$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ff513f69-a522-37ec-bb6a-87627b3e52a9.roa File: ff513f69-a522-37ec-bb6a-87627b3e52a9.roa (raw, json) Hash identifier: sHlSGcqzZcA6Wznvvqqc4xS/dvKsAI7uGCz9NCGlLaI= Subject key identifier: A2:E1:C6:1F:F3:07:06:1C:77:CB:85:B5:59:08:42:B1:BD:3E:3A:11 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584D7B6A9D70BF73BBC24F0B819C Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ff513f69-a522-37ec-bb6a-87627b3e52a9.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 11537 IP address blocks: 163.253.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:9d:70:bf:73:bb:c2:4f:0b:81:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=dc73ad79-8970-42d7-a269-3074c39955ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:74:39:3e:92:3c:96:c6:80:5a:50:2f:44:0e: d8:d1:84:08:90:fe:31:ea:66:18:8d:1c:3d:1b:07: f9:d2:ab:96:56:41:cd:36:56:e1:33:f8:62:06:bf: 07:ad:b5:c6:67:83:00:3b:77:31:f5:bd:ec:0c:41: 23:6a:0d:bb:ea:fa:6c:5a:61:70:b6:3b:95:72:d3: fe:83:33:f4:d1:f4:fd:12:22:fb:29:d5:0a:9a:8d: 33:83:c4:b8:0a:e3:a8:b1:9b:1c:e7:57:f3:1f:2f: 06:ff:83:93:72:d8:66:ce:24:b1:4b:07:43:03:51: 64:09:b2:27:74:80:d7:aa:55:3f:ca:ce:a2:d6:9c: 4d:47:aa:bd:2b:e1:f7:80:4d:bf:d8:10:d3:bb:13: 00:2a:36:26:0b:d3:55:29:c4:f9:1b:ef:5c:0c:a9: 0b:ae:a7:07:0a:2b:32:e5:c7:37:78:df:54:a9:b0: b9:2d:46:d2:bd:53:84:6b:32:d8:26:49:87:05:97: 2e:c9:6a:cc:c6:19:b9:1c:b3:a2:c5:c9:f0:7e:c0: 2b:00:82:13:92:1c:71:bf:fc:cf:03:86:40:3e:f8: ad:f8:cd:30:66:c1:8d:e4:96:c9:16:b8:09:8b:f0: cd:7a:1d:19:12:da:e4:04:86:2f:e9:1f:f7:42:50: 92:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E1:C6:1F:F3:07:06:1C:77:CB:85:B5:59:08:42:B1:BD:3E:3A:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ff513f69-a522-37ec-bb6a-87627b3e52a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:cd:77:53:db:b5:79:d9:27:0b:ae:42:34:39:69:6d:ea:47: 04:34:a9:cf:ef:68:ae:6b:3e:20:46:51:7b:99:fb:68:5e:a7: d4:42:05:88:5c:f6:63:1d:85:b2:81:49:e2:7e:c6:03:08:75: a6:44:a5:58:d6:ff:03:2d:a2:a0:dd:64:89:4f:d8:7f:2d:ae: 3c:ec:db:32:79:27:ea:63:ca:13:e7:22:61:1b:36:7b:be:e0: dd:4a:33:cf:41:d3:6f:d1:17:2e:4b:aa:87:80:68:02:ee:17: 88:29:c0:2f:0f:55:79:01:6d:05:de:d6:b1:ec:95:8c:2e:cf: 2c:69:f5:7e:ef:3c:57:7d:d4:e6:2d:f3:ff:10:3d:90:fa:d2: 6c:c8:95:61:66:3b:f9:b0:ea:bd:d8:db:fe:96:03:fc:8a:47: ec:bd:d4:a5:30:3e:cf:4c:25:4f:5d:0a:13:3c:6c:c9:4b:d5: d5:30:95:ac:2d:34:15:0f:90:31:25:50:1a:dc:49:4f:b7:fd: 43:ec:0e:f1:9f:ae:0a:09:73:f1:e6:6b:8c:22:cc:4b:c4:49: 91:e2:a9:1a:84:42:c9:f4:14:02:b0:7a:c5:14:1f:53:d1:59: b8:a8:df:b4:dd:9d:ba:23:c0:46:83:5e:a8:fe:b3:c9:7b:3e: 23:89:17:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17ap1wv3O7wk8LgZwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk ZGM3M2FkNzktODk3MC00MmQ3LWEyNjktMzA3NGMzOTk1NWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXQ5PpI8lsaAWlAvRA7Y0YQIkP4x6mYYjRw9 Gwf50quWVkHNNlbhM/hiBr8HrbXGZ4MAO3cx9b3sDEEjag276vpsWmFwtjuVctP+ gzP00fT9EiL7KdUKmo0zg8S4CuOosZsc51fzHy8G/4OTcthmziSxSwdDA1FkCbIn dIDXqlU/ys6i1pxNR6q9K+H3gE2/2BDTuxMAKjYmC9NVKcT5G+9cDKkLrqcHCisy 5cc3eN9UqbC5LUbSvVOEazLYJkmHBZcuyWrMxhm5HLOixcnwfsArAIITkhxxv/zP A4ZAPvit+M0wZsGN5JbJFrgJi/DNeh0ZEtrkBIYv6R/3QlCSzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLhxh/zBwYcd8uFtVkIQrG9PjoRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZmY1MTNmNjktYTUyMi0z N2VjLWJiNmEtODc2MjdiM2U1MmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPNd1PbtXnZJwuuQjQ5aW3qRwQ0qc/vaK5rPiBGUXuZ+2hep9RCBYhc 9mMdhbKBSeJ+xgMIdaZEpVjW/wMtoqDdZIlP2H8trjzs2zJ5J+pjyhPnImEbNnu+ 4N1KM89B02/RFy5LqoeAaALuF4gpwC8PVXkBbQXe1rHslYwuzyxp9X7vPFd91OYt 8/8QPZD60mzIlWFmO/mw6r3Y2/6WA/yKR+y91KUwPs9MJU9dChM8bMlL1dUwlawt NBUPkDElUBrcSU+3/UPsDvGfrgoJc/Hma4wizEvESZHiqRqEQsn0FAKwesUUH1PR Wbio37TdnbojwEaDXqj+s8l7PiOJF+M= -----END CERTIFICATE-----Generated at Fri Apr 17 20:31:59 2026 by rpki-client