$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/23bb4361-0bbd-3870-a99b-dd859a3e6667.roa File: 23bb4361-0bbd-3870-a99b-dd859a3e6667.roa (raw, json) Hash identifier: 1FVYJbqZbTOed6uFyuOhj/MwBqKOQFu+lhhEp/AVPWE= Subject key identifier: 1F:A1:79:56:D9:9B:F9:C6:52:22:EC:E5:D6:58:B2:BD:5F:02:4C:89 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584B477C710B5415814D7B6CA480 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/23bb4361-0bbd-3870-a99b-dd859a3e6667.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 396955 IP address blocks: 163.253.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:71:0b:54:15:81:4d:7b:6c:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=db7f4e20-46a3-441b-b8b0-395181b13c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:46:a0:c4:55:83:4f:3c:de:78:3c:f8:66:f7: c8:14:b9:cb:10:e7:be:3c:b6:0f:69:cb:e3:5b:de: 83:e4:fc:e8:90:29:4a:32:1f:4f:9e:8c:d4:7e:c5: 1c:26:ca:0a:d1:4f:49:01:7f:bb:9a:d6:dd:d0:bd: 7f:64:a1:c1:8b:5d:40:d0:f5:8e:9d:f0:2f:6d:58: 44:39:26:f1:e9:8d:4f:ca:b2:0c:c8:8c:7c:94:3c: 42:be:7e:60:ad:9e:1f:eb:18:69:48:16:b3:05:15: 44:7e:41:3a:a1:f5:99:65:fe:a3:4e:8c:76:b9:96: 3c:08:c1:83:af:f1:54:5e:3e:92:0a:f3:91:6e:02: 63:c0:8a:7c:a3:5e:cb:ec:d6:e6:74:a3:df:70:0f: 15:9b:f5:42:40:29:b8:fd:32:b8:85:61:74:8e:3e: f3:9c:83:75:10:10:69:9a:9a:51:e1:1f:95:b7:61: c2:47:4e:fb:d0:03:99:6f:b0:47:7a:52:32:25:68: 33:4c:df:40:0e:86:2d:ce:17:23:75:03:15:75:2d: 2a:94:2a:8c:67:5f:ae:ad:05:d2:1c:2a:46:8a:e0: 26:e7:82:38:a0:1f:9b:aa:df:46:4a:fa:77:44:f1: 2c:30:b4:ae:62:e7:cc:c6:9b:95:1c:1c:3d:b3:b5: 8f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A1:79:56:D9:9B:F9:C6:52:22:EC:E5:D6:58:B2:BD:5F:02:4C:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/23bb4361-0bbd-3870-a99b-dd859a3e6667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0b:60:b4:01:be:42:53:e7:4f:c8:93:dc:09:ea:b3:d5:00: 76:6e:f2:e4:98:03:e7:3c:f2:11:40:57:00:37:50:a3:42:61: bc:5b:5e:8d:e6:aa:ac:aa:81:ee:61:9a:55:ae:a4:2a:ef:17: ac:eb:ba:0c:1e:ff:a8:0d:8b:4b:0e:b0:14:02:b6:fc:3b:8f: b1:66:66:be:05:71:3a:20:be:fc:2a:b3:cb:bb:ee:bb:70:d0: e4:d4:50:1a:f4:bc:71:c6:ec:f6:a4:5d:2b:82:34:bc:7d:fe: a9:05:e1:fa:99:a3:08:a3:4c:96:a4:b8:7b:35:02:fd:92:b0: e0:8f:f7:15:9f:47:f7:8b:1f:5d:b9:dd:5d:dd:92:48:2c:30: ae:21:cd:95:36:45:ff:81:86:29:84:ab:ac:09:fc:5e:17:f1: 82:22:bb:1f:4a:d1:04:6b:7f:60:b8:90:91:01:87:3e:97:fc: c1:df:d3:df:6c:25:19:b3:d2:db:06:f1:eb:1a:dd:e2:ec:74: 08:b3:03:a3:6e:aa:53:87:6d:9e:7d:4f:1a:d9:fc:d4:91:6c: fa:74:92:1f:ad:86:f5:67:97:9c:d3:97:a0:25:e4:03:4d:6c: 93:a1:cc:78:21:85:56:aa:de:d0:af:67:1d:08:fb:f9:59:05: 42:ce:f4:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfHELVBWBTXtspIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk ZGI3ZjRlMjAtNDZhMy00NDFiLWI4YjAtMzk1MTgxYjEzYzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkagxFWDTzzeeDz4ZvfIFLnLEOe+PLYPacvj W96D5PzokClKMh9PnozUfsUcJsoK0U9JAX+7mtbd0L1/ZKHBi11A0PWOnfAvbVhE OSbx6Y1PyrIMyIx8lDxCvn5grZ4f6xhpSBazBRVEfkE6ofWZZf6jTox2uZY8CMGD r/FUXj6SCvORbgJjwIp8o17L7NbmdKPfcA8Vm/VCQCm4/TK4hWF0jj7znIN1EBBp mppR4R+Vt2HCR0770AOZb7BHelIyJWgzTN9ADoYtzhcjdQMVdS0qlCqMZ1+urQXS HCpGiuAm54I4oB+bqt9GSvp3RPEsMLSuYufMxpuVHBw9s7WPAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+heVbZm/nGUiLs5dZYsr1fAkyJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMjNiYjQzNjEtMGJiZC0z ODcwLWE5OWItZGQ4NTlhM2U2NjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo/0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgLYLQBvkJT50/Ik9wJ6rPVAHZu8uSYA+c88hFAVwA3UKNCYbxbXo3m qqyqge5hmlWupCrvF6zrugwe/6gNi0sOsBQCtvw7j7FmZr4FcTogvvwqs8u77rtw 0OTUUBr0vHHG7PakXSuCNLx9/qkF4fqZowijTJakuHs1Av2SsOCP9xWfR/eLH125 3V3dkkgsMK4hzZU2Rf+BhimEq6wJ/F4X8YIiux9K0QRrf2C4kJEBhz6X/MHf099s JRmz0tsG8esa3eLsdAizA6NuqlOHbZ59TxrZ/NSRbPp0kh+thvVnl5zTl6Al5ANN bJOhzHghhVaq3tCvZx0I+/lZBULO9IQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:54:51 2025 by rpki-client