$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1336aa03-0de2-37d1-bae1-0eaa314750d8.roa File: 1336aa03-0de2-37d1-bae1-0eaa314750d8.roa (raw, json) Hash identifier: aWIBrNqvIQHIxA10qwHKCrKvxXhdMYWxpZJY0txsI0w= Subject key identifier: 3B:08:0C:50:D3:C8:AC:8B:A1:9D:73:01:D5:FF:C5:43:4C:7D:68:D9 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F4987DFB58055353290CC6D80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1336aa03-0de2-37d1-bae1-0eaa314750d8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19905 IP address blocks: 97.64.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:df:b5:80:55:35:32:90:cc:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=55307cde-0f65-4690-8ccc-1fa142f54112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:81:a7:3e:88:98:fd:97:f6:34:f0:0d:aa:fd: 2c:0e:d4:c6:4f:6d:3e:43:f0:ca:3d:9c:f2:70:c8: fe:83:62:2d:66:75:f4:70:01:af:12:7b:08:b9:7d: 5a:35:a3:be:0f:cb:28:9d:c5:3d:e9:7e:45:87:89: c8:1a:83:99:fc:d4:b5:66:a6:46:88:b0:d2:3a:4d: 49:ce:93:28:94:e9:12:c7:d7:2f:c0:a6:e6:d3:a6: 79:d7:96:5b:77:04:76:71:4c:d7:0c:d6:80:94:8c: a2:d9:28:66:78:5b:ac:61:da:a7:6b:6e:2f:65:37: 05:7a:19:78:d4:0e:f2:15:c7:f1:d7:f7:ab:f8:85: 0f:7e:06:b7:b0:a7:4b:07:e5:9b:aa:fe:81:57:ba: e2:43:4d:1f:4f:02:3b:4f:08:6b:47:66:fe:2f:59: 32:78:67:76:74:5d:6e:aa:ad:83:92:fb:1f:b7:ff: f5:91:fa:db:7c:99:ee:dd:23:91:5a:bd:3e:6f:13: d4:be:16:af:cb:9f:90:4a:a3:a6:b2:01:d8:85:7f: 5b:f4:1d:bf:ac:a5:f6:ba:e0:a2:0f:ee:28:e5:dc: 16:fe:2c:89:22:90:a7:0a:45:a6:e7:82:bb:fd:9a: bc:12:5f:cd:4b:9a:21:18:29:ae:76:9a:6a:c1:c9: 2c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:08:0C:50:D3:C8:AC:8B:A1:9D:73:01:D5:FF:C5:43:4C:7D:68:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1336aa03-0de2-37d1-bae1-0eaa314750d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:8d:ee:e6:12:57:fb:6a:45:98:4c:42:81:37:3f:d6:34:d9: 4d:70:5b:c6:2f:56:5c:a2:35:e7:4d:26:24:2f:6d:cb:e7:54: 13:27:14:6b:9a:1d:4a:96:2c:41:48:29:86:23:83:75:1c:95: 4a:82:de:9d:70:fc:45:bf:bf:f0:2b:77:fb:05:27:2d:83:f2: bb:56:c1:71:4f:12:ee:7c:4f:c0:e9:6e:a0:36:ea:ea:eb:a4: 5b:db:14:0b:db:ce:07:03:4d:ce:61:bd:91:84:0c:62:fb:86: eb:8c:9b:ca:7f:43:ab:65:50:fe:c5:13:84:85:f6:29:54:66: b3:5b:b3:c3:7b:e3:91:d3:9d:a0:df:17:80:1c:19:86:b9:31: bb:6d:61:28:0d:c2:bb:4e:83:f2:fe:79:92:a8:ff:86:8f:f5: a9:d4:31:b1:64:2f:2c:a6:78:59:d7:7a:01:e4:c0:0b:3c:7f: 3f:c7:ef:91:50:38:16:3a:67:95:94:5d:0c:27:42:4f:34:ea: 77:bc:04:e6:6a:1b:08:fc:6e:16:fc:5c:25:04:b7:79:d6:89: fe:60:b7:6c:d1:de:53:36:46:ff:11:1f:ba:20:b8:a6:6c:87: 8b:16:e2:6a:fa:3e:71:4e:c5:de:ca:c0:13:2a:59:87:29:35: d9:e4:fd:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh9+1gFU1MpDMbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTUzMDdjZGUtMGY2NS00NjkwLThjY2MtMWZhMTQyZjU0MTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoGnPoiY/Zf2NPANqv0sDtTGT20+Q/DKPZzy cMj+g2ItZnX0cAGvEnsIuX1aNaO+D8soncU96X5Fh4nIGoOZ/NS1ZqZGiLDSOk1J zpMolOkSx9cvwKbm06Z515ZbdwR2cUzXDNaAlIyi2ShmeFusYdqna24vZTcFehl4 1A7yFcfx1/er+IUPfga3sKdLB+Wbqv6BV7riQ00fTwI7TwhrR2b+L1kyeGd2dF1u qq2Dkvsft//1kfrbfJnu3SORWr0+bxPUvhavy5+QSqOmsgHYhX9b9B2/rKX2uuCi D+4o5dwW/iyJIpCnCkWm54K7/Zq8El/NS5ohGCmudppqwckswwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsIDFDTyKyLoZ1zAdX/xUNMfWjZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTMzNmFhMDMtMGRlMi0z N2QxLWJhZTEtMGVhYTMxNDc1MGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqN7uYSV/tqRZhMQoE3P9Y02U1wW8YvVlyiNedNJiQvbcvnVBMnFGua HUqWLEFIKYYjg3UclUqC3p1w/EW/v/Ard/sFJy2D8rtWwXFPEu58T8DpbqA26urr pFvbFAvbzgcDTc5hvZGEDGL7huuMm8p/Q6tlUP7FE4SF9ilUZrNbs8N745HTnaDf F4AcGYa5MbttYSgNwrtOg/L+eZKo/4aP9anUMbFkLyymeFnXegHkwAs8fz/H75FQ OBY6Z5WUXQwnQk806ne8BOZqGwj8bhb8XCUEt3nWif5gt2zR3lM2Rv8RH7oguKZs h4sW4mr6PnFOxd7KwBMqWYcpNdnk/b8= -----END CERTIFICATE-----Generated at Mon Sep 28 19:51:33 2026 by rpki-client