$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a2d98b3-89f2-3f5d-a5a5-9efbcf418cd4.roa File: 4a2d98b3-89f2-3f5d-a5a5-9efbcf418cd4.roa (raw, json) Hash identifier: nF82FsND4KpDUEYWn00ezwlEj3RUc5u2yJrg5AK0yqQ= Subject key identifier: 6E:B7:17:40:3A:29:9D:2D:2F:6D:1C:F6:8D:2C:EA:A5:05:2C:61:63 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B92DD8CB31FBCFC48FEA97880 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a2d98b3-89f2-3f5d-a5a5-9efbcf418cd4.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 97.64.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:8c:b3:1f:bc:fc:48:fe:a9:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=ba7cb9ad-267f-4d26-b760-07b9908aba20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:03:41:e4:63:ca:98:3b:49:87:9b:6a:68:9e: bf:73:88:29:91:74:e1:93:be:7e:6b:d9:98:fd:96: 6a:e6:c6:c1:c3:16:55:73:85:5f:85:68:83:50:77: 1f:ee:93:fd:db:6b:2e:0d:fd:4d:5c:66:08:dd:a2: 13:da:e3:92:a3:1e:b4:f2:6d:04:6e:9d:63:96:9d: c0:7e:01:32:7c:f9:4e:3f:69:76:3a:bc:59:33:0f: 91:2f:48:96:d2:b0:b7:b1:1a:87:b9:a4:cc:f7:fa: 6c:63:fc:aa:e3:d4:8b:23:34:a7:37:f3:08:88:47: e1:d1:47:e9:a8:8a:41:3e:20:80:2d:e4:cc:08:3f: f7:7d:4c:97:1c:d3:9a:40:a1:84:b2:bb:04:a5:e9: de:22:bb:6c:8a:ae:59:55:6e:7d:32:fa:ff:0a:9a: 11:b3:21:bf:a1:7f:ac:8b:8e:d9:25:c1:b1:ca:ee: de:f1:92:11:17:ab:bb:c6:ee:f6:e8:1a:7a:58:aa: 56:9b:42:e2:ce:b6:5f:0d:5f:b2:a5:83:62:57:71: b1:36:63:b4:9c:ee:f2:c5:be:15:5a:58:f1:f7:d9: 9e:5e:30:ef:6d:70:c3:03:fc:5b:aa:c8:44:fc:64: 0c:15:a4:a1:0a:0c:1d:64:e0:7b:ff:be:11:54:b0: 57:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B7:17:40:3A:29:9D:2D:2F:6D:1C:F6:8D:2C:EA:A5:05:2C:61:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4a2d98b3-89f2-3f5d-a5a5-9efbcf418cd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:26:a3:38:ce:01:7b:0d:5b:84:bd:d8:e9:04:e3:94:a7:d7: 1b:f2:17:1c:fc:71:05:ea:76:eb:6e:ca:67:f8:f8:23:ac:db: 13:5b:bd:13:aa:83:14:cd:4f:47:66:bd:6e:e3:7b:ec:5e:bb: 99:41:ca:ef:bf:93:47:f7:6c:ae:c2:ee:72:42:ab:b9:75:9e: 4f:78:b5:0f:49:cf:9e:c3:89:35:e1:64:36:60:e6:41:73:ae: bd:40:9f:d9:a7:78:2a:42:6e:d9:58:7f:e4:14:1d:cb:01:8e: ad:81:41:3a:9f:8f:38:53:d8:4e:b1:a2:28:db:68:17:31:e1: 78:4f:6b:b0:9c:48:4e:c3:00:04:35:a7:29:07:5a:29:a1:86: 15:b4:7e:24:d6:98:ca:4d:35:32:cc:24:01:a5:8c:aa:4c:14: 0c:6a:b2:61:1f:60:2e:33:6a:7b:d7:94:bb:99:76:b4:c1:2e: 2b:dc:5b:e6:b6:9d:ac:25:04:12:ec:e8:3e:81:00:dc:88:78: 45:51:ac:da:ed:24:68:5a:bc:33:b7:a6:8c:cb:c1:3c:1d:ae: d1:b4:39:fa:44:b9:24:94:f9:b7:97:7a:64:7d:af:81:0c:4a: 88:02:2d:aa:0c:10:be:d3:d7:35:10:73:24:d3:35:8f:79:cd: 04:4a:9d:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3YyzH7z8SP6peIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk YmE3Y2I5YWQtMjY3Zi00ZDI2LWI3NjAtMDdiOTkwOGFiYTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwNB5GPKmDtJh5tqaJ6/c4gpkXThk75+a9mY /ZZq5sbBwxZVc4VfhWiDUHcf7pP922suDf1NXGYI3aIT2uOSox608m0Ebp1jlp3A fgEyfPlOP2l2OrxZMw+RL0iW0rC3sRqHuaTM9/psY/yq49SLIzSnN/MIiEfh0Ufp qIpBPiCALeTMCD/3fUyXHNOaQKGEsrsEpeneIrtsiq5ZVW59Mvr/CpoRsyG/oX+s i47ZJcGxyu7e8ZIRF6u7xu726Bp6WKpWm0LizrZfDV+ypYNiV3GxNmO0nO7yxb4V Wljx99meXjDvbXDDA/xbqshE/GQMFaShCgwdZOB7/74RVLBXIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG63F0A6KZ0tL20c9o0s6qUFLGFjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGEyZDk4YjMtODlmMi0z ZjVkLWE1YTUtOWVmYmNmNDE4Y2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUC1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsmozjOAXsNW4S92OkE45Sn1xvyFxz8cQXqdutuymf4+COs2xNbvROq gxTNT0dmvW7je+xeu5lByu+/k0f3bK7C7nJCq7l1nk94tQ9Jz57DiTXhZDZg5kFz rr1An9mneCpCbtlYf+QUHcsBjq2BQTqfjzhT2E6xoijbaBcx4XhPa7CcSE7DAAQ1 pykHWimhhhW0fiTWmMpNNTLMJAGljKpMFAxqsmEfYC4zanvXlLuZdrTBLivcW+a2 nawlBBLs6D6BANyIeEVRrNrtJGhavDO3pozLwTwdrtG0OfpEuSSU+beXemR9r4EM SogCLaoMEL7T1zUQcyTTNY95zQRKneQ= -----END CERTIFICATE-----Generated at Mon Oct 20 02:37:12 2025 by rpki-client