$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21ba0e61-ce38-3894-9fe2-f85615b80796.roa File: 21ba0e61-ce38-3894-9fe2-f85615b80796.roa (raw, json) Hash identifier: RUzKurhqzNPlvad1Hk5qmWayKm5I9bjqHJCZ6BAxhZY= Subject key identifier: D7:1E:99:C7:28:42:C7:79:BC:CD:92:45:10:59:48:61:28:A1:BD:A7 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B92DD8D17640BFFBEC09C9000 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21ba0e61-ce38-3894-9fe2-f85615b80796.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 97.64.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:8d:17:64:0b:ff:be:c0:9c:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=f8edd45b-7a4e-4949-bfa9-fbbf63bfcbf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:43:52:a5:d9:70:7c:ab:52:16:39:73:56:c4: 31:7b:df:db:cd:fd:39:4f:5d:fb:30:1e:cd:0a:cd: 75:b9:55:ef:d1:ec:7c:b6:bc:87:fb:8d:51:f6:57: 5d:87:fa:64:f8:ed:e3:80:58:2d:8e:b9:47:7c:7c: b4:15:77:f4:33:d3:35:c7:41:85:e2:97:7b:73:ac: 4a:58:52:39:e9:0a:55:21:3b:b4:6e:03:7e:07:31: a2:ea:cc:3f:02:d8:57:ed:dc:ad:86:17:1e:26:cf: c9:7f:84:bc:7e:07:d7:9e:c2:28:d6:0c:ca:f0:4b: b3:ef:79:0d:10:f0:b0:8a:05:c5:79:2b:28:af:7a: 88:78:a8:04:c1:26:34:37:43:aa:9c:6c:a3:56:c2: 99:ff:68:c3:d6:5b:82:4d:59:af:fa:3a:9a:3b:8c: ba:80:78:b9:81:20:ff:ef:08:29:c7:fe:e1:6e:d0: 55:6a:1d:cb:c2:19:fe:dd:75:f8:1d:18:68:31:30: da:c7:97:c9:5c:6a:b7:e7:a3:fc:ed:e3:98:26:c8: 54:02:41:89:f6:34:1b:f8:33:43:32:18:96:89:70: 85:3b:23:36:67:4f:01:4e:a8:81:91:13:ca:0a:e6: c8:0a:5b:54:d2:34:85:ae:18:88:b2:06:65:7f:95: c9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1E:99:C7:28:42:C7:79:BC:CD:92:45:10:59:48:61:28:A1:BD:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/21ba0e61-ce38-3894-9fe2-f85615b80796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:95:0b:ae:55:94:76:2d:17:a0:cf:b8:ba:9e:67:16:a6:17: 13:30:ba:f6:b9:bb:b4:60:4a:2c:d5:f4:c7:d6:49:c4:e9:08: 26:2b:f0:74:74:2f:f6:d1:13:ef:02:f4:2e:05:41:52:cd:32: b7:d6:cf:ca:eb:5e:0c:06:f1:a6:20:7a:dc:5f:bf:9a:1b:d3: 97:33:62:37:ce:6f:96:02:46:e5:b6:cb:02:3a:6f:bd:40:09: d0:88:25:f2:85:4a:0d:76:f8:20:75:fd:55:5a:b9:47:09:5d: 1b:44:91:14:ba:ba:09:ce:89:00:5a:e0:de:6b:2e:ce:18:41: c7:28:5c:4e:ce:81:6d:fa:0d:50:36:c7:53:80:90:00:b3:e6: 9f:ca:ae:86:15:fd:80:72:5b:ff:bc:2a:7e:26:bc:0f:36:54: 96:b8:44:24:d3:24:12:fe:12:1f:32:29:46:76:de:92:97:e8: 57:2d:48:f6:e2:70:b5:e6:83:c7:b6:ea:e5:89:f5:96:27:ea: d1:68:84:07:83:cd:62:d2:c5:79:c3:4c:d0:52:e1:17:f1:57: 68:66:2d:47:70:ce:44:36:f2:58:92:4e:6f:e3:b6:9c:f0:2c: 8c:ab:10:05:76:7c:39:2e:ba:47:ab:02:7f:90:d7:63:19:5f: 67:e2:27:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3Y0XZAv/vsCckAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk ZjhlZGQ0NWItN2E0ZS00OTQ5LWJmYTktZmJiZjYzYmZjYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ENSpdlwfKtSFjlzVsQxe9/bzf05T137MB7N Cs11uVXv0ex8tryH+41R9lddh/pk+O3jgFgtjrlHfHy0FXf0M9M1x0GF4pd7c6xK WFI56QpVITu0bgN+BzGi6sw/AthX7dythhceJs/Jf4S8fgfXnsIo1gzK8Euz73kN EPCwigXFeSsor3qIeKgEwSY0N0OqnGyjVsKZ/2jD1luCTVmv+jqaO4y6gHi5gSD/ 7wgpx/7hbtBVah3Lwhn+3XX4HRhoMTDax5fJXGq356P87eOYJshUAkGJ9jQb+DND MhiWiXCFOyM2Z08BTqiBkRPKCubICltU0jSFrhiIsgZlf5XJPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcemccoQsd5vM2SRRBZSGEoob2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjFiYTBlNjEtY2UzOC0z ODk0LTlmZTItZjg1NjE1YjgwNzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6VC65VlHYtF6DPuLqeZxamFxMwuva5u7RgSizV9MfWScTpCCYr8HR0 L/bRE+8C9C4FQVLNMrfWz8rrXgwG8aYgetxfv5ob05czYjfOb5YCRuW2ywI6b71A CdCIJfKFSg12+CB1/VVauUcJXRtEkRS6ugnOiQBa4N5rLs4YQccoXE7OgW36DVA2 x1OAkACz5p/KroYV/YByW/+8Kn4mvA82VJa4RCTTJBL+Eh8yKUZ23pKX6FctSPbi cLXmg8e26uWJ9ZYn6tFohAeDzWLSxXnDTNBS4RfxV2hmLUdwzkQ28liSTm/jtpzw LIyrEAV2fDkuukerAn+Q12MZX2fiJwA= -----END CERTIFICATE-----Generated at Mon Oct 20 14:01:02 2025 by rpki-client