$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1f2fa26c-90cf-30f8-9492-43cb8a574f72.roa File: 1f2fa26c-90cf-30f8-9492-43cb8a574f72.roa (raw, json) Hash identifier: iUwiOKl4XheJYr+8Fj7YlDpbZbGvxOMg2sq9UYDs3F0= Subject key identifier: 79:90:B2:71:5E:D2:A1:0A:8A:17:D1:CE:70:DC:47:74:9F:9E:02:9D Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584B821CC8D4A4495DCD7940B380 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1f2fa26c-90cf-30f8-9492-43cb8a574f72.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 396961 IP address blocks: 163.253.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c8:d4:a4:49:5d:cd:79:40:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=93406ea0-9364-46d0-b0d9-260472326c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:00:12:bb:74:cf:d0:bf:9b:43:da:2e:20:3f: 6b:2b:5c:5e:3c:ed:a3:f1:30:51:3c:df:6e:25:d8: f7:ae:75:08:1f:b3:1f:52:f4:5b:ec:f6:0f:7a:99: ba:68:e3:ef:14:7a:a3:64:85:82:dd:8e:f3:df:5e: a3:3c:61:bc:ab:49:41:d3:0e:0b:3d:4d:f4:08:95: 4d:c6:ea:49:20:00:05:88:7f:aa:e1:0e:bd:be:81: b5:48:15:07:d1:76:bb:01:f7:59:0e:f1:d8:cb:d0: 9b:d5:c0:fa:68:11:28:82:f8:fc:cd:7b:7b:85:ec: c5:2b:79:b2:15:aa:85:b1:8e:e4:65:8c:1b:40:bf: ec:cd:c5:b6:e9:f9:87:1c:99:36:65:f4:e8:29:d5: 95:ff:aa:47:45:05:c4:73:b2:85:22:33:41:23:3c: 3a:1f:97:17:3a:59:22:e0:4e:17:8b:e7:f6:6b:9f: 45:ed:9b:98:12:ec:3f:c7:bb:a1:f4:3d:01:c8:0e: eb:3e:12:a8:39:fa:0b:d5:90:0f:bb:07:66:86:03: e6:0b:38:85:4a:c1:b3:ff:4e:4d:56:d6:12:db:18: 9d:a7:16:10:e7:9a:37:22:59:80:9c:59:ad:07:08: 06:99:83:67:ab:5f:c0:05:0f:06:3d:31:3d:17:b4: 56:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:90:B2:71:5E:D2:A1:0A:8A:17:D1:CE:70:DC:47:74:9F:9E:02:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/1f2fa26c-90cf-30f8-9492-43cb8a574f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:5f:a9:68:c3:12:55:68:85:84:d4:9a:47:b3:22:2b:78:c9: 34:20:06:60:e7:c0:ff:f0:34:f2:8d:27:36:8b:44:1b:1c:e1: c6:37:ff:b5:4e:e2:2c:ff:f2:c6:1c:b7:b0:2e:af:21:6e:15: 5f:84:35:ec:2c:10:0b:e2:d9:71:03:b9:cf:a1:a5:96:b2:35: 7b:f7:30:25:e2:4e:39:ff:de:c6:11:64:67:87:9c:7c:40:2a: cb:d7:05:88:c8:26:81:d0:1f:54:39:c1:75:3e:9f:21:64:9c: 1b:f4:6f:2f:6d:99:15:eb:5f:71:c2:30:a1:03:11:fa:be:78: 3f:6f:13:09:45:07:dd:68:84:dc:72:8d:ee:15:32:6a:62:51: 6a:1b:c8:d8:a4:53:af:c1:e7:96:7b:a2:55:00:62:31:e6:2a: 74:c7:4f:ca:2b:65:d9:96:11:fd:8c:04:6a:62:79:b0:7c:25: 7f:ed:b2:b4:46:0e:68:13:d0:f5:0d:15:d9:3e:34:78:1e:84: d1:eb:17:05:10:00:83:7e:2e:0c:c0:6b:53:f9:ea:f8:14:0e: eb:c6:43:39:ae:f8:a6:6a:67:b3:52:04:a6:f9:07:35:f7:54: 9e:b3:a1:5a:e6:9d:88:24:1f:3a:92:c5:61:2c:4b:30:34:5c: 45:bc:94:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMjUpEldzXlAs4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk OTM0MDZlYTAtOTM2NC00NmQwLWIwZDktMjYwNDcyMzI2YzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQASu3TP0L+bQ9ouID9rK1xePO2j8TBRPN9u Jdj3rnUIH7MfUvRb7PYPepm6aOPvFHqjZIWC3Y7z316jPGG8q0lB0w4LPU30CJVN xupJIAAFiH+q4Q69voG1SBUH0Xa7AfdZDvHYy9Cb1cD6aBEogvj8zXt7hezFK3my FaqFsY7kZYwbQL/szcW26fmHHJk2ZfToKdWV/6pHRQXEc7KFIjNBIzw6H5cXOlki 4E4Xi+f2a59F7ZuYEuw/x7uh9D0ByA7rPhKoOfoL1ZAPuwdmhgPmCziFSsGz/05N VtYS2xidpxYQ55o3IlmAnFmtBwgGmYNnq1/ABQ8GPTE9F7RWUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmQsnFe0qEKihfRznDcR3SfngKdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMWYyZmEyNmMtOTBjZi0z MGY4LTk0OTItNDNjYjhhNTc0ZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtfqWjDElVohYTUmkezIit4yTQgBmDnwP/wNPKNJzaLRBsc4cY3/7VO 4iz/8sYct7AuryFuFV+ENewsEAvi2XEDuc+hpZayNXv3MCXiTjn/3sYRZGeHnHxA KsvXBYjIJoHQH1Q5wXU+nyFknBv0by9tmRXrX3HCMKEDEfq+eD9vEwlFB91ohNxy je4VMmpiUWobyNikU6/B55Z7olUAYjHmKnTHT8orZdmWEf2MBGpiebB8JX/tsrRG DmgT0PUNFdk+NHgehNHrFwUQAIN+LgzAa1P56vgUDuvGQzmu+KZqZ7NSBKb5BzX3 VJ6zoVrmnYgkHzqSxWEsSzA0XEW8lDM= -----END CERTIFICATE-----Generated at Wed Nov 5 16:17:34 2025 by rpki-client