$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/dda697e5-795b-3c5b-960b-01f1086c0e4f.roa File: dda697e5-795b-3c5b-960b-01f1086c0e4f.roa (raw, json) Hash identifier: mhIQvLzkgJ3m8iFpj52TvW6PHXX4sJtsxWZ92UJueuk= Subject key identifier: 46:84:77:FD:E3:9F:D1:8A:A1:EC:1F:38:16:3B:B0:D9:13:6B:8C:6A Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584D40CA4423D9F9D454D9178890 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/dda697e5-795b-3c5b-960b-01f1086c0e4f.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 11537 IP address blocks: 163.253.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:44:23:d9:f9:d4:54:d9:17:88:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=4a578a61-a1be-45da-a093-7ac33956e579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:53:e7:b8:dd:0f:ad:c0:fe:0e:25:41:24:cf: 71:c8:c8:7c:2c:0a:60:91:e8:31:d0:1d:47:95:9d: 49:f6:75:63:58:96:3e:33:0f:c8:6d:f6:44:0f:2a: f9:87:6e:aa:dc:86:dd:8f:7c:2e:71:c7:f9:6f:b0: 30:d6:eb:ab:a0:1f:99:4b:ab:e7:ae:c6:ef:49:3c: e0:cf:df:36:1c:86:d9:3d:fb:88:5d:68:53:60:61: c9:ea:e0:9e:28:9d:c3:3b:57:81:5d:fa:ed:10:ee: 1b:80:2d:ad:92:50:0f:8e:68:3b:4e:8d:bb:cf:b4: 10:e5:bd:76:b2:72:1c:1d:ae:56:6d:3f:1f:ec:2e: 97:04:e7:80:7d:d7:5c:c3:e1:f5:0e:61:4a:bb:68: c5:23:6d:a1:fc:9b:2c:a7:a5:cb:3a:60:c7:0e:5d: a6:87:93:81:df:9e:3d:68:91:b5:25:91:4d:73:04: 54:c8:75:be:04:e7:85:7f:05:ec:03:e2:8b:3c:c4: 8e:38:ec:77:60:93:ce:98:86:7c:dc:71:c4:eb:e2: c2:19:e8:4e:b5:9e:b8:9e:ed:65:1b:b5:73:f8:6b: c0:82:01:65:13:4d:84:e7:f2:44:cc:4c:b3:3c:e7: f1:45:39:8c:49:90:51:62:33:eb:91:0d:58:1b:4d: 21:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:84:77:FD:E3:9F:D1:8A:A1:EC:1F:38:16:3B:B0:D9:13:6B:8C:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/dda697e5-795b-3c5b-960b-01f1086c0e4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:4c:bc:23:9a:bb:c0:3e:dc:be:23:ab:9d:fe:54:8d:f9:0b: f1:41:f3:fa:3f:f0:d1:4e:59:66:8a:61:56:bb:30:c5:a3:8d: 1f:5a:6c:13:b3:86:4c:c6:57:a3:23:df:36:40:b8:b3:c2:05: 83:75:c1:e6:36:e5:0f:c0:27:f7:c0:ef:5e:cd:2f:47:88:0b: 35:20:a9:eb:42:8a:7c:c5:90:69:21:0b:9e:a2:ba:fd:7e:fd: ca:84:6c:0f:48:8f:ea:ea:5e:96:be:dc:5a:22:de:1b:ce:3b: c3:5d:80:44:40:6b:5c:b7:5a:31:38:5e:06:7e:0e:0d:c8:c3: 4b:a8:a5:b6:7d:6d:e9:de:6a:ba:33:4b:45:ba:f2:2d:9c:90: af:f2:fe:b6:04:78:52:08:08:20:fd:9b:8d:50:95:19:ff:60: 29:99:67:7f:b6:64:37:7f:7b:73:f8:8c:06:33:57:ff:d2:8a: 0e:ed:38:42:28:a4:03:91:bb:ab:de:85:76:e6:b8:50:69:2b: 76:1b:9c:2b:ab:8e:28:03:41:5e:50:16:fc:f0:5a:00:d1:66: 9d:8c:5e:1b:00:5b:36:a7:50:4c:ee:25:19:c2:3f:bb:7d:22: 9f:da:ed:02:eb:0f:60:e2:4b:40:49:43:13:95:02:53:ca:f3: 6b:ef:44:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AykQj2fnUVNkXiJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NGE1NzhhNjEtYTFiZS00NWRhLWEwOTMtN2FjMzM5NTZlNTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1PnuN0PrcD+DiVBJM9xyMh8LApgkegx0B1H lZ1J9nVjWJY+Mw/IbfZEDyr5h26q3Ibdj3wuccf5b7Aw1uuroB+ZS6vnrsbvSTzg z982HIbZPfuIXWhTYGHJ6uCeKJ3DO1eBXfrtEO4bgC2tklAPjmg7To27z7QQ5b12 snIcHa5WbT8f7C6XBOeAfddcw+H1DmFKu2jFI22h/Jssp6XLOmDHDl2mh5OB3549 aJG1JZFNcwRUyHW+BOeFfwXsA+KLPMSOOOx3YJPOmIZ83HHE6+LCGehOtZ64nu1l G7Vz+GvAggFlE02E5/JEzEyzPOfxRTmMSZBRYjPrkQ1YG00hawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEaEd/3jn9GKoewfOBY7sNkTa4xqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZGRhNjk3ZTUtNzk1Yi0z YzViLTk2MGItMDFmMTA4NmMwZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBMvCOau8A+3L4jq53+VI35C/FB8/o/8NFOWWaKYVa7MMWjjR9abBOz hkzGV6Mj3zZAuLPCBYN1weY25Q/AJ/fA717NL0eICzUgqetCinzFkGkhC56iuv1+ /cqEbA9Ij+rqXpa+3Foi3hvOO8NdgERAa1y3WjE4XgZ+Dg3Iw0uopbZ9benearoz S0W68i2ckK/y/rYEeFIICCD9m41QlRn/YCmZZ3+2ZDd/e3P4jAYzV//Sig7tOEIo pAORu6vehXbmuFBpK3YbnCurjigDQV5QFvzwWgDRZp2MXhsAWzanUEzuJRnCP7t9 Ip/a7QLrD2DiS0BJQxOVAlPK82vvROE= -----END CERTIFICATE-----Generated at Tue Mar 24 22:15:52 2026 by rpki-client