$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/002be3cf-71a8-37fb-9061-7877ebe3758f.roa File: 002be3cf-71a8-37fb-9061-7877ebe3758f.roa (raw, json) Hash identifier: aQfHMg7hiKtP6HfFNtKMrkQ2UOENmpessQcLQ2deWVg= Subject key identifier: B6:B4:AF:BF:A0:9F:7D:2D:45:9A:CD:53:DD:AF:70:AB:B2:0C:45:98 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584F655D774DB4805D3215B95240 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/002be3cf-71a8-37fb-9061-7877ebe3758f.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 11537 IP address blocks: 163.253.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:77:4d:b4:80:5d:32:15:b9:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=5216a763-97f5-4122-beca-780d8e3a62a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a5:db:8c:1e:4b:44:70:b1:03:93:e3:47:1c: b9:c6:e3:c3:20:50:8f:fb:59:89:07:54:69:17:75: 94:d0:0b:86:12:21:1b:d8:ca:1b:19:59:44:24:f3: fe:ff:0a:aa:de:54:ec:b1:fa:89:92:4f:d3:93:61: 9d:ab:35:40:37:a2:0f:da:84:49:60:2b:bc:56:0b: 25:e9:44:1e:bf:15:45:7d:a8:76:d8:aa:b7:be:ff: d0:ae:10:c8:6b:1f:56:5e:f1:1b:a0:26:a2:c8:5d: a2:ad:00:6f:79:90:d3:f1:4b:fb:54:b7:36:15:62: 72:a1:4f:43:29:b4:4f:f9:2e:18:43:d0:1d:22:a3: af:e1:10:02:87:ae:15:9c:f6:a3:60:0f:47:5c:32: d0:18:b9:fa:9a:0d:92:5f:a6:50:e3:ac:9a:cd:a6: 29:66:27:f3:97:a4:9a:71:7e:20:55:92:a1:94:06: 1e:40:15:9e:ec:16:df:4a:95:c5:5b:26:d3:7b:b5: 76:2e:91:39:81:33:72:34:1a:5f:6c:ea:89:f0:bf: 01:f8:15:24:13:e3:03:a0:a8:8c:60:7a:05:4e:1f: 66:8e:52:34:70:75:d3:3e:a4:28:69:63:93:b2:8f: 3c:4a:0b:29:f7:46:06:ef:5d:4d:ec:39:6b:d0:82: 88:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B4:AF:BF:A0:9F:7D:2D:45:9A:CD:53:DD:AF:70:AB:B2:0C:45:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/002be3cf-71a8-37fb-9061-7877ebe3758f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:4e:6e:9d:0d:92:de:0a:2a:37:e5:a6:a1:e8:9d:ae:47:fd: 97:24:9e:cc:a4:ea:5f:60:7b:8b:6b:15:3e:36:60:18:50:33: 60:c5:c2:b3:c1:2b:af:45:af:2f:b7:03:0a:02:46:6d:5a:f9: 18:64:60:ef:60:6b:c3:ac:7b:ae:ab:8f:a8:d3:52:d8:ce:73: da:6a:25:cd:89:04:7a:72:0a:27:98:c0:6e:2d:68:a7:eb:e8: 4a:c0:18:23:70:7e:bb:41:b1:01:70:23:26:a3:b5:0c:d0:a6: ca:ea:90:81:0a:16:6c:65:ae:9b:1c:74:40:8a:dc:d0:ea:03: da:9c:6b:74:a8:b0:02:73:b7:50:26:db:0a:ed:f4:f0:82:70: 01:2c:a6:fc:e0:a7:22:32:57:68:91:54:a9:db:aa:ca:83:6c: 19:a0:cc:ed:6f:eb:7d:0b:85:ee:72:f2:a0:56:40:70:37:fe: 6d:4a:18:8d:93:2a:7a:6d:10:36:67:d8:4a:1a:40:ca:5a:92: 89:7c:42:fe:fd:26:55:4d:55:3a:6b:3a:9c:34:97:c0:42:63: e4:99:f0:c1:fa:6b:21:94:42:12:c3:3c:2e:4e:60:d9:bd:e1: 0e:82:43:3c:1d:ba:42:11:2a:47:5d:70:1e:4b:13:92:b2:e6: 54:28:14:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXXdNtIBdMhW5UkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk NTIxNmE3NjMtOTdmNS00MTIyLWJlY2EtNzgwZDhlM2E2MmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqXbjB5LRHCxA5PjRxy5xuPDIFCP+1mJB1Rp F3WU0AuGEiEb2MobGVlEJPP+/wqq3lTssfqJkk/Tk2GdqzVAN6IP2oRJYCu8Vgsl 6UQevxVFfah22Kq3vv/QrhDIax9WXvEboCaiyF2irQBveZDT8Uv7VLc2FWJyoU9D KbRP+S4YQ9AdIqOv4RACh64VnPajYA9HXDLQGLn6mg2SX6ZQ46yazaYpZifzl6Sa cX4gVZKhlAYeQBWe7BbfSpXFWybTe7V2LpE5gTNyNBpfbOqJ8L8B+BUkE+MDoKiM YHoFTh9mjlI0cHXTPqQoaWOTso88Sgsp90YG711N7Dlr0IKIzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLa0r7+gn30tRZrNU92vcKuyDEWYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMDAyYmUzY2YtNzFhOC0z N2ZiLTkwNjEtNzg3N2ViZTM3NThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALxObp0Nkt4KKjflpqHona5H/Zcknsyk6l9ge4trFT42YBhQM2DFwrPB K69Fry+3AwoCRm1a+RhkYO9ga8Ose66rj6jTUtjOc9pqJc2JBHpyCieYwG4taKfr 6ErAGCNwfrtBsQFwIyajtQzQpsrqkIEKFmxlrpscdECK3NDqA9qca3SosAJzt1Am 2wrt9PCCcAEspvzgpyIyV2iRVKnbqsqDbBmgzO1v630Lhe5y8qBWQHA3/m1KGI2T KnptEDZn2EoaQMpakol8Qv79JlVNVTprOpw0l8BCY+SZ8MH6ayGUQhLDPC5OYNm9 4Q6CQzwdukIRKkddcB5LE5Ky5lQoFDI= -----END CERTIFICATE-----Generated at Mon Oct 5 06:06:25 2026 by rpki-client