$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/f3725c68-4499-3ed3-9559-33e55fda11c6.roa File: f3725c68-4499-3ed3-9559-33e55fda11c6.roa (raw, json) Hash identifier: MhX8y1XqcEkloRzHoAEAekzw5pslzLzX8ay/1I/2tXA= Subject key identifier: C8:4D:95:87:90:C1:FE:A5:53:0D:5C:EC:F6:32:5D:4D:92:7D:64:05 Certificate issuer: /CN=84ee337c-42c7-4207-b916-5028c8c62f82 Certificate serial: 010D0C9F4328584BA9326386FB678426292B16A0 Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/f3725c68-4499-3ed3-9559-33e55fda11c6.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 11537 IP address blocks: 163.253.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:63:86:fb:67:84:26:29:2b:16:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=29dfe98e-561f-4116-a41b-40025fec476c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:10:20:6f:70:fa:17:8c:53:e2:d6:45:70: 1e:4a:0b:81:08:76:92:9e:5c:3a:09:35:7c:f1:32: fb:1d:44:83:73:ed:72:f4:46:56:1b:d7:0e:c7:a2: db:de:26:ba:52:9e:c9:84:77:71:69:2a:1e:26:13: cb:c6:af:bb:24:ae:17:6b:f2:69:b2:3d:61:45:ef: 22:0e:10:3f:03:46:dd:76:5c:05:63:c4:21:87:f5: 16:e2:6b:4c:f4:86:bc:79:b1:64:77:59:8e:0f:f0: 0b:16:c8:95:74:fa:64:6a:ea:ed:82:1f:09:00:fa: 63:80:67:13:7b:80:3a:00:4b:3b:a3:61:25:d7:0b: 3c:8b:dc:9a:42:dc:53:d1:69:75:2b:66:3b:c8:8c: 09:70:cb:d3:ba:30:69:d2:d4:8f:7c:05:70:5e:14: 70:ed:b8:06:ef:ff:ec:66:23:09:01:08:79:9a:9e: 5f:52:6a:41:a8:4d:0e:e6:78:be:9f:50:de:77:6e: be:17:5f:c2:ac:ae:54:35:46:31:58:de:fe:5a:a6: c0:07:4d:9e:7a:4e:75:a1:e1:ad:ea:eb:1a:54:fa: 4d:dd:58:ef:2d:9f:41:6c:ef:d6:f3:45:97:37:4a: 8e:af:af:8a:9a:2a:f7:f4:52:b6:74:1f:57:1f:20: 09:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4D:95:87:90:C1:FE:A5:53:0D:5C:EC:F6:32:5D:4D:92:7D:64:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/f3725c68-4499-3ed3-9559-33e55fda11c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl X509v3 Authority Key Identifier: keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer sbgp-ipAddrBlock: critical IPv4: 163.253.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f7:e1:b0:98:e0:04:e6:5d:c5:b9:9e:dd:9c:f2:f2:21:fc: 44:88:50:ed:28:ab:75:17:bb:74:a1:0d:9b:40:cf:05:d0:b3: ea:94:c0:1b:b8:cd:ca:53:1d:59:9e:b9:29:d0:01:8e:b0:91: 8b:e1:4a:7d:97:d5:eb:66:c3:9c:00:5f:c5:c3:e5:7c:e0:4a: bd:f0:24:62:fe:20:17:3b:eb:f1:f7:ed:1c:f7:16:2d:11:2c: 46:c4:22:7c:c0:3f:d8:c8:71:4f:97:78:c6:ff:de:3e:59:28: 59:5b:87:cd:84:ce:46:60:db:5c:5a:cd:1e:10:04:f9:cd:4e: 32:70:b5:44:74:b0:3d:13:a5:06:a1:e7:ed:05:86:2b:65:9f: 5f:f1:c0:15:07:be:fc:b5:0a:02:08:a8:82:cd:56:af:b9:27: ea:5d:1a:87:2b:ee:90:87:d5:d3:0b:ef:5f:55:70:fb:69:6a: 94:27:dc:2d:02:07:6f:5f:33:f0:07:b9:1c:77:10:b2:a1:ef: d8:8a:d0:9f:c6:c6:c7:81:e1:0f:3a:de:4e:5b:2f:22:23:24: b2:83:b7:79:57:e2:42:c7:b6:9d:0d:d2:2a:dd:c0:16:0d:fb: 91:2b:55:d8:e0:23:29:da:5c:ab:e3:c7:17:65:f5:06:5b:f8: ac:d0:fb:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMmOG+2eEJikrFqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy ZjgyMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MjlkZmU5OGUtNTYxZi00MTE2LWE0MWItNDAwMjVmZWM0NzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk0QIG9w+heMU+LWRXAeSguBCHaSnlw6CTV8 8TL7HUSDc+1y9EZWG9cOx6Lb3ia6Up7JhHdxaSoeJhPLxq+7JK4Xa/Jpsj1hRe8i DhA/A0bddlwFY8Qhh/UW4mtM9Ia8ebFkd1mOD/ALFsiVdPpkaurtgh8JAPpjgGcT e4A6AEs7o2El1ws8i9yaQtxT0Wl1K2Y7yIwJcMvTujBp0tSPfAVwXhRw7bgG7//s ZiMJAQh5mp5fUmpBqE0O5ni+n1Ded26+F1/CrK5UNUYxWN7+WqbAB02eek51oeGt 6usaVPpN3VjvLZ9BbO/W80WXN0qOr6+Kmir39FK2dB9XHyAJHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhNlYeQwf6lUw1c7PYyXU2SfWQFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvZjM3MjVjNjgtNDQ5OS0z ZWQzLTk1NTktMzNlNTVmZGExMWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5 MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2 MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4 YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo/0RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX34bCY4ATmXcW5nt2c8vIh/ESIUO0oq3UXu3ShDZtAzwXQs+qUwBu4 zcpTHVmeuSnQAY6wkYvhSn2X1etmw5wAX8XD5XzgSr3wJGL+IBc76/H37Rz3Fi0R LEbEInzAP9jIcU+XeMb/3j5ZKFlbh82EzkZg21xazR4QBPnNTjJwtUR0sD0TpQah 5+0Fhitln1/xwBUHvvy1CgIIqILNVq+5J+pdGocr7pCH1dML719VcPtpapQn3C0C B29fM/AHuRx3ELKh79iK0J/GxseB4Q863k5bLyIjJLKDt3lX4kLHtp0N0irdwBYN +5ErVdjgIynaXKvjxxdl9QZb+KzQ++M= -----END CERTIFICATE-----Generated at Tue Nov 4 13:36:24 2025 by rpki-client