$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21ba0e61-ce38-3894-9fe2-f85615b80796.roa File: 21ba0e61-ce38-3894-9fe2-f85615b80796.roa (raw, json) Hash identifier: umL8uCb7wGWJz8m53jw2BnFvZTUuPV/NTkXS/tmgzeA= Subject key identifier: 75:82:64:F9:7D:24:E2:52:E7:11:33:32:AA:65:8D:86:C5:1A:EF:43 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F77835D8396A4775C539FE880 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21ba0e61-ce38-3894-9fe2-f85615b80796.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 30036 IP address blocks: 97.64.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:5d:83:96:a4:77:5c:53:9f:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=52663b30-68ec-4802-b71a-a9da190ca3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:61:4f:17:ad:3c:6b:b3:68:88:fe:99:5c:9c: 45:90:7d:57:6a:b1:cb:37:dd:00:2d:f1:d6:47:75: 84:6e:ab:21:e4:01:27:14:9c:e8:22:10:eb:37:23: 4d:26:87:a4:22:d0:34:8d:a0:5a:e6:2f:f0:b1:75: cc:82:c6:93:21:9b:80:ac:08:7c:df:68:00:bd:fd: 45:7b:e1:9c:bf:07:ce:76:85:70:24:e6:a0:5c:a7: a3:b8:59:0d:1d:5c:cc:a4:98:da:d1:30:23:26:1e: 6f:ed:19:f3:3d:e7:0f:fb:c0:db:9f:1e:3a:72:77: 95:25:20:6f:50:0f:83:18:84:ff:d8:88:66:7b:21: 66:01:92:f0:6e:d4:8a:3e:9b:e1:4a:b7:6f:06:be: e8:d9:ea:6d:ec:c7:71:c6:c7:e9:be:d4:6e:51:64: 96:89:9e:63:6a:0d:72:e3:d9:bc:d1:28:75:d3:69: 40:75:af:ca:98:40:dd:52:16:bb:34:b0:0b:c9:2e: 61:f3:ac:f0:86:16:ec:4d:48:ec:4d:07:45:c6:ad: 71:7f:8e:07:b5:23:ad:2e:14:5e:57:5f:b0:89:a4: ee:39:b4:1c:2f:e8:ff:57:52:64:6b:a1:11:48:3c: 67:9b:7c:1f:b8:ad:04:ec:03:ab:57:fb:ae:63:ac: 83:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:82:64:F9:7D:24:E2:52:E7:11:33:32:AA:65:8D:86:C5:1A:EF:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21ba0e61-ce38-3894-9fe2-f85615b80796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:26:bf:01:ad:09:87:4a:3e:9a:55:93:de:54:be:ba:85:ef: 29:01:17:3d:f6:e2:e7:6b:9e:b6:bc:b2:58:93:c1:2a:8a:61: 7d:22:41:16:7b:d1:76:c7:5e:64:b9:57:dd:70:1f:e7:54:ad: f8:f5:73:4f:94:9c:d6:b5:93:94:7e:29:10:ba:82:aa:34:0f: 6a:fc:67:88:6b:d7:6d:7c:09:57:44:7b:cc:f3:be:30:f5:ca: 46:f4:13:64:ff:f6:1f:77:0a:02:86:66:9b:87:3b:d4:0d:e6: b2:ef:ae:58:40:de:d1:1d:1d:98:bb:12:1c:d9:6d:ff:02:f0: 21:12:cb:dc:08:bc:23:77:d0:31:ae:23:b1:79:2d:79:6b:6d: b1:85:3a:82:51:81:17:cc:a2:9b:65:34:2b:88:c9:ad:23:9b: 44:dd:c6:c8:b4:72:9b:a7:1d:e6:a0:ea:65:bb:03:5d:9b:e7: f0:a7:55:4b:12:86:f1:23:c1:24:74:af:f1:4e:26:c9:33:8c: 0c:5a:17:fd:11:b0:bb:77:cf:d7:f0:cc:0c:ca:c3:44:43:78: 08:27:26:37:2c:a3:7f:b2:6f:0b:3b:6c:4e:31:d4:ef:51:ac: 69:60:c3:65:8c:a5:8b:77:f9:9f:4c:0f:c5:c9:99:b0:84:3b: 96:ac:ac:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g12DlqR3XFOf6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk NTI2NjNiMzAtNjhlYy00ODAyLWI3MWEtYTlkYTE5MGNhM2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmFPF608a7NoiP6ZXJxFkH1XarHLN90ALfHW R3WEbqsh5AEnFJzoIhDrNyNNJoekItA0jaBa5i/wsXXMgsaTIZuArAh832gAvf1F e+GcvwfOdoVwJOagXKejuFkNHVzMpJja0TAjJh5v7RnzPecP+8Dbnx46cneVJSBv UA+DGIT/2IhmeyFmAZLwbtSKPpvhSrdvBr7o2ept7MdxxsfpvtRuUWSWiZ5jag1y 49m80Sh102lAda/KmEDdUha7NLALyS5h86zwhhbsTUjsTQdFxq1xf44HtSOtLhRe V1+wiaTuObQcL+j/V1Jka6ERSDxnm3wfuK0E7AOrV/uuY6yD6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWCZPl9JOJS5xEzMqpljYbFGu9DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjFiYTBlNjEtY2UzOC0z ODk0LTlmZTItZjg1NjE1YjgwNzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8mvwGtCYdKPppVk95UvrqF7ykBFz324udrnra8sliTwSqKYX0iQRZ7 0XbHXmS5V91wH+dUrfj1c0+UnNa1k5R+KRC6gqo0D2r8Z4hr1218CVdEe8zzvjD1 ykb0E2T/9h93CgKGZpuHO9QN5rLvrlhA3tEdHZi7EhzZbf8C8CESy9wIvCN30DGu I7F5LXlrbbGFOoJRgRfMoptlNCuIya0jm0Tdxsi0cpunHeag6mW7A12b5/CnVUsS hvEjwSR0r/FOJskzjAxaF/0RsLt3z9fwzAzKw0RDeAgnJjcso3+ybws7bE4x1O9R rGlgw2WMpYt3+Z9MD8XJmbCEO5asrEQ= -----END CERTIFICATE-----Generated at Sun Oct 11 22:28:54 2026 by rpki-client