$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2297aaf2-250f-3196-bab2-68782ebdf2cc.roa File: 2297aaf2-250f-3196-bab2-68782ebdf2cc.roa (raw, json) Hash identifier: nw0MWUcXUSbGhFRzD1CIXKGUYV8hYV2jWIVr7pbi5NI= Subject key identifier: AB:78:C0:A9:30:33:44:2E:9A:95:B5:11:BB:19:4C:83:C5:54:12:F7 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D55BCB46E2191DAB9FB9AF240 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2297aaf2-250f-3196-bab2-68782ebdf2cc.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 30036 IP address blocks: 97.64.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b4:6e:21:91:da:b9:fb:9a:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=327a5e87-3427-4991-b527-2114c1462ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:af:54:a6:cb:f3:d7:67:94:c6:44:e4:da:68: ac:eb:28:51:a3:5d:fc:b8:1e:a0:ec:2d:21:a1:20: f7:02:0f:90:3e:58:2c:c7:99:f9:72:95:cf:6e:8a: 3c:2d:bf:12:87:fd:5b:f3:d7:93:bf:38:3e:3e:af: 8d:91:67:69:69:87:f0:5c:34:ad:8d:18:76:d8:09: b7:35:a2:a8:20:79:d6:30:83:e4:36:bb:2e:1f:ab: df:c3:4a:ea:4c:a8:87:e3:09:8f:15:55:6b:61:53: 41:1b:dd:21:62:39:18:b1:7d:34:55:bf:5b:8c:41: 4f:d7:d3:87:b0:14:4b:35:79:c3:18:79:25:54:e0: c6:35:84:08:50:3f:24:e6:39:13:18:d4:ec:4d:54: 17:0d:95:c7:bf:ef:15:00:75:70:b1:51:30:67:e8: 62:21:ec:33:49:02:70:84:2c:19:7b:98:b7:87:de: b1:e2:48:10:c9:54:f4:e6:65:46:1e:c9:df:8b:4a: cc:40:77:dd:3c:ef:9c:11:5e:c0:0d:48:60:4d:9a: b4:f3:71:ac:39:28:0b:b8:eb:7e:db:86:23:f3:8f: bd:71:a0:0d:b9:0f:df:b7:f7:b1:43:fe:8c:95:6f: d0:bb:ee:67:e3:e6:07:78:bd:fe:52:69:83:89:ee: 1d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:78:C0:A9:30:33:44:2E:9A:95:B5:11:BB:19:4C:83:C5:54:12:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2297aaf2-250f-3196-bab2-68782ebdf2cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:c9:0d:2e:1a:48:a0:95:c2:b7:a9:52:38:b7:c8:5e:91:a7: fe:ba:fd:1a:58:f3:80:83:f8:aa:17:52:e9:ca:51:08:4c:76: c0:59:1e:b3:2c:17:9f:4a:8f:79:1d:db:93:eb:61:61:b1:9d: d2:5d:29:c1:52:d7:8f:f5:79:81:00:1d:ab:73:fb:00:b6:02: 68:d5:ad:10:2e:33:d3:f8:08:cd:f0:14:62:14:2c:57:9a:2b: 73:57:e3:c0:c7:a6:75:b9:56:f9:60:e5:fe:ad:11:a9:4e:f7: 6b:5e:3f:af:7b:9d:f7:24:51:44:43:98:a5:d3:cc:9d:20:d9: 10:6f:23:c6:61:e2:e5:c5:b3:a5:c4:f0:16:b3:f0:d9:d7:07: 93:2a:1f:56:d4:0b:4b:ab:d0:78:5c:fd:d7:a6:b5:18:3b:75: 3f:bd:c8:06:f3:37:1f:9d:e5:31:2a:ee:a2:43:6a:bf:08:0b: ec:44:81:e6:2f:d2:e7:d4:16:91:77:a0:4f:c2:ab:48:c1:69: 8f:c9:9f:2a:4f:74:d3:b7:8b:f1:60:85:d8:45:d2:48:e4:dc: 8f:81:cc:57:0e:3d:bb:60:a8:81:24:d5:75:51:ee:7e:9f:0f: f5:f6:c9:b7:65:7c:c4:4d:dd:ca:25:2e:55:67:53:13:44:dc: 23:b9:df:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLRuIZHaufua8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MzI3YTVlODctMzQyNy00OTkxLWI1MjctMjExNGMxNDYyZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK9Upsvz12eUxkTk2mis6yhRo138uB6g7C0h oSD3Ag+QPlgsx5n5cpXPboo8Lb8Sh/1b89eTvzg+Pq+NkWdpaYfwXDStjRh22Am3 NaKoIHnWMIPkNrsuH6vfw0rqTKiH4wmPFVVrYVNBG90hYjkYsX00Vb9bjEFP19OH sBRLNXnDGHklVODGNYQIUD8k5jkTGNTsTVQXDZXHv+8VAHVwsVEwZ+hiIewzSQJw hCwZe5i3h96x4kgQyVT05mVGHsnfi0rMQHfdPO+cEV7ADUhgTZq083GsOSgLuOt+ 24Yj84+9caANuQ/ft/exQ/6MlW/Qu+5n4+YHeL3+UmmDie4dxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKt4wKkwM0QumpW1EbsZTIPFVBL3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjI5N2FhZjItMjUwZi0z MTk2LWJhYjItNjg3ODJlYmRmMmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3JDS4aSKCVwrepUji3yF6Rp/66/RpY84CD+KoXUunKUQhMdsBZHrMs F59Kj3kd25PrYWGxndJdKcFS14/1eYEAHatz+wC2AmjVrRAuM9P4CM3wFGIULFea K3NX48DHpnW5Vvlg5f6tEalO92teP697nfckUURDmKXTzJ0g2RBvI8Zh4uXFs6XE 8Baz8NnXB5MqH1bUC0ur0Hhc/demtRg7dT+9yAbzNx+d5TEq7qJDar8IC+xEgeYv 0ufUFpF3oE/Cq0jBaY/JnypPdNO3i/FghdhF0kjk3I+BzFcOPbtgqIEk1XVR7n6f D/X2ybdlfMRN3colLlVnUxNE3CO533k= -----END CERTIFICATE-----Generated at Fri Apr 17 11:48:10 2026 by rpki-client