$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/a63530f0-6154-3c2a-80c7-10e826431502.roa File: a63530f0-6154-3c2a-80c7-10e826431502.roa (raw, json) Hash identifier: CydKEvXjUY+wWjno5C8TOZ2vJi0AzJ+2WwB3lk/P0IA= Subject key identifier: DD:47:BE:74:89:E1:15:B7:BC:1A:E7:14:B0:81:E5:AB:6F:CD:64:70 Certificate issuer: /CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Certificate serial: 010D0C9F4328584F63F816349E40F7D317009140 Authority key identifier: 33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/a63530f0-6154-3c2a-80c7-10e826431502.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 46657 IP address blocks: 97.107.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:16:34:9e:40:f7:d3:17:00:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=130d0706-731e-4e2b-bef7-10c7415ad423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:50:f9:ae:59:7b:03:0c:38:62:6b:03:09:60: 41:b9:93:4e:4e:80:eb:c8:0a:ee:8a:f9:ea:8f:d4: 4a:0b:71:d4:d8:8b:e5:0f:12:26:15:02:9b:46:29: 10:05:5b:7a:b8:06:5a:73:e1:71:2d:00:2e:cc:3f: a4:47:76:e1:f9:67:ba:6a:34:94:d8:ec:00:0c:fe: a7:2f:15:5a:40:16:86:4f:46:f5:ef:5c:12:49:30: 67:35:d9:ef:01:11:2b:5e:4d:30:08:99:05:0a:f2: 8c:b4:a6:f1:5d:7e:eb:a7:b9:f6:8a:89:9e:80:26: bb:ab:f4:5c:e0:2d:06:0d:74:d5:44:1b:31:d4:36: 45:d4:ee:6f:a2:c3:04:43:9f:e0:b8:7e:7f:e4:55: e4:85:87:d5:cf:9c:c9:58:e1:14:77:62:34:9e:b1: 2d:68:75:51:53:f1:ef:72:78:de:a4:94:2a:c8:de: fd:d8:af:c6:76:cc:72:92:e4:27:25:e9:cd:46:ae: a7:f6:34:1e:d4:41:9c:e9:9e:bf:df:4f:ec:6c:49: 6a:30:05:8d:ec:e6:6d:53:64:27:07:92:c1:9c:b3: 3d:4f:af:bf:d4:a3:ed:1b:6e:fd:79:cd:71:c0:30: 82:22:f2:c2:ff:d6:8b:4d:e7:21:25:16:02:03:9b: 86:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:47:BE:74:89:E1:15:B7:BC:1A:E7:14:B0:81:E5:AB:6F:CD:64:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/a63530f0-6154-3c2a-80c7-10e826431502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl X509v3 Authority Key Identifier: keyid:33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer sbgp-ipAddrBlock: critical IPv4: 97.107.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a1:36:b9:2b:57:da:5a:12:71:45:c7:ee:71:a1:4f:05:b7: 33:dc:90:cd:6d:55:3f:91:a8:37:c1:15:51:62:4c:65:93:25: d8:32:24:f0:c5:3a:18:27:5e:53:06:2a:d1:d1:45:cb:06:4d: d6:7d:2b:e3:b0:6d:0a:a9:1a:09:28:23:7c:e1:bd:e9:be:cd: b1:09:7d:8e:25:2f:6a:5c:3f:bc:b2:0d:80:e4:48:96:8e:e1: 05:8f:0a:2a:ea:c5:3e:6f:ac:6c:0d:5f:01:57:81:66:6b:7e: b2:9c:d1:f1:e4:7f:e1:0d:2f:66:6a:0e:18:d2:c5:1f:8e:84: fb:a5:81:c8:fb:19:c5:8c:2d:20:9b:43:80:3f:81:6c:c5:4b: 01:2c:c2:e3:86:ff:aa:d7:49:0f:68:e9:59:bc:3b:8f:18:cb: 30:c7:9c:bb:ce:7f:5c:6c:53:eb:c0:92:3d:03:62:62:c8:13: 75:fa:1d:83:c8:5d:33:24:84:65:3b:81:e2:77:94:7c:45:8d: b7:0c:ff:df:5a:65:38:e6:73:18:fb:8c:61:39:4d:65:20:0f: 0f:8d:63:2e:88:6d:fd:de:de:77:c5:cf:49:0e:e6:2c:ba:1a: d3:9d:96:79:00:64:3c:7a:bd:cc:84:d4:00:ad:ee:ee:d8:9f: 7e:35:1b:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+BY0nkD30xcAkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3MGMzYTEtNmFkMC00Y2RkLWFhZDctNjEzMzgxZjBl NjBkMB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk MTMwZDA3MDYtNzMxZS00ZTJiLWJlZjctMTBjNzQxNWFkNDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVD5rll7Aww4YmsDCWBBuZNOToDryAruivnq j9RKC3HU2IvlDxImFQKbRikQBVt6uAZac+FxLQAuzD+kR3bh+We6ajSU2OwADP6n LxVaQBaGT0b171wSSTBnNdnvARErXk0wCJkFCvKMtKbxXX7rp7n2iomegCa7q/Rc 4C0GDXTVRBsx1DZF1O5vosMEQ5/guH5/5FXkhYfVz5zJWOEUd2I0nrEtaHVRU/Hv cnjepJQqyN792K/GdsxykuQnJenNRq6n9jQe1EGc6Z6/30/sbElqMAWN7OZtU2Qn B5LBnLM9T6+/1KPtG279ec1xwDCCIvLC/9aLTechJRYCA5uGgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1HvnSJ4RW3vBrnFLCB5atvzWRwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcw YzNhMS02YWQwLTRjZGQtYWFkNy02MTMzODFmMGU2MGQvYTYzNTMwZjAtNjE1NC0z YzJhLTgwYzctMTBlODI2NDMxNTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZGQ3MGMzYTEtNmFkMC00Y2RkLWFh ZDctNjEzMzgxZjBlNjBkL2RkNzBjM2ExLTZhZDAtNGNkZC1hYWQ3LTYxMzM4MWYw ZTYwZC5jcmwwHwYDVR0jBBgwFoAUMxtcGs7Weta/gi+QLvpGHMFRW2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcwYzNhMS02YWQwLTRjZGQtYWFkNy02MTMz ODFmMGU2MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYWvsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJShNrkrV9paEnFFx+5xoU8FtzPckM1tVT+RqDfBFVFiTGWTJdgyJPDF OhgnXlMGKtHRRcsGTdZ9K+OwbQqpGgkoI3zhvem+zbEJfY4lL2pcP7yyDYDkSJaO 4QWPCirqxT5vrGwNXwFXgWZrfrKc0fHkf+ENL2ZqDhjSxR+OhPulgcj7GcWMLSCb Q4A/gWzFSwEswuOG/6rXSQ9o6Vm8O48YyzDHnLvOf1xsU+vAkj0DYmLIE3X6HYPI XTMkhGU7geJ3lHxFjbcM/99aZTjmcxj7jGE5TWUgDw+NYy6Ibf3e3nfFz0kO5iy6 GtOdlnkAZDx6vcyE1ACt7u7Yn341Gzc= -----END CERTIFICATE-----Generated at Sat Oct 10 11:29:01 2026 by rpki-client