$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af0d483b-52bd-3692-a837-5d40708d158b.roa File: af0d483b-52bd-3692-a837-5d40708d158b.roa (raw, json) Hash identifier: C5usyODpPVxjfgT6lPwxJ+veUf/1baH9dXwr9i3PsVg= Subject key identifier: 27:9E:46:03:DD:B9:BF:44:03:E3:82:9A:1D:2C:50:92:CD:65:BA:B4 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584D40CA4D05FA6FA21919B5B8C0 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af0d483b-52bd-3692-a837-5d40708d158b.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 237 IP address blocks: 163.253.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:4d:05:fa:6f:a2:19:19:b5:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=204937e2-0f86-4d6d-80f4-7070db4f4b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a8:cb:a4:90:00:bb:8c:44:d2:f5:1c:50:f0: fa:e0:95:6d:c6:39:d3:ca:8b:cb:c6:ce:c9:20:5f: 6a:2e:f0:c5:b6:b6:4a:82:90:d1:3f:f0:1e:e5:33: de:e2:f0:15:f5:e9:d3:a6:c1:e9:7b:1d:b5:45:6b: d6:70:5f:d2:f5:4c:ce:3e:67:e0:f5:77:f7:9c:7f: 10:fa:03:8f:9d:f4:bd:9b:d2:11:9b:70:64:a0:cc: 4a:19:f3:f4:5f:3e:b3:a6:30:9b:d3:4a:22:fa:70: 56:35:b9:c9:b5:e5:5b:c3:d1:6e:00:07:00:50:c9: 0e:8e:f9:5b:59:e5:fc:cc:36:0b:70:f6:87:c3:b0: 79:4f:69:95:3f:c0:2a:fb:b6:1a:4b:01:2a:b0:5b: ec:08:6c:61:5d:c5:92:fc:9d:ea:a2:d1:21:de:6f: d4:7f:78:bc:dc:7b:41:2b:a2:29:c5:31:c8:02:a7: 7b:7b:16:87:cc:a1:08:df:60:7c:f3:ce:77:80:c3: bb:cf:01:33:bb:02:a6:ed:03:c6:97:fa:d9:f7:1e: 3d:c5:e6:08:1c:d6:be:55:20:72:dd:1b:ee:27:8e: 4a:32:88:d1:15:4c:4c:f2:e7:5d:d5:58:29:7f:c0: 74:43:a5:31:a2:08:11:85:09:00:71:19:d3:18:c3: 3a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9E:46:03:DD:B9:BF:44:03:E3:82:9A:1D:2C:50:92:CD:65:BA:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af0d483b-52bd-3692-a837-5d40708d158b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:0d:d2:e2:38:20:72:0b:75:fe:98:3d:d7:55:5d:b7:19:78: aa:5b:bb:a4:98:fa:e5:22:d2:27:9e:2b:c3:c0:e9:75:c6:67: 64:fc:eb:c7:7a:5b:13:01:27:23:12:06:32:4b:50:4b:a0:c1: ad:7a:a3:9e:64:7f:4d:5a:a3:7b:8e:31:48:88:9e:80:e0:06: e0:5c:ae:c8:46:da:dc:9c:ae:5c:f3:e8:a3:d7:ce:cd:0d:6d: 93:41:d7:39:5b:2f:c3:b6:03:5d:bc:31:70:83:06:6f:13:78: 9e:c0:d6:6f:42:45:ce:ac:56:8c:6a:db:eb:61:d2:13:d1:e8: 58:8a:37:9a:c3:61:c4:73:35:de:35:90:62:14:b9:45:2e:a0: 18:a1:2f:31:8e:92:dd:dc:6a:6b:53:1d:2b:57:0f:b3:ac:e3: bc:3f:52:13:53:8e:23:7e:55:b2:47:f4:df:67:7d:0f:14:81: 47:e7:f2:52:bc:35:87:b3:6f:d6:85:1e:ca:dc:57:dc:b9:7a: 9f:e1:d7:52:55:da:0c:00:54:16:46:c3:cc:2a:fd:b1:ee:d7: e8:e0:3a:67:ca:98:53:2f:a3:58:59:f4:91:5d:22:ff:9e:b4: f1:ba:62:bd:38:d3:3d:5a:23:52:0e:c1:6a:f8:a4:1b:07:40: 25:40:02:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayk0F+m+iGRm1uMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk MjA0OTM3ZTItMGY4Ni00ZDZkLTgwZjQtNzA3MGRiNGY0Yjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqjLpJAAu4xE0vUcUPD64JVtxjnTyovLxs7J IF9qLvDFtrZKgpDRP/Ae5TPe4vAV9enTpsHpex21RWvWcF/S9UzOPmfg9Xf3nH8Q +gOPnfS9m9IRm3BkoMxKGfP0Xz6zpjCb00oi+nBWNbnJteVbw9FuAAcAUMkOjvlb WeX8zDYLcPaHw7B5T2mVP8Aq+7YaSwEqsFvsCGxhXcWS/J3qotEh3m/Uf3i83HtB K6IpxTHIAqd7exaHzKEI32B88853gMO7zwEzuwKm7QPGl/rZ9x49xeYIHNa+VSBy 3RvuJ45KMojRFUxM8udd1Vgpf8B0Q6UxoggRhQkAcRnTGMM61wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeeRgPdub9EA+OCmh0sUJLNZbq0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYWYwZDQ4M2ItNTJiZC0z NjkyLWE4MzctNWQ0MDcwOGQxNThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCo/0kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8N0uI4IHILdf6YPddVXbcZeKpbu6SY+uUi0ieeK8PA6XXGZ2T868d6 WxMBJyMSBjJLUEugwa16o55kf01ao3uOMUiInoDgBuBcrshG2tycrlzz6KPXzs0N bZNB1zlbL8O2A128MXCDBm8TeJ7A1m9CRc6sVoxq2+th0hPR6FiKN5rDYcRzNd41 kGIUuUUuoBihLzGOkt3camtTHStXD7Os47w/UhNTjiN+VbJH9N9nfQ8UgUfn8lK8 NYezb9aFHsrcV9y5ep/h11JV2gwAVBZGw8wq/bHu1+jgOmfKmFMvo1hZ9JFdIv+e tPG6Yr040z1aI1IOwWr4pBsHQCVAAkw= -----END CERTIFICATE-----Generated at Tue Mar 24 22:18:26 2026 by rpki-client