$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1dfa53ed-25a5-382b-854b-25b9e457911a.roa File: 1dfa53ed-25a5-382b-854b-25b9e457911a.roa (raw, json) Hash identifier: RGfV20NcB0R8J1dwb63aZs9plFsqzbjYy7drqC/PhRQ= Subject key identifier: 60:8C:AF:89:FD:71:86:DB:74:ED:F2:9C:D0:4F:7A:E3:BE:8C:3B:E4 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584F58CD4DCD5C09CD4CC0242DFD Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1dfa53ed-25a5-382b-854b-25b9e457911a.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 62651 IP address blocks: 173.245.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:4d:cd:5c:09:cd:4c:c0:24:2d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=d9efc642-9868-41b5-a45a-61021c5a4ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:be:e5:47:0e:2b:fc:c5:3f:9b:f7:95:72:f2: b8:9e:cc:87:3a:ef:76:75:25:08:12:e4:e2:73:29: 12:d3:49:86:0c:0e:fa:eb:f2:59:50:18:d6:51:aa: 2b:e8:12:e3:f0:57:c8:79:c7:a4:76:ac:ed:38:b8: 89:83:46:e8:1f:89:54:36:e0:ca:43:d7:6f:04:1a: 12:f6:23:fd:3e:b4:87:d0:c9:a6:21:b5:15:42:df: 0c:66:c6:1a:53:a8:31:05:6f:c6:31:d7:dd:b1:31: f2:29:83:fc:71:62:0b:c6:47:17:c0:86:ce:78:43: 0f:fa:c2:7c:29:e7:f3:dd:2c:8e:51:e8:f2:66:c3: 93:e4:5d:4c:ad:f3:9a:19:f1:19:34:30:51:0f:1b: 77:94:8a:2c:d1:4e:42:ba:13:b7:97:9e:cc:e0:b2: cc:0b:1a:56:7d:2c:ea:8a:a5:b9:53:71:9d:cd:50: 26:3e:df:e8:19:a8:86:28:03:27:ba:43:4c:c0:a3: 5d:37:1b:7e:68:0d:8d:95:c4:c5:0d:1c:ec:73:23: 45:67:86:a7:48:7f:56:07:60:34:f5:cf:fa:a0:97: 77:09:f7:8a:68:b1:2b:0b:a6:7d:d9:34:f1:48:83: ef:0a:9b:b1:38:51:8a:23:80:54:a5:11:1c:12:71: 7b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8C:AF:89:FD:71:86:DB:74:ED:F2:9C:D0:4F:7A:E3:BE:8C:3B:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1dfa53ed-25a5-382b-854b-25b9e457911a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 173.245.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:4a:92:48:4f:0a:d2:5a:14:6f:ee:a5:c8:bd:62:93:fe:e7: 72:77:e8:81:58:10:6b:6e:ec:ef:27:8a:89:95:ff:2b:46:ad: 09:18:98:da:ed:0b:87:88:7c:df:d3:c9:43:09:87:64:87:2d: e1:1b:05:f0:84:35:68:eb:e2:34:55:33:73:73:df:51:42:8c: 43:ca:74:d6:d5:13:64:17:1e:65:f2:a8:4d:f2:14:c5:b7:c1: 26:f7:65:01:a4:14:87:56:13:df:84:e2:40:b6:3a:e9:8d:e9: fd:bb:7f:36:5b:3b:90:0c:da:56:f1:6e:04:d1:c3:7e:5c:a3: e8:20:0a:38:c8:b5:ec:c3:ef:42:64:e6:10:dd:0f:37:03:ba: 47:43:6d:0d:33:4c:1f:79:d7:13:45:a2:7c:ec:12:6e:33:66: fe:c6:32:ed:f7:8d:64:a3:e7:e7:c8:ab:3f:08:c7:3e:bc:60: 60:c0:34:af:a1:c3:68:4e:82:eb:af:1b:10:33:03:ef:33:12: b1:6c:61:51:6d:37:a9:c9:0a:43:ef:ff:f6:34:74:e0:26:04: fd:b4:14:a0:80:22:d1:22:79:b0:26:2b:21:b8:d5:76:95:41: fd:fe:97:3c:06:88:85:28:d0:a7:71:59:d4:09:40:01:3f:de: f6:8a:60:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzU3NXAnNTMAkLf0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk ZDllZmM2NDItOTg2OC00MWI1LWE0NWEtNjEwMjFjNWE0YWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA277lRw4r/MU/m/eVcvK4nsyHOu92dSUIEuTi cykS00mGDA766/JZUBjWUaor6BLj8FfIecekdqztOLiJg0boH4lUNuDKQ9dvBBoS 9iP9PrSH0MmmIbUVQt8MZsYaU6gxBW/GMdfdsTHyKYP8cWILxkcXwIbOeEMP+sJ8 Kefz3SyOUejyZsOT5F1MrfOaGfEZNDBRDxt3lIos0U5CuhO3l57M4LLMCxpWfSzq iqW5U3GdzVAmPt/oGaiGKAMnukNMwKNdNxt+aA2NlcTFDRzscyNFZ4anSH9WB2A0 9c/6oJd3CfeKaLErC6Z92TTxSIPvCpuxOFGKI4BUpREcEnF7lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCMr4n9cYbbdO3ynNBPeuO+jDvkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMWRmYTUzZWQtMjVhNS0z ODJiLTg1NGItMjViOWU0NTc5MTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfXLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhKkkhPCtJaFG/upci9YpP+53J36IFYEGtu7O8niomV/ytGrQkYmNrt C4eIfN/TyUMJh2SHLeEbBfCENWjr4jRVM3Nz31FCjEPKdNbVE2QXHmXyqE3yFMW3 wSb3ZQGkFIdWE9+E4kC2OumN6f27fzZbO5AM2lbxbgTRw35co+ggCjjItezD70Jk 5hDdDzcDukdDbQ0zTB951xNFonzsEm4zZv7GMu33jWSj5+fIqz8Ixz68YGDANK+h w2hOguuvGxAzA+8zErFsYVFtN6nJCkPv//Y0dOAmBP20FKCAItEiebAmKyG41XaV Qf3+lzwGiIUo0KdxWdQJQAE/3vaKYGA= -----END CERTIFICATE-----Generated at Sun Oct 4 17:56:52 2026 by rpki-client