$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7998427-90b8-38bf-84fb-66b85fa456d6.roa File: c7998427-90b8-38bf-84fb-66b85fa456d6.roa (raw, json) Hash identifier: jfBrqvAvNdFfDcVW9po7Zn0u89Sy4Rhq7jk5cYl1oGU= Subject key identifier: AF:1D:4B:1C:1A:03:BD:4A:AF:9B:81:85:F1:75:6D:8E:B2:FC:55:4F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F7782D979670BD85D82732540 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7998427-90b8-38bf-84fb-66b85fa456d6.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 30036 IP address blocks: 97.64.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:d9:79:67:0b:d8:5d:82:73:25:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=a8ec461f-97bd-442f-b490-8072e4626ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:34:b4:52:ec:33:c6:23:11:39:35:a9:4b:e3: 1d:66:32:a8:04:1d:bc:5c:2b:0b:e8:bf:65:55:d4: ab:d1:51:f6:bf:c1:0d:84:27:b9:b8:0f:5e:fc:94: be:c5:4d:50:ab:5f:64:ed:b3:cf:3f:a7:87:45:05: f8:00:90:d6:4b:8e:38:0d:e8:12:82:b9:75:36:8f: b2:84:c8:c8:ce:4e:34:91:e5:bc:4b:a7:64:c0:ac: e8:5d:1e:2f:e0:61:2d:a8:42:ba:1b:5d:be:0c:23: d7:2a:b0:59:be:b9:3a:c5:19:16:52:16:0d:f9:37: 39:e1:ca:b3:c2:07:c0:f5:be:ba:06:61:18:bf:3d: ac:a6:a4:9a:ab:ce:2b:48:25:bf:c2:b9:8d:b9:de: fd:cf:af:b2:3d:eb:cb:f3:3a:08:da:95:9d:3d:0c: 8a:4c:e6:a0:ba:e7:42:77:83:0f:6b:be:1b:3c:dc: ac:ea:f1:f2:61:71:8e:50:de:f2:17:ed:33:c8:3a: dd:d4:39:25:13:1a:18:ee:c5:f9:5c:1f:79:2c:e9: 53:2d:11:24:b9:08:cc:e0:88:86:1f:d5:f5:f0:f6: 26:96:10:2d:62:07:60:09:56:a8:e1:13:37:22:67: 51:87:50:5d:bc:ce:e9:e4:9e:e7:31:c1:85:29:3a: 04:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1D:4B:1C:1A:03:BD:4A:AF:9B:81:85:F1:75:6D:8E:B2:FC:55:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c7998427-90b8-38bf-84fb-66b85fa456d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:84:dc:54:a3:a4:b8:88:6e:87:e0:a0:e3:e0:65:59:5e:eb: 29:4b:58:d3:c3:cc:0b:ac:bf:41:05:16:a2:78:32:81:04:2a: ad:97:82:41:a4:61:56:c8:99:0a:5a:48:b9:4c:28:87:f4:56: 90:87:da:5b:87:c4:49:1d:97:44:56:eb:53:b0:43:39:b6:8c: da:21:49:dd:81:bc:1a:b1:f9:76:83:12:dd:a4:b0:27:1d:1c: 72:fa:0a:e3:8e:1b:80:af:b7:d4:50:f7:03:70:b9:99:a7:62: 7e:20:82:5d:14:bc:91:fd:11:11:1d:8c:78:6c:20:69:3d:5a: 57:70:e9:fe:d4:cd:a7:75:41:9c:a3:0e:f0:57:48:a2:7d:f7: c7:02:ce:a4:af:30:b8:20:2e:4a:c1:f8:82:6d:aa:98:06:74: 5f:63:df:76:c2:27:b7:2f:1a:29:2a:24:0b:a8:7e:8b:f9:91: 65:fb:d8:a5:b1:6b:da:a4:4e:2b:cc:5c:c1:36:1f:e8:cc:3a: ff:b7:c4:19:75:52:50:da:ed:89:f8:56:b4:2c:af:a9:ba:f0: 2e:a3:ed:6f:ce:45:84:b9:b9:c3:07:24:c3:31:9e:d0:e0:f8: 26:46:77:99:01:4d:f0:93:33:63:24:7b:5c:0f:94:e0:ce:e5: 38:11:6b:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gtl5ZwvYXYJzJUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk YThlYzQ2MWYtOTdiZC00NDJmLWI0OTAtODA3MmU0NjI2ZWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TS0UuwzxiMROTWpS+MdZjKoBB28XCsL6L9l VdSr0VH2v8ENhCe5uA9e/JS+xU1Qq19k7bPPP6eHRQX4AJDWS444DegSgrl1No+y hMjIzk40keW8S6dkwKzoXR4v4GEtqEK6G12+DCPXKrBZvrk6xRkWUhYN+Tc54cqz wgfA9b66BmEYvz2spqSaq84rSCW/wrmNud79z6+yPevL8zoI2pWdPQyKTOaguudC d4MPa74bPNys6vHyYXGOUN7yF+0zyDrd1DklExoY7sX5XB95LOlTLREkuQjM4IiG H9X18PYmlhAtYgdgCVao4RM3ImdRh1BdvM7p5J7nMcGFKToE2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8dSxwaA71Kr5uBhfF1bY6y/FVPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzc5OTg0MjctOTBiOC0z OGJmLTg0ZmItNjZiODVmYTQ1NmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOE3FSjpLiIbofgoOPgZVle6ylLWNPDzAusv0EFFqJ4MoEEKq2XgkGk YVbImQpaSLlMKIf0VpCH2luHxEkdl0RW61OwQzm2jNohSd2BvBqx+XaDEt2ksCcd HHL6CuOOG4Cvt9RQ9wNwuZmnYn4ggl0UvJH9EREdjHhsIGk9Wldw6f7Uzad1QZyj DvBXSKJ998cCzqSvMLggLkrB+IJtqpgGdF9j33bCJ7cvGikqJAuofov5kWX72KWx a9qkTivMXME2H+jMOv+3xBl1UlDa7Yn4VrQsr6m68C6j7W/ORYS5ucMHJMMxntDg +CZGd5kBTfCTM2Mke1wPlODO5TgRa7E= -----END CERTIFICATE-----Generated at Sun Oct 11 23:41:21 2026 by rpki-client