
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/425f7035-1c6e-3c35-be2e-d18c0227bf29.roa
File: 425f7035-1c6e-3c35-be2e-d18c0227bf29.roa (raw, json)
Hash identifier: 5VPDSYGH6JVzisEaR4nyxlb4Ht1Mj44ZGLbODGnLtIQ=
Subject key identifier: 2F:FA:CA:72:9E:F0:3B:FD:37:4D:59:AC:36:F1:EE:40:99:37:41:1F
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584D40CA4CC8C0402B4F27938D00
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/425f7035-1c6e-3c35-be2e-d18c0227bf29.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 11537
IP address blocks: 163.253.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:ca:4c:c8:c0:40:2b:4f:27:93:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=bee04d00-f313-413c-984b-4b6638d10ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:96:3f:05:4f:b2:ad:c4:06:24:1e:16:d4:5d:
6f:44:6c:69:b0:cf:26:9a:79:a6:b1:35:47:a5:66:
51:5b:15:a3:fb:e2:77:1e:b7:94:7e:6c:b8:65:b7:
f1:1b:21:0f:68:7e:4e:86:b0:f4:18:48:80:1a:88:
c2:5a:5c:46:64:64:64:58:82:2d:e4:4c:1e:a9:d8:
93:ef:f2:c1:82:e6:fe:e4:3e:20:64:b2:3b:ef:6a:
24:46:3b:70:e5:9d:34:47:b1:1d:17:2d:74:46:31:
ae:20:f6:55:8b:b1:fb:9c:6a:6b:8a:39:b3:aa:41:
7f:d0:22:62:10:04:9b:fb:06:2c:85:32:eb:67:d6:
6b:6d:ab:bd:ad:84:9e:f2:81:1b:16:5a:fe:11:66:
da:7f:8d:50:c5:3b:07:50:54:62:9a:2a:94:f6:19:
3f:3d:05:0d:57:a4:07:e6:b4:75:df:ce:22:f5:c2:
3e:a3:73:2d:4c:73:a4:fa:d0:66:77:dc:ec:24:2b:
50:bf:31:5a:4b:ab:1a:98:0e:7d:db:fb:5c:06:68:
57:76:a2:83:98:24:d2:0c:d7:36:5a:89:75:91:f2:
9b:cb:0c:b9:72:bb:39:a8:0c:b0:b5:67:fa:0c:31:
56:65:81:af:7c:32:b8:f2:f2:5b:d5:44:1a:ae:52:
5b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FA:CA:72:9E:F0:3B:FD:37:4D:59:AC:36:F1:EE:40:99:37:41:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/425f7035-1c6e-3c35-be2e-d18c0227bf29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:ce:2f:c0:d2:36:b7:66:53:d7:7e:c4:14:23:66:f1:fe:51:
79:b7:32:02:aa:e9:9e:0a:6c:82:a7:a4:c3:46:11:6b:bb:bd:
40:83:77:bb:ac:ee:60:69:a5:9c:e6:87:47:03:36:43:83:11:
2b:94:ef:d2:ac:d7:eb:27:44:87:68:f5:47:9d:46:3b:9e:5d:
29:ad:66:a8:d9:6b:c6:fc:81:da:a5:01:07:70:5d:c9:22:a6:
b1:1e:de:ea:01:36:b8:92:7c:19:6c:d7:f6:fc:a3:de:00:f8:
6f:86:bc:5c:49:dd:64:c8:42:4b:b1:5a:bf:e2:f6:1a:9d:bd:
b9:f5:50:7a:3e:45:6f:c1:9b:77:9a:d2:56:81:0b:3b:89:2a:
02:3c:a0:a5:ab:63:93:02:47:30:86:1a:90:0b:ce:de:c1:9b:
f8:9e:f2:a0:b7:10:88:d9:78:f7:9f:63:8c:fe:1f:30:1f:3d:
5f:3e:d5:87:fb:f1:61:2c:42:44:f8:84:f6:cd:82:12:aa:83:
f1:ec:f9:26:eb:ab:ce:3d:5c:de:f2:fc:a7:e5:9f:ce:b2:58:
58:b9:31:ed:93:14:ea:98:2c:4f:61:16:38:e5:b2:a9:f6:d9:
a7:d4:ce:d6:d5:8b:f6:4f:98:9b:7c:81:13:21:74:36:be:1c:
91:3b:43:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AykzIwEArTyeTjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk
YmVlMDRkMDAtZjMxMy00MTNjLTk4NGItNGI2NjM4ZDEwZWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZY/BU+yrcQGJB4W1F1vRGxpsM8mmnmmsTVH
pWZRWxWj++J3HreUfmy4ZbfxGyEPaH5OhrD0GEiAGojCWlxGZGRkWIIt5EweqdiT
7/LBgub+5D4gZLI772okRjtw5Z00R7EdFy10RjGuIPZVi7H7nGprijmzqkF/0CJi
EASb+wYshTLrZ9Zrbau9rYSe8oEbFlr+EWbaf41QxTsHUFRimiqU9hk/PQUNV6QH
5rR1384i9cI+o3MtTHOk+tBmd9zsJCtQvzFaS6samA592/tcBmhXdqKDmCTSDNc2
Wol1kfKbywy5crs5qAywtWf6DDFWZYGvfDK48vJb1UQarlJbUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC/6ynKe8Dv9N01ZrDbx7kCZN0EfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvNDI1ZjcwMzUtMWM2ZS0z
YzM1LWJlMmUtZDE4YzAyMjdiZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXOL8DSNrdmU9d+xBQjZvH+UXm3MgKq6Z4KbIKnpMNGEWu7vUCDd7us
7mBppZzmh0cDNkODESuU79Ks1+snRIdo9UedRjueXSmtZqjZa8b8gdqlAQdwXcki
prEe3uoBNriSfBls1/b8o94A+G+GvFxJ3WTIQkuxWr/i9hqdvbn1UHo+RW/Bm3ea
0laBCzuJKgI8oKWrY5MCRzCGGpALzt7Bm/ie8qC3EIjZePefY4z+HzAfPV8+1Yf7
8WEsQkT4hPbNghKqg/Hs+Sbrq849XN7y/Kfln86yWFi5Me2TFOqYLE9hFjjlsqn2
2afUztbVi/ZPmJt8gRMhdDa+HJE7Qw4=
-----END CERTIFICATE-----
Generated at Tue Mar 24 22:18:52 2026 by rpki-client