$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ba12e8b-1ba3-35cf-a9de-eaacfb5a1e03.roa File: 8ba12e8b-1ba3-35cf-a9de-eaacfb5a1e03.roa (raw, json) Hash identifier: 3UWxcl/akqoXsPHSnmlWLIDiGUeSLkhMfCbcAO57tA8= Subject key identifier: 0F:93:60:38:B5:1E:D1:8A:A7:C5:61:A1:B2:1D:07:B7:44:59:43:64 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F77835DAEED52B7E595FA7D80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ba12e8b-1ba3-35cf-a9de-eaacfb5a1e03.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 30036 IP address blocks: 97.64.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:5d:ae:ed:52:b7:e5:95:fa:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=56f4a0f1-3025-4f9c-9b8a-47b2ddfc5404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0d:fc:d5:c8:90:ce:cd:82:6b:8a:75:e0:37: da:5f:2a:46:a5:27:49:c4:f3:02:f7:0f:89:d2:49: 65:d4:05:1b:31:28:d3:ae:52:54:e3:25:08:21:b3: 3a:79:31:a3:de:00:d0:cc:0c:51:e8:a0:d6:e1:c2: a1:36:cb:78:1a:f1:f0:5c:90:f8:19:08:be:6a:85: 4d:14:4d:36:91:2f:c1:ba:32:77:34:9e:b5:5b:fa: 09:b8:d8:b7:c0:d9:eb:0c:b9:6b:65:2f:20:e6:61: f0:7b:fc:db:8a:fa:27:1d:7c:fd:28:9a:f3:26:5c: 34:a3:b3:15:3f:02:9a:19:01:51:b7:e7:37:d4:63: f7:6f:9a:94:de:f7:1a:82:41:f3:a5:fa:91:02:57: ea:45:f7:60:7a:a8:61:5b:2d:9e:b9:6c:00:ac:8c: 7b:1c:ef:f0:a6:75:7b:6c:91:fc:e5:5e:4e:85:b2: 88:d2:5b:e7:63:3a:49:48:c1:77:73:e5:79:ed:32: 15:4f:13:aa:fe:4d:54:f5:4d:72:b9:a8:eb:92:2e: 19:88:e6:74:66:b1:bc:c1:ff:11:20:b4:60:0c:e4: 1e:62:3f:3f:98:a2:27:72:57:61:4c:86:c9:49:bc: 6b:e9:e5:d6:90:0f:e5:81:de:f0:e2:1c:ae:e8:5a: 8b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:93:60:38:B5:1E:D1:8A:A7:C5:61:A1:B2:1D:07:B7:44:59:43:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ba12e8b-1ba3-35cf-a9de-eaacfb5a1e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:0f:f2:e4:6b:40:f0:00:74:6a:47:25:91:8e:00:db:d2:31: 74:4f:a3:1f:67:70:39:2d:f2:5e:07:de:03:f8:17:d2:58:bb: 69:50:91:a3:9c:d3:3c:b1:0b:a0:5c:8a:d3:5f:a2:83:fd:3f: d9:0c:27:c4:ec:95:a1:b6:74:4a:ce:b5:32:7b:5c:37:cd:8d: 59:f2:93:dd:aa:02:a0:e3:6c:b0:42:77:d9:93:5a:e1:86:66: 4b:bb:8e:08:64:7b:1f:a0:85:a5:09:d2:1c:c1:4c:64:fb:e7: 65:53:ed:66:b7:73:99:21:ce:ed:c0:ac:09:d0:c0:5f:71:57: 66:c1:7e:64:33:ef:d8:29:5b:ec:8e:7c:e5:f0:54:22:06:b3: c9:7a:b0:e2:2e:04:7d:1d:f1:fd:3c:9c:f4:06:45:c4:a1:41: d1:81:fd:10:1c:7b:18:c4:88:08:b1:94:8c:c8:3b:71:5b:ef: 12:ab:9c:c0:86:fa:38:56:09:31:3a:ca:08:de:1a:ff:8e:54: 7b:a0:a1:af:63:06:4a:ab:5a:56:86:06:73:82:68:ba:43:2b: 44:35:01:3f:eb:5a:ec:77:22:1c:47:1c:cc:02:d4:26:f9:3e: 2a:9e:20:cd:d8:84:86:64:f7:f7:e1:6c:e4:36:91:87:68:ad: e2:29:c4:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g12u7VK35ZX6fYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk NTZmNGEwZjEtMzAyNS00ZjljLTliOGEtNDdiMmRkZmM1NDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ381ciQzs2Ca4p14DfaXypGpSdJxPMC9w+J 0kll1AUbMSjTrlJU4yUIIbM6eTGj3gDQzAxR6KDW4cKhNst4GvHwXJD4GQi+aoVN FE02kS/BujJ3NJ61W/oJuNi3wNnrDLlrZS8g5mHwe/zbivonHXz9KJrzJlw0o7MV PwKaGQFRt+c31GP3b5qU3vcagkHzpfqRAlfqRfdgeqhhWy2euWwArIx7HO/wpnV7 bJH85V5OhbKI0lvnYzpJSMF3c+V57TIVTxOq/k1U9U1yuajrki4ZiOZ0ZrG8wf8R ILRgDOQeYj8/mKIncldhTIbJSbxr6eXWkA/lgd7w4hyu6FqL2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+TYDi1HtGKp8VhobIdB7dEWUNkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGJhMTJlOGItMWJhMy0z NWNmLWE5ZGUtZWFhY2ZiNWExZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgP8uRrQPAAdGpHJZGOANvSMXRPox9ncDkt8l4H3gP4F9JYu2lQkaOc 0zyxC6BcitNfooP9P9kMJ8TslaG2dErOtTJ7XDfNjVnyk92qAqDjbLBCd9mTWuGG Zku7jghkex+ghaUJ0hzBTGT752VT7Wa3c5khzu3ArAnQwF9xV2bBfmQz79gpW+yO fOXwVCIGs8l6sOIuBH0d8f08nPQGRcShQdGB/RAcexjEiAixlIzIO3Fb7xKrnMCG +jhWCTE6ygjeGv+OVHugoa9jBkqrWlaGBnOCaLpDK0Q1AT/rWux3IhxHHMwC1Cb5 PiqeIM3YhIZk9/fhbOQ2kYdoreIpxCg= -----END CERTIFICATE-----Generated at Mon Oct 12 09:58:26 2026 by rpki-client