$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1dfa53ed-25a5-382b-854b-25b9e457911a.roa File: 1dfa53ed-25a5-382b-854b-25b9e457911a.roa (raw, json) Hash identifier: IQJScSoTJOJz863AKeQUfkwY2xBKqgXg63NRX2wlptg= Subject key identifier: 26:E7:1E:84:91:62:F4:10:0A:7C:55:BC:4A:74:BC:21:3A:81:83:E6 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584EB6E19E5BB26E7B6E3686BB00 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1dfa53ed-25a5-382b-854b-25b9e457911a.roa Signing time: Mon 03 Aug 2026 13:00:12 +0000 ROA not before: Mon 03 Aug 2026 13:00:12 +0000 ROA not after: Sun 01 Nov 2026 14:00:12 +0000 asID: 62651 IP address blocks: 173.245.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b6:e1:9e:5b:b2:6e:7b:6e:36:86:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Aug 3 13:00:12 2026 GMT Not After : Nov 1 14:00:12 2026 GMT Subject: CN=225f136c-ee7e-4332-9fd2-da19bd388627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f1:c6:e3:04:e7:17:f1:ef:46:76:97:e5:14: 7c:4f:e6:f1:fb:62:64:25:da:77:88:98:de:ac:07: 39:5c:c4:44:f7:67:54:81:08:88:1e:14:91:97:8e: f8:7c:b5:eb:10:c1:89:e5:d6:71:a1:4b:64:5b:b5: 0c:75:e5:d3:60:1b:8d:f5:7c:d7:fe:d4:f9:05:50: cf:b5:a1:2c:cd:9f:c3:61:7d:48:71:cd:85:04:5f: 5d:4b:0c:35:2c:1d:a5:5a:87:4b:62:3c:dc:de:aa: e5:66:fe:4c:b1:04:7f:85:8b:cd:f9:08:2d:62:7d: 92:47:f1:b7:a4:e9:1d:7a:ed:05:9c:50:b8:65:dd: f4:69:a7:ca:07:59:79:fc:2a:5c:b2:40:de:71:56: 19:07:2c:c0:6b:44:1e:a3:8f:14:23:d8:78:2a:16: 63:b1:a0:a3:c2:86:e3:55:33:b6:2d:6d:26:7d:17: de:4b:4a:b3:aa:ab:7a:c1:11:c7:b2:ff:bd:d5:a3: 1c:33:63:e0:f3:a3:34:17:75:d0:ab:95:7a:35:cc: ba:5c:af:80:9d:86:22:59:9e:81:93:6d:b6:2c:48: fa:bc:f7:2b:18:0b:60:8f:ab:b6:45:f6:f8:d7:cf: d4:74:71:6a:71:c1:2d:50:a4:ac:bd:e9:5e:e7:03: 53:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E7:1E:84:91:62:F4:10:0A:7C:55:BC:4A:74:BC:21:3A:81:83:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1dfa53ed-25a5-382b-854b-25b9e457911a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 173.245.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:e2:6b:b9:12:33:98:df:0c:57:78:bf:ac:f5:0e:2c:81:c5: d4:d4:b8:71:e7:63:a8:72:fc:b6:db:36:28:91:8d:51:6a:d6: 96:b9:5b:a2:cd:c0:16:42:5b:74:e7:02:85:c9:f0:22:b8:82: bd:2f:4b:5b:4e:64:55:32:41:66:ff:f1:e6:5b:0b:d1:6c:2b: bd:62:c1:aa:1b:f3:61:d7:c1:76:e0:4f:54:3f:e2:81:09:05: 4e:c0:39:d1:4e:2b:31:d9:c0:ed:f2:94:8c:63:ac:59:f5:96: 4f:d8:90:a8:6f:36:90:6b:59:98:79:51:b6:d1:fb:b0:98:33: 6e:de:bf:e0:0b:5d:79:92:b4:4e:db:6f:23:99:9a:49:0d:c4: 2d:b6:20:24:07:5f:a7:01:bf:02:90:38:6f:62:01:f9:5a:42: f7:af:92:7a:49:c8:fd:27:12:62:6f:fd:bf:48:ea:e2:43:10: da:a6:46:6d:33:3d:ab:fc:12:ea:cb:8d:1d:15:12:e0:98:bd: 26:1b:bc:b5:6f:df:f6:c9:1a:94:fd:1f:0d:63:35:95:e5:e9: 17:45:f6:95:3b:77:88:c8:6d:80:04:9e:7c:cd:c4:db:55:c8: 2c:c6:94:99:1b:64:62:59:3d:72:a8:6d:bc:54:2e:b1:b5:3c: 20:03:9b:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE624Z5bsm57bjaGuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI2MDgwMzEzMDAxMloXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk MjI1ZjEzNmMtZWU3ZS00MzMyLTlmZDItZGExOWJkMzg4NjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifHG4wTnF/HvRnaX5RR8T+bx+2JkJdp3iJje rAc5XMRE92dUgQiIHhSRl474fLXrEMGJ5dZxoUtkW7UMdeXTYBuN9XzX/tT5BVDP taEszZ/DYX1Icc2FBF9dSww1LB2lWodLYjzc3qrlZv5MsQR/hYvN+QgtYn2SR/G3 pOkdeu0FnFC4Zd30aafKB1l5/CpcskDecVYZByzAa0Qeo48UI9h4KhZjsaCjwobj VTO2LW0mfRfeS0qzqqt6wRHHsv+91aMcM2Pg86M0F3XQq5V6Ncy6XK+AnYYiWZ6B k222LEj6vPcrGAtgj6u2Rfb418/UdHFqccEtUKSsvele5wNTYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbnHoSRYvQQCnxVvEp0vCE6gYPmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMWRmYTUzZWQtMjVhNS0z ODJiLTg1NGItMjViOWU0NTc5MTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfXLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXia7kSM5jfDFd4v6z1DiyBxdTUuHHnY6hy/LbbNiiRjVFq1pa5W6LN wBZCW3TnAoXJ8CK4gr0vS1tOZFUyQWb/8eZbC9FsK71iwaob82HXwXbgT1Q/4oEJ BU7AOdFOKzHZwO3ylIxjrFn1lk/YkKhvNpBrWZh5UbbR+7CYM27ev+ALXXmStE7b byOZmkkNxC22ICQHX6cBvwKQOG9iAflaQvevknpJyP0nEmJv/b9I6uJDENqmRm0z Pav8EurLjR0VEuCYvSYbvLVv3/bJGpT9Hw1jNZXl6RdF9pU7d4jIbYAEnnzNxNtV yCzGlJkbZGJZPXKobbxULrG1PCADm6w= -----END CERTIFICATE-----Generated at Tue Aug 4 12:27:29 2026 by rpki-client