$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/afa987f8-c47e-3c74-b4bd-58487ad8dee4.roa File: afa987f8-c47e-3c74-b4bd-58487ad8dee4.roa (raw, json) Hash identifier: 6mJYkwj8BH5SFdW9h9/R3mpSd7dffWteuneL48/5Fsc= Subject key identifier: A3:4A:8E:6B:BD:9D:9D:34:3C:7F:4B:57:FF:D9:6A:A9:85:D6:59:D2 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584B92DCF5FD340B0ABF69A6CD52 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/afa987f8-c47e-3c74-b4bd-58487ad8dee4.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 62775 IP address blocks: 163.253.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:f5:fd:34:0b:0a:bf:69:a6:cd:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=baac2ad7-76e1-4bc4-9e01-979f044388d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9d:01:99:4b:4e:05:fa:0a:64:71:68:e0:89: 00:76:95:69:c0:26:d8:77:53:6e:eb:0a:f4:76:94: 1e:c3:90:37:a4:7c:fa:a8:5e:57:78:8e:8d:bc:61: e7:aa:ef:66:17:b1:8a:61:7f:39:f3:6f:1f:62:9c: ef:e4:91:7b:c1:c9:32:c4:fb:33:83:0b:86:8d:61: 23:2b:30:e8:a7:6d:3e:a5:d1:98:7c:67:6a:bb:85: 64:64:9f:4e:86:39:8c:a9:66:63:7b:d3:e6:83:6f: 8b:dc:f1:c1:c3:75:a0:93:45:68:09:d6:24:af:7a: 9a:80:20:eb:ca:51:71:30:2d:77:7f:d7:ac:51:84: 03:2c:c0:5c:ee:33:c6:13:dc:e7:ab:bc:a0:7a:8d: 29:10:4b:cf:8a:44:1a:d1:79:eb:13:e7:21:2f:ff: 58:82:5b:4a:64:e6:78:2e:a9:60:23:71:b4:e3:27: d0:1d:f6:4a:c5:4f:dd:9f:d6:4c:18:9c:c6:38:29: 22:3e:ff:9b:1a:83:a0:5e:31:c2:fb:25:2e:5b:95: af:5c:91:e6:a4:40:17:7b:0b:e5:93:22:28:e6:8d: c9:a7:24:4a:60:88:27:b0:94:90:03:4a:b5:ff:2a: bd:e0:11:10:36:a7:2f:47:b1:72:5b:d7:bd:15:ae: 3d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4A:8E:6B:BD:9D:9D:34:3C:7F:4B:57:FF:D9:6A:A9:85:D6:59:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/afa987f8-c47e-3c74-b4bd-58487ad8dee4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:df:71:26:5c:c0:8c:aa:b1:05:4e:4e:70:2e:3d:32:56:87: b7:ba:26:7a:c3:79:98:20:b9:08:8f:87:3c:0a:6f:ff:0a:ff: d7:05:b0:17:c7:72:7d:91:5e:b2:68:2b:32:7d:25:b0:73:02: 04:d5:71:8a:7b:83:b7:f0:92:60:dd:64:53:6f:16:17:78:95: 51:9b:14:75:80:32:fb:7a:76:67:fa:bc:7d:24:79:e7:d6:f4: 89:8b:d5:bc:f7:97:8d:24:89:a8:c7:3c:d9:38:90:55:22:a2: 0f:9a:9d:d4:50:6a:90:8a:9d:c7:39:9c:80:ef:7e:e1:95:b7: 27:3d:08:ee:7c:dd:14:1b:da:bd:83:98:23:8d:41:55:5e:f8: 49:07:0e:b5:5e:91:e2:48:fc:9d:9b:fa:06:53:58:1e:e7:84: ad:f7:fe:46:97:00:a5:10:c3:62:66:fb:e5:ec:5b:75:2a:d4: bd:f9:39:99:98:d8:d8:33:20:40:e3:e0:fd:e1:34:a6:1d:e0: f5:9d:b2:93:e6:92:93:c5:c2:ee:c7:5b:d3:1a:12:73:c7:7e: 4f:22:07:82:2a:ad:da:d4:c3:a5:2d:ba:ea:8e:99:7b:90:05: 6a:c9:0f:fe:78:2b:78:99:4f:7e:a6:f3:f4:70:ac:51:43:30: 1c:28:cc:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3PX9NAsKv2mmzVIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk YmFhYzJhZDctNzZlMS00YmM0LTllMDEtOTc5ZjA0NDM4OGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo50BmUtOBfoKZHFo4IkAdpVpwCbYd1Nu6wr0 dpQew5A3pHz6qF5XeI6NvGHnqu9mF7GKYX85828fYpzv5JF7wckyxPszgwuGjWEj KzDop20+pdGYfGdqu4VkZJ9OhjmMqWZje9Pmg2+L3PHBw3Wgk0VoCdYkr3qagCDr ylFxMC13f9esUYQDLMBc7jPGE9znq7ygeo0pEEvPikQa0XnrE+chL/9YgltKZOZ4 LqlgI3G04yfQHfZKxU/dn9ZMGJzGOCkiPv+bGoOgXjHC+yUuW5WvXJHmpEAXewvl kyIo5o3JpyRKYIgnsJSQA0q1/yq94BEQNqcvR7FyW9e9Fa49RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNKjmu9nZ00PH9LV//ZaqmF1lnSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYWZhOTg3ZjgtYzQ3ZS0z Yzc0LWI0YmQtNTg0ODdhZDhkZWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/08MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7fcSZcwIyqsQVOTnAuPTJWh7e6JnrDeZgguQiPhzwKb/8K/9cFsBfH cn2RXrJoKzJ9JbBzAgTVcYp7g7fwkmDdZFNvFhd4lVGbFHWAMvt6dmf6vH0keefW 9ImL1bz3l40kiajHPNk4kFUiog+andRQapCKncc5nIDvfuGVtyc9CO583RQb2r2D mCONQVVe+EkHDrVekeJI/J2b+gZTWB7nhK33/kaXAKUQw2Jm++XsW3Uq1L35OZmY 2NgzIEDj4P3hNKYd4PWdspPmkpPFwu7HW9MaEnPHfk8iB4IqrdrUw6UtuuqOmXuQ BWrJD/54K3iZT36m8/RwrFFDMBwozMw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:11:32 2025 by rpki-client