$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a35a05f8-05d9-3f46-8398-9bfa088bdc8e.roa File: a35a05f8-05d9-3f46-8398-9bfa088bdc8e.roa (raw, json) Hash identifier: 0HjtlMNejde0yO0WXlFZSYT8KEAyUIJIjTnPTZEWQ/4= Subject key identifier: E5:44:BA:8D:2C:AD:12:DA:8C:0C:FB:E2:22:96:4C:71:08:21:33:70 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F524E64112F5E72A8A7A000 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a35a05f8-05d9-3f46-8398-9bfa088bdc8e.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 33363 IP address blocks: 97.68.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:4e:64:11:2f:5e:72:a8:a7:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=5377fddf-ccd0-470a-8434-2ac05051f13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:49:e6:c0:6c:b6:9e:79:fe:5c:db:bd:f6:6f: 90:6d:90:ed:94:1a:8c:e4:2a:f1:51:17:8c:1d:3a: 84:39:14:2a:cc:9f:a1:53:d6:e4:d3:fa:d7:2e:cf: 33:cd:d3:a2:27:b7:57:02:f1:b9:39:ce:41:ef:0b: 57:ff:3d:3f:2e:c3:af:24:0c:6e:c9:46:c7:6d:67: 12:b5:a8:9b:7a:d4:72:11:1c:e6:cd:29:b6:4c:78: 6e:9c:73:86:65:2b:ea:1f:8d:6c:85:37:83:57:84: c1:0e:3f:f5:2b:52:ef:08:ed:15:8d:ad:9e:d1:9c: de:29:ff:7f:60:07:06:57:df:04:8b:c2:6b:f2:db: 39:47:d1:28:b7:9a:7f:53:21:e0:9d:c6:82:fa:e2: 0a:2c:15:31:f1:9d:01:0a:4e:a8:00:4f:c5:18:a7: f5:86:4f:cf:d7:49:fb:a8:fc:b5:09:ab:b6:a8:ab: a8:f2:2c:e3:57:45:d1:44:63:ac:a4:42:c1:3d:a1: 34:a1:3e:1f:10:91:88:6b:9c:1a:b7:fb:2c:9f:45: 4f:3b:c4:13:f3:d2:be:95:fe:b8:1d:b9:db:f9:60: 48:40:4e:89:97:d6:4e:58:8b:7e:e3:0a:16:36:61: 76:2c:21:af:ae:86:2b:32:6e:f8:6b:6d:8b:6f:05: a3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:44:BA:8D:2C:AD:12:DA:8C:0C:FB:E2:22:96:4C:71:08:21:33:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a35a05f8-05d9-3f46-8398-9bfa088bdc8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 97.68.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:cf:c8:07:a8:12:fd:93:ed:6b:64:00:56:ca:63:fc:4e:ab: 79:18:30:2a:57:6e:73:71:5d:14:ab:4f:a0:cc:0d:15:94:b2: 01:c7:33:e1:56:48:73:98:0d:ad:2b:7d:4e:b6:c4:69:9f:fa: 98:4d:e6:b6:79:67:98:2f:28:63:5c:85:23:9c:9c:07:65:09: af:36:6f:c7:68:ea:ab:37:a7:1c:67:fa:69:59:5c:02:71:26: 56:d3:a4:fc:bc:36:3b:36:9a:4f:45:da:7b:54:23:57:eb:e0: 5c:ca:7c:0e:2b:b1:51:c1:8d:3a:be:f9:a6:ed:f8:92:76:73: 51:7c:66:64:da:22:d4:66:ed:e8:b7:ab:81:14:4e:63:06:6b: c7:50:81:25:38:1a:71:08:83:30:f3:05:ee:23:72:2d:e9:fe: d4:08:fa:5e:d0:c1:85:c8:17:db:98:bf:b1:6b:30:e4:3e:86: 84:b4:e2:53:86:0f:27:36:5d:1d:53:ce:32:0f:cf:82:5b:97: 4b:36:99:65:0a:e3:87:76:84:d2:c3:16:f6:4e:73:0c:aa:1c: 7b:cb:41:ff:9d:b0:d8:5f:b8:aa:34:43:45:c2:00:82:6a:20: c0:76:63:11:e4:ba:22:ce:aa:67:ac:d3:8f:4c:b2:24:6f:49: c0:dd:26:5c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEt/Uk5kES9ecqinoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NTM3N2ZkZGYtY2NkMC00NzBhLTg0MzQtMmFjMDUwNTFmMTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUnmwGy2nnn+XNu99m+QbZDtlBqM5CrxUReM HTqEORQqzJ+hU9bk0/rXLs8zzdOiJ7dXAvG5Oc5B7wtX/z0/LsOvJAxuyUbHbWcS taibetRyERzmzSm2THhunHOGZSvqH41shTeDV4TBDj/1K1LvCO0Vja2e0ZzeKf9/ YAcGV98Ei8Jr8ts5R9Eot5p/UyHgncaC+uIKLBUx8Z0BCk6oAE/FGKf1hk/P10n7 qPy1Cau2qKuo8izjV0XRRGOspELBPaE0oT4fEJGIa5wat/ssn0VPO8QT89K+lf64 Hbnb+WBIQE6Jl9ZOWIt+4woWNmF2LCGvroYrMm74a22LbwWjIQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOVEuo0srRLajAz74iKWTHEIITNwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTM1YTA1ZjgtMDVkOS0z ZjQ2LTgzOTgtOWJmYTA4OGJkYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYUQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAUs/IB6gS/ZPta2QAVspj/E6reRgwKlduc3FdFKtPoMwNFZSyAccz4VZI c5gNrSt9TrbEaZ/6mE3mtnlnmC8oY1yFI5ycB2UJrzZvx2jqqzenHGf6aVlcAnEm VtOk/Lw2OzaaT0Xae1QjV+vgXMp8DiuxUcGNOr75pu34knZzUXxmZNoi1Gbt6Ler gRROYwZrx1CBJTgacQiDMPMF7iNyLen+1Aj6XtDBhcgX25i/sWsw5D6GhLTiU4YP JzZdHVPOMg/PgluXSzaZZQrjh3aE0sMW9k5zDKoce8tB/52w2F+4qjRDRcIAgmog wHZjEeS6Is6qZ6zTj0yyJG9JwN0mXA== -----END CERTIFICATE-----Generated at Mon Oct 20 15:57:26 2025 by rpki-client