$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8d7de9e6-7b53-3c32-ac8b-3b49f6a7e314.roa File: 8d7de9e6-7b53-3c32-ac8b-3b49f6a7e314.roa (raw, json) Hash identifier: mZt536ms7j1Y9Y8Uns8qnlTGQvfYcQfEyU4F9U+3wlM= Subject key identifier: 9B:39:AA:E2:59:81:10:0C:4E:B1:97:6D:D2:93:85:26:22:55:9C:6B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F49741949042CAD08979CAF00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8d7de9e6-7b53-3c32-ac8b-3b49f6a7e314.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 97.64.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:19:49:04:2c:ad:08:97:9c:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b2ca5ae4-160a-4cbf-9eb8-a8c909f81bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0f:1b:c5:1f:77:51:c8:0f:6c:d9:e7:0e:6d: db:05:76:2f:07:c6:c3:a3:c2:3e:53:2e:c6:25:7d: 19:c0:dd:84:95:ec:8c:0b:df:05:64:88:a5:90:6f: c8:e4:f0:04:95:7a:15:a5:44:0f:a3:2e:9f:4c:d0: c6:7e:46:90:ad:6d:cc:40:28:a4:d6:70:be:ee:2b: d7:fb:02:67:14:84:b6:b2:68:64:6e:7b:f4:ab:5c: c2:7a:a7:f6:da:d0:f7:8a:d5:b7:ca:21:b0:0c:77: d7:78:64:0e:c2:12:b4:09:9f:9b:ff:fb:68:ab:36: 85:76:5e:fa:5b:15:dd:bb:d5:fb:75:4e:57:8d:f9: 30:56:3a:5e:93:cb:3d:66:c2:40:e5:a0:11:c7:5e: 01:16:6e:6b:d6:84:8b:6e:cf:5f:1c:1c:c2:7b:b3: 98:c8:c9:48:9d:3e:3f:a3:da:28:a0:c3:76:77:b3: 34:78:77:71:25:4f:ba:35:ec:ec:82:a8:dc:25:f8: ef:d9:c8:d7:eb:b2:a0:fe:fb:0e:63:c0:09:c3:83: d7:48:5b:ca:b8:ec:2e:91:46:6e:31:e2:eb:13:f5: 0d:a5:3c:51:02:03:fb:f8:bc:62:2a:7c:56:99:46: 53:1a:f2:38:3c:3e:b2:0c:82:78:6a:e2:14:2d:2c: 6a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:39:AA:E2:59:81:10:0C:4E:B1:97:6D:D2:93:85:26:22:55:9C:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8d7de9e6-7b53-3c32-ac8b-3b49f6a7e314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:61:78:18:4c:6c:72:a2:9a:f1:87:39:60:e4:c0:01:f5:db: 73:89:82:7f:d4:06:e5:e2:89:03:31:e2:5d:eb:70:81:43:b4: eb:f5:70:7a:67:b2:e8:b6:30:b2:83:68:0d:d4:90:96:78:13: 88:b9:03:3c:c0:cb:8e:56:d9:38:30:6c:68:d2:10:d0:11:1b: 74:7d:ba:6d:63:43:6e:50:18:fc:c7:1d:f8:be:cf:67:c4:49: 23:6a:51:d3:d8:22:08:a7:15:35:87:a4:8b:95:bc:49:37:d5: f9:9b:be:de:ba:22:90:49:f9:bc:10:a8:c2:45:78:a2:31:a1: 07:86:48:1c:f8:dc:a7:d1:a2:58:67:d1:19:ad:19:e3:bf:cb: 96:7f:9c:93:39:39:27:5c:03:56:72:49:f9:18:04:e3:0d:6f: 13:54:29:ad:60:33:bb:7e:eb:1b:68:3b:31:33:45:56:38:91: 1f:7c:77:80:33:d3:30:76:eb:2d:3d:c6:62:de:e1:3b:03:b1: 8d:27:ee:be:36:b3:9a:45:cb:d8:97:c8:f3:0d:d5:0a:cf:e7: b1:3f:e0:20:77:af:5b:47:b8:a5:e9:55:b2:db:8d:b3:5d:1a: 3f:aa:63:10:75:af:be:20:9d:20:64:59:88:d1:4a:59:69:91: 85:4f:74:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdBlJBCytCJecrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjJjYTVhZTQtMTYwYS00Y2JmLTllYjgtYThjOTA5ZjgxYmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww8bxR93UcgPbNnnDm3bBXYvB8bDo8I+Uy7G JX0ZwN2EleyMC98FZIilkG/I5PAElXoVpUQPoy6fTNDGfkaQrW3MQCik1nC+7ivX +wJnFIS2smhkbnv0q1zCeqf22tD3itW3yiGwDHfXeGQOwhK0CZ+b//toqzaFdl76 WxXdu9X7dU5XjfkwVjpek8s9ZsJA5aARx14BFm5r1oSLbs9fHBzCe7OYyMlInT4/ o9oooMN2d7M0eHdxJU+6NezsgqjcJfjv2cjX67Kg/vsOY8AJw4PXSFvKuOwukUZu MeLrE/UNpTxRAgP7+LxiKnxWmUZTGvI4PD6yDIJ4auIULSxqTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJs5quJZgRAMTrGXbdKThSYiVZxrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGQ3ZGU5ZTYtN2I1My0z YzMyLWFjOGItM2I0OWY2YTdlMzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBheBhMbHKimvGHOWDkwAH123OJgn/UBuXiiQMx4l3rcIFDtOv1cHpn sui2MLKDaA3UkJZ4E4i5AzzAy45W2TgwbGjSENARG3R9um1jQ25QGPzHHfi+z2fE SSNqUdPYIginFTWHpIuVvEk31fmbvt66IpBJ+bwQqMJFeKIxoQeGSBz43KfRolhn 0RmtGeO/y5Z/nJM5OSdcA1ZySfkYBOMNbxNUKa1gM7t+6xtoOzEzRVY4kR98d4Az 0zB26y09xmLe4TsDsY0n7r42s5pFy9iXyPMN1QrP57E/4CB3r1tHuKXpVbLbjbNd Gj+qYxB1r74gnSBkWYjRSllpkYVPdGE= -----END CERTIFICATE-----Generated at Fri Sep 25 06:48:37 2026 by rpki-client