$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/db1ec6f1-6951-3aad-bd1e-5659bf43829b.roa File: db1ec6f1-6951-3aad-bd1e-5659bf43829b.roa (raw, json) Hash identifier: tbjjLlyyokowPCwztUgMVVJKjVROIqcan0pFO275DVU= Subject key identifier: BC:7F:C8:BE:2B:A7:FE:99:4C:A2:B2:82:A8:A4:8A:9E:50:5F:FA:E0 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584B477C6A437F7B89433B691B20 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/db1ec6f1-6951-3aad-bd1e-5659bf43829b.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 11537 IP address blocks: 163.253.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:6a:43:7f:7b:89:43:3b:69:1b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=505d061c-a581-4b9b-ac89-881f1bbe8b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c3:d7:f4:f9:f9:c5:61:4c:c1:7b:b6:a9:a5: 0a:ba:98:ef:94:86:63:d4:2b:41:93:87:a1:1b:dc: dd:ad:62:20:4f:d5:c4:b7:0e:47:25:cb:83:c2:89: 15:38:21:94:68:40:0d:92:37:3d:b9:ce:39:db:33: f3:a3:01:6a:d5:fb:c8:42:8c:66:28:2d:43:6b:ae: f0:10:b3:3e:b7:cd:99:ff:6e:7b:7c:85:13:be:da: ab:26:1e:ac:cb:b1:91:97:93:60:37:b0:6e:ab:c6: c2:9a:0a:1a:00:a6:83:12:15:dd:ac:f8:3e:93:17: a0:03:1d:bd:03:dd:1e:85:87:b8:be:e9:49:94:e6: ee:81:d0:4d:c0:16:b0:8d:7b:4c:f4:99:69:7b:ef: 95:87:c8:3a:10:8d:44:71:d5:18:0d:00:3e:6c:ab: db:84:4f:c3:cb:e2:bd:c5:f4:71:f1:90:f9:5f:1d: d7:96:11:c0:ff:39:65:9d:d6:93:e4:cd:22:74:53: de:74:1a:68:0f:19:b0:f1:80:a7:c7:47:ce:85:6b: 93:66:cc:53:4c:ed:ef:ad:a3:10:c5:83:10:9a:de: c3:7e:46:1f:00:74:fb:09:bd:48:85:5e:91:85:8c: 52:4f:a0:7e:eb:95:55:0d:0c:bf:83:be:fb:6d:81: 63:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7F:C8:BE:2B:A7:FE:99:4C:A2:B2:82:A8:A4:8A:9E:50:5F:FA:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/db1ec6f1-6951-3aad-bd1e-5659bf43829b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:da:5e:ac:b1:7c:a9:16:97:e0:99:6e:3a:9c:08:9f:78:2e: b6:12:1e:e3:99:fb:05:ee:e7:27:a1:4c:60:65:60:9a:d6:71: 93:19:ef:86:35:58:60:b7:d4:b2:f7:37:4b:ed:ed:94:20:ab: 49:c8:3f:ab:47:a3:73:a6:ad:15:0c:55:01:e3:7a:cc:f3:18: 43:24:fc:e2:90:2e:37:a9:89:e4:d8:eb:c8:7a:ef:62:4d:df: da:0a:18:13:cf:fd:10:b4:da:92:0c:f1:ad:ca:62:ab:be:3e: 0d:91:69:97:45:1c:ce:66:94:88:9a:3b:d7:6f:0e:29:75:f7: 9d:4f:6d:36:6e:70:f0:29:74:9a:5d:88:05:b3:d5:ab:fb:6f: 62:de:ec:33:8d:0e:01:20:e0:dc:c4:a6:d0:e6:fa:fd:09:75: 1b:c5:01:2c:ac:8c:05:b0:80:09:75:86:d8:2d:4b:b6:8b:57: 27:ff:54:fd:4f:e5:ae:34:3d:39:c5:00:29:71:af:7f:c5:06: 4d:52:f9:99:6a:56:26:78:20:3d:60:85:15:a9:77:eb:7f:a9: d0:18:78:a4:3c:77:03:6b:fc:54:2e:59:99:ef:66:91:02:dc: 7e:1a:53:d1:6c:ff:43:32:06:bc:4d:88:c3:28:ed:23:29:1c: 54:c6:70:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfGpDf3uJQztpGyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NTA1ZDA2MWMtYTU4MS00YjliLWFjODktODgxZjFiYmU4Yjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8PX9Pn5xWFMwXu2qaUKupjvlIZj1CtBk4eh G9zdrWIgT9XEtw5HJcuDwokVOCGUaEANkjc9uc452zPzowFq1fvIQoxmKC1Da67w ELM+t82Z/257fIUTvtqrJh6sy7GRl5NgN7Buq8bCmgoaAKaDEhXdrPg+kxegAx29 A90ehYe4vulJlObugdBNwBawjXtM9Jlpe++Vh8g6EI1EcdUYDQA+bKvbhE/Dy+K9 xfRx8ZD5Xx3XlhHA/zllndaT5M0idFPedBpoDxmw8YCnx0fOhWuTZsxTTO3vraMQ xYMQmt7DfkYfAHT7Cb1IhV6RhYxST6B+65VVDQy/g777bYFjeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLx/yL4rp/6ZTKKygqikip5QX/rgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZGIxZWM2ZjEtNjk1MS0z YWFkLWJkMWUtNTY1OWJmNDM4MjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo/0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDaXqyxfKkWl+CZbjqcCJ94LrYSHuOZ+wXu5yehTGBlYJrWcZMZ74Y1 WGC31LL3N0vt7ZQgq0nIP6tHo3OmrRUMVQHjeszzGEMk/OKQLjepieTY68h672JN 39oKGBPP/RC02pIM8a3KYqu+Pg2RaZdFHM5mlIiaO9dvDil1951PbTZucPApdJpd iAWz1av7b2Le7DONDgEg4NzEptDm+v0JdRvFASysjAWwgAl1htgtS7aLVyf/VP1P 5a40PTnFAClxr3/FBk1S+ZlqViZ4ID1ghRWpd+t/qdAYeKQ8dwNr/FQuWZnvZpEC 3H4aU9Fs/0MyBrxNiMMo7SMpHFTGcAM= -----END CERTIFICATE-----Generated at Mon Oct 20 07:45:14 2025 by rpki-client