$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2a8ed64a-578d-3330-ae0f-55bf0297ec63.roa File: 2a8ed64a-578d-3330-ae0f-55bf0297ec63.roa (raw, json) Hash identifier: DDn5xH4/kEPcYmauOr1ybW+Nc2698Kz2t9/tvSBYoMs= Subject key identifier: A4:C6:E8:1B:FA:85:BB:21:0E:A4:15:F0:05:C5:5A:57:59:17:75:F2 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584ED431E29744CC7922FD19EA80 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2a8ed64a-578d-3330-ae0f-55bf0297ec63.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 396955 IP address blocks: 163.253.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:e2:97:44:cc:79:22:fd:19:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=1a0db5a0-6631-471b-a514-f9830ecc5fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:78:9d:9a:5a:cc:40:10:bd:12:64:bd:ce:bd: 67:74:7f:66:c6:0e:ac:15:1e:d5:f1:c5:b0:1d:eb: 54:25:d8:93:47:92:72:84:86:1e:5e:22:96:a5:55: be:f8:30:04:ea:49:c2:3d:17:0c:58:cf:69:a6:bf: 69:65:59:54:e8:83:a5:6c:0c:e9:ec:43:06:2f:ff: 9a:2d:a7:57:8f:1d:7c:4a:42:3d:86:39:34:4d:9f: 9d:58:7b:e4:02:e4:4f:e0:e0:d4:93:7d:0c:bf:fd: f7:84:9e:be:85:42:c7:51:c0:fb:52:cd:89:4b:39: 00:23:a2:14:06:ce:18:fc:20:07:ee:fc:a7:73:84: 12:b0:5d:22:5d:f1:0c:5f:7a:29:49:3d:e9:39:f5: 7c:25:12:52:0c:6d:58:c6:da:ca:e8:b8:2e:08:63: a3:0a:29:26:03:c9:70:b9:92:10:cf:c9:ab:36:6b: 76:19:91:54:49:ca:81:ec:ec:8d:4d:ca:0a:43:db: 66:ba:43:30:09:d9:80:df:af:80:05:21:3b:b8:15: 10:72:ce:9f:ad:3b:68:c5:e3:d5:bb:ea:4a:52:51: 07:73:ce:30:81:33:06:de:27:20:49:9a:3b:af:5a: a5:eb:a5:a3:98:93:35:92:f5:03:39:8e:12:9c:6d: 36:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C6:E8:1B:FA:85:BB:21:0E:A4:15:F0:05:C5:5A:57:59:17:75:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2a8ed64a-578d-3330-ae0f-55bf0297ec63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:6d:10:a6:07:06:48:43:d8:7f:a3:c8:bb:c1:ed:a1:51:1e: 28:d7:a4:ea:71:02:19:f5:87:01:82:77:32:7a:66:f3:06:5f: 32:54:19:c5:66:33:84:7b:94:ae:f2:56:e3:3f:f5:ae:91:10: 61:87:fd:4d:16:a7:85:eb:86:a1:3b:ee:2d:00:06:eb:fa:bc: 63:4f:ad:c3:ea:d6:61:eb:54:e6:e6:9d:66:d4:75:28:5b:8a: b6:e7:0e:71:41:35:75:eb:a4:78:7d:2e:ab:99:28:7f:9f:b2: a5:e3:61:0e:1e:dd:25:71:84:8d:77:bb:17:bd:c1:6b:88:97: 19:04:ad:f5:f3:8f:8e:97:34:50:c8:5c:de:16:84:06:f5:c9: 88:ba:5b:9c:a5:ac:4c:d9:8c:41:b5:2f:13:76:58:3d:e4:e8: 0f:dd:f4:7f:9b:c0:d3:40:97:9f:58:12:64:e2:bb:47:79:53: 0a:43:58:75:f3:db:c7:c2:52:a9:63:53:0d:af:4d:5f:0e:95: ef:e0:87:8a:6e:5e:a1:3d:0a:fe:09:97:2b:c9:ac:c4:42:e9: 81:e8:2b:60:d8:7e:ff:88:20:7b:fa:f9:ef:2f:9a:4d:96:a4: 82:fe:11:85:02:b4:73:23:af:18:ba:60:d7:86:8f:af:3d:37: b8:97:b1:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMeKXRMx5Iv0Z6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk MWEwZGI1YTAtNjYzMS00NzFiLWE1MTQtZjk4MzBlY2M1ZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknidmlrMQBC9EmS9zr1ndH9mxg6sFR7V8cWw HetUJdiTR5JyhIYeXiKWpVW++DAE6knCPRcMWM9ppr9pZVlU6IOlbAzp7EMGL/+a LadXjx18SkI9hjk0TZ+dWHvkAuRP4ODUk30Mv/33hJ6+hULHUcD7Us2JSzkAI6IU Bs4Y/CAH7vync4QSsF0iXfEMX3opST3pOfV8JRJSDG1YxtrK6LguCGOjCikmA8lw uZIQz8mrNmt2GZFUScqB7OyNTcoKQ9tmukMwCdmA36+ABSE7uBUQcs6frTtoxePV u+pKUlEHc84wgTMG3icgSZo7r1ql66WjmJM1kvUDOY4SnG02DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTG6Bv6hbshDqQV8AXFWldZF3XyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMmE4ZWQ2NGEtNTc4ZC0z MzMwLWFlMGYtNTViZjAyOTdlYzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJtEKYHBkhD2H+jyLvB7aFRHijXpOpxAhn1hwGCdzJ6ZvMGXzJUGcVm M4R7lK7yVuM/9a6REGGH/U0Wp4XrhqE77i0ABuv6vGNPrcPq1mHrVObmnWbUdShb irbnDnFBNXXrpHh9LquZKH+fsqXjYQ4e3SVxhI13uxe9wWuIlxkErfXzj46XNFDI XN4WhAb1yYi6W5ylrEzZjEG1LxN2WD3k6A/d9H+bwNNAl59YEmTiu0d5UwpDWHXz 28fCUqljUw2vTV8Ole/gh4puXqE9Cv4JlyvJrMRC6YHoK2DYfv+IIHv6+e8vmk2W pIL+EYUCtHMjrxi6YNeGj689N7iXsbA= -----END CERTIFICATE-----Generated at Mon Oct 5 09:13:11 2026 by rpki-client