$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af3b7bb0-e922-3bf4-9766-0847af16df6b.roa File: af3b7bb0-e922-3bf4-9766-0847af16df6b.roa (raw, json) Hash identifier: 4c3xWw8RHwdZ1IsUns3O8dom5YGC7ELp63R3xmgCEXQ= Subject key identifier: 08:EB:13:9D:30:16:CB:F0:1F:73:E0:77:2C:EE:4E:EC:D4:E9:3C:12 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B92DCE3AEC07A384086044500 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af3b7bb0-e922-3bf4-9766-0847af16df6b.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 97.64.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:e3:ae:c0:7a:38:40:86:04:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=279f3498-7857-4179-a9f6-1b4daf07caf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2b:be:fd:25:20:dc:c4:d7:ab:b5:62:1e:70: 38:ed:d3:85:06:fe:72:9b:43:4c:70:29:ca:8b:b2: 29:55:41:70:aa:71:fa:ba:38:9e:82:e3:58:ed:94: d0:0c:5a:de:bf:60:74:1a:7c:5f:87:f7:3f:0c:75: 1a:8a:b4:45:31:61:3a:91:46:22:5e:65:34:1e:b4: 40:2e:64:4a:69:1b:4b:b3:7a:97:84:dc:f4:08:8f: 68:e0:b1:f5:26:ab:a7:dd:9a:39:bc:96:b8:aa:d0: 2e:69:6d:ad:b1:9e:41:4e:28:c8:22:4c:1e:aa:b3: da:13:6c:f6:79:3a:28:c7:72:9b:af:d7:c4:93:b0: 9f:e9:59:c9:f0:5e:d7:cb:a6:fb:fe:dc:28:2d:dd: fb:47:48:28:b5:cf:52:1c:5f:d9:24:c0:5c:4f:30: b4:58:2e:dc:49:ed:64:48:b7:90:6d:6c:b4:63:d5: 0b:25:79:40:c0:00:fa:e9:9a:55:30:54:3b:23:67: 8c:51:e7:d5:ff:f0:6d:04:c0:d5:fe:f7:15:b7:56: 6a:c7:39:ee:75:4e:65:a2:c0:f3:2f:73:5a:7e:1f: bc:81:f4:a2:8b:86:2f:96:f1:d1:7f:de:2e:8f:98: 30:1e:eb:6f:de:cc:0a:57:e5:5a:0f:a7:fd:e0:78: 42:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:EB:13:9D:30:16:CB:F0:1F:73:E0:77:2C:EE:4E:EC:D4:E9:3C:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af3b7bb0-e922-3bf4-9766-0847af16df6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:72:1c:16:44:12:0b:8c:67:43:65:d7:2a:ee:b3:56:86:0f: 66:67:54:8d:54:58:76:bc:5d:90:b2:6d:83:70:bd:51:b3:fa: 9b:96:55:bd:24:c7:05:ba:34:af:eb:ee:13:a9:9a:fe:fa:bc: d0:ce:fd:ba:e4:4c:f2:a6:c6:e5:f8:2a:a6:1a:75:e1:ac:55: 99:78:06:b3:4b:79:9c:6a:a3:0b:ee:af:18:91:27:cf:da:95: b2:32:4e:d3:f5:3f:f3:e5:74:77:7a:6f:16:50:c8:42:48:10: 76:9b:d9:0b:5a:d0:02:79:93:ba:f2:4b:28:60:9f:fa:6d:29: d4:2a:f9:62:75:99:4b:1e:d5:ed:a5:ac:29:9d:68:13:a0:32: da:9d:81:d0:0d:5c:74:4a:9f:ee:27:5e:74:32:52:ba:ed:69: c1:71:2a:39:63:6d:b7:a9:e9:1e:a8:37:d2:85:39:01:f6:fd: cc:b9:fc:64:2a:80:ca:32:13:6d:35:1f:2a:8b:bb:ad:99:8a: f9:e5:46:65:6f:0b:59:0c:f1:9e:4d:6a:9a:48:df:92:6d:ab: 10:d7:17:34:d8:41:fb:68:ea:4e:77:78:1c:02:05:12:cc:62: 60:a6:6c:9c:74:af:a6:da:a5:53:19:e2:52:68:8a:bf:8b:ad: 47:82:a5:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3OOuwHo4QIYERQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk Mjc5ZjM0OTgtNzg1Ny00MTc5LWE5ZjYtMWI0ZGFmMDdjYWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSu+/SUg3MTXq7ViHnA47dOFBv5ym0NMcCnK i7IpVUFwqnH6ujieguNY7ZTQDFrev2B0Gnxfh/c/DHUairRFMWE6kUYiXmU0HrRA LmRKaRtLs3qXhNz0CI9o4LH1Jqun3Zo5vJa4qtAuaW2tsZ5BTijIIkweqrPaE2z2 eToox3Kbr9fEk7Cf6VnJ8F7Xy6b7/twoLd37R0gotc9SHF/ZJMBcTzC0WC7cSe1k SLeQbWy0Y9ULJXlAwAD66ZpVMFQ7I2eMUefV//BtBMDV/vcVt1ZqxznudU5losDz L3Nafh+8gfSii4YvlvHRf94uj5gwHutv3swKV+VaD6f94HhCeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjrE50wFsvwH3PgdyzuTuzU6TwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWYzYjdiYjAtZTkyMi0z YmY0LTk3NjYtMDg0N2FmMTZkZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFyHBZEEguMZ0Nl1yrus1aGD2ZnVI1UWHa8XZCybYNwvVGz+puWVb0k xwW6NK/r7hOpmv76vNDO/brkTPKmxuX4KqYadeGsVZl4BrNLeZxqowvurxiRJ8/a lbIyTtP1P/PldHd6bxZQyEJIEHab2Qta0AJ5k7rySyhgn/ptKdQq+WJ1mUse1e2l rCmdaBOgMtqdgdANXHRKn+4nXnQyUrrtacFxKjljbbep6R6oN9KFOQH2/cy5/GQq gMoyE201HyqLu62ZivnlRmVvC1kM8Z5NappI35JtqxDXFzTYQfto6k53eBwCBRLM YmCmbJx0r6bapVMZ4lJoir+LrUeCpTs= -----END CERTIFICATE-----Generated at Mon Oct 20 05:27:46 2025 by rpki-client