$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af3d535e-1c31-32d1-a6a6-68041d0d7365.roa File: af3d535e-1c31-32d1-a6a6-68041d0d7365.roa (raw, json) Hash identifier: tJihLhfqDPuAFJg8KQXXLxrk2D4yvpgb3tBT9AZvwec= Subject key identifier: 28:6D:B0:46:7A:E8:AF:FF:DB:C0:ED:D9:21:70:8C:3B:AF:42:40:29 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584E2AD455356C619097F35C1800 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af3d535e-1c31-32d1-a6a6-68041d0d7365.roa Signing time: Sun 14 Jun 2026 09:00:11 +0000 ROA not before: Sun 14 Jun 2026 09:00:11 +0000 ROA not after: Sat 12 Sep 2026 09:00:11 +0000 asID: 396961 IP address blocks: 163.253.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2a:d4:55:35:6c:61:90:97:f3:5c:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Jun 14 09:00:11 2026 GMT Not After : Sep 12 09:00:11 2026 GMT Subject: CN=b472e281-e4e8-4817-9c6e-8a62499d2cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:eb:37:5e:62:a3:3b:4b:21:c8:92:a9:19:d0: 07:11:a2:d2:f1:98:16:90:63:c8:94:1e:f3:88:4a: e8:37:45:c8:68:50:c5:9f:d2:cb:4e:2d:2a:ca:fe: 65:b3:b2:81:99:41:33:78:d0:77:05:bd:cf:42:3b: 2e:ec:8a:c6:d9:b3:24:13:31:f4:09:79:6c:3e:8c: c6:9f:20:39:b8:f4:c2:3d:1e:2d:9a:7e:2b:de:85: 28:79:f6:3c:29:14:c1:c8:ba:b3:5a:0a:9a:e2:cb: d9:f0:34:d4:4c:55:60:1d:f1:30:60:32:2b:b8:2f: 0c:70:0b:af:1f:0c:1a:9b:31:fd:1b:14:f4:3a:b8: e7:65:23:73:d8:4f:8f:74:a2:40:07:0f:3a:b0:39: 77:a3:e0:16:ff:6e:8c:79:90:73:1b:b7:f9:71:18: 9a:a9:3b:ab:70:1e:bd:de:29:57:79:1d:20:39:ac: e0:f8:38:dd:5c:13:fe:30:ba:3f:5a:5e:f2:9f:46: 9d:90:fd:f4:9b:97:29:83:74:e6:86:0b:94:f2:7a: 0c:74:c2:34:f6:dd:d3:89:54:dc:6b:3a:e1:10:f6: c8:67:c2:e4:2b:b4:ff:80:7b:25:dd:4d:83:d3:1a: 48:a8:3a:9f:19:d3:06:5e:3c:0b:01:c3:35:e6:39: 30:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6D:B0:46:7A:E8:AF:FF:DB:C0:ED:D9:21:70:8C:3B:AF:42:40:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/af3d535e-1c31-32d1-a6a6-68041d0d7365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ae:fc:8c:8a:37:5f:d1:e6:0a:38:c1:d6:6f:24:16:97:5c: 8d:6d:8d:1d:63:95:1d:27:01:40:94:a5:64:78:0b:df:7e:74: ae:05:93:0f:d2:12:d9:50:16:72:5e:fe:05:08:41:69:a3:4a: e5:f7:6f:da:33:bc:10:55:ef:09:11:0e:f7:c1:45:4a:7d:00: 3c:02:ea:8d:d1:7d:b3:f0:7b:30:37:a7:a2:b6:02:3a:67:43: d4:5d:9c:f2:51:f1:b2:96:11:d9:db:85:7b:99:fe:ce:57:e9: 65:5d:d9:fb:a7:f7:39:f4:f8:64:6f:7d:ad:fd:a6:65:db:7e: 57:26:cf:be:e2:98:5d:b2:53:a0:d2:9b:23:37:f8:0d:41:c2: 4e:0e:47:d5:08:f5:15:ce:02:88:bf:bd:7a:44:24:c8:7d:7e: 57:7a:ff:c5:34:f8:8d:4e:dc:f1:06:69:e2:5b:da:fd:7d:45: b9:62:59:35:50:83:a2:ef:8a:70:ba:5a:8f:72:76:d2:c1:1c: 6a:2a:6a:de:22:f0:a6:dc:91:32:04:e1:a5:63:51:af:22:1b: f0:52:aa:d6:f6:2e:6c:fd:02:9e:4a:b3:da:45:0f:4e:1b:c6: 09:8c:cb:99:cc:0c:56:2b:91:a6:f1:2c:4b:2a:55:2b:a1:5d: a7:c6:fd:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4q1FU1bGGQl/NcGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MDYxNDA5MDAxMVoXDTI2MDkxMjA5MDAxMVowLzEtMCsGA1UEAxMk YjQ3MmUyODEtZTRlOC00ODE3LTljNmUtOGE2MjQ5OWQyY2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7es3XmKjO0shyJKpGdAHEaLS8ZgWkGPIlB7z iEroN0XIaFDFn9LLTi0qyv5ls7KBmUEzeNB3Bb3PQjsu7IrG2bMkEzH0CXlsPozG nyA5uPTCPR4tmn4r3oUoefY8KRTByLqzWgqa4svZ8DTUTFVgHfEwYDIruC8McAuv HwwamzH9GxT0OrjnZSNz2E+PdKJABw86sDl3o+AW/26MeZBzG7f5cRiaqTurcB69 3ilXeR0gOazg+DjdXBP+MLo/Wl7yn0adkP30m5cpg3TmhguU8noMdMI09t3TiVTc azrhEPbIZ8LkK7T/gHsl3U2D0xpIqDqfGdMGXjwLAcM15jkwswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChtsEZ66K//28Dt2SFwjDuvQkApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYWYzZDUzNWUtMWMzMS0z MmQxLWE2YTYtNjgwNDFkMGQ3MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/1JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqu/IyKN1/R5go4wdZvJBaXXI1tjR1jlR0nAUCUpWR4C99+dK4Fkw/S EtlQFnJe/gUIQWmjSuX3b9ozvBBV7wkRDvfBRUp9ADwC6o3RfbPwezA3p6K2Ajpn Q9RdnPJR8bKWEdnbhXuZ/s5X6WVd2fun9zn0+GRvfa39pmXbflcmz77imF2yU6DS myM3+A1Bwk4OR9UI9RXOAoi/vXpEJMh9fld6/8U0+I1O3PEGaeJb2v19RbliWTVQ g6LvinC6Wo9ydtLBHGoqat4i8KbckTIE4aVjUa8iG/BSqtb2Lmz9Ap5Ks9pFD04b xgmMy5nMDFYrkabxLEsqVSuhXafG/fs= -----END CERTIFICATE-----Generated at Sun Jun 28 23:19:19 2026 by rpki-client