$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a7d464d-b0ad-35e2-9902-987695efdf23.roa File: 4a7d464d-b0ad-35e2-9902-987695efdf23.roa (raw, json) Hash identifier: Cfay9AzdNUpG4RLMe/EPsBp+K8iqKZz3wHbQbWTheaQ= Subject key identifier: 82:4D:48:03:5A:2A:60:F6:5C:A4:12:D4:D5:B6:62:30:CF:4C:AF:68 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F7782D4D1E0696F4173279580 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a7d464d-b0ad-35e2-9902-987695efdf23.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 30036 IP address blocks: 97.64.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:d4:d1:e0:69:6f:41:73:27:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=a766c7a4-673b-4e9d-8fa9-3fb01a76dbc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d1:79:04:2b:03:b1:7c:93:6d:fa:09:55:05: bb:38:c9:87:b8:67:cc:74:6b:c4:52:9c:05:ba:e1: 63:0e:86:90:3b:e1:d1:51:4f:b1:9d:a1:ff:98:ee: 20:ff:64:76:7c:3d:b5:c3:fc:79:a2:6a:36:d6:b6: 5e:0e:a5:01:b9:a6:d2:e9:a8:92:e1:63:e7:ce:a7: 72:21:ee:17:f3:51:cf:20:50:6d:63:e1:c3:3d:ec: 62:74:b9:1b:cc:e1:05:4d:db:af:ec:56:a5:78:fb: 5c:a7:09:ea:46:4b:3a:37:e5:aa:aa:1f:da:cf:8d: 39:4d:99:a6:61:f8:07:25:f1:cb:f6:23:15:63:48: 9b:14:d5:2a:73:56:62:16:51:93:73:f6:9b:e7:e6: b9:9a:71:82:dc:25:7b:fe:fb:2f:b0:4b:99:31:4d: 1a:ba:52:ae:87:a2:7f:97:34:0e:eb:0b:2b:c8:75: 40:e1:2a:5a:de:4f:4b:4e:fc:d9:f7:73:f0:d3:1e: 1a:e6:4a:80:27:f8:01:a0:58:1e:67:d9:c4:60:fe: e1:41:4d:61:f1:33:9e:1f:e5:d3:00:b8:7e:05:8c: 1a:2b:6a:1b:c1:59:c9:43:2f:7f:e7:0f:54:ca:3b: 49:9c:a9:18:16:05:46:8f:4d:d5:d8:fe:3e:34:f4: 38:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4D:48:03:5A:2A:60:F6:5C:A4:12:D4:D5:B6:62:30:CF:4C:AF:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a7d464d-b0ad-35e2-9902-987695efdf23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:a6:97:e3:a4:0d:c8:79:7a:f0:af:46:d4:95:dd:e5:77:6a: a5:c4:60:05:e6:3a:67:93:f3:7c:49:cf:2e:c2:69:0a:24:07: 07:c0:48:ed:e9:c4:b0:a6:64:c3:e5:50:b1:a4:4b:a3:be:2f: fb:73:80:b4:1c:82:7c:55:2e:e0:fb:de:40:26:ad:b2:35:9e: 2b:23:2a:3b:7d:45:f1:50:d7:6a:b7:53:a7:b6:47:a4:89:21: c8:0c:bb:5e:7b:a3:52:5d:f5:d5:f2:01:2e:d2:6b:91:f4:d1: 1c:05:de:a1:f9:f0:99:8a:47:ba:ca:b1:af:d7:5f:8f:53:18: 81:8c:38:4e:23:66:69:5d:8f:ac:59:24:57:9e:c4:db:ed:c4: a4:22:bd:c7:15:d6:bc:af:24:a8:d8:a0:32:1f:44:bf:32:f0: 50:6c:3b:b2:94:9a:c0:07:50:14:43:37:75:3d:7b:20:fa:31: 38:03:5c:60:8e:a6:00:ba:f8:22:d4:6a:f4:f3:b3:d5:68:2a: 7a:7f:cb:47:3e:39:4f:ad:b7:a9:b2:8b:28:8c:8d:c4:82:7d: a4:3e:4d:81:11:4d:32:51:13:8e:fa:31:9b:3d:ea:09:cc:f8: ee:a9:38:d4:50:d1:f8:c9:3f:5b:f3:96:04:87:69:b9:3a:8a: 75:ad:94:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gtTR4GlvQXMnlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk YTc2NmM3YTQtNjczYi00ZTlkLThmYTktM2ZiMDFhNzZkYmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltF5BCsDsXyTbfoJVQW7OMmHuGfMdGvEUpwF uuFjDoaQO+HRUU+xnaH/mO4g/2R2fD21w/x5omo21rZeDqUBuabS6aiS4WPnzqdy Ie4X81HPIFBtY+HDPexidLkbzOEFTduv7FalePtcpwnqRks6N+Wqqh/az405TZmm YfgHJfHL9iMVY0ibFNUqc1ZiFlGTc/ab5+a5mnGC3CV7/vsvsEuZMU0aulKuh6J/ lzQO6wsryHVA4Spa3k9LTvzZ93Pw0x4a5kqAJ/gBoFgeZ9nEYP7hQU1h8TOeH+XT ALh+BYwaK2obwVnJQy9/5w9UyjtJnKkYFgVGj03V2P4+NPQ4HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJNSANaKmD2XKQS1NW2YjDPTK9oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGE3ZDQ2NGQtYjBhZC0z NWUyLTk5MDItOTg3Njk1ZWZkZjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKml+OkDch5evCvRtSV3eV3aqXEYAXmOmeT83xJzy7CaQokBwfASO3p xLCmZMPlULGkS6O+L/tzgLQcgnxVLuD73kAmrbI1nisjKjt9RfFQ12q3U6e2R6SJ IcgMu157o1Jd9dXyAS7Sa5H00RwF3qH58JmKR7rKsa/XX49TGIGMOE4jZmldj6xZ JFeexNvtxKQivccV1ryvJKjYoDIfRL8y8FBsO7KUmsAHUBRDN3U9eyD6MTgDXGCO pgC6+CLUavTzs9VoKnp/y0c+OU+tt6myiyiMjcSCfaQ+TYERTTJRE476MZs96gnM +O6pONRQ0fjJP1vzlgSHabk6inWtlAY= -----END CERTIFICATE-----Generated at Sun Oct 11 21:56:45 2026 by rpki-client