$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/8559c3f1-db5e-3610-ac42-bc1f4e9a33ec.roa File: 8559c3f1-db5e-3610-ac42-bc1f4e9a33ec.roa (raw, json) Hash identifier: 9eGeGFeBA7qRswzGHXRRvpF1VWqyXd4UgO6XW0lIbFo= Subject key identifier: 86:EC:99:C9:32:56:90:20:85:50:1B:CF:CD:F6:5E:69:62:A7:B2:CF Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584D40CA447BB7DAB25500FB0B00 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/8559c3f1-db5e-3610-ac42-bc1f4e9a33ec.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 11537 IP address blocks: 163.253.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:44:7b:b7:da:b2:55:00:fb:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=1069da7e-3553-4795-b4f4-4423087d295f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ba:ef:be:71:fe:47:40:ef:d9:e4:4b:03:5e: b6:a7:81:09:6d:2c:20:f7:42:5a:e4:c8:b2:7a:92: a4:0a:a5:a3:ec:df:5a:ac:72:8b:f8:cd:91:ba:f8: a2:1a:7b:bb:1c:fa:6a:49:33:b6:64:c0:f5:60:b0: 42:c7:1e:ed:ae:78:41:06:ba:a5:c5:d2:33:3d:41: aa:d3:1c:09:61:9a:89:85:b6:16:98:72:59:13:d6: 02:08:9a:58:12:1a:b9:97:31:09:f9:c3:cf:27:1f: c1:18:51:86:31:17:c8:4e:12:58:4a:73:ca:96:b4: 61:ba:a7:ee:6d:96:af:fb:85:45:78:f2:4b:0c:4e: 24:62:40:80:5d:16:09:1a:55:6c:15:c4:6d:3e:fc: d9:45:85:ca:90:bf:fc:96:e5:b0:48:06:f5:ac:6c: 0f:ed:aa:a8:98:80:dc:bc:41:4f:56:92:d9:7c:88: 1e:5d:36:ba:a2:5e:99:93:6d:d2:6a:cc:3e:da:aa: 65:b2:8a:b6:06:ac:b6:1a:cf:8c:15:7a:22:60:66: a1:3c:31:c5:9d:5d:72:dc:70:53:93:a7:5e:a8:31: d5:ca:88:0b:86:00:85:e9:7f:5b:4a:e0:ee:48:9b: 3c:0f:78:28:96:4d:9a:b9:78:f0:49:b2:d2:ff:67: 2f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EC:99:C9:32:56:90:20:85:50:1B:CF:CD:F6:5E:69:62:A7:B2:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/8559c3f1-db5e-3610-ac42-bc1f4e9a33ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:f1:5e:70:49:07:b2:b5:af:89:dd:a5:be:91:7e:8c:84:fc: 91:fe:64:4b:52:78:f3:2b:40:bf:f1:b3:5c:4b:a8:ab:c0:68: 2f:a7:ca:77:c3:82:38:84:fd:32:9d:bc:2d:55:cf:70:8d:ee: e7:6c:c3:bf:aa:b8:d1:ed:83:88:9e:cd:8c:6d:30:23:06:40: 90:b4:2a:fa:5b:d7:27:fc:a5:50:57:ae:4d:58:01:b2:ff:f3: 3c:46:14:53:b1:a1:7e:a5:14:2b:13:df:96:e4:41:17:73:ef: fb:61:26:3e:75:f0:d2:96:b2:cf:6a:5d:45:e7:b2:a2:69:6d: 91:cc:5f:47:32:bf:bd:50:a3:4a:62:67:e2:da:c6:18:f2:3c: 06:d1:ba:64:2d:89:0d:91:f6:c0:56:3d:d7:6a:2c:8d:eb:7f: e0:1a:61:66:dd:66:09:68:d4:ec:ff:04:e9:9e:26:fa:e7:09: 58:98:e6:96:30:bc:40:39:d8:3a:d0:c8:79:9b:83:05:4c:b1: fc:84:36:c4:e5:7b:05:92:75:bd:ac:90:32:d5:1a:b5:68:a2: b1:de:cc:ee:4b:28:a5:07:dd:f6:22:7d:fa:c0:b0:97:21:9e: f1:24:89:5e:d1:50:93:a2:9f:92:64:a9:60:fd:60:53:73:ad: f0:0a:f5:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AykR7t9qyVQD7CwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk MTA2OWRhN2UtMzU1My00Nzk1LWI0ZjQtNDQyMzA4N2QyOTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbrvvnH+R0Dv2eRLA162p4EJbSwg90Ja5Miy epKkCqWj7N9arHKL+M2RuviiGnu7HPpqSTO2ZMD1YLBCxx7trnhBBrqlxdIzPUGq 0xwJYZqJhbYWmHJZE9YCCJpYEhq5lzEJ+cPPJx/BGFGGMRfIThJYSnPKlrRhuqfu bZav+4VFePJLDE4kYkCAXRYJGlVsFcRtPvzZRYXKkL/8luWwSAb1rGwP7aqomIDc vEFPVpLZfIgeXTa6ol6Zk23Sasw+2qplsoq2Bqy2Gs+MFXoiYGahPDHFnV1y3HBT k6deqDHVyogLhgCF6X9bSuDuSJs8D3golk2auXjwSbLS/2cvvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbsmckyVpAghVAbz832Xmlip7LPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvODU1OWMzZjEtZGI1ZS0z NjEwLWFjNDItYmMxZjRlOWEzM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALzxXnBJB7K1r4ndpb6RfoyE/JH+ZEtSePMrQL/xs1xLqKvAaC+nynfD gjiE/TKdvC1Vz3CN7udsw7+quNHtg4iezYxtMCMGQJC0Kvpb1yf8pVBXrk1YAbL/ 8zxGFFOxoX6lFCsT35bkQRdz7/thJj518NKWss9qXUXnsqJpbZHMX0cyv71Qo0pi Z+LaxhjyPAbRumQtiQ2R9sBWPddqLI3rf+AaYWbdZglo1Oz/BOmeJvrnCViY5pYw vEA52DrQyHmbgwVMsfyENsTlewWSdb2skDLVGrVoorHezO5LKKUH3fYiffrAsJch nvEkiV7RUJOin5JkqWD9YFNzrfAK9Qw= -----END CERTIFICATE-----Generated at Tue Mar 24 22:15:33 2026 by rpki-client