$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2a8ed64a-578d-3330-ae0f-55bf0297ec63.roa File: 2a8ed64a-578d-3330-ae0f-55bf0297ec63.roa (raw, json) Hash identifier: GD1LeI4/YlC2unAn1TzyFbc6bAl7mSEs6DFhuiYH+RA= Subject key identifier: F4:4C:91:7A:E2:1F:8E:7E:F6:DD:A9:0D:ED:62:B4:31:A8:1D:8C:C5 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584D52434677917B3A058D305100 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2a8ed64a-578d-3330-ae0f-55bf0297ec63.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 396955 IP address blocks: 163.253.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:46:77:91:7b:3a:05:8d:30:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=df14a46a-aa4d-4d3d-9f2e-8f4ba4f9586e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1a:59:e6:f0:c7:3d:c4:10:90:5b:93:a0:7c: bc:14:1f:8e:2b:5e:8d:a9:77:0c:43:0a:67:21:f5: 6c:cf:b1:10:da:09:ba:6c:70:2c:86:58:2c:28:f6: fc:c2:b7:bc:8f:ea:2f:b8:85:dd:3d:ae:ec:8a:4a: e7:2b:b7:e0:2b:7e:3a:da:c7:15:d3:d4:db:fc:b8: 25:f7:08:65:39:24:49:dd:25:e3:e6:09:01:2a:04: 95:67:12:ac:da:0b:68:ad:fe:c1:bc:b9:93:e0:a5: 1e:21:dd:60:68:ff:87:47:d5:4c:3c:19:d6:7b:9a: b8:2c:af:d9:a9:d1:86:f2:b1:20:95:ab:c6:5f:20: a4:4e:50:f8:87:19:61:c1:7c:8f:b0:cf:47:71:37: b3:11:71:42:43:3e:b6:b5:c4:a7:40:20:b5:36:22: 3c:98:17:fd:6b:c4:c3:56:39:f0:19:d3:24:b2:5d: 07:21:c1:9e:4e:33:29:db:2f:9a:14:b6:9a:5a:94: d6:e6:68:f3:88:c6:9d:90:3a:a1:49:de:d1:4f:8d: 81:24:21:21:70:e4:a4:fc:57:ac:0b:7c:21:d1:28: cf:b9:21:f6:08:f0:1d:0b:a3:11:8d:ff:2d:3f:b0: b0:39:06:69:19:58:90:d2:50:77:49:c8:ce:3e:e2: ae:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4C:91:7A:E2:1F:8E:7E:F6:DD:A9:0D:ED:62:B4:31:A8:1D:8C:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2a8ed64a-578d-3330-ae0f-55bf0297ec63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b6:3c:b9:bc:3f:c5:3f:d5:74:37:f4:2b:a2:f1:a0:7b:8f: f2:44:5b:2f:33:c5:48:9a:18:17:5b:d9:20:fb:a4:d0:64:f1: 82:77:5c:a8:cc:14:cd:42:89:d1:4c:51:9a:b7:cd:37:e2:73: c3:aa:8b:44:32:76:0d:99:eb:e1:f3:0a:d7:76:ef:aa:5c:29: 7f:57:32:be:68:10:3e:63:4b:d4:95:6e:5a:11:9a:87:47:70: 6f:86:d2:7a:a2:ce:9a:29:c4:5c:ef:42:eb:66:07:4e:e6:95: 56:23:ce:be:09:ea:1f:c3:2f:c4:93:b9:40:02:36:b9:e6:33: 54:5d:44:d6:06:f0:bb:f7:04:f4:21:39:b8:ef:cd:3a:26:48: b7:6d:1c:d8:48:64:e3:36:40:1f:c6:86:f6:66:de:2a:b6:7c: a7:f4:bd:f4:65:e9:e7:09:9e:23:e5:89:66:af:f4:58:6e:22: e2:13:d8:0d:81:28:f2:5f:01:40:90:e1:54:e3:29:b5:01:ce: c2:f1:e8:ae:ce:31:d7:51:e2:be:32:2a:75:a7:45:2e:dd:3b: 5c:79:d7:cb:ca:00:89:e5:e6:f0:92:f2:5e:6a:65:df:99:cb: ce:af:19:33:15:00:6d:f1:55:84:9a:59:54:25:e3:99:6a:1f: a3:5b:b1:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ0Z3kXs6BY0wUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk ZGYxNGE0NmEtYWE0ZC00ZDNkLTlmMmUtOGY0YmE0Zjk1ODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hpZ5vDHPcQQkFuToHy8FB+OK16NqXcMQwpn IfVsz7EQ2gm6bHAshlgsKPb8wre8j+ovuIXdPa7sikrnK7fgK3462scV09Tb/Lgl 9whlOSRJ3SXj5gkBKgSVZxKs2gtorf7BvLmT4KUeId1gaP+HR9VMPBnWe5q4LK/Z qdGG8rEglavGXyCkTlD4hxlhwXyPsM9HcTezEXFCQz62tcSnQCC1NiI8mBf9a8TD VjnwGdMksl0HIcGeTjMp2y+aFLaaWpTW5mjziMadkDqhSd7RT42BJCEhcOSk/Fes C3wh0SjPuSH2CPAdC6MRjf8tP7CwOQZpGViQ0lB3ScjOPuKukwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRMkXriH45+9t2pDe1itDGoHYzFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMmE4ZWQ2NGEtNTc4ZC0z MzMwLWFlMGYtNTViZjAyOTdlYzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJC2PLm8P8U/1XQ39Cui8aB7j/JEWy8zxUiaGBdb2SD7pNBk8YJ3XKjM FM1CidFMUZq3zTfic8Oqi0Qydg2Z6+HzCtd276pcKX9XMr5oED5jS9SVbloRmodH cG+G0nqizpopxFzvQutmB07mlVYjzr4J6h/DL8STuUACNrnmM1RdRNYG8Lv3BPQh ObjvzTomSLdtHNhIZOM2QB/GhvZm3iq2fKf0vfRl6ecJniPliWav9FhuIuIT2A2B KPJfAUCQ4VTjKbUBzsLx6K7OMddR4r4yKnWnRS7dO1x518vKAInl5vCS8l5qZd+Z y86vGTMVAG3xVYSaWVQl45lqH6NbsaE= -----END CERTIFICATE-----Generated at Sat Apr 18 03:05:00 2026 by rpki-client