$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/0413fdf9-9ac3-31a7-aa3b-6076a69c57e9.roa File: 0413fdf9-9ac3-31a7-aa3b-6076a69c57e9.roa (raw, json) Hash identifier: fv6/fDRSCqQBxKH4I4cXP9dry7YBWRxXrfn8QcZcEI4= Subject key identifier: 4B:7E:34:3A:AE:2A:39:C0:F7:94:64:9D:4B:59:24:D2:2F:B8:27:B8 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584A4275838F234FDBB917FA1C00 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/0413fdf9-9ac3-31a7-aa3b-6076a69c57e9.roa Signing time: Sat 21 Jun 2025 01:00:48 +0000 ROA not before: Sat 21 Jun 2025 01:00:48 +0000 ROA not after: Fri 19 Sep 2025 01:00:48 +0000 asID: 396450 IP address blocks: 163.253.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:75:83:8f:23:4f:db:b9:17:fa:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Jun 21 01:00:48 2025 GMT Not After : Sep 19 01:00:48 2025 GMT Subject: CN=53e4ebb5-42a6-4198-9638-89a70851ba7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ce:f6:d4:76:4c:08:a1:51:a3:48:ee:86:b4: 49:6e:00:43:bc:46:ce:44:98:9e:65:a2:b3:8b:61: e4:99:2c:b2:a4:42:1e:a7:9b:e6:31:d8:3d:3b:35: b7:d2:27:f4:44:67:08:d5:ea:c7:d4:0c:55:6e:2f: 7f:b2:df:ca:a8:94:ac:a5:03:f8:2f:73:04:25:da: 70:d5:f8:c2:2f:6e:3a:cb:8f:73:1c:d0:2b:dd:33: 85:6b:4b:4f:56:29:4f:b4:8c:b1:3c:df:f7:8e:ce: dd:8e:f8:2d:37:e9:26:dd:29:af:65:df:1d:13:38: 98:ee:64:bc:b3:0d:77:48:6a:73:f6:7f:49:79:3e: 0c:3e:f6:63:83:75:e6:1e:6d:32:a9:4d:46:f9:3d: 6f:7b:c6:4a:c1:80:22:d4:af:d4:a1:e5:f9:e3:a5: f5:14:b7:6a:25:29:cb:a0:98:8c:fe:c2:8e:95:21: d6:3b:c7:be:1a:e7:08:5f:8a:6d:df:80:25:12:76: 9a:bc:c7:47:6e:0d:03:7d:77:6e:92:35:37:f9:25: 43:de:da:62:ea:5d:09:c0:b1:55:1a:36:3e:43:a4: 84:3e:56:c8:85:25:bd:c3:fb:3d:2b:84:eb:eb:0d: ff:36:94:6b:fb:e8:30:a7:0f:33:f3:55:a6:54:f6: e3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7E:34:3A:AE:2A:39:C0:F7:94:64:9D:4B:59:24:D2:2F:B8:27:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/0413fdf9-9ac3-31a7-aa3b-6076a69c57e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:eb:bb:09:c7:ac:79:5c:01:a5:f4:a6:3b:f1:a2:21:b0:1f: 0f:91:40:71:6e:be:a7:04:28:df:0a:e8:7c:4e:0c:77:fb:fd: f0:af:d4:89:06:09:9e:54:aa:c0:26:8f:56:7d:d3:91:1d:0a: f8:28:f3:57:a8:3f:2e:21:78:88:7c:47:de:04:c9:6b:40:05: ef:ac:fe:ec:79:e6:00:56:20:3e:bd:a1:9c:25:a0:71:b0:67: db:fd:ae:02:8f:ed:ca:68:02:42:5b:05:2d:ba:dd:72:e0:80: 2b:3b:0c:49:bf:e5:56:f9:36:e7:46:52:18:3b:cf:d7:d1:64: 61:f6:e3:66:d7:06:2f:ed:a7:67:d0:3a:9a:92:bf:1d:83:c2: e8:be:a2:6e:51:19:7a:15:0c:27:cd:be:12:77:0e:cc:20:b1: 6f:a0:10:80:e9:de:58:75:91:ec:56:f3:20:0d:b8:e7:6c:9e: b5:81:70:f9:46:9a:f2:44:4d:f6:76:5e:ab:f6:4a:15:74:69: e4:b6:d6:4d:52:af:38:27:57:59:aa:ec:6f:c4:ac:91:e6:70: 69:b9:ad:74:cc:74:81:69:67:7f:09:9a:37:f0:e0:03:a7:d0: b5:9f:e9:6c:b2:4a:b8:d0:64:18:9d:16:ed:e2:f9:40:6d:7c: 8d:ac:c1:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpCdYOPI0/buRf6HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDYyMTAxMDA0OFoXDTI1MDkxOTAxMDA0OFowLzEtMCsGA1UEAxMk NTNlNGViYjUtNDJhNi00MTk4LTk2MzgtODlhNzA4NTFiYTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvs721HZMCKFRo0juhrRJbgBDvEbORJieZaKz i2HkmSyypEIep5vmMdg9OzW30if0RGcI1erH1AxVbi9/st/KqJSspQP4L3MEJdpw 1fjCL246y49zHNAr3TOFa0tPVilPtIyxPN/3js7djvgtN+km3SmvZd8dEziY7mS8 sw13SGpz9n9JeT4MPvZjg3XmHm0yqU1G+T1ve8ZKwYAi1K/UoeX546X1FLdqJSnL oJiM/sKOlSHWO8e+GucIX4pt34AlEnaavMdHbg0DfXdukjU3+SVD3tpi6l0JwLFV GjY+Q6SEPlbIhSW9w/s9K4Tr6w3/NpRr++gwpw8z81WmVPbjgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEt+NDquKjnA95RknUtZJNIvuCe4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMDQxM2ZkZjktOWFjMy0z MWE3LWFhM2ItNjA3NmE2OWM1N2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3ruwnHrHlcAaX0pjvxoiGwHw+RQHFuvqcEKN8K6HxODHf7/fCv1IkG CZ5UqsAmj1Z905EdCvgo81eoPy4heIh8R94EyWtABe+s/ux55gBWID69oZwloHGw Z9v9rgKP7cpoAkJbBS263XLggCs7DEm/5Vb5NudGUhg7z9fRZGH242bXBi/tp2fQ OpqSvx2Dwui+om5RGXoVDCfNvhJ3DswgsW+gEIDp3lh1kexW8yANuOdsnrWBcPlG mvJETfZ2Xqv2ShV0aeS21k1SrzgnV1mq7G/ErJHmcGm5rXTMdIFpZ38Jmjfw4AOn 0LWf6WyySrjQZBidFu3i+UBtfI2swVo= -----END CERTIFICATE-----Generated at Mon Jun 30 16:49:58 2025 by rpki-client