
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2ec7296e-d780-32a1-af56-003ea6c04f3c.roa
File: 2ec7296e-d780-32a1-af56-003ea6c04f3c.roa (raw, json)
Hash identifier: UU07Z7FB7Ia7S/sl6XbcXMsSPn1WQNdw7DxZJBTcC6k=
Subject key identifier: 05:09:E0:80:D1:C6:42:D2:0B:7D:2F:F1:59:FD:4C:2C:74:AD:CA:08
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584E210EEF01B672FA271189A480
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2ec7296e-d780-32a1-af56-003ea6c04f3c.roa
Signing time: Wed 10 Jun 2026 21:00:11 +0000
ROA not before: Wed 10 Jun 2026 21:00:11 +0000
ROA not after: Tue 08 Sep 2026 21:00:11 +0000
asID: 11537
IP address blocks: 163.253.40.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:21:0e:ef:01:b6:72:fa:27:11:89:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Jun 10 21:00:11 2026 GMT
Not After : Sep 8 21:00:11 2026 GMT
Subject: CN=204cbb39-b611-401b-a3c0-d93d24ff3267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:de:8f:4a:18:b0:2a:7d:82:1c:a4:00:4a:
9a:13:e8:5b:0e:b1:0f:c7:12:a4:88:50:c2:e6:40:
58:a2:3e:30:c2:cf:1b:9a:da:59:1b:e6:ae:72:80:
db:7a:33:d8:03:bf:84:c1:36:17:e6:33:01:12:6a:
1d:62:d8:41:a8:56:c4:08:4c:4b:c5:ae:97:c9:ef:
73:6c:17:68:a1:34:d4:af:00:91:7b:be:a5:4b:a6:
b6:1c:30:72:43:af:c8:78:34:fa:9d:51:10:0c:4e:
5f:46:b2:9e:1d:3b:83:fc:79:e1:84:91:41:bf:d0:
54:61:d4:91:a3:a6:b6:bb:1a:ca:e8:e4:c3:60:1e:
ac:04:5a:a3:27:9d:80:d8:c1:bb:cf:8d:f9:5e:c7:
25:2e:b0:17:9e:d5:c9:d3:0e:f7:22:d8:69:aa:28:
16:27:aa:49:62:4c:f3:1d:e3:2c:87:d0:5d:d9:de:
c1:a9:f2:d3:af:07:01:5c:28:91:e2:38:39:fb:0a:
e8:72:d2:2b:90:1b:da:86:af:14:62:68:60:88:96:
99:0f:cf:89:50:1c:e3:c4:f7:98:c9:ea:24:d4:d0:
0b:63:3d:51:53:82:c2:4f:a9:ab:eb:e3:3e:37:a3:
ea:4d:3d:11:4c:11:c1:95:78:f3:4e:9c:a5:7d:68:
8d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:09:E0:80:D1:C6:42:D2:0B:7D:2F:F1:59:FD:4C:2C:74:AD:CA:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2ec7296e-d780-32a1-af56-003ea6c04f3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.40.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d7:ae:6e:c8:eb:3c:fc:06:b1:39:c3:41:c7:2d:9f:f7:7c:2b:
8b:11:f0:06:0e:fc:25:82:07:b2:5b:05:51:8d:3e:39:15:35:
f0:59:b0:b0:dc:5b:67:b7:64:d2:78:33:f7:9e:97:8e:c5:40:
d0:65:50:57:09:62:61:d6:bb:01:92:f4:9f:7e:4e:0e:f7:d3:
3a:ac:41:fe:40:c5:fd:8d:d1:62:a9:30:17:0e:41:a3:81:8b:
ec:a6:b1:cf:ac:29:b7:f7:f1:24:fb:36:46:73:f0:b5:ad:25:
80:3e:5f:88:85:50:9f:63:81:6a:58:42:d3:39:aa:00:e4:38:
c0:a0:54:cf:30:25:e2:3d:c6:4d:f0:d1:de:25:93:b2:7f:4e:
51:8e:9c:48:f3:1c:c4:48:31:87:8c:a3:9c:f3:39:61:b7:77:
83:e8:37:42:26:a5:96:cb:25:75:b9:8c:64:10:26:37:c8:8c:
6b:1a:c6:d2:1b:6d:0b:2c:b5:d0:d9:4b:da:0d:72:81:06:5a:
50:9a:a6:fb:0d:f5:80:80:8f:98:b5:28:91:55:a1:d1:45:6d:
09:ce:e4:19:08:24:09:9a:dc:07:25:66:d2:bb:36:db:c8:6f:
87:cf:cd:5f:ec:dd:31:b0:92:78:77:4a:b9:e5:54:72:1f:78:
41:f1:c1:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hDu8BtnL6JxGJpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk
MjA0Y2JiMzktYjYxMS00MDFiLWEzYzAtZDkzZDI0ZmYzMjY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaPej0oYsCp9ghykAEqaE+hbDrEPxxKkiFDC
5kBYoj4wws8bmtpZG+aucoDbejPYA7+EwTYX5jMBEmodYthBqFbECExLxa6Xye9z
bBdooTTUrwCRe76lS6a2HDByQ6/IeDT6nVEQDE5fRrKeHTuD/HnhhJFBv9BUYdSR
o6a2uxrK6OTDYB6sBFqjJ52A2MG7z435XsclLrAXntXJ0w73IthpqigWJ6pJYkzz
HeMsh9Bd2d7BqfLTrwcBXCiR4jg5+wroctIrkBvahq8UYmhgiJaZD8+JUBzjxPeY
yeok1NALYz1RU4LCT6mr6+M+N6PqTT0RTBHBlXjzTpylfWiNHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAUJ4IDRxkLSC30v8Vn9TCx0rcoIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMmVjNzI5NmUtZDc4MC0z
MmExLWFmNTYtMDAzZWE2YzA0ZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBo/0oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANeubsjrPPwGsTnDQcctn/d8K4sR8AYO/CWCB7JbBVGNPjkVNfBZsLDc
W2e3ZNJ4M/eel47FQNBlUFcJYmHWuwGS9J9+Tg730zqsQf5Axf2N0WKpMBcOQaOB
i+ymsc+sKbf38ST7NkZz8LWtJYA+X4iFUJ9jgWpYQtM5qgDkOMCgVM8wJeI9xk3w
0d4lk7J/TlGOnEjzHMRIMYeMo5zzOWG3d4PoN0ImpZbLJXW5jGQQJjfIjGsaxtIb
bQsstdDZS9oNcoEGWlCapvsN9YCAj5i1KJFVodFFbQnO5BkIJAma3AclZtK7NtvI
b4fPzV/s3TGwknh3SrnlVHIfeEHxwRc=
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:41:18 2026 by rpki-client