$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b976e04e-a2c2-3eca-a7af-56be89615a37.roa File: b976e04e-a2c2-3eca-a7af-56be89615a37.roa (raw, json) Hash identifier: IQSUi8xqbdD+8VdbS/5WIzlkVGZNjczhcEFx8VmwT10= Subject key identifier: D8:19:7B:DF:1E:DA:87:B6:0B:F5:5F:66:DE:3B:B0:A3:FF:EB:F5:E1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F7782E6B133A09F767E6A0B00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b976e04e-a2c2-3eca-a7af-56be89615a37.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 30036 IP address blocks: 97.64.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:e6:b1:33:a0:9f:76:7e:6a:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=bdb0f964-5636-4a44-bd2d-1ee2440c9853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6d:56:69:1b:5a:5e:df:be:f6:8e:2b:ac:5f: 18:3b:6b:22:15:99:c9:3b:1f:5b:98:06:df:ed:12: fd:80:c1:e7:d1:6b:4e:f0:ed:73:00:a1:6b:9c:60: 00:ee:3a:6b:63:ad:ce:d8:b2:39:00:dc:46:91:32: 02:5e:c8:2b:e6:6d:0f:ec:51:6e:9c:61:f0:39:33: ab:47:9c:18:6d:59:59:23:25:e5:d3:b8:8f:fe:66: 04:a9:21:5e:8a:24:ce:f4:e2:8a:88:f5:4b:d5:40: 75:30:c1:02:f8:a0:94:98:24:c7:9b:97:76:41:18: da:6e:77:fe:67:fe:0e:6f:07:9e:00:81:14:81:ba: 59:6a:c2:f8:6b:9b:f9:f0:bc:1d:73:2c:36:90:60: 75:6c:30:74:3e:76:fe:f9:57:6f:72:a2:d4:22:f9: de:78:e4:81:80:d2:98:ca:0a:7f:a8:df:5c:8d:50: c5:c4:4a:86:0c:11:9d:cf:a6:1d:2f:bf:2a:cb:5d: 0e:2e:e5:53:2a:60:3c:28:ec:f0:f9:f5:5c:a3:43: f6:df:14:fd:4d:a2:35:e2:2b:b5:e8:19:59:ca:53: f5:b2:b9:68:15:b4:54:62:45:55:72:fb:1b:93:f9: 24:6c:6e:2f:89:1d:a1:69:3f:d1:72:44:c0:ca:e3: 3e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:19:7B:DF:1E:DA:87:B6:0B:F5:5F:66:DE:3B:B0:A3:FF:EB:F5:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b976e04e-a2c2-3eca-a7af-56be89615a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ff:41:74:dc:0f:0c:99:54:b8:cd:57:52:df:5b:69:9f:81: 8c:8a:d7:df:0d:c4:15:0e:3a:99:cb:6e:89:31:2a:d7:02:ad: 90:89:5f:b8:0e:df:58:c3:5d:ce:32:6b:98:2d:f7:38:3b:5f: 96:78:0f:fe:12:70:4a:d2:bb:93:f8:d6:dc:2a:f1:43:c8:6d: f5:5e:ff:ef:99:b1:72:f5:f4:b7:d6:13:5c:fb:8c:74:49:4b: 17:81:96:40:f3:65:e5:84:f1:fa:31:b4:68:c2:91:e7:51:d6: 17:af:76:0a:16:74:ee:99:e4:3c:cb:ee:26:0d:fe:d6:87:87: f1:b2:cd:13:04:be:b2:5c:d8:b7:62:c8:c1:82:12:e4:84:9f: f8:fb:21:5e:ed:93:b9:3a:51:ba:ea:8e:64:15:16:02:75:90: cf:e4:f6:fa:65:6b:2c:cb:d0:4c:97:48:ea:00:50:ca:10:ed: ff:30:27:fa:0d:2d:5c:82:86:67:bb:67:b0:e2:4c:65:f6:4e: d6:77:b4:b8:39:de:32:88:67:0f:ef:f5:1b:aa:4a:fe:77:a1: 31:95:c2:e5:d6:75:f2:34:46:31:db:47:75:82:28:76:17:a3: 39:31:e7:ad:62:17:0f:37:9d:72:0a:e6:41:0f:60:8c:fd:3a: 78:8a:db:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93guaxM6Cfdn5qCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk YmRiMGY5NjQtNTYzNi00YTQ0LWJkMmQtMWVlMjQ0MGM5ODUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv21WaRtaXt++9o4rrF8YO2siFZnJOx9bmAbf 7RL9gMHn0WtO8O1zAKFrnGAA7jprY63O2LI5ANxGkTICXsgr5m0P7FFunGHwOTOr R5wYbVlZIyXl07iP/mYEqSFeiiTO9OKKiPVL1UB1MMEC+KCUmCTHm5d2QRjabnf+ Z/4ObweeAIEUgbpZasL4a5v58Lwdcyw2kGB1bDB0Pnb++VdvcqLUIvneeOSBgNKY ygp/qN9cjVDFxEqGDBGdz6YdL78qy10OLuVTKmA8KOzw+fVco0P23xT9TaI14iu1 6BlZylP1srloFbRUYkVVcvsbk/kkbG4viR2haT/RckTAyuM+awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgZe98e2oe2C/VfZt47sKP/6/XhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjk3NmUwNGUtYTJjMi0z ZWNhLWE3YWYtNTZiZTg5NjE1YTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf/QXTcDwyZVLjNV1LfW2mfgYyK198NxBUOOpnLbokxKtcCrZCJX7gO 31jDXc4ya5gt9zg7X5Z4D/4ScErSu5P41twq8UPIbfVe/++ZsXL19LfWE1z7jHRJ SxeBlkDzZeWE8foxtGjCkedR1hevdgoWdO6Z5DzL7iYN/taHh/GyzRMEvrJc2Ldi yMGCEuSEn/j7IV7tk7k6UbrqjmQVFgJ1kM/k9vplayzL0EyXSOoAUMoQ7f8wJ/oN LVyChme7Z7DiTGX2TtZ3tLg53jKIZw/v9RuqSv53oTGVwuXWdfI0RjHbR3WCKHYX ozkx561iFw83nXIK5kEPYIz9OniK20g= -----END CERTIFICATE-----Generated at Sun Oct 11 17:15:52 2026 by rpki-client