$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1dfa53ed-25a5-382b-854b-25b9e457911a.roa File: 1dfa53ed-25a5-382b-854b-25b9e457911a.roa (raw, json) Hash identifier: RocFYzTlJvPiSUwtM+cLY9jFT8eMNMnhmMwEq4GCFvE= Subject key identifier: 24:DC:8F:4C:E4:8B:77:FA:81:75:DB:53:65:3F:94:71:EE:8D:70:25 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584E147ED4D2F33D9EEF0D959680 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1dfa53ed-25a5-382b-854b-25b9e457911a.roa Signing time: Sat 06 Jun 2026 09:00:12 +0000 ROA not before: Sat 06 Jun 2026 09:00:12 +0000 ROA not after: Fri 04 Sep 2026 09:00:12 +0000 asID: 62651 IP address blocks: 173.245.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:14:7e:d4:d2:f3:3d:9e:ef:0d:95:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Jun 6 09:00:12 2026 GMT Not After : Sep 4 09:00:12 2026 GMT Subject: CN=588eb29b-80ca-4cb3-bba8-cf80444897e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2b:d2:24:57:30:c8:d9:6d:15:35:15:ad:34: 75:76:05:45:31:48:e3:93:7e:d8:59:11:75:83:fa: fd:9f:7c:18:ee:9f:b4:f9:bc:b2:43:07:68:75:2d: 5b:10:2d:ae:2b:54:54:e1:d0:fa:88:59:da:e8:48: e9:49:fe:5d:a2:fb:9b:f6:0a:3d:68:66:e3:ea:fb: 02:8f:9d:69:ad:1e:fd:13:66:eb:9c:c4:01:db:90: 4e:f5:35:91:74:59:06:2f:2d:75:54:93:74:18:2a: 4d:4a:a3:a9:96:a5:17:e1:59:7d:0e:34:ea:75:a5: c9:b7:40:4d:b0:c1:48:26:66:ad:89:c0:ad:0f:b0: ff:ce:97:e4:85:ac:a2:27:3a:66:5f:2a:b0:ee:5b: 1a:a2:17:bc:cd:84:7d:e7:fc:7c:e8:a4:5b:12:2c: c2:01:ee:11:41:20:b5:6b:18:2a:74:59:db:b0:26: e6:58:6a:58:5f:e9:3e:a1:38:32:3c:1e:8d:65:4a: 86:04:28:0d:20:ad:6b:d4:83:de:7e:a6:75:a5:0a: 3a:aa:66:98:cd:dc:d3:06:72:5e:f0:ae:3d:4c:a9: 54:af:77:b4:ec:df:18:fb:a5:f5:92:db:1e:b9:9c: 3e:bc:fa:0b:41:9a:50:75:28:e3:52:2a:19:d6:45: 61:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DC:8F:4C:E4:8B:77:FA:81:75:DB:53:65:3F:94:71:EE:8D:70:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1dfa53ed-25a5-382b-854b-25b9e457911a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 173.245.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c3:ad:c1:80:ae:3a:c8:3b:81:5b:ce:9e:df:21:f3:06:09: 1d:aa:7f:0b:e8:f7:ea:24:8b:e5:1f:5e:98:25:16:fd:a2:38: 3f:df:37:f7:3c:02:3c:74:e4:9a:6c:a9:7b:5f:00:3a:b8:b3: 18:72:62:6e:cc:f1:1d:0c:1f:08:c7:ee:41:4e:94:7d:c4:86: a5:57:59:cb:58:2a:8e:8d:84:57:d7:8d:89:11:f8:c3:95:5e: 84:f2:32:2a:94:ab:0f:a8:d7:02:82:91:29:ae:e4:c2:29:e9: b0:13:7f:d2:b6:ff:a8:f3:62:77:81:ea:6d:27:4f:51:df:2c: cd:50:06:b7:62:2a:50:d5:20:ba:83:f8:39:0e:cd:51:1c:d5: c8:74:97:30:a3:7a:4d:69:b4:bc:3a:b4:d2:9f:95:b5:14:bd: a7:2c:bf:cd:0a:7a:9c:ba:13:c8:dc:f3:67:f1:59:85:50:e1: c3:f2:b7:84:40:7a:e1:8a:22:25:da:4c:b5:1f:a3:88:d9:9a: 97:7a:e5:59:7b:6a:46:58:f8:5e:11:28:ea:80:ac:6c:34:61: b5:0a:97:c4:99:b9:e7:64:8d:37:86:7c:7a:59:d1:71:73:b9: d6:84:eb:2e:3a:f0:03:84:a2:bf:f8:1d:4a:34:ae:a2:8c:88: 9b:a6:83:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4UftTS8z2e7w2VloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI2MDYwNjA5MDAxMloXDTI2MDkwNDA5MDAxMlowLzEtMCsGA1UEAxMk NTg4ZWIyOWItODBjYS00Y2IzLWJiYTgtY2Y4MDQ0NDg5N2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyvSJFcwyNltFTUVrTR1dgVFMUjjk37YWRF1 g/r9n3wY7p+0+byyQwdodS1bEC2uK1RU4dD6iFna6EjpSf5dovub9go9aGbj6vsC j51prR79E2brnMQB25BO9TWRdFkGLy11VJN0GCpNSqOplqUX4Vl9DjTqdaXJt0BN sMFIJmaticCtD7D/zpfkhayiJzpmXyqw7lsaohe8zYR95/x86KRbEizCAe4RQSC1 axgqdFnbsCbmWGpYX+k+oTgyPB6NZUqGBCgNIK1r1IPefqZ1pQo6qmaYzdzTBnJe 8K49TKlUr3e07N8Y+6X1ktseuZw+vPoLQZpQdSjjUioZ1kVhEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTcj0zki3f6gXXbU2U/lHHujXAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMWRmYTUzZWQtMjVhNS0z ODJiLTg1NGItMjViOWU0NTc5MTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfXLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrDrcGArjrIO4Fbzp7fIfMGCR2qfwvo9+oki+UfXpglFv2iOD/fN/c8 Ajx05JpsqXtfADq4sxhyYm7M8R0MHwjH7kFOlH3EhqVXWctYKo6NhFfXjYkR+MOV XoTyMiqUqw+o1wKCkSmu5MIp6bATf9K2/6jzYneB6m0nT1HfLM1QBrdiKlDVILqD +DkOzVEc1ch0lzCjek1ptLw6tNKflbUUvacsv80Kepy6E8jc82fxWYVQ4cPyt4RA euGKIiXaTLUfo4jZmpd65Vl7akZY+F4RKOqArGw0YbUKl8SZuedkjTeGfHpZ0XFz udaE6y468AOEor/4HUo0rqKMiJumg+A= -----END CERTIFICATE-----Generated at Sat Jun 13 23:41:51 2026 by rpki-client