$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f4c187f2-baca-3860-86dd-aea2ea0787a9.roa File: f4c187f2-baca-3860-86dd-aea2ea0787a9.roa (raw, json) Hash identifier: gNb5kjaI0Q2OyRt7zjZfMgdKH96TWSVOMaugEu+76GM= Subject key identifier: C0:B6:B3:90:48:B6:18:12:28:5D:A6:76:57:5B:FD:1A:78:A0:7C:A0 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F7A502CFED15B84DE9EC17900 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f4c187f2-baca-3860-86dd-aea2ea0787a9.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 30036 IP address blocks: 97.64.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:50:2c:fe:d1:5b:84:de:9e:c1:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=29adffa9-99aa-4cf4-a8e2-553db73ed5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5e:91:cd:0d:91:7e:8c:4f:d1:37:13:c1:db: fa:7f:8b:15:b7:c9:c5:7c:97:d6:fd:6b:48:08:cd: f5:73:e4:9b:a1:1b:70:8c:9e:03:30:fe:48:98:60: 4a:46:da:fd:ac:6e:fd:55:3a:78:e4:15:2c:69:1e: 3c:85:b5:e2:b6:a8:de:fa:5e:ae:ee:a3:15:f4:c9: eb:93:37:b7:b3:b1:3e:c0:da:1a:5c:0c:e2:22:8e: b4:bf:1c:d8:ea:6a:0e:5f:7b:8a:06:db:b0:a8:2f: 8f:65:45:67:8e:92:a9:90:50:cc:cd:a9:e9:53:f4: 92:1a:4c:bf:dd:5c:ec:4c:cc:42:3f:07:18:0a:f7: 9c:14:e7:b2:ba:d8:4f:da:f9:8e:e6:ca:eb:48:f4: b8:f7:34:18:1e:32:3e:bf:3d:f9:10:f6:44:03:cc: ca:b5:5e:21:76:d9:43:99:46:94:78:45:9b:57:ca: e6:7c:3e:d9:4a:b1:ca:47:b2:77:ed:40:72:a8:50: 00:d6:e2:a8:67:d7:07:23:fb:c1:9e:46:89:48:f1: ef:ce:3e:2c:f4:8d:0b:82:ed:c3:c5:79:0b:36:c9: 62:6c:66:70:01:ff:b5:1d:5f:80:bc:3b:db:21:bc: aa:64:80:47:53:9a:26:b9:d1:e5:0c:72:6b:64:e7: 6d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B6:B3:90:48:B6:18:12:28:5D:A6:76:57:5B:FD:1A:78:A0:7C:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f4c187f2-baca-3860-86dd-aea2ea0787a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:fc:73:97:b0:6b:4e:b3:28:76:2d:5e:b1:58:40:c8:a3:45: 36:8a:ba:06:7b:9c:dc:cb:03:01:95:ee:30:7a:f5:ef:49:2b: 8e:1c:d9:41:d6:26:24:77:57:0e:04:09:de:7c:88:ac:b8:4a: 3b:14:36:92:d6:ac:87:a8:08:ac:41:b6:cd:9f:6e:ab:27:d3: e7:47:a1:42:24:62:7e:32:4b:0b:d9:59:55:8e:31:81:de:95: ca:a2:ca:06:7f:f5:f3:7c:fe:63:85:a1:f6:d5:b3:94:75:23: ad:f7:a0:a5:ef:b5:27:26:7c:b9:f4:ec:81:74:ad:76:cf:b5: ab:5b:82:cb:79:34:c0:99:d1:07:ea:25:73:c9:e9:a1:27:69: a5:84:8b:c1:a3:54:36:ea:07:e3:4e:27:89:e7:9f:08:c1:59: f6:7c:a4:69:fa:12:13:b8:a9:27:74:c8:24:8f:7f:17:38:d9: c5:8e:a6:2c:b2:6b:ea:d4:e8:f5:b5:fc:b2:13:42:85:54:3f: 7c:27:77:6a:ec:49:e0:a0:e6:19:9a:7c:ef:e4:a8:c5:a4:a2: 0e:61:70:3f:07:02:b3:cc:6b:52:4f:ae:17:53:ac:e7:fc:9e: 67:8c:7b:b7:a6:9b:28:d8:f4:f4:de:89:f1:ff:4c:b0:d9:4e: 92:b9:86:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96UCz+0VuE3p7BeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MjlhZGZmYTktOTlhYS00Y2Y0LWE4ZTItNTUzZGI3M2VkNWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil6RzQ2RfoxP0TcTwdv6f4sVt8nFfJfW/WtI CM31c+SboRtwjJ4DMP5ImGBKRtr9rG79VTp45BUsaR48hbXitqje+l6u7qMV9Mnr kze3s7E+wNoaXAziIo60vxzY6moOX3uKBtuwqC+PZUVnjpKpkFDMzanpU/SSGky/ 3VzsTMxCPwcYCvecFOeyuthP2vmO5srrSPS49zQYHjI+vz35EPZEA8zKtV4hdtlD mUaUeEWbV8rmfD7ZSrHKR7J37UByqFAA1uKoZ9cHI/vBnkaJSPHvzj4s9I0Lgu3D xXkLNslibGZwAf+1HV+AvDvbIbyqZIBHU5omudHlDHJrZOdtjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMC2s5BIthgSKF2mdldb/Rp4oHygMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjRjMTg3ZjItYmFjYS0z ODYwLTg2ZGQtYWVhMmVhMDc4N2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHf8c5ewa06zKHYtXrFYQMijRTaKugZ7nNzLAwGV7jB69e9JK44c2UHW JiR3Vw4ECd58iKy4SjsUNpLWrIeoCKxBts2fbqsn0+dHoUIkYn4ySwvZWVWOMYHe lcqiygZ/9fN8/mOFofbVs5R1I633oKXvtScmfLn07IF0rXbPtatbgst5NMCZ0Qfq JXPJ6aEnaaWEi8GjVDbqB+NOJ4nnnwjBWfZ8pGn6EhO4qSd0yCSPfxc42cWOpiyy a+rU6PW1/LITQoVUP3wnd2rsSeCg5hmafO/kqMWkog5hcD8HArPMa1JPrhdTrOf8 nmeMe7emmyjY9PTeifH/TLDZTpK5hgg= -----END CERTIFICATE-----Generated at Mon Oct 12 16:39:21 2026 by rpki-client