$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/8cfbce7e-3b9d-32dd-a35c-663ef0321a1e.roa File: 8cfbce7e-3b9d-32dd-a35c-663ef0321a1e.roa (raw, json) Hash identifier: LGCFh2aexXLukai/sDB1Qh2k9I47ks0mFvqp3djBzKc= Subject key identifier: 1F:88:32:C0:A3:3F:2C:F8:1B:19:B3:36:7B:C8:0A:7C:B7:97:5E:3D Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584F5A331F5E904FF072D9159980 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/8cfbce7e-3b9d-32dd-a35c-663ef0321a1e.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 62651 IP address blocks: 173.245.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:33:1f:5e:90:4f:f0:72:d9:15:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=94a68794-f7a3-4ab9-ae26-868b0dcdef4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:08:0e:79:88:f0:90:09:fe:a5:46:b7:e0:b7: dd:1c:bf:7d:15:1b:ab:f1:79:63:d6:a0:37:e0:65: d2:30:16:89:b1:ae:d5:fc:87:fe:c9:ad:da:0b:1c: e8:5a:ac:e9:57:64:03:9b:96:63:c4:5e:d7:e7:8c: cb:23:bb:f2:f9:a1:58:64:54:b0:8d:18:a3:ba:5b: 00:cd:9b:61:d3:8d:fb:6e:52:9d:d8:0e:94:36:a7: 44:73:8c:0d:8d:9b:df:c6:4d:8e:d6:63:d1:1a:09: 44:bd:85:5c:48:c6:7c:7d:62:36:55:1a:7e:1d:b4: 20:22:c3:7e:e3:65:6d:46:2a:99:8b:c5:47:67:31: 7a:34:ce:50:b6:33:b0:63:52:f0:8c:f6:cb:5b:99: c6:5c:ee:2d:d1:1c:3d:9d:3d:5a:66:5a:72:48:96: 68:1e:50:bd:b9:21:66:fd:be:0d:99:eb:fc:42:d6: f3:c1:19:78:16:0a:a0:2d:cb:f5:b7:14:9b:9f:4b: fd:24:83:12:27:e2:a6:e4:bd:d8:88:9d:37:69:33: ff:2d:e1:7e:00:10:fc:23:a1:b5:c2:79:6a:84:fa: a7:71:ff:18:38:be:f4:34:a4:22:57:85:28:22:31: 44:9d:91:5c:5d:ee:cc:3a:8c:7a:90:99:8b:9e:f5: 0c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:88:32:C0:A3:3F:2C:F8:1B:19:B3:36:7B:C8:0A:7C:B7:97:5E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/8cfbce7e-3b9d-32dd-a35c-663ef0321a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 173.245.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:69:9f:9d:36:51:f6:b1:e1:bf:81:a6:56:6a:04:26:73:ca: 31:a6:e4:6b:98:e1:a7:25:51:18:4c:e7:99:be:ee:54:05:88: 96:b9:87:1a:e7:36:5a:24:df:a4:99:31:86:48:e6:d3:9b:ac: 0b:c3:e7:e1:c0:c3:a5:7d:fa:20:e4:99:55:d3:f4:61:76:38: 50:98:c7:e9:c6:6d:70:f6:7c:e8:5f:7f:a2:2f:f9:29:a0:c7: 59:6f:7c:51:e4:4d:f8:8f:22:81:a6:57:fb:65:6b:38:fe:5a: e9:d5:76:b6:69:fa:ab:20:d6:37:c8:f2:60:41:8f:d2:08:ad: 7f:2e:27:1f:07:45:55:87:96:97:40:89:4d:b9:cb:24:ff:44: 82:2e:e1:af:9a:b6:2d:14:cc:68:30:0a:f7:a3:88:95:a5:5f: e7:7a:27:37:ee:ac:42:ca:53:17:47:c4:ac:c1:4e:a8:20:fc: 9f:25:01:1c:5c:f8:dc:ea:57:f1:da:b2:07:fe:32:cc:20:03: 15:99:64:a0:4f:78:f0:b6:f6:fd:15:1b:0d:44:63:ad:17:17: 67:53:c9:cb:0e:92:2e:02:01:49:02:0e:a9:99:a4:00:29:f9: ef:13:a1:d5:4d:18:34:db:30:61:43:d7:e5:9a:9f:5d:9a:d5: 03:4c:23:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMx9ekE/wctkVmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk OTRhNjg3OTQtZjdhMy00YWI5LWFlMjYtODY4YjBkY2RlZjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAgOeYjwkAn+pUa34LfdHL99FRur8Xlj1qA3 4GXSMBaJsa7V/If+ya3aCxzoWqzpV2QDm5ZjxF7X54zLI7vy+aFYZFSwjRijulsA zZth0437blKd2A6UNqdEc4wNjZvfxk2O1mPRGglEvYVcSMZ8fWI2VRp+HbQgIsN+ 42VtRiqZi8VHZzF6NM5QtjOwY1LwjPbLW5nGXO4t0Rw9nT1aZlpySJZoHlC9uSFm /b4Nmev8QtbzwRl4FgqgLcv1txSbn0v9JIMSJ+Km5L3YiJ03aTP/LeF+ABD8I6G1 wnlqhPqncf8YOL70NKQiV4UoIjFEnZFcXe7MOox6kJmLnvUMSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+IMsCjPyz4GxmzNnvICny3l149MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvOGNmYmNlN2UtM2I5ZC0z MmRkLWEzNWMtNjYzZWYwMzIxYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfXPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFpn502Ufax4b+BplZqBCZzyjGm5GuY4aclURhM55m+7lQFiJa5hxrn Nlok36SZMYZI5tObrAvD5+HAw6V9+iDkmVXT9GF2OFCYx+nGbXD2fOhff6Iv+Smg x1lvfFHkTfiPIoGmV/tlazj+WunVdrZp+qsg1jfI8mBBj9IIrX8uJx8HRVWHlpdA iU25yyT/RIIu4a+ati0UzGgwCvejiJWlX+d6JzfurELKUxdHxKzBTqgg/J8lARxc +NzqV/Hasgf+MswgAxWZZKBPePC29v0VGw1EY60XF2dTycsOki4CAUkCDqmZpAAp +e8TodVNGDTbMGFD1+Wan12a1QNMI00= -----END CERTIFICATE-----Generated at Thu Oct 1 13:36:49 2026 by rpki-client