$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/685d215a-0b12-373a-bc79-f064fceb279a.roa File: 685d215a-0b12-373a-bc79-f064fceb279a.roa (raw, json) Hash identifier: aqdLv6QNSq2spJ9dIhX1qP7COfUJhpRk5Raud0dvkfw= Subject key identifier: C8:60:68:AA:31:F2:4C:D2:2D:88:4B:A7:63:F2:62:28:4B:01:87:AB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F77835E45A33613F3BFAD5380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/685d215a-0b12-373a-bc79-f064fceb279a.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 30036 IP address blocks: 97.64.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:5e:45:a3:36:13:f3:bf:ad:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=437736c6-708c-4f90-959b-eb9c2196e986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1b:b7:28:f2:ab:a2:ee:6c:8a:46:4c:99:11: bd:b1:b7:2a:9e:fe:b4:b5:0e:d3:d2:20:9a:2e:16: c4:25:c4:bd:19:f1:c4:27:7f:e1:0a:8b:1f:6e:7a: 60:e6:f1:bd:ad:9d:41:bb:2d:f5:db:f0:db:ad:e9: e4:49:46:1f:47:01:1b:c0:51:74:c5:44:40:d6:73: 9f:19:6e:bf:57:78:17:71:3c:ab:97:9e:59:c5:6e: 31:e2:1b:4f:11:40:3c:c4:12:ee:01:aa:c8:18:46: cf:c7:e8:5c:43:fc:bc:28:6d:93:f4:4e:37:6f:02: 4e:7b:f6:8d:97:62:d8:99:ce:49:8d:09:b6:bb:cc: 1f:07:05:12:31:50:07:a1:3f:98:dd:30:d6:39:48: 68:4f:86:96:85:88:6d:2f:c3:08:0b:bc:b2:05:37: b8:e2:48:2c:ba:64:94:02:68:65:a7:c0:ef:a7:8a: df:0d:53:76:d5:f6:46:7b:50:45:21:85:04:75:41: 30:3f:3b:f7:bf:91:cd:e0:93:31:4b:6c:f4:00:6e: 94:99:6b:7c:c5:b0:ac:1a:e6:b2:09:16:a7:e2:13: cb:19:77:32:4e:39:6f:6e:7d:53:db:66:f8:01:e3: 37:c6:0e:ad:a3:d6:21:36:01:81:14:24:47:a7:15: 7c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:60:68:AA:31:F2:4C:D2:2D:88:4B:A7:63:F2:62:28:4B:01:87:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/685d215a-0b12-373a-bc79-f064fceb279a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:7c:5a:b5:c4:6c:4a:52:3d:19:8a:91:74:a7:1e:f9:35:cf: 4f:0d:95:a9:8e:6e:6b:a3:ce:43:d6:b9:c9:ac:9e:25:24:73: 81:17:35:66:4a:a5:a8:e2:1b:b7:e2:88:07:1d:4d:53:ef:c5: 84:1e:b6:07:75:d3:d3:0e:13:cb:15:ee:02:da:c6:2a:83:28: 21:5a:e8:68:1e:93:e0:e7:4f:f2:88:3f:eb:f0:a9:32:7f:5e: ba:2e:2f:84:9f:0c:98:c8:f0:6b:f7:0d:f0:6e:af:4b:22:a6: 97:b2:f8:c8:d5:de:1a:cb:0c:dd:62:eb:91:db:9e:c8:2e:59: 6f:25:27:4b:43:05:7b:5d:fd:21:58:ab:68:9f:20:b5:f3:13: 50:96:39:80:f0:36:2c:c2:29:57:68:b6:e7:71:26:a7:91:23: 3c:bf:5d:61:39:56:62:e9:64:29:66:c4:e0:8a:5d:6e:59:44: af:0d:00:cf:6f:a9:a3:0f:f7:bd:f7:30:74:c8:89:9a:df:43: c9:84:17:77:a0:e6:93:5c:80:7b:83:e7:81:1e:c9:89:4b:a8: d4:11:cb:06:dd:e7:8d:4f:30:ad:d5:f4:14:9a:c8:84:4f:6d: 31:fc:6f:6a:94:da:3b:2f:d1:db:77:c0:bf:d9:3f:c3:ab:9f: 58:1f:0d:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g15FozYT87+tU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk NDM3NzM2YzYtNzA4Yy00ZjkwLTk1OWItZWI5YzIxOTZlOTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBu3KPKrou5sikZMmRG9sbcqnv60tQ7T0iCa LhbEJcS9GfHEJ3/hCosfbnpg5vG9rZ1Buy312/DbrenkSUYfRwEbwFF0xURA1nOf GW6/V3gXcTyrl55ZxW4x4htPEUA8xBLuAarIGEbPx+hcQ/y8KG2T9E43bwJOe/aN l2LYmc5JjQm2u8wfBwUSMVAHoT+Y3TDWOUhoT4aWhYhtL8MIC7yyBTe44kgsumSU Amhlp8Dvp4rfDVN21fZGe1BFIYUEdUEwPzv3v5HN4JMxS2z0AG6UmWt8xbCsGuay CRan4hPLGXcyTjlvbn1T22b4AeM3xg6to9YhNgGBFCRHpxV8yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhgaKox8kzSLYhLp2PyYihLAYerMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjg1ZDIxNWEtMGIxMi0z NzNhLWJjNzktZjA2NGZjZWIyNzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUC5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIp8WrXEbEpSPRmKkXSnHvk1z08NlamObmujzkPWucmsniUkc4EXNWZK pajiG7fiiAcdTVPvxYQetgd109MOE8sV7gLaxiqDKCFa6Ggek+DnT/KIP+vwqTJ/ XrouL4SfDJjI8Gv3DfBur0sippey+MjV3hrLDN1i65HbnsguWW8lJ0tDBXtd/SFY q2ifILXzE1CWOYDwNizCKVdotudxJqeRIzy/XWE5VmLpZClmxOCKXW5ZRK8NAM9v qaMP9733MHTIiZrfQ8mEF3eg5pNcgHuD54EeyYlLqNQRywbd541PMK3V9BSayIRP bTH8b2qU2jsv0dt3wL/ZP8Orn1gfDbY= -----END CERTIFICATE-----Generated at Sun Oct 11 17:41:23 2026 by rpki-client