$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/3a21d805-3564-3ec7-981f-7f99bdf1700f.roa File: 3a21d805-3564-3ec7-981f-7f99bdf1700f.roa (raw, json) Hash identifier: pvZ1O94sfxe0EWFA7gkq431ZC6fLPXoHeN7ZW97V7/U= Subject key identifier: EA:C5:1D:FE:5D:56:83:2A:CA:02:BE:DE:E4:2A:9C:C5:C4:78:E6:0F Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584B0C8B29C798B52A67851F1900 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/3a21d805-3564-3ec7-981f-7f99bdf1700f.roa Signing time: Mon 01 Sep 2025 10:11:26 +0000 ROA not before: Mon 01 Sep 2025 10:11:26 +0000 ROA not after: Sun 30 Nov 2025 11:11:26 +0000 asID: 35908 IP address blocks: 97.64.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:8b:29:c7:98:b5:2a:67:85:1f:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Sep 1 10:11:26 2025 GMT Not After : Nov 30 11:11:26 2025 GMT Subject: CN=2d2da15d-37ab-4bf6-9022-406128fb2e5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5a:82:14:3b:d2:bf:0d:b5:6d:6b:f7:88:07: 78:02:73:77:0b:93:db:fd:76:c2:8a:db:a6:eb:be: 8a:21:f1:d0:47:ad:b8:1f:5d:22:30:2b:a1:e5:e5: ae:99:d6:cc:05:d3:cd:da:59:0c:bf:4b:75:bb:41: ec:de:fa:a4:a5:7e:1b:c3:87:8d:09:7b:62:0c:5e: 61:3f:2c:5a:d6:4b:c2:05:11:e2:bf:ca:bc:8d:f5: e1:32:10:84:b0:bb:43:be:4e:21:b6:21:8c:2e:bb: d2:70:32:97:d0:07:ed:09:51:48:c9:bd:4e:b3:28: 53:dc:a0:fd:00:87:66:32:81:2c:a0:e4:b8:4e:de: 6b:fa:e2:20:5a:74:31:22:cb:cd:08:1b:3a:48:09: 60:0b:35:37:c1:38:28:7c:1b:f0:cc:b4:77:4f:35: 58:36:8d:d4:75:8d:46:7f:25:9b:f1:b9:2f:26:9e: 63:f2:3d:bf:f2:88:c4:52:81:5b:c1:cd:54:3b:33: 30:6d:7c:8d:16:7b:82:8e:9f:85:ab:57:4e:39:2a: aa:d8:cb:d4:e6:07:d3:e8:ed:df:68:b7:5f:78:94: b5:2d:de:ad:d9:41:90:80:a2:0c:04:12:8f:f0:4f: 26:5b:a1:a0:83:65:ea:36:41:f0:68:79:e3:74:6e: a4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C5:1D:FE:5D:56:83:2A:CA:02:BE:DE:E4:2A:9C:C5:C4:78:E6:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/3a21d805-3564-3ec7-981f-7f99bdf1700f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv4: 97.64.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f6:91:14:bf:0b:0e:29:e1:79:d3:b4:e8:5e:2c:11:56:a1: a2:8e:40:d5:87:98:6a:c9:a6:07:e0:7f:e4:0f:34:5c:58:9e: 0d:fb:80:54:00:ff:c0:39:25:18:1d:2a:f4:03:35:c3:b1:8f: af:6f:d8:8d:1d:3c:0b:b3:91:29:bc:68:fb:22:2b:c9:b3:68: 4c:a9:36:12:d6:67:c6:8f:aa:20:0e:61:b4:94:c9:73:39:40: 48:cf:f4:44:76:63:fb:a1:dc:6e:e8:8c:b8:0a:57:10:62:c6: 8d:ca:6d:5e:3d:78:fd:82:7a:83:b8:00:57:09:18:cb:71:ed: 42:16:5f:c8:98:81:7c:48:9b:6d:e8:d6:49:e6:0a:28:31:c9: e2:fc:6a:b9:29:e2:0f:70:61:a0:95:7e:d2:d7:3f:9b:ae:6f: 04:99:db:9a:3c:c4:2e:83:16:99:83:6e:4a:2f:2e:cb:d6:24: 77:9b:08:7f:02:df:cf:52:e1:b0:3c:6a:8d:15:48:6a:73:6a: f6:6e:b4:73:fc:82:4d:d2:d4:88:4a:fd:90:ea:af:62:04:b7: f7:4c:9d:fe:d3:f5:a8:7b:43:9b:51:16:c5:ad:17:87:14:fe: f9:fc:d9:d0:1b:94:53:d3:20:4d:42:3a:89:af:1c:a7:1c:5e: d2:bf:2b:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsMiynHmLUqZ4UfGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI1MDkwMTEwMTEyNloXDTI1MTEzMDExMTEyNlowLzEtMCsGA1UEAxMk MmQyZGExNWQtMzdhYi00YmY2LTkwMjItNDA2MTI4ZmIyZTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1qCFDvSvw21bWv3iAd4AnN3C5Pb/XbCitum 676KIfHQR624H10iMCuh5eWumdbMBdPN2lkMv0t1u0Hs3vqkpX4bw4eNCXtiDF5h Pyxa1kvCBRHiv8q8jfXhMhCEsLtDvk4htiGMLrvScDKX0AftCVFIyb1OsyhT3KD9 AIdmMoEsoOS4Tt5r+uIgWnQxIsvNCBs6SAlgCzU3wTgofBvwzLR3TzVYNo3UdY1G fyWb8bkvJp5j8j2/8ojEUoFbwc1UOzMwbXyNFnuCjp+Fq1dOOSqq2MvU5gfT6O3f aLdfeJS1Ld6t2UGQgKIMBBKP8E8mW6Ggg2XqNkHwaHnjdG6kHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrFHf5dVoMqygK+3uQqnMXEeOYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvM2EyMWQ4MDUtMzU2NC0z ZWM3LTk4MWYtN2Y5OWJkZjE3MDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUBhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACT2kRS/Cw4p4XnTtOheLBFWoaKOQNWHmGrJpgfgf+QPNFxYng37gFQA /8A5JRgdKvQDNcOxj69v2I0dPAuzkSm8aPsiK8mzaEypNhLWZ8aPqiAOYbSUyXM5 QEjP9ER2Y/uh3G7ojLgKVxBixo3KbV49eP2CeoO4AFcJGMtx7UIWX8iYgXxIm23o 1knmCigxyeL8arkp4g9wYaCVftLXP5uubwSZ25o8xC6DFpmDbkovLsvWJHebCH8C 389S4bA8ao0VSGpzavZutHP8gk3S1IhK/ZDqr2IEt/dMnf7T9ah7Q5tRFsWtF4cU /vn82dAblFPTIE1COomvHKccXtK/K1Y= -----END CERTIFICATE-----Generated at Wed Sep 10 04:56:13 2025 by rpki-client