$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8b6a3aa-06d8-3e4f-8f22-f5b39808e9de.roa File: b8b6a3aa-06d8-3e4f-8f22-f5b39808e9de.roa (raw, json) Hash identifier: pBq7HqZYMqw0yTzmrjnfqrr1fCh+l4EXx7aFq1iewLc= Subject key identifier: 5E:8C:6F:32:6D:2E:70:AC:CA:77:CC:CC:2E:59:EB:9A:62:F6:E5:8E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B92DCE69570AAD61BD5EEC900 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8b6a3aa-06d8-3e4f-8f22-f5b39808e9de.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 97.64.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:e6:95:70:aa:d6:1b:d5:ee:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=328fb5f0-ee50-4021-8f9c-b71983d38452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fb:fa:b4:31:70:fe:07:2d:69:ac:26:55:cd: 87:d2:69:29:b5:b2:d6:b1:b1:cd:63:61:32:49:ee: 4f:79:8e:03:6d:1b:37:de:1c:0a:fc:7f:be:eb:a1: 62:89:e8:64:e7:ca:92:8a:b2:18:ad:03:25:de:8c: b3:77:d5:62:2a:c8:69:3e:06:ba:3c:c7:79:34:c9: c6:ab:16:d1:61:63:19:47:cb:d6:e4:f3:e5:34:85: f5:ab:ca:da:ac:d5:82:bc:31:17:96:ec:eb:f5:57: 60:85:90:14:29:99:22:47:24:ea:f3:3e:ef:9a:bf: 39:f7:97:d1:3d:4e:28:61:f9:94:cf:e2:03:d3:26: 99:11:bd:0e:6a:cd:b7:bb:4e:8c:49:1d:3c:56:f5: 86:f9:44:87:7b:f4:d3:a7:ec:45:5b:1c:ac:df:6f: ee:f8:67:4b:9c:85:8a:a3:89:38:1c:27:3c:a4:45: 32:33:1c:af:62:b8:20:fe:75:de:be:cc:b0:4f:71: 84:74:9a:10:92:85:dd:96:df:20:f2:5d:6b:d0:27: cd:0a:da:c4:7f:6c:48:1f:fe:0a:bc:35:6c:fd:36: 4c:c2:d1:fb:a6:5e:38:74:11:6f:70:21:3d:dd:21: 63:78:c5:3d:c8:b8:7c:8a:8e:aa:cc:a8:a9:4a:95: b8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:8C:6F:32:6D:2E:70:AC:CA:77:CC:CC:2E:59:EB:9A:62:F6:E5:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8b6a3aa-06d8-3e4f-8f22-f5b39808e9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:83:7e:3c:c7:fa:55:12:c5:c0:2b:90:8c:21:c3:8d:0d:70: cc:4f:eb:9c:fe:cf:66:2a:7e:fe:28:ec:0b:45:9c:21:63:5b: 98:6e:22:51:8c:94:37:3c:11:a4:9b:d7:4b:53:30:13:31:75: 04:db:45:f3:52:89:9a:61:c4:de:72:30:9f:e6:47:f0:dd:72: 5e:94:db:eb:b9:ca:7f:5f:8f:17:6f:67:1f:b0:7c:65:f2:7e: db:e8:4d:72:33:8d:37:0d:c9:45:ff:0e:54:48:cd:67:e2:d2: a4:65:bc:18:70:48:54:cd:6d:a5:7d:3b:9c:42:e1:78:67:ba: 9e:cd:ee:ac:b4:15:ea:ca:f5:b0:9f:28:83:9b:46:a6:3e:06: 8f:d1:60:99:6a:b3:16:68:3e:5d:11:29:ae:f1:4b:b4:48:1b: 2c:9f:f9:d4:a8:7b:3d:9b:0d:bc:39:ae:a7:ad:3d:54:c2:82: 55:54:c2:e0:5d:be:88:51:51:51:6e:6b:66:3f:ea:ba:a1:3c: 2b:b4:fb:d7:f2:6e:db:a4:a1:2b:51:d6:6e:4b:c6:5d:69:02: 41:f8:4b:40:04:91:ee:8d:26:7c:d2:3e:48:f8:88:8e:73:4d: a8:39:58:9a:70:f0:05:f5:5e:42:82:b6:d4:a5:aa:06:84:ad: 77:80:c1:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3OaVcKrWG9XuyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MzI4ZmI1ZjAtZWU1MC00MDIxLThmOWMtYjcxOTgzZDM4NDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fv6tDFw/gctaawmVc2H0mkptbLWsbHNY2Ey Se5PeY4DbRs33hwK/H++66Fiiehk58qSirIYrQMl3oyzd9ViKshpPga6PMd5NMnG qxbRYWMZR8vW5PPlNIX1q8rarNWCvDEXluzr9VdghZAUKZkiRyTq8z7vmr8595fR PU4oYfmUz+ID0yaZEb0Oas23u06MSR08VvWG+USHe/TTp+xFWxys32/u+GdLnIWK o4k4HCc8pEUyMxyvYrgg/nXevsywT3GEdJoQkoXdlt8g8l1r0CfNCtrEf2xIH/4K vDVs/TZMwtH7pl44dBFvcCE93SFjeMU9yLh8io6qzKipSpW43wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6MbzJtLnCsynfMzC5Z65pi9uWOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjhiNmEzYWEtMDZkOC0z ZTRmLThmMjItZjViMzk4MDhlOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUD7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiDfjzH+lUSxcArkIwhw40NcMxP65z+z2Yqfv4o7AtFnCFjW5huIlGM lDc8EaSb10tTMBMxdQTbRfNSiZphxN5yMJ/mR/Ddcl6U2+u5yn9fjxdvZx+wfGXy ftvoTXIzjTcNyUX/DlRIzWfi0qRlvBhwSFTNbaV9O5xC4Xhnup7N7qy0FerK9bCf KIObRqY+Bo/RYJlqsxZoPl0RKa7xS7RIGyyf+dSoez2bDbw5rqetPVTCglVUwuBd vohRUVFua2Y/6rqhPCu0+9fybtukoStR1m5Lxl1pAkH4S0AEke6NJnzSPkj4iI5z Tag5WJpw8AX1XkKCttSlqgaErXeAwaY= -----END CERTIFICATE-----Generated at Mon Oct 20 02:37:03 2025 by rpki-client