
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ecfe60b6-54a9-379d-b34e-e83112265586.roa
File: ecfe60b6-54a9-379d-b34e-e83112265586.roa (raw, json)
Hash identifier: urTn1DDB4blkEKHtcAiOGToKTCnHirFLRkl9jBkiAvU=
Subject key identifier: 99:D7:24:E1:97:FB:5F:FD:B5:C1:CE:3D:1B:DA:34:19:24:D4:C4:50
Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial: 010D0C9F4328584EE0C1FF782148316FB48DB100
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ecfe60b6-54a9-379d-b34e-e83112265586.roa
Signing time: Tue 18 Aug 2026 13:00:12 +0000
ROA not before: Tue 18 Aug 2026 13:00:12 +0000
ROA not after: Mon 16 Nov 2026 14:00:12 +0000
asID: 11537
IP address blocks: 163.253.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e0:c1:ff:78:21:48:31:6f:b4:8d:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
Validity
Not Before: Aug 18 13:00:12 2026 GMT
Not After : Nov 16 14:00:12 2026 GMT
Subject: CN=32e47db8-30d1-4b12-8f10-8998b8c627ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:11:d7:c2:f3:e1:e8:4d:85:7d:55:d4:70:25:
c7:3b:01:43:76:f2:26:32:a5:09:29:d4:97:b7:da:
5b:1b:f3:0c:77:1d:dc:86:51:4b:e0:9c:de:e9:83:
6a:d0:51:a3:0e:cb:25:3a:07:0d:ab:e8:48:0d:f5:
db:64:eb:d7:3e:79:1b:2e:16:dd:de:98:d2:a7:c3:
0e:1d:14:da:cf:0c:17:b9:0b:13:7a:a6:4a:fa:26:
11:9d:8d:2a:ed:85:c4:bd:61:3a:37:9b:5d:ff:aa:
73:7b:49:d4:05:6d:0f:4d:2a:ac:b1:86:da:51:99:
ff:4d:26:c0:20:3a:e1:ef:b6:9b:0a:56:e5:9b:fb:
44:d1:3d:cc:17:ac:ea:a3:ec:4a:4c:59:7d:47:25:
66:c7:05:6d:ea:bd:ab:cb:6f:54:d6:78:9b:80:62:
dd:c3:c9:be:76:50:c6:af:58:03:ea:52:72:8a:99:
23:e8:3b:d5:ea:27:06:a9:41:95:68:2f:7f:de:73:
e3:1b:63:60:5a:d5:db:50:87:29:a7:01:f5:db:4f:
ab:eb:6b:e4:46:6a:29:8d:91:86:ae:fd:51:5d:1e:
36:e4:72:95:7e:4c:c2:a3:c4:05:92:51:5a:ba:b1:
39:60:da:1f:ae:06:61:16:e8:01:d2:87:47:e0:f5:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D7:24:E1:97:FB:5F:FD:B5:C1:CE:3D:1B:DA:34:19:24:D4:C4:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/ecfe60b6-54a9-379d-b34e-e83112265586.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
X509v3 Authority Key Identifier:
keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
sbgp-ipAddrBlock: critical
IPv4:
163.253.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:f7:28:3d:da:41:e9:9a:c1:7f:39:e1:4d:e0:b4:df:86:ef:
ba:08:d5:38:b5:9b:eb:f9:1d:85:d1:82:92:78:b3:d0:b7:6c:
a8:bd:22:16:50:90:67:15:55:2d:69:10:ff:4f:c2:c6:35:65:
a2:ef:20:58:59:3f:d3:fc:6b:98:55:c1:81:ef:0d:db:a6:83:
9c:18:bd:cd:fc:cd:0d:ab:11:de:46:59:71:eb:84:ca:eb:21:
5f:ac:59:4f:e0:2c:9e:da:75:86:c4:f0:4d:11:f7:35:88:50:
fe:c5:5c:ee:45:64:a8:47:76:ab:10:fa:84:7f:cf:2a:91:a4:
0d:93:bb:5f:9d:61:be:b6:06:e4:27:f1:45:0c:b7:77:d7:3f:
3c:ae:06:c9:c5:08:58:a0:37:cf:03:21:df:b0:c6:ce:69:0e:
26:05:3d:61:b8:97:85:1d:9a:0a:32:bc:6c:e9:22:fe:ef:40:
5e:d4:f8:9b:34:16:b0:b7:14:3a:a1:42:66:59:21:a6:4a:8a:
2a:08:6b:5c:59:88:e0:57:1b:a1:27:98:2d:f2:00:6e:84:b3:
ec:69:d1:fa:63:35:a2:3a:e2:5d:ae:a7:c4:ed:03:7d:de:1e:
a5:9c:ec:15:89:b0:f4:b7:8e:29:b6:14:0c:4d:f8:fb:14:69:
32:c1:bd:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwf94IUgxb7SNsQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk
MzJlNDdkYjgtMzBkMS00YjEyLThmMTAtODk5OGI4YzYyN2JhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRHXwvPh6E2FfVXUcCXHOwFDdvImMqUJKdSX
t9pbG/MMdx3chlFL4Jze6YNq0FGjDsslOgcNq+hIDfXbZOvXPnkbLhbd3pjSp8MO
HRTazwwXuQsTeqZK+iYRnY0q7YXEvWE6N5td/6pze0nUBW0PTSqssYbaUZn/TSbA
IDrh77abClblm/tE0T3MF6zqo+xKTFl9RyVmxwVt6r2ry29U1nibgGLdw8m+dlDG
r1gD6lJyipkj6DvV6icGqUGVaC9/3nPjG2NgWtXbUIcppwH120+r62vkRmopjZGG
rv1RXR425HKVfkzCo8QFklFaurE5YNofrgZhFugB0odH4PUdrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJnXJOGX+1/9tcHOPRvaNBkk1MRQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZWNmZTYwYjYtNTRhOS0z
NzlkLWIzNGUtZTgzMTEyMjY1NTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG/3KD3aQemawX854U3gtN+G77oI1Ti1m+v5HYXRgpJ4s9C3bKi9IhZQ
kGcVVS1pEP9PwsY1ZaLvIFhZP9P8a5hVwYHvDdumg5wYvc38zQ2rEd5GWXHrhMrr
IV+sWU/gLJ7adYbE8E0R9zWIUP7FXO5FZKhHdqsQ+oR/zyqRpA2Tu1+dYb62BuQn
8UUMt3fXPzyuBsnFCFigN88DId+wxs5pDiYFPWG4l4UdmgoyvGzpIv7vQF7U+Js0
FrC3FDqhQmZZIaZKiioIa1xZiOBXG6EnmC3yAG6Es+xp0fpjNaI64l2up8TtA33e
HqWc7BWJsPS3jim2FAxN+PsUaTLBvcg=
-----END CERTIFICATE-----
Generated at Sun Oct 4 15:25:00 2026 by rpki-client