$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a225d617-d65c-3895-8039-5375646dc1b8.roa File: a225d617-d65c-3895-8039-5375646dc1b8.roa (raw, json) Hash identifier: 3XqNCLjOtFiZcLUW7sg4NMSUjy504TcNuhdLBy2M36g= Subject key identifier: B1:A1:3F:83:C6:8B:6F:6F:47:83:F2:8E:EE:EB:07:57:6B:66:01:03 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584E2D9F3B240FC3D043E29CA080 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a225d617-d65c-3895-8039-5375646dc1b8.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 11164 IP address blocks: 163.253.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:3b:24:0f:c3:d0:43:e2:9c:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=021bfe65-31c3-4d1a-b1e5-57d30c9bc40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:39:42:fe:dd:6c:5d:19:a1:c9:f0:95:09:1a: aa:c8:17:f3:30:47:f7:58:97:e8:66:c9:80:e4:ca: 9d:ac:a4:1a:3d:64:e2:27:ab:ba:3a:50:e4:4d:f3: a7:b9:98:c2:ba:11:25:52:6a:d4:c7:3c:37:32:b6: 7c:05:a5:12:0b:da:92:e3:b6:1f:16:70:b8:7a:6f: 57:6d:83:1f:24:ea:9c:a3:dd:2c:81:b1:b4:93:f7: ac:ed:7f:bd:41:b9:4b:c8:74:40:08:b7:f6:ae:b3: a1:a9:2f:2b:d0:ef:25:9d:4a:25:e0:dd:dc:0c:a9: 55:4f:23:9e:34:a2:fc:7b:92:7e:73:f6:a2:4c:45: 75:f1:19:de:0a:0c:7e:91:e2:d8:61:cf:55:c7:cb: 35:f9:70:61:e4:7b:bf:75:1d:e9:5a:7b:e2:82:f2: fd:91:99:f3:1e:b1:9b:dd:6c:7c:ef:1c:bd:9f:80: 7b:a4:1d:e3:b8:89:e5:b3:c5:26:9d:f8:e7:a7:a8: b0:b7:d3:4a:0c:5d:81:75:21:83:21:c3:a0:47:47: 27:72:5a:a6:c4:d4:b4:8a:13:10:cb:d8:32:a0:a2: c6:e0:eb:44:9c:cd:45:62:d5:59:e6:2b:4d:ee:6a: 7f:f0:c1:bd:69:89:cc:a1:df:3c:91:3a:0c:b4:32: cc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A1:3F:83:C6:8B:6F:6F:47:83:F2:8E:EE:EB:07:57:6B:66:01:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/a225d617-d65c-3895-8039-5375646dc1b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:fa:ea:f7:56:8d:a1:4f:ff:5a:83:a2:2f:88:5d:d4:6b:15: c9:ae:6a:74:5d:c0:a9:ca:95:e4:86:5f:e7:68:e7:b6:92:a1: 0c:08:d2:cb:d0:b9:83:13:b7:89:d3:6b:b6:4d:5f:f0:d3:d5: a0:e4:ab:a0:b1:64:4b:c8:58:b3:fb:e5:00:72:4e:a2:e0:87: e7:2e:1f:b8:a2:a9:99:90:9d:31:0c:0f:26:bf:5a:75:41:b3: ce:91:1a:13:c8:e3:b3:5e:5b:a4:a4:fd:16:db:56:a2:80:6d: 49:1f:eb:22:8a:9f:ee:84:82:9d:c5:0a:3c:b9:30:4d:ec:68: af:f8:ee:e3:33:9b:97:a5:ed:39:1e:ab:de:03:da:70:4b:4a: 19:7d:04:6c:c1:20:e1:e4:85:63:52:6c:00:b1:c8:f0:65:36: 08:21:e1:79:2e:0c:f6:a5:33:fb:35:5b:eb:e6:ec:b8:00:d0: 5f:d9:20:e0:c3:8f:18:a1:5e:df:b9:d9:23:fd:0f:1b:16:8f: b0:f8:48:59:c5:c9:e9:4f:5e:9e:56:be:0a:a7:3a:4b:a9:cf: 81:af:8f:5d:05:dd:6c:68:ca:e9:91:94:48:e2:01:7c:4d:20: fd:73:1e:51:6e:f1:67:f6:d9:ad:c3:69:61:e7:72:b1:02:99: 34:86:d7:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnzskD8PQQ+KcoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk MDIxYmZlNjUtMzFjMy00ZDFhLWIxZTUtNTdkMzBjOWJjNDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjlC/t1sXRmhyfCVCRqqyBfzMEf3WJfoZsmA 5MqdrKQaPWTiJ6u6OlDkTfOnuZjCuhElUmrUxzw3MrZ8BaUSC9qS47YfFnC4em9X bYMfJOqco90sgbG0k/es7X+9QblLyHRACLf2rrOhqS8r0O8lnUol4N3cDKlVTyOe NKL8e5J+c/aiTEV18RneCgx+keLYYc9Vx8s1+XBh5Hu/dR3pWnvigvL9kZnzHrGb 3Wx87xy9n4B7pB3juInls8Umnfjnp6iwt9NKDF2BdSGDIcOgR0cnclqmxNS0ihMQ y9gyoKLG4OtEnM1FYtVZ5itN7mp/8MG9aYnMod88kToMtDLMHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGhP4PGi29vR4Pyju7rB1drZgEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYTIyNWQ2MTctZDY1Yy0z ODk1LTgwMzktNTM3NTY0NmRjMWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMH66vdWjaFP/1qDoi+IXdRrFcmuanRdwKnKleSGX+do57aSoQwI0svQ uYMTt4nTa7ZNX/DT1aDkq6CxZEvIWLP75QByTqLgh+cuH7iiqZmQnTEMDya/WnVB s86RGhPI47NeW6Sk/RbbVqKAbUkf6yKKn+6Egp3FCjy5ME3saK/47uMzm5el7Tke q94D2nBLShl9BGzBIOHkhWNSbACxyPBlNggh4XkuDPalM/s1W+vm7LgA0F/ZIODD jxihXt+52SP9DxsWj7D4SFnFyelPXp5WvgqnOkupz4Gvj10F3WxoyumRlEjiAXxN IP1zHlFu8Wf22a3DaWHncrECmTSG1wg= -----END CERTIFICATE-----Generated at Mon Jun 29 00:10:32 2026 by rpki-client