$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af3d535e-1c31-32d1-a6a6-68041d0d7365.roa File: af3d535e-1c31-32d1-a6a6-68041d0d7365.roa (raw, json) Hash identifier: UiFMIXJtEsA429OK+aIY8qPQu7d77+krSTS0Ub/uME4= Subject key identifier: BB:F5:33:D0:F2:05:0B:96:6F:BA:87:96:22:68:A8:AA:66:A1:28:B3 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584D4A8F9592170088D462D89380 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af3d535e-1c31-32d1-a6a6-68041d0d7365.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 396961 IP address blocks: 163.253.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:95:92:17:00:88:d4:62:d8:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=67dd46bf-d91f-4713-b5bd-2f5e951a444b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7a:77:6e:29:21:ac:97:84:31:4c:a7:b2:aa: 15:44:25:d2:5b:42:02:76:2a:f9:cf:35:36:76:30: 53:10:98:42:92:96:ee:a2:d4:41:57:66:ec:7c:6e: 82:be:25:85:1a:eb:e1:50:cb:53:13:7f:6e:12:2c: b7:62:e3:04:97:5d:ea:d3:c0:56:95:51:fb:48:47: 1b:cd:58:36:ed:80:78:22:69:bb:66:35:d9:7b:93: 3a:04:50:34:cb:58:37:c5:b3:1f:16:4d:f7:0b:d5: 1f:76:02:0c:16:c7:f7:bb:18:f6:3a:a9:9c:c0:88: 0c:ff:4d:5a:00:53:bd:0a:c1:39:10:15:b1:6a:2e: 8a:46:ca:69:d3:6c:ee:2a:58:d5:12:72:36:23:0e: 6d:58:00:72:54:32:96:13:13:6a:5c:c4:0b:4b:7f: 9f:3d:17:e9:86:1a:da:22:0a:f7:93:9c:25:9c:a3: 11:ce:ce:2b:77:cb:82:82:6f:4a:cd:9e:3e:46:c8: c1:bd:e8:46:ed:55:89:97:62:56:7d:d2:78:43:cb: 77:f2:7f:73:ce:48:a4:13:2f:6a:b6:e1:72:0d:75: 75:30:f5:fc:b4:43:eb:76:2f:04:ae:75:16:3f:36: ec:55:c4:d1:c3:f6:02:e5:4d:8b:4d:68:f3:d0:ac: 57:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F5:33:D0:F2:05:0B:96:6F:BA:87:96:22:68:A8:AA:66:A1:28:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af3d535e-1c31-32d1-a6a6-68041d0d7365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:77:26:8c:7d:e4:e2:8e:9b:88:56:a9:bb:cd:9d:0f:8a:31: a1:f1:b7:3d:4e:ea:2c:cc:1e:5e:aa:0a:ca:a2:22:42:8c:6c: e9:01:6e:f1:a1:1a:8e:22:ef:0b:a2:de:f4:f9:86:ab:4f:b3: c9:66:ba:86:51:dd:78:83:10:69:84:45:86:87:8a:dd:4c:e9: c6:32:6c:24:b2:0a:97:24:a1:63:15:de:2f:81:93:54:b2:69: 07:01:e7:10:84:6f:48:43:3f:83:be:f4:64:c6:0e:86:ee:ba: 50:13:cc:be:ef:e7:43:65:c3:f0:e7:55:27:18:35:59:8e:93: a7:da:f4:1d:66:8f:b3:03:fe:79:38:dd:42:7d:18:f4:aa:63: 95:4a:96:3a:e0:50:25:00:02:38:58:a0:f9:47:36:88:06:2f: 8f:60:b3:42:6a:78:d7:16:02:29:db:95:e1:e7:be:0a:d9:35: f4:92:3e:76:31:ac:41:6d:ea:89:96:0b:33:24:31:87:42:d3: 6b:61:d0:48:f3:9b:0f:74:0e:01:ce:ee:9a:87:8f:21:0f:2c: 96:fd:f1:28:69:81:7b:85:75:97:0b:26:d2:e4:92:a2:c6:df: 17:2d:40:03:1c:dd:1e:55:8c:58:fc:00:c3:bf:8f:c4:67:ab: 1d:d7:be:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj5WSFwCI1GLYk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk NjdkZDQ2YmYtZDkxZi00NzEzLWI1YmQtMmY1ZTk1MWE0NDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3p3bikhrJeEMUynsqoVRCXSW0ICdir5zzU2 djBTEJhCkpbuotRBV2bsfG6CviWFGuvhUMtTE39uEiy3YuMEl13q08BWlVH7SEcb zVg27YB4Imm7ZjXZe5M6BFA0y1g3xbMfFk33C9UfdgIMFsf3uxj2OqmcwIgM/01a AFO9CsE5EBWxai6KRspp02zuKljVEnI2Iw5tWAByVDKWExNqXMQLS3+fPRfphhra Igr3k5wlnKMRzs4rd8uCgm9KzZ4+RsjBvehG7VWJl2JWfdJ4Q8t38n9zzkikEy9q tuFyDXV1MPX8tEPrdi8ErnUWPzbsVcTRw/YC5U2LTWjz0KxXHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLv1M9DyBQuWb7qHliJoqKpmoSizMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYWYzZDUzNWUtMWMzMS0z MmQxLWE2YTYtNjgwNDFkMGQ3MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/1JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL13Jox95OKOm4hWqbvNnQ+KMaHxtz1O6izMHl6qCsqiIkKMbOkBbvGh Go4i7wui3vT5hqtPs8lmuoZR3XiDEGmERYaHit1M6cYybCSyCpckoWMV3i+Bk1Sy aQcB5xCEb0hDP4O+9GTGDobuulATzL7v50Nlw/DnVScYNVmOk6fa9B1mj7MD/nk4 3UJ9GPSqY5VKljrgUCUAAjhYoPlHNogGL49gs0JqeNcWAinbleHnvgrZNfSSPnYx rEFt6omWCzMkMYdC02th0Ejzmw90DgHO7pqHjyEPLJb98ShpgXuFdZcLJtLkkqLG 3xctQAMc3R5VjFj8AMO/j8Rnqx3Xvgo= -----END CERTIFICATE-----Generated at Thu Mar 26 17:41:35 2026 by rpki-client