$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af3d535e-1c31-32d1-a6a6-68041d0d7365.roa File: af3d535e-1c31-32d1-a6a6-68041d0d7365.roa (raw, json) Hash identifier: h6zyC1CGUtGj3+KJuIYpRFTIBjYh3/eK7I4ha3UXgX8= Subject key identifier: 2D:FF:AB:64:2E:79:C6:45:53:78:42:16:20:FF:15:D6:DB:FA:1C:96 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584F6F2301F6390F1373AF3CAD40 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af3d535e-1c31-32d1-a6a6-68041d0d7365.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 396961 IP address blocks: 163.253.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:01:f6:39:0f:13:73:af:3c:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=6d38124b-0777-4123-aeb4-befb4e44f92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7b:c7:ad:a2:c4:fc:eb:e7:86:62:c1:e7:92: 8d:55:e9:4e:ba:f0:5e:4d:cc:96:09:81:40:f9:c5: 9b:8e:18:f9:e9:f4:28:f6:dc:43:5b:9b:2a:58:6e: d6:06:0b:a3:1e:53:76:cc:b9:59:1d:81:ac:ec:11: d8:e8:64:f4:99:e7:2c:29:ea:89:2d:2e:cd:e8:e1: 83:33:f6:39:5d:6c:a9:6a:3a:fd:e2:dd:88:d0:54: 05:3c:6b:fe:69:57:56:79:b0:d8:bd:72:6a:6f:fe: d5:99:ff:25:a8:fd:ad:86:78:53:b7:9a:8a:d8:51: c1:3c:e7:f8:1d:62:e5:1d:fe:53:03:35:e1:a1:84: a2:79:03:d2:67:7a:17:2b:fc:85:cc:db:17:62:9c: af:79:af:13:f9:1f:84:3a:d0:d0:19:1d:c9:ef:4c: 1f:d2:2c:dd:fc:a6:f0:ad:2d:0f:21:49:7d:2e:c6: a9:af:11:80:9d:f9:77:60:47:e9:10:fd:0a:ef:56: 91:c6:bc:c9:d2:d0:da:5f:c7:8f:0a:43:18:c2:73: 33:91:e7:01:1c:83:04:c7:c6:a2:14:11:27:57:1b: b7:00:70:35:94:cb:a7:1d:4a:16:3a:ed:9c:1e:5b: c1:c3:2e:f4:af:9c:92:bf:55:56:66:12:de:0d:d7: a5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FF:AB:64:2E:79:C6:45:53:78:42:16:20:FF:15:D6:DB:FA:1C:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af3d535e-1c31-32d1-a6a6-68041d0d7365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:bd:62:1b:4c:e7:75:8d:dc:56:e0:85:f8:32:38:fe:c5:c8: 31:b5:1c:2b:ee:3f:12:b2:64:28:8d:4f:3f:fd:3d:52:18:2b: e9:0b:66:d9:e4:c7:66:d1:92:34:66:84:d0:b1:73:e2:90:fe: 1c:7a:6b:81:b1:e4:4e:a4:1c:f5:76:a1:36:72:4c:74:4e:b0: df:e4:bb:05:a2:56:d3:87:b4:ff:53:9e:82:6e:59:4d:8a:9c: 80:c8:cb:d4:9e:64:12:40:df:71:cc:d6:f6:41:1d:49:82:01: f5:54:91:08:06:42:62:1b:6d:dc:fc:71:2f:23:c4:48:a9:06: a5:02:65:36:35:eb:8a:ac:aa:89:4f:e9:0a:dd:fb:2a:53:fa: e1:18:d0:d9:26:df:26:d8:03:c5:8a:ac:df:5f:bc:21:36:f8: 2e:d1:a6:37:d6:c5:61:42:66:d6:85:82:42:61:03:8a:cc:b2: 29:62:d7:7f:20:04:33:12:87:c6:ee:86:f8:1a:af:6f:db:d7: d9:68:13:37:67:e9:79:e0:f0:01:c6:c5:00:63:5a:c9:f1:73: 14:1d:c6:8a:cd:51:1d:4f:e5:96:30:6e:40:3f:6a:68:df:8d: c5:1a:bb:e0:bb:5d:01:60:e8:42:35:85:df:6f:f2:28:ba:ba: c7:26:cb:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIwH2OQ8Tc688rUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk NmQzODEyNGItMDc3Ny00MTIzLWFlYjQtYmVmYjRlNDRmOTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3vHraLE/OvnhmLB55KNVelOuvBeTcyWCYFA +cWbjhj56fQo9txDW5sqWG7WBgujHlN2zLlZHYGs7BHY6GT0mecsKeqJLS7N6OGD M/Y5XWypajr94t2I0FQFPGv+aVdWebDYvXJqb/7Vmf8lqP2thnhTt5qK2FHBPOf4 HWLlHf5TAzXhoYSieQPSZ3oXK/yFzNsXYpyvea8T+R+EOtDQGR3J70wf0izd/Kbw rS0PIUl9LsaprxGAnfl3YEfpEP0K71aRxrzJ0tDaX8ePCkMYwnMzkecBHIMEx8ai FBEnVxu3AHA1lMunHUoWOu2cHlvBwy70r5ySv1VWZhLeDdelBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3/q2QuecZFU3hCFiD/Fdbb+hyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYWYzZDUzNWUtMWMzMS0z MmQxLWE2YTYtNjgwNDFkMGQ3MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/1JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIS9YhtM53WN3FbghfgyOP7FyDG1HCvuPxKyZCiNTz/9PVIYK+kLZtnk x2bRkjRmhNCxc+KQ/hx6a4Gx5E6kHPV2oTZyTHROsN/kuwWiVtOHtP9TnoJuWU2K nIDIy9SeZBJA33HM1vZBHUmCAfVUkQgGQmIbbdz8cS8jxEipBqUCZTY164qsqolP 6Qrd+ypT+uEY0Nkm3ybYA8WKrN9fvCE2+C7RpjfWxWFCZtaFgkJhA4rMsili138g BDMSh8buhvgar2/b19loEzdn6Xng8AHGxQBjWsnxcxQdxorNUR1P5ZYwbkA/amjf jcUau+C7XQFg6EI1hd9v8ii6uscmy2M= -----END CERTIFICATE-----Generated at Sat Oct 10 13:44:27 2026 by rpki-client