$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af3b7bb0-e922-3bf4-9766-0847af16df6b.roa File: af3b7bb0-e922-3bf4-9766-0847af16df6b.roa (raw, json) Hash identifier: UJydyvL1s25fkVvQ8Sahseua4UyAB1i6n9peEGaOH0o= Subject key identifier: 7D:39:46:36:98:ED:F3:26:A1:54:6E:45:87:CD:94:C5:C9:CF:44:02 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584E31CF0C2BD2CFF57B3EF04880 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af3b7bb0-e922-3bf4-9766-0847af16df6b.roa Signing time: Tue 16 Jun 2026 21:00:12 +0000 ROA not before: Tue 16 Jun 2026 21:00:12 +0000 ROA not after: Mon 14 Sep 2026 21:00:12 +0000 asID: 30036 IP address blocks: 97.64.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:31:cf:0c:2b:d2:cf:f5:7b:3e:f0:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jun 16 21:00:12 2026 GMT Not After : Sep 14 21:00:12 2026 GMT Subject: CN=e5367f32-9b38-4d11-b9df-9d9e8f38f341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:99:57:e1:db:4d:67:63:a9:18:49:64:2b:4e: e8:e3:b0:e0:d5:69:ef:0b:35:27:c7:54:42:b0:89: e1:f0:1d:18:5c:7e:ed:be:16:01:30:4e:8e:fe:cc: fe:5c:49:1e:99:f9:c6:bd:85:5e:69:c4:18:f0:5f: 03:32:ad:99:a7:a8:04:e4:49:3d:93:da:42:03:29: e8:56:49:44:f2:fd:36:ec:74:ff:e0:e3:23:d6:a9: c9:8f:8f:84:f5:e5:5e:b9:6a:3f:be:78:80:68:5d: b8:60:8c:18:b4:1a:71:00:c6:45:b2:d4:bc:7f:77: df:bd:95:79:6c:5e:2a:3a:31:f3:80:a6:5f:74:2a: 61:8c:e8:e2:27:a5:5a:49:6c:78:5f:46:06:04:3e: ff:07:c1:87:ad:a0:74:9c:9a:b4:68:94:f0:66:35: d7:30:9f:da:32:e9:46:bc:62:c2:53:38:97:05:0f: 66:37:4a:43:ef:63:5a:0b:fb:da:d2:ea:00:58:ac: 55:31:d2:9f:42:a5:c6:69:b3:e5:b1:59:d2:b9:22: 7f:de:e0:40:bf:82:f0:c0:69:dc:ed:c8:04:29:a2: f9:ec:31:ff:14:01:c6:a3:e8:84:20:ee:82:58:d2: bd:39:45:55:f6:bf:8a:18:96:10:7e:16:f9:b4:71: de:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:39:46:36:98:ED:F3:26:A1:54:6E:45:87:CD:94:C5:C9:CF:44:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af3b7bb0-e922-3bf4-9766-0847af16df6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:32:c7:52:eb:2e:1b:3f:ad:20:60:45:68:53:45:99:5b:20: 20:2b:ba:a8:1a:7c:d5:e6:33:1c:2e:14:88:23:cf:71:2f:ee: 12:a8:87:45:29:d6:7d:d2:84:b0:72:30:ef:40:5f:ba:4a:c9: b5:e7:ac:38:13:d3:8e:34:38:23:04:d0:db:45:63:01:33:6d: 30:f4:f9:ea:54:ac:af:1e:ec:86:b1:da:2b:12:8d:42:e6:ff: c3:fc:4e:bb:63:ca:02:10:7f:f9:29:51:75:90:17:47:56:44: 39:92:58:bc:7f:f6:a6:a0:2e:25:9d:98:ac:e4:5c:ab:4d:0b: 4f:b2:49:51:90:2f:17:e7:a1:a2:57:3d:7c:8a:ab:15:7d:dd: 15:3c:2b:28:02:1c:87:a7:7a:11:92:3d:d9:9a:61:6b:c3:9a: 91:f1:72:a3:e6:ec:a5:d1:44:c5:05:24:c4:54:c6:f5:05:8b: f3:00:7a:17:f9:83:2c:56:48:f7:c5:b3:6c:50:32:2d:68:e9: 24:43:db:4b:dc:5a:21:9a:6c:b4:ab:1c:b8:3f:b8:82:fa:a0: 4c:20:ac:27:1d:c0:44:09:f9:2d:66:f2:6a:f8:31:0d:01:2b: 4d:c3:b6:5e:b6:06:57:11:c6:34:b2:5b:d8:e4:51:7c:d2:16: f6:5b:5f:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4xzwwr0s/1ez7wSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDYxNjIxMDAxMloXDTI2MDkxNDIxMDAxMlowLzEtMCsGA1UEAxMk ZTUzNjdmMzItOWIzOC00ZDExLWI5ZGYtOWQ5ZThmMzhmMzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZlX4dtNZ2OpGElkK07o47Dg1WnvCzUnx1RC sInh8B0YXH7tvhYBME6O/sz+XEkemfnGvYVeacQY8F8DMq2Zp6gE5Ek9k9pCAyno VklE8v027HT/4OMj1qnJj4+E9eVeuWo/vniAaF24YIwYtBpxAMZFstS8f3ffvZV5 bF4qOjHzgKZfdCphjOjiJ6VaSWx4X0YGBD7/B8GHraB0nJq0aJTwZjXXMJ/aMulG vGLCUziXBQ9mN0pD72NaC/va0uoAWKxVMdKfQqXGabPlsVnSuSJ/3uBAv4LwwGnc 7cgEKaL57DH/FAHGo+iEIO6CWNK9OUVV9r+KGJYQfhb5tHHejwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH05RjaY7fMmoVRuRYfNlMXJz0QCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWYzYjdiYjAtZTkyMi0z YmY0LTk3NjYtMDg0N2FmMTZkZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUyx1LrLhs/rSBgRWhTRZlbICAruqgafNXmMxwuFIgjz3Ev7hKoh0Up 1n3ShLByMO9AX7pKybXnrDgT0440OCME0NtFYwEzbTD0+epUrK8e7Iax2isSjULm /8P8TrtjygIQf/kpUXWQF0dWRDmSWLx/9qagLiWdmKzkXKtNC0+ySVGQLxfnoaJX PXyKqxV93RU8KygCHIenehGSPdmaYWvDmpHxcqPm7KXRRMUFJMRUxvUFi/MAehf5 gyxWSPfFs2xQMi1o6SRD20vcWiGabLSrHLg/uIL6oEwgrCcdwEQJ+S1m8mr4MQ0B K03Dtl62BlcRxjSyW9jkUXzSFvZbX5A= -----END CERTIFICATE-----Generated at Wed Jun 24 04:25:54 2026 by rpki-client