$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1dfa53ed-25a5-382b-854b-25b9e457911a.roa File: 1dfa53ed-25a5-382b-854b-25b9e457911a.roa (raw, json) Hash identifier: QQtl3LY2EecB7xEvbxf0CNJh/wJI7s2oa3XqVAAtYoI= Subject key identifier: E9:D2:58:86:7C:BE:3E:CC:8C:35:7B:57:F7:89:D5:44:D6:C2:0A:B0 Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Certificate serial: 010D0C9F4328584D343A105A8E928C64DFA00700 Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1dfa53ed-25a5-382b-854b-25b9e457911a.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 62651 IP address blocks: 173.245.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:10:5a:8e:92:8c:64:df:a0:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=ee411468-f0d9-456c-8eca-26258739bce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:37:99:d5:78:12:3f:76:eb:b5:20:66:e1:98: 7a:81:0e:d4:3f:8d:73:c5:83:b4:e8:89:5d:97:35: d6:1b:8b:ab:b9:f3:9a:33:2b:4c:79:9d:54:f8:93: f9:dd:02:a2:2f:fa:8c:ff:09:92:f9:9d:de:b9:69: cc:ae:8d:5e:b7:8b:9a:d9:14:96:7e:c8:ac:61:dd: 9b:ac:fc:0c:2c:04:ef:53:28:72:bd:ad:0d:82:01: d0:f4:77:9c:1c:7d:ea:63:38:b3:c0:60:a2:5c:10: 0f:4d:c0:86:03:1e:56:0b:62:5d:b7:34:40:40:56: bc:1f:41:e3:32:ae:e0:5e:a1:ab:c8:0b:77:8d:67: bd:41:e9:22:25:64:ab:64:86:b7:b5:69:0e:05:ec: 2a:74:c3:b4:6a:26:5f:6f:28:c3:03:bb:ad:aa:2d: 52:3a:0a:f1:0c:2a:cf:d2:68:62:5e:20:1d:24:15: b6:a1:69:f0:c9:a9:78:1e:4b:12:ed:28:79:eb:59: d4:2a:c2:17:05:6e:ee:16:ea:c8:a7:ff:96:84:4d: 31:31:44:b5:6d:e5:19:e3:84:c1:df:39:c2:b0:ec: ab:e5:bf:e1:f7:5a:63:5a:b1:61:52:46:4d:9b:81: b4:48:07:1c:28:24:08:29:09:37:34:ba:21:37:9c: 9d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D2:58:86:7C:BE:3E:CC:8C:35:7B:57:F7:89:D5:44:D6:C2:0A:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1dfa53ed-25a5-382b-854b-25b9e457911a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl X509v3 Authority Key Identifier: keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer sbgp-ipAddrBlock: critical IPv4: 173.245.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:be:71:6e:eb:60:7d:8f:59:34:68:27:5a:11:80:1b:25:3c: 0d:08:7c:80:93:43:5d:77:66:c0:8d:01:b1:cd:0a:bc:e3:f3: 34:bc:5b:f3:38:c5:51:2a:c2:0f:59:68:ed:3a:46:e7:4a:d9: 49:7d:05:d7:6e:88:de:7c:c7:af:2d:65:fc:69:84:39:5e:1d: 86:00:f3:7b:ee:2d:85:d7:85:60:fe:ff:75:a0:64:f7:69:ea: db:9a:2d:a8:d0:b9:91:67:67:e4:f5:b5:3c:ef:5b:07:e6:ee: 98:7f:35:be:b5:ec:3b:46:ee:43:d8:8f:cf:95:c7:b6:8c:aa: a2:88:b8:74:3e:6a:de:cf:bd:6a:db:82:ab:f3:43:41:8a:ad: 01:f4:89:97:bb:3c:6f:85:b9:1b:b0:98:17:46:25:93:17:87: f0:9a:6f:9d:53:4f:a9:18:a8:3d:d2:b4:34:9b:57:2d:dd:8b: 69:f7:d6:dc:ad:e0:15:84:37:58:07:1b:95:bf:82:09:98:51: e5:5b:57:30:f6:b2:2c:52:30:5d:4b:9c:1f:23:1c:4e:79:45: 4c:77:c0:54:e0:07:48:15:64:71:66:3c:d5:65:e8:b0:03:f1: d9:36:df:62:1a:af:ac:a2:92:43:65:8b:f6:22:65:9e:3b:04: 3f:54:3a:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00OhBajpKMZN+gBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQyZDFiOTgtNTEyMi00ZDAzLTg2ZjUtMGRjOGQ2MzIz OGFhMB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk ZWU0MTE0NjgtZjBkOS00NTZjLThlY2EtMjYyNTg3MzliY2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTeZ1XgSP3brtSBm4Zh6gQ7UP41zxYO06Ild lzXWG4urufOaMytMeZ1U+JP53QKiL/qM/wmS+Z3euWnMro1et4ua2RSWfsisYd2b rPwMLATvUyhyva0NggHQ9HecHH3qYzizwGCiXBAPTcCGAx5WC2JdtzRAQFa8H0Hj Mq7gXqGryAt3jWe9QekiJWSrZIa3tWkOBewqdMO0aiZfbyjDA7utqi1SOgrxDCrP 0mhiXiAdJBW2oWnwyal4HksS7Sh561nUKsIXBW7uFurIp/+WhE0xMUS1beUZ44TB 3znCsOyr5b/h91pjWrFhUkZNm4G0SAccKCQIKQk3NLohN5ydHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnSWIZ8vj7MjDV7V/eJ1UTWwgqwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJk MWI5OC01MTIyLTRkMDMtODZmNS0wZGM4ZDYzMjM4YWEvMWRmYTUzZWQtMjVhNS0z ODJiLTg1NGItMjViOWU0NTc5MTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWQyZDFiOTgtNTEyMi00ZDAzLTg2 ZjUtMGRjOGQ2MzIzOGFhLzFkMmQxYjk4LTUxMjItNGQwMy04NmY1LTBkYzhkNjMy MzhhYS5jcmwwHwYDVR0jBBgwFoAUkS7TWanq9XfcNdgKY6T/wq3OaCMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZDJkMWI5OC01MTIyLTRkMDMtODZmNS0wZGM4 ZDYzMjM4YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfXLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADK+cW7rYH2PWTRoJ1oRgBslPA0IfICTQ113ZsCNAbHNCrzj8zS8W/M4 xVEqwg9ZaO06RudK2Ul9BdduiN58x68tZfxphDleHYYA83vuLYXXhWD+/3WgZPdp 6tuaLajQuZFnZ+T1tTzvWwfm7ph/Nb617DtG7kPYj8+Vx7aMqqKIuHQ+at7PvWrb gqvzQ0GKrQH0iZe7PG+FuRuwmBdGJZMXh/Cab51TT6kYqD3StDSbVy3di2n31tyt 4BWEN1gHG5W/ggmYUeVbVzD2sixSMF1LnB8jHE55RUx3wFTgB0gVZHFmPNVl6LAD 8dk232Iar6yikkNli/YiZZ47BD9UOok= -----END CERTIFICATE-----Generated at Sat Mar 21 12:22:06 2026 by rpki-client