$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/d04940a4-b6c6-3b76-a4e6-91c06b5324d6.roa File: d04940a4-b6c6-3b76-a4e6-91c06b5324d6.roa (raw, json) Hash identifier: kLD7H7/IwG2fuAYXFGi6EtYBzUXRGxZlk+93JH3wuUw= Subject key identifier: AA:34:E6:28:0E:39:86:1C:CC:22:7B:83:CD:E9:2D:18:93:C2:8C:51 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584F4973B19CD65960F49867E400 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/d04940a4-b6c6-3b76-a4e6-91c06b5324d6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396961 IP address blocks: 163.253.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:b1:9c:d6:59:60:f4:98:67:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c24d4870-86c6-4bf1-abe8-86289c60fbd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:90:b7:d9:b8:c3:ec:00:96:06:97:e5:0f:90: 8f:f1:e8:26:29:a0:9a:8d:f7:58:8f:30:c5:e3:2e: 3a:ce:bd:56:e4:91:d2:55:23:1a:1a:66:46:6f:c9: c6:69:a9:b3:e5:c5:4d:25:64:59:4a:31:30:bc:d6: 01:0c:d4:34:5a:67:c4:a0:bf:b9:aa:8e:05:f3:f1: a1:9a:07:55:c4:07:61:fc:fc:4a:ee:d6:9d:94:33: 7a:2b:15:18:79:52:2a:64:db:fe:0c:09:e1:42:52: cb:18:f0:d9:34:4d:e8:45:20:4d:3d:91:e2:36:0b: 72:dc:37:4e:00:0d:79:ca:b8:bb:63:2a:5d:b3:65: f0:75:10:10:3d:00:f4:25:dd:4d:e4:6f:15:da:34: ac:b6:5e:68:a7:c4:84:42:66:b2:80:1f:c3:bb:39: a1:e6:16:10:99:98:04:a7:05:32:b9:67:c2:3e:ba: fc:0e:73:2e:28:96:c8:d3:73:2d:66:d0:ff:35:93: 32:39:6b:a3:28:38:71:03:75:c3:0c:12:a5:6a:05: c0:2e:5a:13:40:20:95:90:31:8a:a9:77:ff:0d:da: 31:cb:d1:27:eb:f6:ed:1e:37:17:6d:cd:77:df:ea: 1a:cc:88:65:d8:dd:2a:99:11:83:50:13:ac:0f:d9: 5b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:34:E6:28:0E:39:86:1C:CC:22:7B:83:CD:E9:2D:18:93:C2:8C:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/d04940a4-b6c6-3b76-a4e6-91c06b5324d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:e6:06:b0:e2:5c:4f:fa:53:fe:40:03:0b:43:95:84:a3:bc: 97:f7:ea:96:9f:d8:29:0c:2c:ac:d3:43:ec:84:b8:64:49:e6: de:14:a1:62:24:2d:cb:17:72:97:7e:df:5c:fd:56:7c:17:99: ae:e7:5a:75:12:15:31:fe:0c:80:37:12:b0:a0:8d:99:da:76: 05:41:dc:5c:8e:28:69:7a:a5:66:b3:54:a2:aa:b8:be:87:25: 1f:20:b6:e3:b6:01:95:9a:b0:c3:f1:c3:d1:b1:a0:2d:58:4b: f5:6e:96:e4:14:b2:08:2b:9f:ad:80:9c:ab:0f:da:00:a2:87: c8:72:fd:22:73:cb:fc:c0:af:af:1c:14:4e:8f:9b:8d:98:b0: 87:0c:0f:3d:1d:82:82:e0:2e:ee:b4:e9:2f:3f:24:fa:bd:4f: 5b:57:0a:78:d7:9f:d9:a1:c2:a1:1b:aa:18:0e:41:43:e3:a0: d7:75:e4:d9:ef:57:bb:3a:32:3c:5c:fb:9e:f9:39:6b:c4:92: 27:ed:63:cd:2d:7f:3d:25:eb:5b:da:00:27:39:9c:04:f2:1b: d3:db:46:0a:13:a2:0e:a3:b8:98:87:bd:bd:5b:96:1e:23:bb: f0:a4:9b:51:f8:75:d9:2c:61:39:0b:9e:27:09:a7:74:3d:db: a4:27:5b:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc7Gc1llg9Jhn5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzI0ZDQ4NzAtODZjNi00YmYxLWFiZTgtODYyODljNjBmYmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJC32bjD7ACWBpflD5CP8egmKaCajfdYjzDF 4y46zr1W5JHSVSMaGmZGb8nGaamz5cVNJWRZSjEwvNYBDNQ0WmfEoL+5qo4F8/Gh mgdVxAdh/PxK7tadlDN6KxUYeVIqZNv+DAnhQlLLGPDZNE3oRSBNPZHiNgty3DdO AA15yri7Yypds2XwdRAQPQD0Jd1N5G8V2jSstl5op8SEQmaygB/Duzmh5hYQmZgE pwUyuWfCPrr8DnMuKJbI03MtZtD/NZMyOWujKDhxA3XDDBKlagXALloTQCCVkDGK qXf/Ddoxy9En6/btHjcXbc133+oazIhl2N0qmRGDUBOsD9lbYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKo05igOOYYczCJ7g83pLRiTwoxRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZDA0OTQwYTQtYjZjNi0z Yjc2LWE0ZTYtOTFjMDZiNTMyNGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/mBrDiXE/6U/5AAwtDlYSjvJf36paf2CkMLKzTQ+yEuGRJ5t4UoWIk LcsXcpd+31z9VnwXma7nWnUSFTH+DIA3ErCgjZnadgVB3FyOKGl6pWazVKKquL6H JR8gtuO2AZWasMPxw9GxoC1YS/VuluQUsggrn62AnKsP2gCih8hy/SJzy/zAr68c FE6Pm42YsIcMDz0dgoLgLu606S8/JPq9T1tXCnjXn9mhwqEbqhgOQUPjoNd15Nnv V7s6Mjxc+575OWvEkiftY80tfz0l61vaACc5nATyG9PbRgoTog6juJiHvb1blh4j u/Ckm1H4ddksYTkLnicJp3Q926QnW1c= -----END CERTIFICATE-----Generated at Sun Oct 4 21:36:01 2026 by rpki-client