$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2297aaf2-250f-3196-bab2-68782ebdf2cc.roa File: 2297aaf2-250f-3196-bab2-68782ebdf2cc.roa (raw, json) Hash identifier: yBFVK2nI9VD8GPWJO8zcH7lpJbIquobaxoDtDfNWoCg= Subject key identifier: 2B:80:40:34:B9:09:D2:FC:B8:C6:4A:59:C2:33:07:7E:A1:26:6C:3C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B95AAFE64E91AC61AD7DEAEC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2297aaf2-250f-3196-bab2-68782ebdf2cc.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 97.64.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:fe:64:e9:1a:c6:1a:d7:de:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=3436ff83-0be1-4d10-9fb3-4fa14b43ca3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d5:85:e7:00:02:25:54:64:65:32:27:56:a4: be:7d:2a:07:04:a5:c1:49:fa:38:ab:53:42:44:05: a0:52:f0:11:0d:dc:17:27:50:63:bd:f5:6e:d1:83: 0e:f8:8f:00:23:03:92:00:ac:6b:b8:00:b5:9e:49: 93:7f:4b:69:55:b4:ca:23:d6:74:e8:bf:08:b8:fa: ad:87:b9:d2:c4:aa:6d:c7:6d:a3:52:95:c7:16:03: 15:7f:85:0b:96:26:3e:39:b2:47:22:a8:53:0e:72: de:25:2c:e8:2c:70:e8:2d:39:f9:c1:2a:17:0d:b4: a3:f0:7e:e4:e1:f9:88:eb:f0:11:be:2c:0a:0e:be: 77:b1:8c:0e:cc:c8:bf:e1:4d:da:2f:84:33:a3:a9: 2f:91:42:fc:32:7d:71:63:d8:5a:e0:f9:45:e3:d7: 39:bb:98:57:86:a5:f7:b4:78:70:21:f3:56:68:ce: 51:5c:58:27:ba:77:17:f0:b0:92:6a:1f:09:ba:6d: 24:41:8e:70:96:e9:85:be:b3:85:ae:3d:5a:aa:a4: d4:9b:67:30:34:e1:77:dc:09:5f:9a:0c:4e:c6:fb: f9:89:91:8e:48:9a:65:07:ef:bc:6c:d7:49:b0:d3: 94:bd:f2:5e:e0:2c:27:20:1f:0a:46:55:2c:d8:6d: 89:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:80:40:34:B9:09:D2:FC:B8:C6:4A:59:C2:33:07:7E:A1:26:6C:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2297aaf2-250f-3196-bab2-68782ebdf2cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:f4:a6:6d:70:fd:df:4f:56:0c:a0:f9:1d:d7:d9:af:d2:6d: 43:b6:8e:46:0c:07:25:35:0f:24:cd:07:23:3a:b2:35:b7:3e: 42:9f:17:23:e9:26:2f:bc:1b:4d:f9:74:0d:8a:ec:04:71:38: bd:7c:74:d6:8a:34:04:43:7a:b5:fb:1b:7a:67:ac:f2:bc:05: 34:4f:8d:9b:77:05:d0:15:c1:06:8c:66:e8:d0:1f:68:42:e5: 48:28:b8:ca:36:c1:f8:91:d0:3b:f6:13:97:a9:e3:1c:cc:88: 0c:ef:4f:fe:57:2e:e9:6d:d9:86:ae:15:8e:78:54:d6:86:04: 7f:b7:5a:fd:10:64:97:81:25:c7:2a:a6:9f:61:f7:df:a1:f7: d2:0b:3f:df:57:ae:08:f2:00:f0:99:66:bd:2e:ee:60:e8:67: a6:90:da:57:93:7b:a6:ad:fe:03:c2:7b:45:04:2a:55:e2:7d: 3d:00:84:5b:16:28:55:91:0f:56:9b:9c:02:c1:94:f9:5a:da: 76:a2:48:33:06:eb:b0:31:5b:62:f0:3f:04:1f:8b:6f:08:fe: 34:61:11:0e:bd:e5:72:61:90:cc:63:ae:8a:c5:ba:77:1e:12: 09:7b:0f:35:fb:b4:7f:6b:2e:d5:19:8d:8f:fe:94:b8:e0:1e: 7a:73:45:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqv5k6RrGGtfersAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MzQzNmZmODMtMGJlMS00ZDEwLTlmYjMtNGZhMTRiNDNjYTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9WF5wACJVRkZTInVqS+fSoHBKXBSfo4q1NC RAWgUvARDdwXJ1BjvfVu0YMO+I8AIwOSAKxruAC1nkmTf0tpVbTKI9Z06L8IuPqt h7nSxKptx22jUpXHFgMVf4ULliY+ObJHIqhTDnLeJSzoLHDoLTn5wSoXDbSj8H7k 4fmI6/ARviwKDr53sYwOzMi/4U3aL4Qzo6kvkUL8Mn1xY9ha4PlF49c5u5hXhqX3 tHhwIfNWaM5RXFgnuncX8LCSah8Jum0kQY5wlumFvrOFrj1aqqTUm2cwNOF33Alf mgxOxvv5iZGOSJplB++8bNdJsNOUvfJe4CwnIB8KRlUs2G2JBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuAQDS5CdL8uMZKWcIzB36hJmw8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjI5N2FhZjItMjUwZi0z MTk2LWJhYjItNjg3ODJlYmRmMmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHr0pm1w/d9PVgyg+R3X2a/SbUO2jkYMByU1DyTNByM6sjW3PkKfFyPp Ji+8G035dA2K7ARxOL18dNaKNARDerX7G3pnrPK8BTRPjZt3BdAVwQaMZujQH2hC 5UgouMo2wfiR0Dv2E5ep4xzMiAzvT/5XLult2YauFY54VNaGBH+3Wv0QZJeBJccq pp9h99+h99ILP99XrgjyAPCZZr0u7mDoZ6aQ2leTe6at/gPCe0UEKlXifT0AhFsW KFWRD1abnALBlPla2naiSDMG67AxW2LwPwQfi28I/jRhEQ695XJhkMxjrorFunce Egl7DzX7tH9rLtUZjY/+lLjgHnpzRR0= -----END CERTIFICATE-----Generated at Wed Nov 5 00:05:38 2025 by rpki-client