$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/035f13a3-6363-30e8-b8f0-29075f337c20.roa File: 035f13a3-6363-30e8-b8f0-29075f337c20.roa (raw, json) Hash identifier: M0EXvIpeI1PlGu0edvH/K/VO1ExGP9SfcI4uAX54WxI= Subject key identifier: AC:27:DE:92:86:DD:EC:D0:0F:26:9E:8C:14:4E:DE:85:0E:92:3A:82 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584A6C55DDE8A6ED1C9FFC1EB280 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/035f13a3-6363-30e8-b8f0-29075f337c20.roa Signing time: Sun 06 Jul 2025 01:00:49 +0000 ROA not before: Sun 06 Jul 2025 01:00:49 +0000 ROA not after: Sat 04 Oct 2025 01:00:49 +0000 asID: 396955 IP address blocks: 163.253.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:55:dd:e8:a6:ed:1c:9f:fc:1e:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Jul 6 01:00:49 2025 GMT Not After : Oct 4 01:00:49 2025 GMT Subject: CN=b5cfb8f0-54d7-47ab-a306-89fa0b4f6f03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:92:76:68:fe:c6:73:b8:0b:d2:20:36:a7:18: 79:8a:5a:c3:ce:05:1a:72:85:88:c4:86:7f:39:82: cb:2e:df:48:5d:d9:32:d1:d8:aa:6a:7c:ee:de:fd: 66:69:1a:88:30:8b:93:f0:cf:bf:34:43:3c:0c:e5: 41:4f:16:12:4d:74:d0:cf:24:3f:84:73:25:92:31: 5e:67:a2:f2:e3:f3:e6:bf:87:bf:ba:91:18:18:fc: 09:d2:7e:ee:a5:e8:89:96:d9:6c:d5:f4:e4:0f:db: ed:90:12:ad:14:24:57:9b:72:53:fe:ba:b2:f6:5e: 39:4a:3c:91:d1:33:42:00:50:94:5b:f9:b6:33:95: 24:f2:4c:a0:2c:44:75:ec:bd:77:ec:df:f0:86:ba: cd:ea:1a:15:55:b8:a6:f8:cc:66:1d:78:ff:66:a8: 43:15:a0:3a:51:92:0c:83:62:f5:60:29:6b:7b:e2: b2:f9:4c:79:0b:e7:24:f1:e6:df:db:2d:d8:49:39: 53:65:be:ad:49:d5:f8:39:58:ee:d7:aa:8b:94:bc: 94:d9:b3:e7:05:f3:75:71:48:5e:9d:20:e2:ed:d9: 8e:ae:8b:2e:68:66:cf:6b:8f:95:96:9f:8b:ad:5c: 9c:2d:6d:f0:ff:e2:82:18:8c:df:79:c6:63:e4:10: ca:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:27:DE:92:86:DD:EC:D0:0F:26:9E:8C:14:4E:DE:85:0E:92:3A:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/035f13a3-6363-30e8-b8f0-29075f337c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:6b:ca:5d:68:1c:ad:b8:ba:23:8e:19:7d:39:25:9e:0c:f9: 7b:6e:78:1b:4a:91:89:37:eb:57:37:15:fb:29:57:4e:89:cf: da:95:b2:a3:d7:ae:16:a6:4f:4b:eb:e6:70:1d:e8:70:49:64: 26:39:b2:06:76:7f:be:cf:39:36:03:72:08:53:83:9f:8a:1d: 91:42:87:7e:3b:3a:35:29:a0:65:57:08:67:1f:0d:7d:e4:14: a9:1e:db:ba:ae:84:c8:3e:74:73:46:05:54:98:c9:e1:d2:7e: 57:63:d4:5a:92:6f:ac:ad:73:5d:3d:af:5a:e3:49:7d:d5:b1: 97:e4:6f:84:83:dd:59:61:1d:1f:04:1f:ec:a8:86:d5:b7:33: 67:fa:f8:b5:88:28:db:57:0c:3e:20:63:b3:20:db:b1:01:82: 22:13:62:e9:67:fa:69:26:76:aa:9c:f7:fb:17:09:65:79:08: b8:28:9e:6b:05:4a:49:48:3b:6c:a4:f2:7f:d3:bf:cf:2a:b7: 09:fd:c6:35:02:e2:c8:fb:77:69:8f:cf:f4:d4:4b:bf:e9:2c: 1e:f8:4d:72:37:e9:d4:84:83:c9:a1:79:bc:60:2f:54:0e:a2: 42:71:c3:88:a8:3b:c7:6f:db:c4:0d:48:a4:93:8d:a4:3b:7b: 79:ec:a8:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVd3opu0cn/wesoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk YjVjZmI4ZjAtNTRkNy00N2FiLWEzMDYtODlmYTBiNGY2ZjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJJ2aP7Gc7gL0iA2pxh5ilrDzgUacoWIxIZ/ OYLLLt9IXdky0diqanzu3v1maRqIMIuT8M+/NEM8DOVBTxYSTXTQzyQ/hHMlkjFe Z6Ly4/Pmv4e/upEYGPwJ0n7upeiJltls1fTkD9vtkBKtFCRXm3JT/rqy9l45SjyR 0TNCAFCUW/m2M5Uk8kygLER17L137N/whrrN6hoVVbim+MxmHXj/ZqhDFaA6UZIM g2L1YClre+Ky+Ux5C+ck8ebf2y3YSTlTZb6tSdX4OVju16qLlLyU2bPnBfN1cUhe nSDi7dmOrosuaGbPa4+Vlp+LrVycLW3w/+KCGIzfecZj5BDK5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwn3pKG3ezQDyaejBRO3oUOkjqCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMDM1ZjEzYTMtNjM2My0z MGU4LWI4ZjAtMjkwNzVmMzM3YzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5ryl1oHK24uiOOGX05JZ4M+XtueBtKkYk361c3FfspV06Jz9qVsqPX rhamT0vr5nAd6HBJZCY5sgZ2f77POTYDcghTg5+KHZFCh347OjUpoGVXCGcfDX3k FKke27quhMg+dHNGBVSYyeHSfldj1FqSb6ytc109r1rjSX3VsZfkb4SD3VlhHR8E H+yohtW3M2f6+LWIKNtXDD4gY7Mg27EBgiITYuln+mkmdqqc9/sXCWV5CLgonmsF SklIO2yk8n/Tv88qtwn9xjUC4sj7d2mPz/TUS7/pLB74TXI36dSEg8mhebxgL1QO okJxw4ioO8dv28QNSKSTjaQ7e3nsqHM= -----END CERTIFICATE-----Generated at Sun Jul 27 12:03:50 2025 by rpki-client