$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/d04940a4-b6c6-3b76-a4e6-91c06b5324d6.roa File: d04940a4-b6c6-3b76-a4e6-91c06b5324d6.roa (raw, json) Hash identifier: dZwUgFddm83oFTlKJHmW/uIVaYchiUErcqqiBz4jx5o= Subject key identifier: 5B:E4:8A:D4:73:E9:5B:7E:31:A6:09:C1:A9:59:20:68:D3:01:B3:A2 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584B3986FD32CB0C5064500109C0 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/d04940a4-b6c6-3b76-a4e6-91c06b5324d6.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 396961 IP address blocks: 163.253.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:86:fd:32:cb:0c:50:64:50:01:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=d987e498-028e-4af9-afa9-61069d7717d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d9:b6:3d:6a:41:e1:45:f0:3b:d3:6b:a3:f2: 65:a9:c6:eb:87:a2:67:e9:b7:3d:32:4d:53:b5:7a: 99:fa:cf:94:0a:1b:cc:33:c7:08:13:e2:94:a7:b7: 9e:21:bc:a2:f5:2f:f7:35:21:b5:59:7e:68:81:1c: 65:10:d8:4d:06:ac:cc:cb:04:c5:6e:e9:11:be:6f: 91:b2:15:7e:46:dc:f8:ff:37:ea:4c:10:b8:04:27: 5d:0b:e1:ff:fa:5e:7d:4a:2b:79:5c:92:52:c4:23: 43:3d:2d:69:8a:ae:ae:87:22:8c:0e:0c:bc:0c:1a: 97:d1:79:35:af:97:5b:53:33:83:eb:eb:ba:ba:25: 5b:41:7d:5b:84:b0:8c:62:e2:ec:06:76:f8:c8:13: 72:d2:ab:b7:ef:5b:6a:36:8d:23:a5:95:9a:20:f5: 3a:1a:31:14:bc:c0:36:de:4b:05:4c:16:6b:bb:e0: ac:d0:e5:b4:9d:62:e7:fa:21:22:58:d1:0b:9c:43: b2:cc:8a:2c:6a:04:cf:8f:96:65:33:fb:7f:5a:8b: e4:d0:3f:a5:9d:55:9d:f1:cf:97:5f:ce:99:32:41: 6e:10:b9:9b:09:0e:0f:86:58:c8:d6:c7:52:bd:07: 2f:f3:58:ef:cb:be:84:7e:4f:d1:6c:4f:a9:01:e9: ec:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E4:8A:D4:73:E9:5B:7E:31:A6:09:C1:A9:59:20:68:D3:01:B3:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/d04940a4-b6c6-3b76-a4e6-91c06b5324d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:c2:56:0f:9d:71:e9:05:2b:be:75:1d:fb:e0:6a:1a:3a:06: d2:31:54:65:fe:7a:a6:52:10:c0:22:73:dd:17:96:ea:e6:35: ed:81:97:50:e4:f3:0c:d2:f0:f0:70:fd:3f:e2:6a:5d:b5:ca: d9:b0:80:32:71:9f:8a:e0:45:fd:3a:a8:a4:a9:d2:d5:8f:c3: 7b:f8:e5:05:7c:fb:53:28:65:f9:0a:53:09:ec:94:e0:a8:a4: c4:31:4d:b1:b2:f7:4a:f6:4f:5b:14:b8:76:18:5d:43:bb:6e: 67:ec:5a:a2:86:ad:95:1b:01:c6:c1:f6:5f:ab:40:73:35:92: 0f:0f:3e:9b:83:11:76:38:7a:ec:be:fa:3a:85:9b:fc:ed:35: ee:ab:59:a6:39:80:26:cd:ad:40:de:a5:f4:fc:dd:c5:ca:bb: f6:ad:1b:f7:c7:e3:3b:30:e6:f9:8f:5c:d5:19:b9:71:d2:c8: a2:34:7a:fa:f1:54:eb:35:3a:8e:dd:7c:f5:11:fa:b6:4d:ba: 86:06:80:e3:6c:db:61:65:c6:89:25:73:94:94:30:51:64:88: 67:51:28:f9:b0:d8:e7:89:b7:4d:43:0f:db:35:e1:2a:c6:92: 2b:8c:7d:d9:e1:b6:97:2c:e0:c8:3f:15:9d:89:39:fd:68:3e: 34:b5:94:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hv0yywxQZFABCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk ZDk4N2U0OTgtMDI4ZS00YWY5LWFmYTktNjEwNjlkNzcxN2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69m2PWpB4UXwO9Nro/Jlqcbrh6Jn6bc9Mk1T tXqZ+s+UChvMM8cIE+KUp7eeIbyi9S/3NSG1WX5ogRxlENhNBqzMywTFbukRvm+R shV+Rtz4/zfqTBC4BCddC+H/+l59Sit5XJJSxCNDPS1piq6uhyKMDgy8DBqX0Xk1 r5dbUzOD6+u6uiVbQX1bhLCMYuLsBnb4yBNy0qu371tqNo0jpZWaIPU6GjEUvMA2 3ksFTBZru+Cs0OW0nWLn+iEiWNELnEOyzIosagTPj5ZlM/t/Wovk0D+lnVWd8c+X X86ZMkFuELmbCQ4PhljI1sdSvQcv81jvy76Efk/RbE+pAensHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvkitRz6Vt+MaYJwalZIGjTAbOiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZDA0OTQwYTQtYjZjNi0z Yjc2LWE0ZTYtOTFjMDZiNTMyNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXCVg+dcekFK751Hfvgaho6BtIxVGX+eqZSEMAic90XlurmNe2Bl1Dk 8wzS8PBw/T/ial21ytmwgDJxn4rgRf06qKSp0tWPw3v45QV8+1MoZfkKUwnslOCo pMQxTbGy90r2T1sUuHYYXUO7bmfsWqKGrZUbAcbB9l+rQHM1kg8PPpuDEXY4euy+ +jqFm/ztNe6rWaY5gCbNrUDepfT83cXKu/atG/fH4zsw5vmPXNUZuXHSyKI0evrx VOs1Oo7dfPUR+rZNuoYGgONs22Flxoklc5SUMFFkiGdRKPmw2OeJt01DD9s14SrG kiuMfdnhtpcs4Mg/FZ2JOf1oPjS1lAI= -----END CERTIFICATE-----Generated at Tue Oct 21 02:31:26 2025 by rpki-client