$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2ec7296e-d780-32a1-af56-003ea6c04f3c.roa File: 2ec7296e-d780-32a1-af56-003ea6c04f3c.roa (raw, json) Hash identifier: JGXvTSPVFFewoCUfJhNhmV3IZR4bijDKKDvtc8mhIk4= Subject key identifier: D4:C0:E2:FA:34:35:CA:F2:91:78:2E:FD:F7:8C:9B:86:25:88:6D:F0 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584AA160CDC8D4A53CC9E9CD6880 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2ec7296e-d780-32a1-af56-003ea6c04f3c.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 11537 IP address blocks: 163.253.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:cd:c8:d4:a5:3c:c9:e9:cd:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=b392b627-97db-449a-969b-7afd21b43a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:92:e0:5c:f2:27:fd:fb:8a:52:48:55:3d:93: cd:c7:0b:9d:fa:5a:bf:6a:a5:d6:d3:1e:cc:53:31: 0b:98:ff:47:30:f7:b5:10:f2:96:79:7d:8e:7c:09: 3f:50:87:c4:89:3e:0b:0c:67:70:73:5f:63:33:51: 54:bd:25:8e:bb:78:94:07:66:45:3e:e5:bd:a4:c1: b4:08:96:bc:3a:8b:93:6b:3e:ff:ab:83:00:fa:7b: 47:43:22:92:2a:c9:36:9d:55:0c:dd:40:ce:1d:ad: 9b:63:37:ec:63:bc:eb:5f:d7:5f:e2:4e:f8:57:74: 30:e7:3a:8b:df:57:95:bc:46:0d:c7:5e:95:e3:2d: e1:3c:b6:85:f7:e0:92:53:93:37:5a:cb:05:4c:5d: 43:d1:31:75:9e:12:59:08:1e:ae:27:23:98:a8:9b: c3:3d:00:f3:dd:1e:0f:83:28:32:ea:49:87:c2:6f: b1:b4:25:99:8f:47:04:ae:7c:65:b2:d2:f8:b2:76: 3e:55:59:04:d2:86:cd:36:21:cd:b3:1d:7f:6d:2a: fa:9a:98:b7:bb:c0:eb:c4:50:00:23:21:c0:08:fc: cd:ca:52:b0:b2:58:c4:8c:36:18:4b:2e:8c:7d:50: 2f:d3:16:69:e6:67:7e:b5:19:70:b3:20:5c:8a:94: 07:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C0:E2:FA:34:35:CA:F2:91:78:2E:FD:F7:8C:9B:86:25:88:6D:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2ec7296e-d780-32a1-af56-003ea6c04f3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:98:83:c4:88:42:5e:47:c4:c5:83:53:8f:dc:31:51:ef:ae: ac:6c:ba:fb:a8:cb:5e:d2:ee:83:9e:10:5f:1c:30:81:22:9c: 1a:cc:36:f8:6d:b4:51:c9:fa:86:38:49:8d:32:7f:01:48:e6: 02:a7:26:c3:2d:01:56:91:2f:68:ce:9e:ef:c2:c5:fa:6b:46: f9:e5:31:6d:10:6a:e2:ba:05:5a:45:f8:2e:58:05:d5:46:e9: 28:32:a3:8e:35:8b:73:f4:83:b7:3e:0a:3e:7c:86:a3:d1:ac: 3e:cc:bd:29:12:35:24:83:29:b3:bd:48:f5:36:77:9c:11:3f: da:0b:b1:1c:95:69:67:54:02:c7:cb:1c:a2:f7:f4:f6:5c:b9: c0:4a:03:8f:9b:0e:e8:00:80:ed:7e:7c:b6:4c:97:7d:5e:cb: 72:3b:c1:de:12:00:47:09:0b:34:0b:fa:57:8f:9d:54:9d:80: 70:93:cb:29:c1:32:1c:79:1b:75:c3:27:0f:6c:fe:ee:0f:51: 17:74:de:c4:cc:fa:19:ec:6d:00:57:3d:be:66:b1:ab:19:3e: 9d:2e:8b:0a:df:9a:4b:cb:e6:78:6e:9f:40:02:03:98:65:00: 48:b8:71:54:06:eb:ff:d8:b5:d0:9f:d4:3d:55:8e:0f:25:d0: 01:ba:60:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYM3I1KU8yenNaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk YjM5MmI2MjctOTdkYi00NDlhLTk2OWItN2FmZDIxYjQzYTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZLgXPIn/fuKUkhVPZPNxwud+lq/aqXW0x7M UzELmP9HMPe1EPKWeX2OfAk/UIfEiT4LDGdwc19jM1FUvSWOu3iUB2ZFPuW9pMG0 CJa8OouTaz7/q4MA+ntHQyKSKsk2nVUM3UDOHa2bYzfsY7zrX9df4k74V3Qw5zqL 31eVvEYNx16V4y3hPLaF9+CSU5M3WssFTF1D0TF1nhJZCB6uJyOYqJvDPQDz3R4P gygy6kmHwm+xtCWZj0cErnxlstL4snY+VVkE0obNNiHNsx1/bSr6mpi3u8DrxFAA IyHACPzNylKwsljEjDYYSy6MfVAv0xZp5md+tRlwsyBcipQHlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTA4vo0NcrykXgu/feMm4YliG3wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMmVjNzI5NmUtZDc4MC0z MmExLWFmNTYtMDAzZWE2YzA0ZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBo/0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECYg8SIQl5HxMWDU4/cMVHvrqxsuvuoy17S7oOeEF8cMIEinBrMNvht tFHJ+oY4SY0yfwFI5gKnJsMtAVaRL2jOnu/CxfprRvnlMW0QauK6BVpF+C5YBdVG 6Sgyo441i3P0g7c+Cj58hqPRrD7MvSkSNSSDKbO9SPU2d5wRP9oLsRyVaWdUAsfL HKL39PZcucBKA4+bDugAgO1+fLZMl31ey3I7wd4SAEcJCzQL+lePnVSdgHCTyynB Mhx5G3XDJw9s/u4PURd03sTM+hnsbQBXPb5msasZPp0uiwrfmkvL5nhun0ACA5hl AEi4cVQG6//YtdCf1D1Vjg8l0AG6YHI= -----END CERTIFICATE-----Generated at Sun Jul 27 12:02:34 2025 by rpki-client