$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a225d617-d65c-3895-8039-5375646dc1b8.roa File: a225d617-d65c-3895-8039-5375646dc1b8.roa (raw, json) Hash identifier: CcYZHKc7OGql+3bXMm99zkP0ZzFuWVQI4Jrov0ILgA4= Subject key identifier: 72:1A:EA:18:17:2E:72:F4:A7:C1:12:75:D3:9C:63:37:05:B4:ED:8F Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584F71EDB7BA47768D7A44AEAD80 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a225d617-d65c-3895-8039-5375646dc1b8.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 11164 IP address blocks: 163.253.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:b7:ba:47:76:8d:7a:44:ae:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=5c004b8a-818e-40c0-919c-088791a4969b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3f:52:f5:f5:12:d0:77:8a:0b:64:66:37:c3: 40:92:c4:f3:75:0f:84:85:8b:0a:38:83:53:49:7f: 23:7f:72:a7:1e:57:87:3f:1c:a1:52:a2:d8:3c:0e: 84:84:3f:d9:19:99:16:b8:4f:b2:d2:f9:d8:02:8c: c6:35:51:95:a3:c7:0e:f7:8d:7f:42:c4:e3:9b:59: 33:4f:a3:10:14:61:55:b6:d3:b9:3b:47:43:cf:7d: e5:91:68:63:97:05:a7:d2:d9:34:9d:73:b9:be:ef: f2:bc:cd:93:31:ff:5a:3c:69:fa:71:35:f3:30:d4: 95:ae:d8:77:01:64:e7:ae:fb:14:d7:ba:66:3a:8c: 50:21:5b:10:34:a7:eb:c9:46:75:12:07:46:e3:2c: 71:e9:3d:bf:95:ad:8d:18:1b:3b:a7:de:67:65:83: fe:a9:c4:ea:05:65:60:9c:4f:15:d8:f8:be:d1:26: ed:6b:fd:8f:af:67:35:93:4e:27:ed:eb:54:7a:6f: f1:d2:31:60:52:9b:9f:ab:92:ea:9d:76:ce:d1:0f: d5:80:40:41:2b:24:88:89:3f:c4:a8:f7:8c:ae:c2: ce:57:30:e6:f8:51:56:67:da:da:1b:5d:8a:ca:d7: 9b:1c:22:2b:f8:51:4f:77:ec:9c:61:93:81:7f:f9: 81:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1A:EA:18:17:2E:72:F4:A7:C1:12:75:D3:9C:63:37:05:B4:ED:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a225d617-d65c-3895-8039-5375646dc1b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:13:1d:ac:f4:f6:f6:ed:8f:d9:77:93:f2:7d:31:cc:24:bf: 8b:4f:8b:a2:19:ec:1f:6d:04:73:fe:18:5a:ad:df:32:1c:cc: ec:7c:1c:3e:d7:d4:a0:79:59:ca:fc:bc:44:f6:ee:9c:4d:d8: e9:81:9b:4c:1b:b2:af:c5:2a:ce:10:3a:b8:24:23:48:8e:1c: 02:46:90:ab:b9:9a:c1:8c:59:d1:65:78:d5:3a:16:41:e3:dc: f5:09:14:27:7a:f8:13:94:3c:b1:04:e2:1a:9e:6f:61:58:1f: 12:76:0c:74:7c:5d:5d:82:89:28:51:54:e3:26:7e:8f:4b:f7: 68:94:68:03:ac:b2:17:42:84:cf:2a:d9:c4:c6:d6:81:93:80: 74:2d:94:e0:b5:36:59:09:27:af:6e:ee:d1:18:3a:d0:0f:0f: 4f:dc:81:d7:c9:18:d4:fc:a8:94:0a:46:ce:f3:a2:39:74:2e: e0:87:3b:01:36:43:be:8a:74:34:fd:42:20:5a:69:cb:de:8d: 18:2e:86:82:c9:19:ba:54:49:c3:f3:d8:34:0c:79:38:8b:0e: b5:bd:98:4e:06:b6:36:e0:61:2e:cd:59:1c:db:45:a1:58:0f: 52:b4:df:59:94:56:6b:c8:aa:41:b6:f6:9c:ad:70:c6:5f:99: e4:46:78:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7be6R3aNekSurYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NWMwMDRiOGEtODE4ZS00MGMwLTkxOWMtMDg4NzkxYTQ5NjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj9S9fUS0HeKC2RmN8NAksTzdQ+EhYsKOINT SX8jf3KnHleHPxyhUqLYPA6EhD/ZGZkWuE+y0vnYAozGNVGVo8cO941/QsTjm1kz T6MQFGFVttO5O0dDz33lkWhjlwWn0tk0nXO5vu/yvM2TMf9aPGn6cTXzMNSVrth3 AWTnrvsU17pmOoxQIVsQNKfryUZ1EgdG4yxx6T2/la2NGBs7p95nZYP+qcTqBWVg nE8V2Pi+0Sbta/2Pr2c1k04n7etUem/x0jFgUpufq5LqnXbO0Q/VgEBBKySIiT/E qPeMrsLOVzDm+FFWZ9raG12KytebHCIr+FFPd+ycYZOBf/mB/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIa6hgXLnL0p8ESddOcYzcFtO2PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYTIyNWQ2MTctZDY1Yy0z ODk1LTgwMzktNTM3NTY0NmRjMWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8THaz09vbtj9l3k/J9Mcwkv4tPi6IZ7B9tBHP+GFqt3zIczOx8HD7X 1KB5Wcr8vET27pxN2OmBm0wbsq/FKs4QOrgkI0iOHAJGkKu5msGMWdFleNU6FkHj 3PUJFCd6+BOUPLEE4hqeb2FYHxJ2DHR8XV2CiShRVOMmfo9L92iUaAOsshdChM8q 2cTG1oGTgHQtlOC1NlkJJ69u7tEYOtAPD0/cgdfJGNT8qJQKRs7zojl0LuCHOwE2 Q76KdDT9QiBaacvejRguhoLJGbpUScPz2DQMeTiLDrW9mE4GtjbgYS7NWRzbRaFY D1K031mUVmvIqkG29pytcMZfmeRGeM4= -----END CERTIFICATE-----Generated at Sat Oct 10 14:44:33 2026 by rpki-client