$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af0d483b-52bd-3692-a837-5d40708d158b.roa File: af0d483b-52bd-3692-a837-5d40708d158b.roa (raw, json) Hash identifier: sltS/05blJwunL1+OKGOE8JpdhMsQKsGkyZk1O6TDvA= Subject key identifier: 5D:EB:17:4E:10:28:4E:E9:73:3F:3D:87:95:83:2C:8B:11:84:A3:5F Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584F655D7780AB7636E275CD9000 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af0d483b-52bd-3692-a837-5d40708d158b.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 237 IP address blocks: 163.253.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:77:80:ab:76:36:e2:75:cd:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=d0b64cb5-b750-4678-b226-4dc3afe77bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3f:eb:83:a8:26:4c:2b:52:0d:cd:5b:aa:28: 6c:fb:bf:2e:0a:d2:b3:b7:67:09:fe:6c:f1:cd:62: 6e:03:8b:be:04:c0:b3:4e:c1:8a:86:60:a9:b6:26: d1:90:d6:7e:9a:ed:f2:b7:8b:d8:12:a8:0c:a5:1a: 82:e0:ec:5a:dc:ac:76:b6:6b:a9:a9:30:f9:50:35: df:79:86:48:9b:f2:11:0b:1c:a1:55:18:eb:de:9b: 38:70:6e:d1:72:54:67:36:e3:c0:d6:0e:cd:5b:3f: ca:fc:78:58:b8:84:15:e1:a1:eb:51:ce:e5:7a:38: 70:4a:03:73:5e:4d:32:50:d6:93:e6:1b:2a:1b:54: 5b:06:9c:62:dc:e4:24:c3:33:d7:87:9c:27:80:4c: a3:de:1a:84:01:91:27:24:c3:4d:44:15:41:cf:74: 27:30:38:90:65:79:d8:c5:d5:f1:bf:11:cf:61:9d: cc:a5:42:08:bb:15:29:66:d0:99:56:e1:93:fb:36: 48:2e:f5:d2:4e:a6:71:69:f7:6d:86:52:27:e1:73: 56:fe:7b:32:e3:3b:5f:6d:6b:ea:57:7c:c2:5e:17: 6d:ac:6c:b8:12:c3:43:61:21:7c:f0:46:f9:d5:72: 84:f2:96:ab:54:64:42:36:cf:77:0e:c1:9b:87:25: b4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EB:17:4E:10:28:4E:E9:73:3F:3D:87:95:83:2C:8B:11:84:A3:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af0d483b-52bd-3692-a837-5d40708d158b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:6d:6f:9b:76:09:b0:7e:ff:02:fc:22:2b:9c:9c:04:81:3d: 64:77:66:ce:26:d5:01:56:87:ef:3b:ff:8a:ea:6b:34:6b:bc: cf:f4:7b:d1:e2:c3:b2:10:83:1c:9b:7d:92:1d:ef:1a:6d:26: 8e:55:ba:be:67:50:f5:92:7e:be:81:43:3a:09:76:56:a3:f7: 3c:d8:35:7a:e6:b6:4a:a0:2d:ad:dd:e3:dc:30:29:9a:2f:9b: 75:b2:62:f6:4a:72:68:bb:d6:7e:5e:d5:08:52:e9:d6:77:27: 07:42:71:6b:10:ad:ab:52:87:93:fb:c4:33:8f:81:d6:75:c3: 3e:09:7e:f9:da:2c:0a:0b:2c:b6:93:2f:13:f0:56:bb:be:39: 93:0b:b4:a1:fb:b9:c8:81:cb:49:fe:a7:16:2d:42:9f:93:d0: 38:38:54:f6:18:fe:34:49:b2:53:1f:79:c0:cc:7d:5c:59:3d: 39:84:12:56:99:cd:e0:b9:db:10:de:3c:67:de:a3:56:03:70: c1:da:d7:39:b2:48:a2:b8:f0:36:9b:5a:09:98:88:ca:86:9a: 01:73:b1:24:9c:99:70:80:aa:48:b8:c5:90:42:50:b5:8f:13: 8c:20:de:61:26:0a:5c:8e:6f:67:b5:76:8d:13:2d:ba:9a:66: cd:17:09:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXXeAq3Y24nXNkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk ZDBiNjRjYjUtYjc1MC00Njc4LWIyMjYtNGRjM2FmZTc3YmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj/rg6gmTCtSDc1bqihs+78uCtKzt2cJ/mzx zWJuA4u+BMCzTsGKhmCptibRkNZ+mu3yt4vYEqgMpRqC4Oxa3Kx2tmupqTD5UDXf eYZIm/IRCxyhVRjr3ps4cG7RclRnNuPA1g7NWz/K/HhYuIQV4aHrUc7lejhwSgNz Xk0yUNaT5hsqG1RbBpxi3OQkwzPXh5wngEyj3hqEAZEnJMNNRBVBz3QnMDiQZXnY xdXxvxHPYZ3MpUIIuxUpZtCZVuGT+zZILvXSTqZxafdthlIn4XNW/nsy4ztfbWvq V3zCXhdtrGy4EsNDYSF88Eb51XKE8parVGRCNs93DsGbhyW00QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3rF04QKE7pcz89h5WDLIsRhKNfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYWYwZDQ4M2ItNTJiZC0z NjkyLWE4MzctNWQ0MDcwOGQxNThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo/0kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFtb5t2CbB+/wL8IiucnASBPWR3Zs4m1QFWh+87/4rqazRrvM/0e9Hi w7IQgxybfZId7xptJo5Vur5nUPWSfr6BQzoJdlaj9zzYNXrmtkqgLa3d49wwKZov m3WyYvZKcmi71n5e1QhS6dZ3JwdCcWsQratSh5P7xDOPgdZ1wz4JfvnaLAoLLLaT LxPwVru+OZMLtKH7uciBy0n+pxYtQp+T0Dg4VPYY/jRJslMfecDMfVxZPTmEElaZ zeC52xDePGfeo1YDcMHa1zmySKK48DabWgmYiMqGmgFzsSScmXCAqki4xZBCULWP E4wg3mEmClyOb2e1do0TLbqaZs0XCUc= -----END CERTIFICATE-----Generated at Sun Oct 11 07:25:07 2026 by rpki-client