEoaBtlEZ7dw//Csnteqr8lG/NyXnTmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6Tb6TTBbThN0wU3e81aOYCH/wAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MDFk OGNmOC00Y2NhLTQyOTUtOGYzYi05MTZkY2Q1MGI2NzMvZTRjNmJjNmYtN2IzNC0z NDI1LThlMmYtMzA4NmRlMjcxZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjAxZDhjZjgtNGNjYS00Mjk1LThm M2ItOTE2ZGNkNTBiNjczLzYwMWQ4Y2Y4LTRjY2EtNDI5NS04ZjNiLTkxNmRjZDUw YjY3My5jcmwwHwYDVR0jBBgwFoAUtfu5dULYLw99YW7jd6Gh7U33ILswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MDFkOGNmOC00Y2NhLTQyOTUtOGYzYi05MTZk Y2Q1MGI2NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNESMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZloHamJUqvsio6DWHgeJdiop/xiEAGgo52Jt8zNal1IQTrDY7OLhFB LqSSGlD94tnMu38eb7QpHe6WrngDuyNb9EwMDIQ94LRPjfcvaBhZiX9Ltz+qy42F vJCN75NRbCL7+LBR17/GfgylYYNRspcIsxU3ktjOcuVl3JBP0o6ux7c4ZNK95Lmj z5JHvy62f/YGsxm3OZWNkXNxZroZTBrchnwZHWS+Lk1KQtW7FTcdMQMteTrKBUhp Snt8wKMl9IE21DFUy0cRaroPov7boLGUuz57m9TJ5KoDcDk/JB6YuC8DGIOegYqm 9hU2h37cyCogpjJcxl0jDKqWCCEFbOw= -----END CERTIFICATE-----Generated at Mon Apr 13 14:39:10 2026 by rpki-client