$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af3d535e-1c31-32d1-a6a6-68041d0d7365.roa File: af3d535e-1c31-32d1-a6a6-68041d0d7365.roa (raw, json) Hash identifier: toSIkzfBm2P9szj0ktGYLcuiIRy42vEqVwvWjEfCeIA= Subject key identifier: 70:30:82:77:F3:35:35:90:E3:9C:A0:5D:60:76:CF:B9:DE:3A:C2:56 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584B8BE216728E20A8D86694F200 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af3d535e-1c31-32d1-a6a6-68041d0d7365.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 396961 IP address blocks: 163.253.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:16:72:8e:20:a8:d8:66:94:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=5a14d685-6a8f-4cbd-a49c-7b822ce2aba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bb:e3:b0:2f:1f:60:29:78:5e:32:8d:8f:8c: 26:ba:c4:ee:bf:50:9c:c9:cb:42:d8:f2:13:e7:17: d9:aa:14:14:5c:10:90:7b:b1:62:3a:69:83:a7:43: 0b:2a:6f:57:9e:12:66:90:75:63:03:95:59:6b:12: 3a:95:52:f1:13:c7:cb:76:f1:3f:bc:31:a5:dc:6a: c1:72:0c:90:03:7e:05:b9:c5:b8:75:c1:8b:09:0a: 42:d4:51:37:12:cb:f6:34:90:54:0f:06:7d:b6:f2: 1f:a6:9b:73:7f:9e:67:5b:35:f2:9c:96:97:38:4a: 56:92:6c:12:e8:17:62:37:8d:7f:ab:c6:73:9a:7e: 5e:a4:24:c1:8b:5f:24:69:03:5b:cf:e3:86:89:a7: 64:0c:cd:4a:9b:44:10:f1:26:33:98:41:68:5e:8b: 77:ee:77:8b:2a:eb:c3:93:52:07:67:ab:7a:30:e9: c1:bf:e2:78:62:ad:cd:4b:8a:be:e4:d9:49:e8:f4: f2:3c:d8:67:1b:0d:49:db:f0:cb:40:0a:e9:8f:c8: 1d:16:df:57:ed:7e:b7:32:4e:cc:0a:cd:e9:87:5f: a1:ef:ad:56:99:3e:85:62:05:0c:31:05:d3:a9:eb: 4c:dc:fa:13:de:ea:f3:54:b4:e4:7a:1a:7c:3f:b1: a0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:30:82:77:F3:35:35:90:E3:9C:A0:5D:60:76:CF:B9:DE:3A:C2:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af3d535e-1c31-32d1-a6a6-68041d0d7365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:cb:bf:91:3a:ea:2e:da:25:55:04:27:09:32:7f:ba:91:a8: 32:7a:2c:57:ca:82:e2:1a:9e:c6:70:0a:9e:00:b4:29:78:47: a6:88:4a:4e:61:9e:3a:ad:d5:6f:54:a2:80:06:64:84:6a:79: 36:a0:99:18:99:f8:96:8e:32:0a:98:b6:d6:7e:c0:9b:92:fb: 63:db:92:ab:79:66:f9:fd:34:86:27:d9:f2:1e:2a:d7:1f:b1: 36:fa:46:4c:96:c7:cc:b4:2e:74:b2:91:84:81:eb:75:2d:bb: 64:72:2f:ce:95:47:d6:56:71:6b:c9:6b:05:d4:71:3a:de:6e: 97:25:5b:38:e9:c2:bc:ee:84:a7:8d:cf:7c:0c:b2:1e:3c:c6: 5d:c3:f4:b1:55:e2:f7:a1:1d:c6:fd:98:52:2c:19:c3:8b:03: 8f:30:94:53:62:21:dd:f7:f8:2c:cf:cb:e9:0f:17:49:c3:ac: 97:62:4f:f9:fa:6e:a8:92:7a:61:08:ab:cf:0c:3d:e3:b7:64: 7f:22:98:5c:7b:d5:0f:0f:0c:2c:9b:32:0b:e5:bd:50:be:08: 61:86:53:fe:44:d2:5d:00:dd:8e:77:b7:0d:12:b2:9a:76:81: e3:83:c5:88:a1:7c:10:fe:13:ab:99:9a:73:f6:45:f4:a6:2f: bf:ea:83:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuL4hZyjiCo2GaU8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk NWExNGQ2ODUtNmE4Zi00Y2JkLWE0OWMtN2I4MjJjZTJhYmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbvjsC8fYCl4XjKNj4wmusTuv1CcyctC2PIT 5xfZqhQUXBCQe7FiOmmDp0MLKm9XnhJmkHVjA5VZaxI6lVLxE8fLdvE/vDGl3GrB cgyQA34FucW4dcGLCQpC1FE3Esv2NJBUDwZ9tvIfpptzf55nWzXynJaXOEpWkmwS 6BdiN41/q8Zzmn5epCTBi18kaQNbz+OGiadkDM1Km0QQ8SYzmEFoXot37neLKuvD k1IHZ6t6MOnBv+J4Yq3NS4q+5NlJ6PTyPNhnGw1J2/DLQArpj8gdFt9X7X63Mk7M Cs3ph1+h761WmT6FYgUMMQXTqetM3PoT3urzVLTkehp8P7GgNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAwgnfzNTWQ45ygXWB2z7neOsJWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYWYzZDUzNWUtMWMzMS0z MmQxLWE2YTYtNjgwNDFkMGQ3MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/1JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADLv5E66i7aJVUEJwkyf7qRqDJ6LFfKguIansZwCp4AtCl4R6aISk5h njqt1W9UooAGZIRqeTagmRiZ+JaOMgqYttZ+wJuS+2Pbkqt5Zvn9NIYn2fIeKtcf sTb6RkyWx8y0LnSykYSB63Utu2RyL86VR9ZWcWvJawXUcTrebpclWzjpwrzuhKeN z3wMsh48xl3D9LFV4vehHcb9mFIsGcOLA48wlFNiId33+CzPy+kPF0nDrJdiT/n6 bqiSemEIq88MPeO3ZH8imFx71Q8PDCybMgvlvVC+CGGGU/5E0l0A3Y53tw0Sspp2 geODxYihfBD+E6uZmnP2RfSmL7/qg1M= -----END CERTIFICATE-----Generated at Mon Oct 20 07:02:27 2025 by rpki-client