$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9851550-48fa-3e67-a75b-c441d378e2ab.roa File: b9851550-48fa-3e67-a75b-c441d378e2ab.roa (raw, json) Hash identifier: sKhKg3lhhocYlSK1x5gXgzOYa+As9LUe82v8g5eNUCw= Subject key identifier: 2E:21:1C:C3:37:4F:1C:7C:AC:99:73:C8:80:03:FC:60:57:65:20:46 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584AA160D4AB35A6454080947680 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9851550-48fa-3e67-a75b-c441d378e2ab.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 22742 IP address blocks: 163.253.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:60:d4:ab:35:a6:45:40:80:94:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=7a7429d2-3049-4f14-a401-3b9e4ff1d0dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4f:4e:b3:61:a3:34:77:78:3a:8f:04:7d:13: 9a:1f:de:32:7a:26:c5:e2:94:37:cd:4e:27:d8:57: f3:ec:be:1c:39:bc:93:ae:02:5a:94:c1:c0:c8:b1: cc:d0:bc:94:f4:b5:11:82:20:49:e3:f7:01:17:3c: f5:7a:b0:1a:5c:66:0d:42:bd:e6:3e:c6:77:e0:c1: 43:94:38:f1:05:08:a0:eb:80:53:3c:b8:ee:4b:ea: 98:c0:9a:a6:23:11:e2:c2:80:da:26:a4:52:1a:8d: a6:11:91:d3:82:ca:ed:02:ae:c2:f6:ef:94:34:8c: 30:aa:78:1c:dc:cf:16:e6:d1:78:1b:51:6a:3f:c7: e2:74:45:ee:ba:95:25:15:d1:92:79:03:24:f3:13: c6:dd:4c:e1:22:4a:ba:45:32:84:67:2c:5e:43:59: 79:23:ed:ae:b7:39:82:02:6d:9e:3c:cc:b8:c2:89: f0:c4:22:0d:59:1d:cb:f6:1a:c5:33:68:2a:34:a1: d6:55:46:4e:ed:20:4c:62:c4:1a:32:69:3b:0b:fa: 3a:dd:f8:7b:96:49:be:d1:b8:31:a0:b3:49:7e:1d: 73:94:6c:a3:9a:ab:dc:70:76:bb:78:68:55:a4:a8: de:22:bb:d9:07:38:c2:f1:d6:a8:ad:79:df:c0:62: 56:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:21:1C:C3:37:4F:1C:7C:AC:99:73:C8:80:03:FC:60:57:65:20:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9851550-48fa-3e67-a75b-c441d378e2ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:02:80:cf:5e:ac:45:0e:2c:51:fb:a2:c5:f2:bd:3d:2f:d8: 56:11:57:ff:3b:b2:f7:5d:c5:26:36:53:1f:55:23:a4:7d:6f: 0a:92:be:ef:03:e1:5f:d0:0c:37:7b:b3:c1:15:2d:f5:4a:d7: e2:0c:bb:6f:d8:e3:29:86:7c:4a:6d:a5:0e:52:c9:61:51:2e: 88:6b:43:9b:d3:f9:00:1f:df:ca:ea:bc:f4:47:3f:e7:e1:8e: cd:9f:91:58:22:3a:4a:48:87:c9:7d:82:d8:36:58:bb:d7:66: 5c:17:88:0d:e0:36:ca:54:48:2a:ce:f1:8b:93:f9:66:fc:11: 64:0a:ac:3d:76:5f:9c:fd:3f:1c:04:7a:26:a3:19:15:98:28: 16:c1:72:07:08:77:ca:7e:f1:5e:72:69:e4:7b:da:ee:11:de: 77:a4:11:f2:91:e0:e3:76:29:b3:38:b4:3a:16:cb:67:a9:f7: 6e:39:6b:29:4d:80:65:1e:c2:68:59:dd:40:1b:70:ad:01:b0: 93:3c:f1:c5:b1:b9:7d:50:0b:8a:7f:05:fe:9f:cd:68:d7:37: 03:d0:37:22:b4:33:b5:1b:ee:e8:e1:dd:5b:d6:b7:e6:a4:9a: ca:52:76:67:b9:9d:aa:86:33:ee:70:d4:61:2c:97:69:06:7b: 46:ec:02:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYNSrNaZFQICUdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk N2E3NDI5ZDItMzA0OS00ZjE0LWE0MDEtM2I5ZTRmZjFkMGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnE9Os2GjNHd4Oo8EfROaH94yeibF4pQ3zU4n 2Ffz7L4cObyTrgJalMHAyLHM0LyU9LURgiBJ4/cBFzz1erAaXGYNQr3mPsZ34MFD lDjxBQig64BTPLjuS+qYwJqmIxHiwoDaJqRSGo2mEZHTgsrtAq7C9u+UNIwwqngc 3M8W5tF4G1FqP8fidEXuupUlFdGSeQMk8xPG3UzhIkq6RTKEZyxeQ1l5I+2utzmC Am2ePMy4wonwxCINWR3L9hrFM2gqNKHWVUZO7SBMYsQaMmk7C/o63fh7lkm+0bgx oLNJfh1zlGyjmqvccHa7eGhVpKjeIrvZBzjC8daorXnfwGJWxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4hHMM3Txx8rJlzyIAD/GBXZSBGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYjk4NTE1NTAtNDhmYS0z ZTY3LWE3NWItYzQ0MWQzNzhlMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJACgM9erEUOLFH7osXyvT0v2FYRV/87svddxSY2Ux9VI6R9bwqSvu8D 4V/QDDd7s8EVLfVK1+IMu2/Y4ymGfEptpQ5SyWFRLohrQ5vT+QAf38rqvPRHP+fh js2fkVgiOkpIh8l9gtg2WLvXZlwXiA3gNspUSCrO8YuT+Wb8EWQKrD12X5z9PxwE eiajGRWYKBbBcgcId8p+8V5yaeR72u4R3nekEfKR4ON2KbM4tDoWy2ep9245aylN gGUewmhZ3UAbcK0BsJM88cWxuX1QC4p/Bf6fzWjXNwPQNyK0M7Ub7ujh3VvWt+ak mspSdme5naqGM+5w1GEsl2kGe0bsAuU= -----END CERTIFICATE-----Generated at Sun Jul 27 12:02:04 2025 by rpki-client