$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2ec7296e-d780-32a1-af56-003ea6c04f3c.roa File: 2ec7296e-d780-32a1-af56-003ea6c04f3c.roa (raw, json) Hash identifier: nTZDqLM9VVbQ8B8jSOId+4+peEkVtEc4KPQH6jq1qCg= Subject key identifier: 22:C2:39:1C:8F:69:94:E8:3C:15:E0:36:C4:82:FA:B2:1A:6C:1F:3C Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584D40CA44A70F467E24AB3B2140 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2ec7296e-d780-32a1-af56-003ea6c04f3c.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 11537 IP address blocks: 163.253.40.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:44:a7:0f:46:7e:24:ab:3b:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=0d57638d-bb78-4316-ab33-162b7da93d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:20:60:16:c6:f0:28:77:04:fe:93:40:c6:d1: a8:78:a0:01:e8:bd:1c:d8:e7:7f:77:44:a7:cd:35: 96:9a:e6:c4:e3:84:65:17:8e:6d:36:b6:0b:c3:77: de:33:60:2a:e8:6c:d0:0c:d8:b5:91:18:64:89:c5: 8f:52:23:e0:49:f9:ea:29:d5:fd:96:a4:da:80:c8: 0c:0e:93:f5:9e:45:db:26:c4:ba:e6:5b:f6:16:bb: 26:ab:4f:af:93:df:2f:d6:ac:0c:25:b1:be:d9:32: dc:01:df:b2:17:46:f8:73:18:da:4d:87:76:8b:93: 54:fc:47:f3:be:9d:17:de:4d:ad:0e:23:5f:c7:7e: 6d:29:49:c4:ea:71:e5:d1:d7:70:82:59:cd:99:64: b2:fb:bf:b3:98:b5:0d:2c:58:ae:fc:e1:bb:fc:19: 47:d3:33:8e:ad:54:e5:8d:39:c8:4a:bf:80:8a:b3: e0:18:79:1c:9b:f0:ea:b9:da:2c:fc:2e:ee:27:1a: fa:f0:39:ea:03:e9:a4:5f:2d:c3:e3:2e:a5:69:56: cc:2e:73:da:7b:89:62:7a:ec:80:91:8b:a6:45:74: e8:82:f6:0f:2c:bd:3c:ee:95:ce:c8:d8:d9:61:9d: d1:a1:a3:11:26:f5:61:51:2e:18:ac:bc:cf:40:9f: b6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C2:39:1C:8F:69:94:E8:3C:15:E0:36:C4:82:FA:B2:1A:6C:1F:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/2ec7296e-d780-32a1-af56-003ea6c04f3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:86:d0:1b:c1:b5:72:14:f0:99:db:99:e5:c8:f8:67:ed:b0: 63:5c:28:ac:36:57:ab:6d:dd:df:18:75:6f:e2:8a:50:c8:8a: 13:56:c1:ef:46:81:e0:fb:57:8a:0a:af:45:b3:d6:0e:7a:af: 99:6f:20:d7:16:b8:c4:04:bd:80:86:83:0d:76:5f:ce:1b:04: 7f:e5:23:b1:5b:64:c3:3b:f8:b0:36:3e:d0:b3:30:81:f0:53: 30:90:43:85:22:01:cf:50:c9:d8:5e:73:97:35:bb:54:ce:52: 73:71:de:33:6e:09:e6:10:8a:15:42:46:29:2a:ed:e0:79:70: 45:a8:96:2d:1a:7a:3a:3d:68:87:5e:ed:22:8c:36:bf:1e:fc: 1d:c7:2f:f5:e9:e0:49:a7:c0:37:b4:53:5c:6f:2b:ba:ca:2f: 27:79:91:41:e6:29:d5:a5:aa:b7:a8:1b:a8:7a:7c:36:c2:aa: b6:9b:6e:80:59:60:6a:88:5a:b4:ac:9c:e2:1b:f5:98:85:1c: 44:4b:21:24:01:7a:76:39:49:94:cb:21:2b:ea:5a:74:8b:ad: b0:b3:09:75:50:c6:1c:c5:05:38:ad:b2:76:3a:4d:a0:72:99: 98:e2:95:9a:33:25:03:ef:4d:fa:a4:fe:18:97:38:d6:59:92: ce:62:af:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AykSnD0Z+JKs7IUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk MGQ1NzYzOGQtYmI3OC00MzE2LWFiMzMtMTYyYjdkYTkzZDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziBgFsbwKHcE/pNAxtGoeKAB6L0c2Od/d0Sn zTWWmubE44RlF45tNrYLw3feM2Aq6GzQDNi1kRhkicWPUiPgSfnqKdX9lqTagMgM DpP1nkXbJsS65lv2Frsmq0+vk98v1qwMJbG+2TLcAd+yF0b4cxjaTYd2i5NU/Efz vp0X3k2tDiNfx35tKUnE6nHl0ddwglnNmWSy+7+zmLUNLFiu/OG7/BlH0zOOrVTl jTnISr+AirPgGHkcm/Dqudos/C7uJxr68DnqA+mkXy3D4y6laVbMLnPae4lieuyA kYumRXTogvYPLL087pXOyNjZYZ3RoaMRJvVhUS4YrLzPQJ+2qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLCORyPaZToPBXgNsSC+rIabB88MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvMmVjNzI5NmUtZDc4MC0z MmExLWFmNTYtMDAzZWE2YzA0ZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBo/0oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGG0BvBtXIU8JnbmeXI+GftsGNcKKw2V6tt3d8YdW/iilDIihNWwe9G geD7V4oKr0Wz1g56r5lvINcWuMQEvYCGgw12X84bBH/lI7FbZMM7+LA2PtCzMIHw UzCQQ4UiAc9Qydhec5c1u1TOUnNx3jNuCeYQihVCRikq7eB5cEWoli0aejo9aIde 7SKMNr8e/B3HL/Xp4EmnwDe0U1xvK7rKLyd5kUHmKdWlqreoG6h6fDbCqrabboBZ YGqIWrSsnOIb9ZiFHERLISQBenY5SZTLISvqWnSLrbCzCXVQxhzFBTitsnY6TaBy mZjilZozJQPvTfqk/hiXONZZks5ir7Q= -----END CERTIFICATE-----Generated at Tue Mar 24 22:17:35 2026 by rpki-client