$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f75772f-364c-3389-bc2a-62d1f5dac05d.roa File: 0f75772f-364c-3389-bc2a-62d1f5dac05d.roa (raw, json) Hash identifier: 1bG0cSnDfO+zbqLwLUOxjpkQnsoSGH7Rykw3cwpDW9A= Subject key identifier: 72:99:58:31:F8:5C:2A:B6:C4:66:B0:66:B5:F1:C6:D7:4F:1C:E2:5B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B95AAFF4105AE923DD9C1AA80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f75772f-364c-3389-bc2a-62d1f5dac05d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 97.64.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:ff:41:05:ae:92:3d:d9:c1:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=c8ecd5da-db9a-4b6c-839a-c7f5fdbc7900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:28:9a:9b:84:a7:a8:1d:6f:ff:1c:ed:3e:ea: 1e:16:a3:23:95:ef:62:0b:d6:42:3a:34:00:5e:2a: 68:af:7c:ee:d9:ea:be:0e:d6:72:ee:4d:5b:7c:80: c3:05:a6:a1:11:b8:92:0a:5e:49:b7:55:55:93:8b: 56:bc:02:be:79:c7:3d:16:bb:8e:e4:75:aa:d2:63: 56:70:d2:2b:9f:5c:22:59:ae:c9:ba:a2:a4:56:de: 8c:e5:da:fe:46:cf:b2:f7:96:07:8f:af:82:1d:d0: 41:ef:47:50:61:83:6d:29:f9:dd:38:40:7d:a3:21: c8:2b:96:fa:2c:26:94:26:84:3b:d8:22:e8:42:42: 45:f7:5a:42:5b:80:a9:69:ee:07:8f:3e:9d:cd:dc: c9:0f:37:0e:04:a9:3d:95:93:91:1a:ac:08:da:1e: ea:5a:c2:46:92:aa:69:37:4e:6e:ab:65:77:6b:91: 1c:d6:b2:a5:46:10:39:d0:2b:e9:f2:3c:21:9f:a7: ac:78:4f:c3:92:d0:ff:11:a1:c8:9a:65:f9:46:ae: 42:50:ae:0a:84:7c:bd:95:4c:59:e7:74:89:45:87: 5d:6b:07:72:5e:87:72:d8:5c:75:ce:87:e3:9f:0c: b4:9f:e7:74:85:eb:56:b6:d6:4d:d4:9c:a3:65:52: 24:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:99:58:31:F8:5C:2A:B6:C4:66:B0:66:B5:F1:C6:D7:4F:1C:E2:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f75772f-364c-3389-bc2a-62d1f5dac05d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:79:70:7a:be:d2:a7:14:17:20:c5:a1:1e:57:1a:78:39:92: 0b:a8:96:3a:a4:31:6b:a1:c7:39:51:5a:8a:89:c0:cb:6b:00: 31:18:d4:28:24:49:c1:7a:c9:e2:93:97:c5:63:38:4e:45:6a: 47:91:d8:18:7d:56:a4:6b:b5:f4:54:b5:0c:5f:a9:59:dd:5c: d9:9f:77:27:22:db:86:7e:cf:48:9f:89:17:8f:cf:d8:0a:9d: 1b:e9:26:e4:62:ce:07:df:e9:43:ed:93:00:99:21:4e:37:4e: 71:62:fe:b0:02:e2:08:2a:a1:8d:5b:4d:71:b5:ab:81:1f:f1: 34:6e:49:da:fb:1b:c4:f3:ba:d2:bc:4f:9d:da:08:bb:9e:d9: 82:5a:89:1f:b3:2b:00:2b:8b:b4:31:e1:78:5c:91:3e:90:cc: 0e:cb:6e:3a:5b:be:d4:fd:dd:42:3e:7e:df:1f:b3:b9:c3:d6: 62:fb:3e:a0:28:21:38:51:13:f5:77:45:80:56:aa:49:81:5a: 0a:1e:69:8f:d5:8f:0a:29:3f:53:2c:38:b9:5a:e0:1b:ec:8c: 29:4f:00:7c:63:15:fb:3f:61:26:c4:5c:7d:d0:8a:55:22:cf: 26:4f:dd:5b:12:a6:99:fb:f1:1f:91:66:da:41:b7:c7:b3:0f: 04:fc:3d:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqv9BBa6SPdnBqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YzhlY2Q1ZGEtZGI5YS00YjZjLTgzOWEtYzdmNWZkYmM3OTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyiam4SnqB1v/xztPuoeFqMjle9iC9ZCOjQA Xipor3zu2eq+DtZy7k1bfIDDBaahEbiSCl5Jt1VVk4tWvAK+ecc9FruO5HWq0mNW cNIrn1wiWa7JuqKkVt6M5dr+Rs+y95YHj6+CHdBB70dQYYNtKfndOEB9oyHIK5b6 LCaUJoQ72CLoQkJF91pCW4Cpae4Hjz6dzdzJDzcOBKk9lZORGqwI2h7qWsJGkqpp N05uq2V3a5Ec1rKlRhA50Cvp8jwhn6eseE/DktD/EaHImmX5Rq5CUK4KhHy9lUxZ 53SJRYddawdyXody2Fx1zofjnwy0n+d0hetWttZN1JyjZVIkqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKZWDH4XCq2xGawZrXxxtdPHOJbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGY3NTc3MmYtMzY0Yy0z Mzg5LWJjMmEtNjJkMWY1ZGFjMDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHt5cHq+0qcUFyDFoR5XGng5kguoljqkMWuhxzlRWoqJwMtrADEY1Cgk ScF6yeKTl8VjOE5FakeR2Bh9VqRrtfRUtQxfqVndXNmfdyci24Z+z0ifiRePz9gK nRvpJuRizgff6UPtkwCZIU43TnFi/rAC4ggqoY1bTXG1q4Ef8TRuSdr7G8TzutK8 T53aCLue2YJaiR+zKwAri7Qx4XhckT6QzA7LbjpbvtT93UI+ft8fs7nD1mL7PqAo IThRE/V3RYBWqkmBWgoeaY/VjwopP1MsOLla4BvsjClPAHxjFfs/YSbEXH3QilUi zyZP3VsSppn78R+RZtpBt8ezDwT8Pbs= -----END CERTIFICATE-----Generated at Wed Nov 5 03:55:10 2025 by rpki-client