
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/dda697e5-795b-3c5b-960b-01f1086c0e4f.roa
File: dda697e5-795b-3c5b-960b-01f1086c0e4f.roa (raw, json)
Hash identifier: xYGfpWDHZgHSV+7X0tj6F0mnq+UW8VomPouFu+M5K2k=
Subject key identifier: 41:37:03:FB:EE:D2:9D:F8:33:13:C1:EA:B3:6E:E4:57:93:E9:C9:27
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584EC371BC0492C4AEB8991A8320
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/dda697e5-795b-3c5b-960b-01f1086c0e4f.roa
Signing time: Sat 08 Aug 2026 01:00:11 +0000
ROA not before: Sat 08 Aug 2026 01:00:11 +0000
ROA not after: Fri 06 Nov 2026 02:00:11 +0000
asID: 11537
IP address blocks: 163.253.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c3:71:bc:04:92:c4:ae:b8:99:1a:83:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Aug 8 01:00:11 2026 GMT
Not After : Nov 6 02:00:11 2026 GMT
Subject: CN=b89490eb-3902-483c-bed3-72fc7f6d594f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:3c:4a:32:ef:f6:92:b8:57:bb:7c:fe:f2:fc:
5a:f3:06:8c:2d:c6:a3:1b:2c:05:45:45:68:33:10:
f0:91:d0:e4:8d:7a:9e:37:ec:db:6f:2b:54:b2:b1:
c4:6d:10:3e:86:cd:c0:be:2d:42:c3:0f:cf:b3:13:
f5:39:43:60:d5:8d:d8:f4:37:8a:e4:9f:6d:41:14:
7a:73:6c:ee:54:86:da:29:f1:7f:3a:bd:d6:2d:51:
41:50:a2:35:c3:45:47:ee:78:b3:9f:f6:15:2d:be:
5a:a4:f8:a5:85:1b:3f:ef:4a:f3:46:f4:8b:2d:34:
93:1c:8a:ac:d8:60:c7:0f:04:71:06:95:0d:46:81:
f5:0f:ae:39:9a:19:00:06:f4:2d:48:d9:b7:86:8b:
4e:53:64:11:78:2c:98:3f:15:6d:f5:05:0a:48:fe:
89:21:df:ae:59:ab:59:dc:19:64:f7:06:44:10:d5:
ce:06:1f:94:ea:95:00:07:72:84:23:2d:57:4a:6e:
f7:96:79:a7:e4:6a:a4:67:16:c3:1e:93:e4:50:8a:
37:64:9a:99:75:d8:c0:5d:98:95:cf:61:23:c3:3d:
ef:e0:4f:b6:d3:c7:19:ad:ed:f0:80:60:41:cc:86:
93:e7:a9:2f:75:18:a0:ce:45:8b:19:ad:c0:42:5d:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:37:03:FB:EE:D2:9D:F8:33:13:C1:EA:B3:6E:E4:57:93:E9:C9:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/dda697e5-795b-3c5b-960b-01f1086c0e4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:b1:91:7e:da:16:13:64:78:70:8c:1c:25:ed:80:49:42:55:
52:90:18:5e:8f:b7:f0:83:94:b4:97:61:39:5f:f8:4a:67:25:
1c:7c:c7:d8:52:31:23:cd:71:29:8d:81:20:e2:08:48:c4:0d:
82:15:ff:5f:e2:ce:7e:df:47:59:39:c3:ed:65:02:39:69:cd:
3a:eb:18:bc:2e:f5:dc:ee:5b:52:63:13:bc:55:df:8a:82:c6:
bf:d1:7d:19:fd:cf:01:77:d3:16:b7:19:8b:41:46:bd:20:e3:
13:5b:c0:92:0e:64:e2:22:6d:68:71:4b:b6:de:88:32:65:09:
ee:fc:70:10:b8:d2:ff:94:42:f0:0b:c5:bf:6d:02:be:24:3f:
39:05:d8:97:47:8b:51:0c:f3:3c:03:5f:43:6d:09:92:8c:02:
08:69:a1:d0:8b:1d:3a:d7:11:4c:2a:d2:16:96:7b:d2:55:9f:
b8:0c:b7:1b:1e:5c:39:1f:93:7a:47:a8:c1:c0:b8:da:20:e0:
73:52:34:15:f0:30:a2:e3:da:98:c9:28:5e:46:84:cd:25:57:
cb:5d:d5:df:b1:03:13:cb:ab:72:de:a2:09:58:3f:ae:41:82:
0d:ac:71:e3:8f:ed:d4:01:a4:63:f5:5c:04:c2:68:37:fd:73:
21:7e:5e:52
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DcbwEksSuuJkagyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk
Yjg5NDkwZWItMzkwMi00ODNjLWJlZDMtNzJmYzdmNmQ1OTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9TxKMu/2krhXu3z+8vxa8waMLcajGywFRUVo
MxDwkdDkjXqeN+zbbytUsrHEbRA+hs3Avi1Cww/PsxP1OUNg1Y3Y9DeK5J9tQRR6
c2zuVIbaKfF/Or3WLVFBUKI1w0VH7nizn/YVLb5apPilhRs/70rzRvSLLTSTHIqs
2GDHDwRxBpUNRoH1D645mhkABvQtSNm3hotOU2QReCyYPxVt9QUKSP6JId+uWatZ
3Blk9wZEENXOBh+U6pUAB3KEIy1XSm73lnmn5GqkZxbDHpPkUIo3ZJqZddjAXZiV
z2Ejwz3v4E+208cZre3wgGBBzIaT56kvdRigzkWLGa3AQl2FRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEE3A/vu0p34MxPB6rNu5FeT6cknMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZGRhNjk3ZTUtNzk1Yi0z
YzViLTk2MGItMDFmMTA4NmMwZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAuxkX7aFhNkeHCMHCXtgElCVVKQGF6Pt/CDlLSXYTlf+EpnJRx8x9hS
MSPNcSmNgSDiCEjEDYIV/1/izn7fR1k5w+1lAjlpzTrrGLwu9dzuW1JjE7xV34qC
xr/RfRn9zwF30xa3GYtBRr0g4xNbwJIOZOIibWhxS7beiDJlCe78cBC40v+UQvAL
xb9tAr4kPzkF2JdHi1EM8zwDX0NtCZKMAghpodCLHTrXEUwq0haWe9JVn7gMtxse
XDkfk3pHqMHAuNog4HNSNBXwMKLj2pjJKF5GhM0lV8td1d+xAxPLq3LeoglYP65B
gg2sceOP7dQBpGP1XATCaDf9cyF+XlI=
-----END CERTIFICATE-----
Generated at Thu Aug 13 14:22:16 2026 by rpki-client