$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/f09f35a9-a679-3163-9354-35a5f9b32235.roa File: f09f35a9-a679-3163-9354-35a5f9b32235.roa (raw, json) Hash identifier: CDmc26xd4D7o+v0yb2gBI1fDE4iug+5R0uXJget2/As= Subject key identifier: 91:D8:9E:82:0A:7D:1E:A0:1D:82:31:E7:46:50:12:B8:EC:14:1A:5F Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584E31CF09EDBAF82985265DAAC0 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/f09f35a9-a679-3163-9354-35a5f9b32235.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 396955 IP address blocks: 163.253.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:09:ed:ba:f8:29:85:26:5d:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=a36e735e-c167-4ffb-843a-3a637c40c02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:81:77:e9:e8:dc:6e:c2:97:00:6a:38:35:95: c1:bf:72:78:0b:da:69:f0:96:a8:42:83:29:65:dc: de:dd:23:81:43:ae:3d:cf:56:91:31:1f:c6:a9:1d: a3:50:0f:40:94:bb:74:a3:e8:74:32:d8:f2:55:59: 9a:3e:b4:f1:81:71:f4:c5:75:c7:54:34:45:9a:b0: cc:10:37:81:b4:02:24:47:15:e8:6b:1a:38:88:75: 3a:33:ff:cb:01:c5:7e:00:1c:89:7a:1e:5c:36:f8: 1d:ad:e1:3b:cb:22:48:d6:da:70:c5:37:28:9e:0d: 65:56:1f:c6:95:62:2c:36:26:2d:e7:56:54:12:d3: 70:20:60:8e:d0:d1:5f:2d:2d:10:fd:d1:85:c0:cf: 94:6f:35:44:59:d2:01:58:94:33:ae:c7:e8:69:90: a3:f7:70:e4:a8:51:50:83:83:82:f1:3c:15:06:f7: 2e:c1:32:e6:9c:63:be:d5:fc:1e:95:62:35:62:11: 5c:a0:07:f6:26:67:10:f4:97:33:dc:4f:fc:3d:6c: be:c1:aa:df:c2:61:1f:47:ce:15:07:4d:b8:68:a0: 00:77:1f:04:cf:d0:3e:c3:89:5d:2f:97:ab:a0:f2: e0:46:27:9a:b0:b9:df:9e:6c:78:42:90:34:82:4f: 41:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D8:9E:82:0A:7D:1E:A0:1D:82:31:E7:46:50:12:B8:EC:14:1A:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/f09f35a9-a679-3163-9354-35a5f9b32235.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:fb:91:10:f9:7b:b8:ec:90:ab:0e:f8:4c:9b:f2:bc:ac:3b: fc:b9:cd:98:47:a3:c1:9f:d3:9e:5d:43:82:d7:35:15:3e:54: a6:19:dc:4f:1b:58:e1:b8:84:99:55:9c:53:a3:04:c2:50:cb: 54:a7:89:57:a5:d3:90:1b:27:7a:5e:15:39:17:83:f9:c4:62: 42:0c:da:e2:d2:13:13:b9:09:0a:99:65:25:11:cc:2e:74:cb: 99:46:8f:83:30:1f:16:99:1c:6c:75:6d:57:fd:f9:2f:6d:bc: a7:32:55:1e:98:f0:8d:0f:c1:27:f3:df:69:96:db:74:d9:d2: 44:d6:2b:2d:85:d6:8b:92:ac:16:c3:ce:00:4f:dd:7e:18:f8: f8:e1:93:82:27:91:dc:70:db:b1:da:3b:2a:e4:d9:d4:a8:d9: fd:64:1a:ee:45:21:36:2e:63:72:a5:23:d8:48:19:ce:e8:8c: 6b:e9:2c:bc:89:4f:ba:77:c1:08:09:78:1f:28:66:a1:54:09: 94:08:b6:53:d5:5b:44:87:03:68:7e:45:77:0d:46:03:24:7c: aa:7d:d1:a0:73:19:90:be:35:b2:74:71:1b:cd:58:4d:a6:31: e1:ab:b7:f6:32:d2:6e:f6:74:c5:db:22:c5:e3:91:ee:ac:27: 4a:3b:86:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xzwntuvgphSZdqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk YTM2ZTczNWUtYzE2Ny00ZmZiLTg0M2EtM2E2MzdjNDBjMDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIF36ejcbsKXAGo4NZXBv3J4C9pp8JaoQoMp Zdze3SOBQ649z1aRMR/GqR2jUA9AlLt0o+h0MtjyVVmaPrTxgXH0xXXHVDRFmrDM EDeBtAIkRxXoaxo4iHU6M//LAcV+AByJeh5cNvgdreE7yyJI1tpwxTcong1lVh/G lWIsNiYt51ZUEtNwIGCO0NFfLS0Q/dGFwM+UbzVEWdIBWJQzrsfoaZCj93DkqFFQ g4OC8TwVBvcuwTLmnGO+1fwelWI1YhFcoAf2JmcQ9Jcz3E/8PWy+warfwmEfR84V B024aKAAdx8Ez9A+w4ldL5eroPLgRieasLnfnmx4QpA0gk9BTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHYnoIKfR6gHYIx50ZQErjsFBpfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZjA5ZjM1YTktYTY3OS0z MTYzLTkzNTQtMzVhNWY5YjMyMjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABb7kRD5e7jskKsO+Eyb8rysO/y5zZhHo8Gf055dQ4LXNRU+VKYZ3E8b WOG4hJlVnFOjBMJQy1SniVel05AbJ3peFTkXg/nEYkIM2uLSExO5CQqZZSURzC50 y5lGj4MwHxaZHGx1bVf9+S9tvKcyVR6Y8I0PwSfz32mW23TZ0kTWKy2F1ouSrBbD zgBP3X4Y+Pjhk4Inkdxw27HaOyrk2dSo2f1kGu5FITYuY3KlI9hIGc7ojGvpLLyJ T7p3wQgJeB8oZqFUCZQItlPVW0SHA2h+RXcNRgMkfKp90aBzGZC+NbJ0cRvNWE2m MeGrt/Yy0m72dMXbIsXjke6sJ0o7hrY= -----END CERTIFICATE-----Generated at Sun Jun 28 23:20:48 2026 by rpki-client