$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/609d59a2-4e9a-336f-8966-50b9d1d6dbf5.roa File: 609d59a2-4e9a-336f-8966-50b9d1d6dbf5.roa (raw, json) Hash identifier: rSD4fvaBzwNfQ0Vvv5viaea1ae5rvEo2sBxBKvAdTJw= Subject key identifier: 1E:18:9B:FA:A0:F2:C1:19:C4:33:48:CB:4C:A1:DA:76:6F:74:FB:7F Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584BA93263A6F41D223CA10F0090 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/609d59a2-4e9a-336f-8966-50b9d1d6dbf5.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 11164 IP address blocks: 163.253.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:63:a6:f4:1d:22:3c:a1:0f:00:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=974d10ad-ea47-45da-8c88-7b38ae4e36be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cd:33:73:48:9e:6e:2f:29:e2:04:bc:26:7b: 9d:c2:34:ea:1d:fe:b6:f3:9f:5e:c0:9d:1d:75:37: 62:a2:5a:f9:7d:b2:c1:6a:e1:b0:30:57:e6:24:a3: a7:eb:ec:30:83:bc:8c:16:50:a9:b1:c3:56:64:3d: 83:68:32:76:0a:ad:79:2c:38:ce:1a:d7:74:9c:3b: e4:45:a3:d8:75:a3:dc:85:d3:6b:72:10:29:95:46: 3b:a1:69:f8:a2:c2:ce:cf:ae:44:8a:58:00:9b:8e: 5f:e9:67:0d:d0:3c:41:69:c8:9b:03:e0:d3:c9:20: ae:c9:cf:09:55:c3:2a:fd:ab:9b:73:31:dc:7f:c2: 0c:32:d7:bf:2b:20:cf:fa:2b:fe:16:45:2d:46:31: 81:1b:bf:50:33:0b:95:6f:2f:f2:43:9b:a1:59:23: 80:4b:e7:51:a0:ce:68:fe:ca:ca:bc:92:cf:ec:6e: cf:2d:b5:43:a5:ed:dc:68:32:eb:67:71:03:7a:55: c3:69:27:61:71:1d:97:e2:a2:fa:b3:60:43:32:1d: e8:5b:af:39:45:60:95:c1:18:ef:0b:9a:b9:b1:db: b7:d2:43:de:14:c9:60:30:1b:0b:39:25:5d:15:ec: bc:e5:2e:df:b7:70:6d:96:87:75:df:cd:b4:bc:2e: fe:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:18:9B:FA:A0:F2:C1:19:C4:33:48:CB:4C:A1:DA:76:6F:74:FB:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/609d59a2-4e9a-336f-8966-50b9d1d6dbf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:85:79:2a:d4:e2:72:b1:44:31:16:77:cf:f7:07:3e:4c:5f: 15:9b:26:01:72:4d:d4:4b:f0:5d:a1:9d:b4:ea:a8:b0:37:c6: 78:f6:b7:53:c8:08:36:2b:1c:a1:73:33:26:a5:d3:73:c9:d3: b1:03:ae:9e:92:90:33:62:93:e2:de:45:ea:0b:4f:21:75:ce: cc:8b:8b:ab:b8:5b:16:ad:77:a6:97:9a:dd:fa:7c:fb:bd:05: 88:bc:a3:5a:3f:79:bf:e1:36:55:9e:0c:ba:66:b5:a3:1e:32: 64:87:0c:11:7c:4a:3e:59:27:f3:eb:c0:9a:37:0c:27:af:39: e4:fa:8e:20:88:9c:92:75:b8:f0:13:fa:57:11:07:85:eb:ce: 15:bc:5c:7c:db:45:a9:62:32:5b:74:15:02:79:0c:02:89:97: 76:c3:a8:23:a3:40:c9:73:77:cf:4f:98:87:07:c3:32:05:25: 99:3e:01:09:d9:06:be:09:00:37:60:85:01:e3:50:bb:39:b5: 2e:ae:e9:fa:08:9d:4b:55:d0:db:83:b2:37:d7:dc:ef:8f:47: b8:2a:07:d7:22:26:25:8c:84:76:ac:75:a2:45:fb:87:1e:f1: 60:3e:17:52:d8:64:11:23:64:59:65:28:fe:b6:20:d3:a0:90: 44:f0:1c:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMmOm9B0iPKEPAJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk OTc0ZDEwYWQtZWE0Ny00NWRhLThjODgtN2IzOGFlNGUzNmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg80zc0iebi8p4gS8JnudwjTqHf62859ewJ0d dTdiolr5fbLBauGwMFfmJKOn6+wwg7yMFlCpscNWZD2DaDJ2Cq15LDjOGtd0nDvk RaPYdaPchdNrchAplUY7oWn4osLOz65EilgAm45f6WcN0DxBacibA+DTySCuyc8J VcMq/aubczHcf8IMMte/KyDP+iv+FkUtRjGBG79QMwuVby/yQ5uhWSOAS+dRoM5o /srKvJLP7G7PLbVDpe3caDLrZ3EDelXDaSdhcR2X4qL6s2BDMh3oW685RWCVwRjv C5q5sdu30kPeFMlgMBsLOSVdFey85S7ft3Btlod13820vC7+yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4Ym/qg8sEZxDNIy0yh2nZvdPt/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvNjA5ZDU5YTItNGU5YS0z MzZmLTg5NjYtNTBiOWQxZDZkYmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEuFeSrU4nKxRDEWd8/3Bz5MXxWbJgFyTdRL8F2hnbTqqLA3xnj2t1PI CDYrHKFzMyal03PJ07EDrp6SkDNik+LeReoLTyF1zsyLi6u4Wxatd6aXmt36fPu9 BYi8o1o/eb/hNlWeDLpmtaMeMmSHDBF8Sj5ZJ/PrwJo3DCevOeT6jiCInJJ1uPAT +lcRB4XrzhW8XHzbRaliMlt0FQJ5DAKJl3bDqCOjQMlzd89PmIcHwzIFJZk+AQnZ Br4JADdghQHjULs5tS6u6foInUtV0NuDsjfX3O+PR7gqB9ciJiWMhHasdaJF+4ce 8WA+F1LYZBEjZFllKP62INOgkETwHPs= -----END CERTIFICATE-----Generated at Tue Nov 4 13:36:26 2025 by rpki-client