$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3405a899-675d-3694-b986-0720ff81db0e.roa File: 3405a899-675d-3694-b986-0720ff81db0e.roa (raw, json) Hash identifier: McaMIQJ8w8A19FBhXPEOSgMl81RVDv8FvokHlx8HWI0= Subject key identifier: C1:73:59:C4:0C:68:8B:5B:5E:D0:B5:72:66:63:21:22:FA:5E:01:D8 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584AA160CD7ABEBCF55E93C59260 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3405a899-675d-3694-b986-0720ff81db0e.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 11537 IP address blocks: 163.253.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:cd:7a:be:bc:f5:5e:93:c5:92:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=8dbe6a9f-bbeb-40f2-8665-7958d494a317 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5f:e8:0a:9f:62:14:b8:8e:a7:58:b3:18:b8: 40:9c:85:a1:ff:82:eb:b0:1a:bd:fe:96:77:f9:b3: 45:9e:db:00:3e:da:a5:d1:55:b6:2f:1e:bd:cc:65: dc:08:c8:57:fd:90:d4:26:fe:fa:07:12:1f:a4:3b: 80:fe:04:34:d0:9a:5f:ee:c5:e1:c1:06:c5:35:0c: a8:66:b7:fe:cd:d5:ab:b6:dd:d5:91:27:93:d0:d8: a4:79:00:e5:8e:70:a7:0f:db:58:8b:db:6b:f8:82: 6f:ad:c6:57:c3:09:f0:db:e8:96:27:41:18:32:bb: bc:6f:91:ff:84:30:15:43:ce:5f:4b:98:ac:4b:c3: e3:84:f8:45:9c:9b:94:11:e8:8d:b5:86:7a:b0:86: 23:49:bf:f4:be:0b:e3:be:9b:cc:86:62:eb:51:4f: 67:54:a5:34:ee:50:d1:6e:25:77:c2:29:6f:fc:e8: dc:a4:54:06:6a:8c:22:64:84:0e:43:7b:a2:16:10: aa:ac:53:bf:60:53:80:01:fb:9d:1f:56:d0:22:90: 1d:ad:d3:11:ea:eb:42:a3:25:93:25:9f:6b:2f:16: 78:29:1e:82:0a:ce:48:05:5c:09:19:34:d0:fb:97: e6:98:6d:96:68:cb:d5:a9:37:1b:8a:ca:7a:7f:aa: d7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:73:59:C4:0C:68:8B:5B:5E:D0:B5:72:66:63:21:22:FA:5E:01:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/3405a899-675d-3694-b986-0720ff81db0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:8e:a5:cc:ec:99:b4:db:07:69:ba:b5:f1:29:6c:3c:22:69: 9d:cc:5d:58:d4:17:bf:60:f2:4c:0e:6d:4c:4b:83:03:cb:57: 2f:09:dc:84:b0:b0:75:3e:1d:fb:86:0f:43:a5:40:cc:a1:64: 79:4a:5a:89:e0:ef:90:5c:c4:75:e9:51:f2:0d:3c:d4:a5:95: 07:5a:69:c8:25:b1:c6:fb:cb:ef:14:9b:89:1a:e7:5e:46:c7: 98:37:97:c6:1d:14:32:dc:f4:19:26:51:b1:66:1e:86:c7:19: b0:14:10:3b:08:03:e7:64:58:cd:36:6f:05:b1:12:bf:64:4a: 44:c9:3a:3b:36:aa:4e:75:64:66:11:42:d9:74:f6:7f:3a:c3: a3:37:a0:31:fa:cf:4d:77:b2:d1:8f:2d:f7:c0:40:86:11:9e: e1:d3:b3:b0:c7:3b:34:48:b2:9f:ae:18:34:95:2f:77:a9:9e: 1c:bd:53:c5:55:31:33:ec:22:7f:f1:b3:cd:61:51:30:eb:e6: 45:bf:41:d7:90:6d:f3:9a:1d:39:b3:95:ec:3e:66:dd:b9:42: 2a:54:c9:79:dd:5a:d8:51:78:a0:39:50:54:79:42:bc:47:90: 47:7b:87:87:43:01:83:68:7d:37:ca:ca:62:ec:4c:a7:96:5d: a2:53:da:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYM16vrz1XpPFkmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk OGRiZTZhOWYtYmJlYi00MGYyLTg2NjUtNzk1OGQ0OTRhMzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1/oCp9iFLiOp1izGLhAnIWh/4LrsBq9/pZ3 +bNFntsAPtql0VW2Lx69zGXcCMhX/ZDUJv76BxIfpDuA/gQ00Jpf7sXhwQbFNQyo Zrf+zdWrtt3VkSeT0NikeQDljnCnD9tYi9tr+IJvrcZXwwnw2+iWJ0EYMru8b5H/ hDAVQ85fS5isS8PjhPhFnJuUEeiNtYZ6sIYjSb/0vgvjvpvMhmLrUU9nVKU07lDR biV3wilv/OjcpFQGaowiZIQOQ3uiFhCqrFO/YFOAAfudH1bQIpAdrdMR6utCoyWT JZ9rLxZ4KR6CCs5IBVwJGTTQ+5fmmG2WaMvVqTcbisp6f6rXtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFzWcQMaItbXtC1cmZjISL6XgHYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMzQwNWE4OTktNjc1ZC0z Njk0LWI5ODYtMDcyMGZmODFkYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiOpczsmbTbB2m6tfEpbDwiaZ3MXVjUF79g8kwObUxLgwPLVy8J3ISw sHU+HfuGD0OlQMyhZHlKWong75BcxHXpUfINPNSllQdaacglscb7y+8Um4ka515G x5g3l8YdFDLc9BkmUbFmHobHGbAUEDsIA+dkWM02bwWxEr9kSkTJOjs2qk51ZGYR Qtl09n86w6M3oDH6z013stGPLffAQIYRnuHTs7DHOzRIsp+uGDSVL3epnhy9U8VV MTPsIn/xs81hUTDr5kW/QdeQbfOaHTmzlew+Zt25QipUyXndWthReKA5UFR5QrxH kEd7h4dDAYNofTfKymLsTKeWXaJT2ko= -----END CERTIFICATE-----Generated at Sat Aug 9 10:40:20 2025 by rpki-client