$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/415caf1a-8dde-3199-a803-1a4b2ffdbb10.roa File: 415caf1a-8dde-3199-a803-1a4b2ffdbb10.roa (raw, json) Hash identifier: 1wIZal/NkmWRxLVcjDRPEPWo+bXyY8rIun4eYVQTmpY= Subject key identifier: D9:54:E4:A9:80:B8:37:88:DF:46:EF:7E:91:C4:9A:74:6E:97:7E:AF Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B92DCE83AAD4EE3EE7063DC00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/415caf1a-8dde-3199-a803-1a4b2ffdbb10.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 97.64.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:e8:3a:ad:4e:e3:ee:70:63:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=a34865fe-66a0-4f9a-9257-497596accc35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d0:dc:76:ca:a8:76:f4:5c:cb:1c:90:64:4f: 45:14:f2:12:d4:11:ad:ee:f3:05:e1:1b:60:d8:d2: 42:2b:15:30:4b:a1:73:0c:0a:4e:f4:2e:e6:8d:4c: 87:55:3c:74:ca:fa:9e:cc:07:13:79:c0:ac:05:34: a3:77:2c:a1:5c:22:00:df:74:47:0a:90:63:84:3a: 3f:00:87:77:a0:2c:7a:12:83:91:d6:6e:af:c8:a6: 01:c8:54:61:14:70:0f:83:de:81:20:99:3a:0b:8f: d5:90:d4:67:8d:4f:5a:fa:ab:bb:94:9d:21:00:c1: f4:5b:04:19:7e:fb:9b:bd:a1:76:38:3c:23:6a:7f: a3:21:66:95:d8:15:f4:dc:b1:e2:f2:df:e6:2b:0f: 94:05:9c:93:ef:a9:d1:0f:88:76:12:bc:31:a1:7b: e0:7b:84:90:82:5c:51:01:19:4d:e9:d1:e3:c8:ce: 25:2d:73:34:49:de:b0:4f:cd:17:cf:aa:1a:36:f7: b1:60:fc:c7:06:b3:1b:2c:39:61:ab:74:7b:47:c1: a7:82:8e:91:3f:22:4e:f2:2b:56:4f:34:7c:fb:d0: 37:aa:35:07:41:7d:44:af:b2:44:a4:a6:06:f6:08: 99:76:a5:20:59:ec:07:ac:31:6d:3c:ec:5e:05:e7: de:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:54:E4:A9:80:B8:37:88:DF:46:EF:7E:91:C4:9A:74:6E:97:7E:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/415caf1a-8dde-3199-a803-1a4b2ffdbb10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:19:05:cd:bd:51:b5:fc:cf:33:df:0e:71:15:c5:63:a9:0d: 95:3f:53:da:f1:2d:61:83:ba:92:5d:27:8a:27:e8:4f:99:4d: 57:c9:3b:fa:77:1b:1d:7b:67:c9:2e:e8:8e:1c:66:7b:27:ba: 2a:31:ef:33:e8:8a:22:99:c4:e3:73:d3:13:dd:db:ea:d4:37: a6:e1:48:7a:3d:4f:49:b3:1f:9b:47:a4:0e:e6:38:43:3a:07: 73:da:ee:b5:8f:f7:43:cf:9d:4a:69:de:6c:c2:ff:87:26:4d: 7a:d7:c5:09:cf:ca:f5:b0:f6:cb:f7:c9:46:96:53:0e:82:db: b0:7a:b6:a4:6d:81:96:cf:14:07:6d:91:60:1d:e7:a7:f3:98: e3:17:f7:82:7a:15:c7:c0:79:61:4e:65:d6:fb:7e:71:79:0e: 81:53:80:7c:cf:bc:ae:52:3f:1e:f8:83:cb:5e:84:40:92:98: b4:9c:60:cc:ea:e8:2e:7c:5b:25:27:5f:d0:a1:a9:ce:10:97: 90:85:d6:4e:f5:b8:98:d4:50:5c:07:3f:c0:17:1d:69:92:8b: 9e:c7:16:8a:38:01:13:2f:24:bb:f8:d1:b4:c9:2d:19:c1:dd: ce:ac:d1:42:9a:ed:fb:16:38:27:18:0e:9d:1e:28:20:4c:2b: 58:dd:d9:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3Og6rU7j7nBj3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk YTM0ODY1ZmUtNjZhMC00ZjlhLTkyNTctNDk3NTk2YWNjYzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitDcdsqodvRcyxyQZE9FFPIS1BGt7vMF4Rtg 2NJCKxUwS6FzDApO9C7mjUyHVTx0yvqezAcTecCsBTSjdyyhXCIA33RHCpBjhDo/ AId3oCx6EoOR1m6vyKYByFRhFHAPg96BIJk6C4/VkNRnjU9a+qu7lJ0hAMH0WwQZ fvubvaF2ODwjan+jIWaV2BX03LHi8t/mKw+UBZyT76nRD4h2ErwxoXvge4SQglxR ARlN6dHjyM4lLXM0Sd6wT80Xz6oaNvexYPzHBrMbLDlhq3R7R8Gngo6RPyJO8itW TzR8+9A3qjUHQX1Er7JEpKYG9giZdqUgWewHrDFtPOxeBefeuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlU5KmAuDeI30bvfpHEmnRul36vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDE1Y2FmMWEtOGRkZS0z MTk5LWE4MDMtMWE0YjJmZmRiYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcZBc29UbX8zzPfDnEVxWOpDZU/U9rxLWGDupJdJ4on6E+ZTVfJO/p3 Gx17Z8ku6I4cZnsnuiox7zPoiiKZxONz0xPd2+rUN6bhSHo9T0mzH5tHpA7mOEM6 B3Pa7rWP90PPnUpp3mzC/4cmTXrXxQnPyvWw9sv3yUaWUw6C27B6tqRtgZbPFAdt kWAd56fzmOMX94J6FcfAeWFOZdb7fnF5DoFTgHzPvK5SPx74g8tehECSmLScYMzq 6C58WyUnX9Chqc4Ql5CF1k71uJjUUFwHP8AXHWmSi57HFoo4ARMvJLv40bTJLRnB 3c6s0UKa7fsWOCcYDp0eKCBMK1jd2Q0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:51:44 2025 by rpki-client