$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/87a7bbd1-d566-310b-9d9f-e9557a29f15c.roa File: 87a7bbd1-d566-310b-9d9f-e9557a29f15c.roa (raw, json) Hash identifier: uTQMd9F6tVu5ZhLs1T48pEr/fTz8vIQVUrRPCK9ZXZY= Subject key identifier: 8E:DD:CA:5D:5B:CB:2C:F7:AA:D6:30:01:A3:37:FA:1A:30:A8:48:6F Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584D4A8F8F7489BA60716F12DB80 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/87a7bbd1-d566-310b-9d9f-e9557a29f15c.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 163.253.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:8f:74:89:ba:60:71:6f:12:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=c93a2ef0-adb2-4cd5-af74-5e460f7fcd12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1f:e2:c0:ca:d8:83:c4:9d:db:7c:2e:22:33: 7a:db:a2:6f:63:0b:18:68:fd:1d:66:ea:17:c5:70: 21:56:04:bf:de:6f:ce:0b:76:0d:af:7e:f5:d9:a6: 10:56:d8:f7:76:da:c9:fc:97:0c:16:05:59:77:17: 02:60:ab:c0:97:8f:7a:0f:29:8b:cb:6a:33:34:eb: 6c:be:14:a5:16:c4:45:e4:de:7c:80:a1:e3:ae:c4: 25:1b:ac:3f:78:27:c4:7b:98:c6:de:c6:f0:e2:3c: 70:da:85:3e:32:bf:34:9f:c3:bd:71:53:8c:d5:b2: 14:11:8f:7b:7a:fc:f4:7c:ff:55:5f:07:12:6b:6d: 65:50:98:b3:e2:70:e6:67:ad:00:7e:52:94:68:df: 26:5f:a6:b5:83:ad:d5:f1:e6:d1:e3:2d:13:07:38: fc:42:2e:87:a0:85:f1:4d:93:cb:0b:a0:eb:d0:a7: 4b:76:87:5e:4e:2b:9f:aa:3a:a4:94:3d:c5:82:69: ec:63:e2:56:85:d1:6b:9d:32:cb:4d:56:af:17:15: c5:da:ca:b5:3b:d3:c0:2a:44:8a:0a:28:4f:04:b6: bf:b9:90:05:dd:83:ee:a4:97:fa:08:46:53:8f:04: f5:36:c8:37:42:78:a1:66:f3:3c:47:22:c1:8a:a3: 1d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DD:CA:5D:5B:CB:2C:F7:AA:D6:30:01:A3:37:FA:1A:30:A8:48:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/87a7bbd1-d566-310b-9d9f-e9557a29f15c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:79:79:d1:56:aa:bb:36:ea:10:d8:94:8b:88:31:93:16:56: d6:a2:29:14:d5:a8:c9:1e:95:a9:a9:5f:f9:e3:42:86:d5:d5: 83:05:b3:74:9a:18:79:8f:01:f4:f7:7b:eb:59:3a:40:e4:f9: 4c:84:6d:38:bd:fc:b5:d8:77:94:05:f7:86:2f:74:d7:e1:b2: b1:13:43:7c:60:fb:a3:ab:a7:62:cd:9c:5d:f9:e9:71:83:8c: 83:86:03:61:f7:1f:c6:03:4f:9e:2d:77:cf:f7:da:e2:75:e2: a5:64:d7:65:e6:70:32:b9:93:1c:e1:76:33:14:7c:7a:62:0c: 45:53:25:75:ad:3f:bb:fe:3f:45:b8:a0:dd:a4:18:19:a9:a9: 25:5d:c9:89:1b:e3:fc:30:a1:c9:1f:f2:b7:5a:ae:15:cb:90: 18:a3:c3:4e:d1:21:c1:05:22:44:b3:ab:8c:39:b1:39:3b:45: dd:cb:38:07:f9:f9:78:b5:db:df:be:2d:ee:8a:95:05:cc:25: f6:db:85:81:b3:0c:43:34:b5:69:f6:60:91:50:32:24:c9:8d: 18:06:89:63:e1:93:cd:6c:9f:b3:e1:45:c1:6e:6e:51:a8:ed: dc:ea:93:8b:12:30:57:50:d1:a1:56:94:c2:92:90:e0:19:51: d2:b9:8c:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj490ibpgcW8S24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk YzkzYTJlZjAtYWRiMi00Y2Q1LWFmNzQtNWU0NjBmN2ZjZDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvh/iwMrYg8Sd23wuIjN626JvYwsYaP0dZuoX xXAhVgS/3m/OC3YNr3712aYQVtj3dtrJ/JcMFgVZdxcCYKvAl496DymLy2ozNOts vhSlFsRF5N58gKHjrsQlG6w/eCfEe5jG3sbw4jxw2oU+Mr80n8O9cVOM1bIUEY97 evz0fP9VXwcSa21lUJiz4nDmZ60AflKUaN8mX6a1g63V8ebR4y0TBzj8Qi6HoIXx TZPLC6Dr0KdLdodeTiufqjqklD3FgmnsY+JWhdFrnTLLTVavFxXF2sq1O9PAKkSK CihPBLa/uZAF3YPupJf6CEZTjwT1Nsg3QnihZvM8RyLBiqMd3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7dyl1byyz3qtYwAaM3+howqEhvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvODdhN2JiZDEtZDU2Ni0z MTBiLTlkOWYtZTk1NTdhMjlmMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJl5edFWqrs26hDYlIuIMZMWVtaiKRTVqMkelampX/njQobV1YMFs3Sa GHmPAfT3e+tZOkDk+UyEbTi9/LXYd5QF94YvdNfhsrETQ3xg+6Orp2LNnF356XGD jIOGA2H3H8YDT54td8/32uJ14qVk12XmcDK5kxzhdjMUfHpiDEVTJXWtP7v+P0W4 oN2kGBmpqSVdyYkb4/wwockf8rdarhXLkBijw07RIcEFIkSzq4w5sTk7Rd3LOAf5 +Xi129++Le6KlQXMJfbbhYGzDEM0tWn2YJFQMiTJjRgGiWPhk81sn7PhRcFublGo 7dzqk4sSMFdQ0aFWlMKSkOAZUdK5jPw= -----END CERTIFICATE-----Generated at Thu Mar 26 13:09:26 2026 by rpki-client