$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/8559c3f1-db5e-3610-ac42-bc1f4e9a33ec.roa File: 8559c3f1-db5e-3610-ac42-bc1f4e9a33ec.roa (raw, json) Hash identifier: KExg/7T0zo9CtCSZ6F0EhtRhfSBT2c4VceCTiTaGIDQ= Subject key identifier: 04:D5:91:B3:BF:C7:C0:78:D0:FC:75:91:FA:43:AD:D5:26:53:C5:59 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584B821CC11625DFAD06AE410F20 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/8559c3f1-db5e-3610-ac42-bc1f4e9a33ec.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 11537 IP address blocks: 163.253.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c1:16:25:df:ad:06:ae:41:0f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=8e398ee1-1615-477e-9fe4-8836b9e422a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ef:e1:f1:b5:61:bb:09:2b:2a:e9:71:87:b3: 5a:49:2a:75:cc:05:7c:03:9f:25:0d:0b:d0:8c:81: 61:f2:dd:13:b8:18:f3:46:39:e8:e1:c0:b6:29:dc: 19:70:34:18:19:da:34:ba:36:30:2d:af:90:28:ff: db:55:51:8e:50:25:1c:d4:1d:10:87:3c:67:a8:05: c2:80:4f:05:e0:95:81:46:78:a3:35:35:11:4b:d1: 26:79:21:40:80:72:5e:c5:bf:81:39:55:39:0d:a1: 60:67:55:b7:37:cc:b5:93:bc:2e:b7:1b:93:7b:c2: bc:4a:29:85:cb:79:3a:b5:2d:be:b8:a2:6a:d1:74: ff:c6:9c:ac:6d:ab:5c:23:92:7f:28:9e:40:ad:76: 8e:7b:bc:51:a3:1f:6e:db:dd:91:48:43:2d:f6:a8: 5e:17:a7:c2:67:c6:5c:16:e4:3d:5d:04:44:0f:a5: ac:de:72:64:73:d6:d1:41:18:01:82:2f:cc:5e:44: 3e:57:c9:79:d9:20:b6:16:5d:9b:3d:de:e5:aa:b4: 4d:a4:2e:2f:5e:68:73:13:08:5a:5c:d8:6b:69:87: 94:ce:b1:4a:2a:a9:91:cc:3b:8d:36:55:e0:66:fe: 55:47:9f:18:e2:d5:a3:fd:31:87:3e:62:09:74:57: ad:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D5:91:B3:BF:C7:C0:78:D0:FC:75:91:FA:43:AD:D5:26:53:C5:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/8559c3f1-db5e-3610-ac42-bc1f4e9a33ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:f1:f7:7a:cd:0f:92:cf:5a:b9:e9:1e:54:86:64:66:b7:b4: 58:cd:98:ab:d8:d9:b6:f4:cd:52:7a:b2:78:de:f7:37:b0:b2: f7:8f:95:c6:f4:fc:6d:e5:5b:b1:f2:d9:4a:56:5a:22:8e:1a: bc:06:87:39:33:75:74:d8:72:8d:b7:f2:94:b9:38:ba:f8:34: b5:a7:ce:3d:a6:51:78:70:4b:62:f1:58:72:4f:e4:70:d3:21: d1:84:4c:ec:b2:93:8b:95:0d:22:0f:5e:99:3a:a9:e2:fa:25: 54:ce:8c:14:f2:1e:c8:a0:e6:3f:05:a1:15:32:f6:46:41:df: d3:f1:9a:be:a9:70:3f:d2:6a:24:ce:25:72:23:b0:ff:4d:e1: 5c:a6:41:c0:c6:9f:2e:96:3a:d0:42:f8:5b:98:42:88:40:bb: 29:eb:67:42:73:bc:50:78:6f:70:3c:5a:cb:2d:c4:c2:80:7d: 97:ef:72:7a:89:ae:51:99:c8:83:ad:fc:35:ad:f6:6b:91:8d: 35:b0:6c:b8:a6:db:6c:44:a9:26:70:e5:20:15:f4:78:7d:24: 0b:3f:8c:9a:be:dd:f4:79:8a:4c:37:1e:ce:1b:3b:d2:15:98: 02:1f:cb:2e:78:1a:df:06:58:fe:8b:d4:0b:01:ef:69:e7:4a: fb:0f:7d:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMEWJd+tBq5BDyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk OGUzOThlZTEtMTYxNS00NzdlLTlmZTQtODgzNmI5ZTQyMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e/h8bVhuwkrKulxh7NaSSp1zAV8A58lDQvQ jIFh8t0TuBjzRjno4cC2KdwZcDQYGdo0ujYwLa+QKP/bVVGOUCUc1B0QhzxnqAXC gE8F4JWBRnijNTURS9EmeSFAgHJexb+BOVU5DaFgZ1W3N8y1k7wutxuTe8K8SimF y3k6tS2+uKJq0XT/xpysbatcI5J/KJ5ArXaOe7xRox9u292RSEMt9qheF6fCZ8Zc FuQ9XQRED6Ws3nJkc9bRQRgBgi/MXkQ+V8l52SC2Fl2bPd7lqrRNpC4vXmhzEwha XNhraYeUzrFKKqmRzDuNNlXgZv5VR58Y4tWj/TGHPmIJdFet3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATVkbO/x8B40Px1kfpDrdUmU8VZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvODU1OWMzZjEtZGI1ZS0z NjEwLWFjNDItYmMxZjRlOWEzM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALPx93rND5LPWrnpHlSGZGa3tFjNmKvY2bb0zVJ6snje9zewsvePlcb0 /G3lW7Hy2UpWWiKOGrwGhzkzdXTYco238pS5OLr4NLWnzj2mUXhwS2LxWHJP5HDT IdGETOyyk4uVDSIPXpk6qeL6JVTOjBTyHsig5j8FoRUy9kZB39Pxmr6pcD/SaiTO JXIjsP9N4VymQcDGny6WOtBC+FuYQohAuynrZ0JzvFB4b3A8WsstxMKAfZfvcnqJ rlGZyIOt/DWt9muRjTWwbLim22xEqSZw5SAV9Hh9JAs/jJq+3fR5ikw3Hs4bO9IV mAIfyy54Gt8GWP6L1AsB72nnSvsPfV0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:16 2025 by rpki-client