$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/87394d33-0c2f-31bf-93a4-864ac7691edb.roa File: 87394d33-0c2f-31bf-93a4-864ac7691edb.roa (raw, json) Hash identifier: IaZXR6ycGgDXv97O8U3BYG/Ti9Gf7muoVBAz+Hb0m0g= Subject key identifier: D5:81:1C:4A:60:67:CD:57:3A:F4:E1:7C:2E:27:C5:76:1B:08:FE:0E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B92DD90FB3D3999E70C1A5C00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/87394d33-0c2f-31bf-93a4-864ac7691edb.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 97.64.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:90:fb:3d:39:99:e7:0c:1a:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=42205621-3892-4424-97a8-ef3556ee2c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:84:c8:cb:44:c0:7e:bc:b0:21:8d:18:e5:b5: 1f:fc:c4:33:dd:49:eb:7f:9c:43:28:36:62:2f:06: 9d:0b:7b:5f:c1:c0:18:44:54:01:55:d7:a8:d3:0a: f6:73:69:5c:f8:41:e1:be:df:47:cc:50:5a:af:ed: d3:30:55:aa:44:51:15:06:46:b8:59:12:ee:60:e6: bd:c3:f4:78:c0:78:85:7d:83:c9:84:b4:ed:68:9b: b1:b7:07:27:d1:22:6b:a7:a4:4a:a0:4b:f5:b4:1e: a0:ee:96:ec:00:bb:16:9b:56:04:b8:3c:72:14:a9: e8:b4:24:00:51:1b:fa:08:9f:89:85:ec:d9:b1:70: 50:d1:d3:9a:f0:93:c7:f4:ea:9b:b2:cb:c3:10:69: d2:73:be:7a:21:20:99:98:a2:13:cf:5c:d9:ac:5d: 5b:22:cd:36:7a:62:db:5a:94:e5:75:2c:d6:64:39: 8d:95:9d:70:ff:6f:fa:e8:da:4a:66:d1:b5:0f:b0: b2:73:91:8f:d8:2e:09:f1:b5:2a:ed:cc:4d:c6:2d: 78:b2:91:7b:c5:73:91:af:fc:a1:57:e2:1c:a5:d8: 82:6d:f9:60:40:af:49:2b:00:54:88:1a:b0:a0:31: ce:dd:f0:84:1a:8b:86:40:45:05:bd:a5:51:a4:ac: 40:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:81:1C:4A:60:67:CD:57:3A:F4:E1:7C:2E:27:C5:76:1B:08:FE:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/87394d33-0c2f-31bf-93a4-864ac7691edb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:28:14:85:dd:65:00:50:33:88:87:fc:53:85:c7:7f:25:72: 26:94:17:08:f2:52:b8:15:c1:d9:a0:ea:59:00:e4:44:89:4c: 0a:7c:22:50:b8:7b:54:be:db:0f:ce:de:e1:a8:8a:e3:63:71: b8:01:f9:31:f4:50:46:36:39:de:77:3c:32:0d:5a:e9:06:3c: de:78:f4:da:6a:2c:55:4f:d8:36:fb:49:9c:d5:ee:cd:85:75: 7d:02:51:fa:da:7a:6a:fc:47:cc:eb:35:c7:fa:1c:67:dd:07: 0c:41:0b:bd:4d:cd:67:4d:0a:09:09:9b:42:dc:70:73:eb:ba: 64:69:91:a8:93:c7:bd:8b:01:9e:48:ed:77:4b:fb:a3:16:a8: 0a:5c:79:26:67:4c:be:4a:36:be:4b:63:a8:b6:fb:f8:3f:8d: 8a:8e:4d:6e:6c:ca:0e:29:16:44:72:7f:f2:b5:6c:5c:3c:c5: 0e:8e:42:ec:63:e5:cb:1b:cb:80:6b:04:ae:c2:31:c0:43:1c: 3d:29:ce:60:ca:35:2a:53:52:cc:55:66:06:f5:f0:88:9f:b0: 89:c7:89:ae:36:af:c1:26:3b:5c:ff:88:78:60:89:0f:8c:ca: 1f:2f:38:9a:b6:2f:77:1a:aa:b7:f1:71:4d:81:a8:e8:b5:00: fe:39:2f:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3ZD7PTmZ5wwaXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NDIyMDU2MjEtMzg5Mi00NDI0LTk3YTgtZWYzNTU2ZWUyYzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4TIy0TAfrywIY0Y5bUf/MQz3Unrf5xDKDZi LwadC3tfwcAYRFQBVdeo0wr2c2lc+EHhvt9HzFBar+3TMFWqRFEVBka4WRLuYOa9 w/R4wHiFfYPJhLTtaJuxtwcn0SJrp6RKoEv1tB6g7pbsALsWm1YEuDxyFKnotCQA URv6CJ+JhezZsXBQ0dOa8JPH9OqbssvDEGnSc756ISCZmKITz1zZrF1bIs02emLb WpTldSzWZDmNlZ1w/2/66NpKZtG1D7Cyc5GP2C4J8bUq7cxNxi14spF7xXORr/yh V+IcpdiCbflgQK9JKwBUiBqwoDHO3fCEGouGQEUFvaVRpKxAGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWBHEpgZ81XOvThfC4nxXYbCP4OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODczOTRkMzMtMGMyZi0z MWJmLTkzYTQtODY0YWM3NjkxZWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUoFIXdZQBQM4iH/FOFx38lciaUFwjyUrgVwdmg6lkA5ESJTAp8IlC4 e1S+2w/O3uGoiuNjcbgB+TH0UEY2Od53PDINWukGPN549NpqLFVP2Db7SZzV7s2F dX0CUfraemr8R8zrNcf6HGfdBwxBC71NzWdNCgkJm0LccHPrumRpkaiTx72LAZ5I 7XdL+6MWqApceSZnTL5KNr5LY6i2+/g/jYqOTW5syg4pFkRyf/K1bFw8xQ6OQuxj 5csby4BrBK7CMcBDHD0pzmDKNSpTUsxVZgb18IifsInHia42r8EmO1z/iHhgiQ+M yh8vOJq2L3caqrfxcU2BqOi1AP45L2g= -----END CERTIFICATE-----Generated at Mon Oct 20 11:08:12 2025 by rpki-client