$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/db1ec6f1-6951-3aad-bd1e-5659bf43829b.roa File: db1ec6f1-6951-3aad-bd1e-5659bf43829b.roa (raw, json) Hash identifier: o2fGnJDPBsaVH3WzOWALkZLNMnPi4thRAU3RtXRQnXg= Subject key identifier: D4:60:76:80:04:35:EC:FC:52:F4:50:55:A7:2B:85:4D:C8:EF:CD:EA Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584EA791A5CA1B5A144EE03A8E00 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/db1ec6f1-6951-3aad-bd1e-5659bf43829b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 11537 IP address blocks: 163.253.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:a5:ca:1b:5a:14:4e:e0:3a:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=df1cc87a-0c54-48aa-85b7-79eea7c88702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:51:b7:f3:b9:c9:5d:20:cf:14:bc:a3:30:63: 49:ed:5c:c0:71:d0:b0:6d:fe:ad:f9:dd:b3:bd:25: 0a:f9:89:a2:64:58:d9:c6:02:62:06:56:07:e0:a2: 3c:fb:05:da:0b:83:1e:e9:69:79:40:6a:48:88:5b: 0a:ce:a8:72:61:55:d4:34:1f:b4:ed:e6:89:7d:65: 83:75:70:7a:ac:ce:c4:16:89:22:e2:c8:50:25:59: e8:80:12:70:b1:14:47:1c:58:de:0d:4c:cb:dc:d8: be:12:df:3d:62:51:1b:27:77:06:b7:07:6a:87:f1: 01:1c:ac:0a:f9:e2:9c:7b:63:30:a7:41:4e:89:ff: 61:2e:73:59:b8:63:0a:cc:e3:73:4a:ec:b6:e0:db: c9:b3:bc:38:88:fb:ec:0e:49:2a:77:83:59:ef:75: 0f:0e:94:05:82:53:57:68:dd:5c:a0:08:a0:42:61: dc:eb:a6:18:45:f8:83:7a:54:c3:33:8e:e1:8f:cc: 80:37:df:a1:c6:32:a0:1b:e7:b5:65:67:e5:77:bc: 5e:27:d9:ac:a7:6c:cc:fb:2f:3e:a6:fd:5a:38:24: 8a:22:8e:ff:a2:d9:7a:ba:86:31:8b:4a:17:4b:31: 65:de:9c:11:6a:c1:61:59:8f:4c:8c:af:b1:b0:6a: 27:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:60:76:80:04:35:EC:FC:52:F4:50:55:A7:2B:85:4D:C8:EF:CD:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/db1ec6f1-6951-3aad-bd1e-5659bf43829b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:ac:5d:c1:2a:ba:12:a8:5c:42:5f:e6:9c:1c:e4:8d:2d:e7: d1:46:f0:3d:66:70:4e:e7:58:19:8e:68:03:fb:92:52:34:ca: c0:2e:be:ab:aa:07:7b:b7:b8:f2:f2:92:91:9b:44:29:23:e4: 75:19:bd:87:1c:cd:07:d9:a9:88:36:f1:52:20:0e:7a:61:51: 1d:9d:1d:db:6c:ea:61:29:b6:ea:42:f3:a0:01:ef:75:71:1f: 82:91:29:aa:2b:f9:1d:f5:94:5f:47:b4:46:b5:80:35:09:11: 4d:14:bd:a8:ce:3a:78:90:a8:8c:3e:3a:a3:57:cf:c9:97:68: 3b:d1:e9:29:d4:43:b4:c8:07:15:54:0d:1a:e1:52:e4:0d:ac: 0f:10:a5:9a:bc:31:35:5d:4f:45:f7:39:4b:5b:26:41:bd:cc: 4b:fc:a3:1a:65:9d:76:f5:b2:12:cc:f8:21:41:0c:27:c8:50: 26:09:7e:6a:cf:6e:5f:e1:93:13:17:16:38:c3:86:7a:89:58: 34:14:59:04:f2:b7:b5:73:ff:b6:64:47:00:ee:44:32:7f:3b: 22:77:bf:ba:96:4c:6a:3f:a0:c2:91:5a:6d:a3:53:80:34:cd: 63:53:7c:4b:62:c4:56:41:a7:ea:45:8c:97:3f:dc:6f:c0:20: 51:9b:18:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkaXKG1oUTuA6jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZGYxY2M4N2EtMGM1NC00OGFhLTg1YjctNzllZWE3Yzg4NzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVG387nJXSDPFLyjMGNJ7VzAcdCwbf6t+d2z vSUK+YmiZFjZxgJiBlYH4KI8+wXaC4Me6Wl5QGpIiFsKzqhyYVXUNB+07eaJfWWD dXB6rM7EFoki4shQJVnogBJwsRRHHFjeDUzL3Ni+Et89YlEbJ3cGtwdqh/EBHKwK +eKce2Mwp0FOif9hLnNZuGMKzONzSuy24NvJs7w4iPvsDkkqd4NZ73UPDpQFglNX aN1coAigQmHc66YYRfiDelTDM47hj8yAN9+hxjKgG+e1ZWfld7xeJ9msp2zM+y8+ pv1aOCSKIo7/otl6uoYxi0oXSzFl3pwRasFhWY9MjK+xsGonfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRgdoAENez8UvRQVacrhU3I783qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZGIxZWM2ZjEtNjk1MS0z YWFkLWJkMWUtNTY1OWJmNDM4MjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo/0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOsXcEquhKoXEJf5pwc5I0t59FG8D1mcE7nWBmOaAP7klI0ysAuvquq B3u3uPLykpGbRCkj5HUZvYcczQfZqYg28VIgDnphUR2dHdts6mEptupC86AB73Vx H4KRKaor+R31lF9HtEa1gDUJEU0UvajOOniQqIw+OqNXz8mXaDvR6SnUQ7TIBxVU DRrhUuQNrA8QpZq8MTVdT0X3OUtbJkG9zEv8oxplnXb1shLM+CFBDCfIUCYJfmrP bl/hkxMXFjjDhnqJWDQUWQTyt7Vz/7ZkRwDuRDJ/OyJ3v7qWTGo/oMKRWm2jU4A0 zWNTfEtixFZBp+pFjJc/3G/AIFGbGFw= -----END CERTIFICATE-----Generated at Wed Jul 29 09:33:31 2026 by rpki-client