$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/8cfbce7e-3b9d-32dd-a35c-663ef0321a1e.roa File: 8cfbce7e-3b9d-32dd-a35c-663ef0321a1e.roa (raw, json) Hash identifier: xF2IKXnDGHExL5EIjlW3e1TV0ebtPzIC/Uy8SHuafyI= Subject key identifier: 60:C0:0C:50:51:7E:80:9A:E1:A7:9F:BB:31:79:B8:17:91:03:DB:70 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584E15E4A42575C717BD15590CC0 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/8cfbce7e-3b9d-32dd-a35c-663ef0321a1e.roa Signing time: Sat 06 Jun 2026 21:00:13 +0000 ROA not before: Sat 06 Jun 2026 21:00:13 +0000 ROA not after: Fri 04 Sep 2026 21:00:13 +0000 asID: 62651 IP address blocks: 173.245.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:15:e4:a4:25:75:c7:17:bd:15:59:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Jun 6 21:00:13 2026 GMT Not After : Sep 4 21:00:13 2026 GMT Subject: CN=8bfc87b5-a4b4-4c84-a2d1-5297a8efa0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:43:ea:da:b7:81:0f:84:9f:ee:0f:fe:c0:2b: e8:4f:56:56:8b:47:b9:be:da:ed:67:3d:f0:4d:ec: 6f:9f:1d:d9:c1:60:4a:c5:07:bd:c3:d9:a3:32:7b: ea:38:e7:77:27:6e:d4:a4:05:6b:a3:14:7c:0c:16: 99:30:65:99:23:cf:14:7a:0c:4e:63:e7:63:81:53: 24:b6:26:b5:3e:20:a4:6a:a5:9e:59:4e:ee:ed:f8: a4:e8:fb:cc:28:ee:a3:26:16:3c:ae:03:20:9b:9c: 1f:08:0a:cf:2b:ce:89:f0:ec:42:5b:33:03:14:7e: 44:c4:e1:8a:0b:32:c3:e5:52:73:80:66:16:84:19: b8:4f:2b:1f:0d:e7:50:a4:f9:29:92:20:98:72:e6: 37:bb:32:d1:c3:1b:b7:a4:6c:d9:3c:05:67:62:8c: dd:fa:08:ff:4f:4b:ed:ae:ce:32:f8:75:fa:b4:2e: ed:77:b6:fd:aa:94:ca:54:d5:a4:73:cc:52:c0:64: 05:99:08:07:a3:b3:49:14:63:14:49:5f:bc:e7:d2: 93:0a:b9:ea:6e:01:69:89:af:a3:5f:50:95:06:65: ec:c9:27:a1:28:16:7d:f5:2d:11:c8:26:c6:19:24: 5a:ae:e4:d5:4e:94:01:41:3b:c2:59:71:d4:5c:bc: 67:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C0:0C:50:51:7E:80:9A:E1:A7:9F:BB:31:79:B8:17:91:03:DB:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/8cfbce7e-3b9d-32dd-a35c-663ef0321a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 173.245.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:b9:66:8d:2a:90:f4:c2:5a:36:f9:fd:88:52:48:88:fd:bf: 2a:cd:01:75:05:7a:74:ae:b3:38:b3:45:50:76:f6:4c:cb:cd: fd:ea:fe:88:2e:eb:ea:1c:f2:d3:1c:cd:3d:0b:b3:43:d9:17: a4:1f:35:52:15:86:ce:2c:18:0e:83:34:97:0f:95:12:22:77: a3:d7:45:70:04:f6:7e:6f:f7:bc:ec:ec:19:89:3a:5b:5e:37: 6c:df:47:0c:02:65:c5:4f:ac:c8:45:10:10:29:bb:36:07:71: 7c:33:d6:6a:db:4c:ac:b5:ac:f8:a6:18:f3:2a:ca:c7:fc:e1: 56:59:b2:20:0f:59:a7:c5:96:bf:a9:fd:04:57:df:73:be:b5: d4:09:91:15:3d:b4:c2:14:a7:22:ad:0b:00:d1:b5:e6:92:39: fa:da:d3:28:ee:0a:55:7d:c5:f9:79:58:c4:bf:4a:cf:48:4d: 8d:23:51:97:ee:fa:62:b2:7b:9e:97:8a:29:a3:da:bb:f8:26: ff:1b:58:74:a1:01:c4:8c:78:6a:df:d6:50:9d:9a:1e:e9:33: f4:54:c1:7a:98:05:85:45:60:6e:6b:e1:cd:0e:f7:8c:41:7b: cd:0c:cb:73:3f:33:ad:70:32:56:dc:cc:5a:e8:e1:d6:8b:21: ae:f1:f9:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5KQldccXvRVZDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk OGJmYzg3YjUtYTRiNC00Yzg0LWEyZDEtNTI5N2E4ZWZhMGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkPq2reBD4Sf7g/+wCvoT1ZWi0e5vtrtZz3w Texvnx3ZwWBKxQe9w9mjMnvqOOd3J27UpAVroxR8DBaZMGWZI88UegxOY+djgVMk tia1PiCkaqWeWU7u7fik6PvMKO6jJhY8rgMgm5wfCArPK86J8OxCWzMDFH5ExOGK CzLD5VJzgGYWhBm4TysfDedQpPkpkiCYcuY3uzLRwxu3pGzZPAVnYozd+gj/T0vt rs4y+HX6tC7td7b9qpTKVNWkc8xSwGQFmQgHo7NJFGMUSV+859KTCrnqbgFpia+j X1CVBmXsySehKBZ99S0RyCbGGSRaruTVTpQBQTvCWXHUXLxnpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDADFBRfoCa4aefuzF5uBeRA9twMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvOGNmYmNlN2UtM2I5ZC0z MmRkLWEzNWMtNjYzZWYwMzIxYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfXPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE65Zo0qkPTCWjb5/YhSSIj9vyrNAXUFenSuszizRVB29kzLzf3q/ogu 6+oc8tMczT0Ls0PZF6QfNVIVhs4sGA6DNJcPlRIid6PXRXAE9n5v97zs7BmJOlte N2zfRwwCZcVPrMhFEBApuzYHcXwz1mrbTKy1rPimGPMqysf84VZZsiAPWafFlr+p /QRX33O+tdQJkRU9tMIUpyKtCwDRteaSOfra0yjuClV9xfl5WMS/Ss9ITY0jUZfu +mKye56Xiimj2rv4Jv8bWHShAcSMeGrf1lCdmh7pM/RUwXqYBYVFYG5r4c0O94xB e80My3M/M61wMlbczFro4daLIa7x+bA= -----END CERTIFICATE-----Generated at Sat Jun 13 21:13:09 2026 by rpki-client