$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/947c816e-83e3-3e0c-bc4d-fee99495eb34.roa File: 947c816e-83e3-3e0c-bc4d-fee99495eb34.roa (raw, json) Hash identifier: uPKq4yJb87m4eO3teeXX40eN6k691XBBs/j+WkxfsYk= Subject key identifier: EB:AD:63:D0:49:87:D5:85:8E:4F:D3:90:85:55:4D:F1:64:B1:D0:F0 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584B4D11DE1CF9365E718B253A80 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/947c816e-83e3-3e0c-bc4d-fee99495eb34.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 396955 IP address blocks: 163.253.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:de:1c:f9:36:5e:71:8b:25:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=0292de4d-535f-4c87-ae27-72a0e073eb9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a6:8d:24:09:ff:01:1b:ff:a7:cc:f6:68:6e: f0:95:0a:0b:78:be:99:f5:21:0c:97:fe:04:d4:81: 0f:e5:42:83:e1:c5:d1:d6:15:a9:46:ef:96:56:af: 6b:67:90:f9:2e:91:44:d2:ab:ee:ed:04:dd:28:2e: ad:d4:ae:6b:19:84:4a:27:70:6c:1e:06:fe:ab:dc: ec:56:c3:4a:36:52:ac:47:de:aa:d4:1a:3f:de:78: c2:09:0e:48:9c:d9:6e:f4:ff:f7:88:b9:f5:88:e0: d0:d7:68:76:d0:27:4d:7b:ad:da:99:e1:aa:83:e6: c9:3f:19:95:ed:45:de:67:7f:22:c9:11:20:1d:f4: ab:b7:28:a3:cc:38:ea:6d:46:ba:bf:23:eb:59:bf: 4a:ea:72:61:00:30:2c:ac:33:cc:b8:eb:84:0f:99: a3:02:d9:e9:21:d0:ba:2b:f7:26:d3:29:c4:05:32: 9d:4e:58:83:14:7f:a4:5a:0d:09:ae:70:14:c4:0f: 0d:dd:45:ff:e1:56:fd:f3:d0:1d:d3:b9:0b:94:88: 77:c5:8d:94:29:71:ab:f1:24:bf:2f:56:03:e0:64: 16:6b:fc:aa:d7:43:76:21:cb:44:6e:9d:0b:d9:7d: e8:45:63:89:32:6b:99:07:fb:55:dc:9e:d2:4a:db: c5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:AD:63:D0:49:87:D5:85:8E:4F:D3:90:85:55:4D:F1:64:B1:D0:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/947c816e-83e3-3e0c-bc4d-fee99495eb34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:05:64:be:e9:47:9d:aa:8b:64:50:6a:fd:e2:20:34:d8:8e: aa:3d:ec:27:b0:6d:96:86:60:e0:de:7c:28:bc:6a:b0:d9:36: d0:64:cd:6a:85:01:87:01:29:08:2a:9f:3d:fd:e8:78:28:81: 48:be:8f:5c:e3:02:f9:f7:2d:64:13:88:7f:8e:34:05:56:2a: 3d:d3:4d:9c:ad:ad:db:72:e6:8a:01:82:66:fb:ca:1b:50:ed: be:3e:0f:26:d5:9a:54:1c:4f:f0:5a:9d:42:68:94:f9:6a:df: 7b:c1:23:60:33:a9:71:40:71:73:f0:d4:07:7a:2c:4f:2a:bc: 56:5f:ad:fc:e2:a7:54:f6:41:56:bd:d8:e1:58:a0:09:18:d9: 89:97:d0:f8:38:79:1a:0b:54:16:27:70:9b:83:bd:55:e4:2f: 45:89:a9:7a:b4:ed:ea:77:38:17:dd:84:3e:5b:58:99:68:c5: 72:24:3c:32:7d:19:dd:c8:c6:49:21:f8:39:fe:89:01:d1:30: 28:66:48:4b:04:ef:7a:4d:ac:01:66:83:6d:03:84:75:60:a3: 0d:95:5e:74:a7:90:7a:e6:a1:13:17:29:02:c6:07:16:a4:e7: 0b:75:9e:90:d1:9e:bd:32:00:3b:b8:43:79:60:2b:7e:88:55: a5:0d:27:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEd4c+TZecYslOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MDI5MmRlNGQtNTM1Zi00Yzg3LWFlMjctNzJhMGUwNzNlYjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16aNJAn/ARv/p8z2aG7wlQoLeL6Z9SEMl/4E 1IEP5UKD4cXR1hWpRu+WVq9rZ5D5LpFE0qvu7QTdKC6t1K5rGYRKJ3BsHgb+q9zs VsNKNlKsR96q1Bo/3njCCQ5InNlu9P/3iLn1iODQ12h20CdNe63ameGqg+bJPxmV 7UXeZ38iyREgHfSrtyijzDjqbUa6vyPrWb9K6nJhADAsrDPMuOuED5mjAtnpIdC6 K/cm0ynEBTKdTliDFH+kWg0JrnAUxA8N3UX/4Vb989Ad07kLlIh3xY2UKXGr8SS/ L1YD4GQWa/yq10N2IctEbp0L2X3oRWOJMmuZB/tV3J7SStvFyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOutY9BJh9WFjk/TkIVVTfFksdDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvOTQ3YzgxNmUtODNlMy0z ZTBjLWJjNGQtZmVlOTk0OTVlYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAFZL7pR52qi2RQav3iIDTYjqo97CewbZaGYODefCi8arDZNtBkzWqF AYcBKQgqnz396HgogUi+j1zjAvn3LWQTiH+ONAVWKj3TTZytrdty5ooBgmb7yhtQ 7b4+DybVmlQcT/BanUJolPlq33vBI2AzqXFAcXPw1Ad6LE8qvFZfrfzip1T2QVa9 2OFYoAkY2YmX0Pg4eRoLVBYncJuDvVXkL0WJqXq07ep3OBfdhD5bWJloxXIkPDJ9 Gd3Ixkkh+Dn+iQHRMChmSEsE73pNrAFmg20DhHVgow2VXnSnkHrmoRMXKQLGBxak 5wt1npDRnr0yADu4Q3lgK36IVaUNJ34= -----END CERTIFICATE-----Generated at Wed Nov 5 13:24:11 2025 by rpki-client