$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2fb8b598-8f2c-35b8-81f1-2336d0f05373.roa File: 2fb8b598-8f2c-35b8-81f1-2336d0f05373.roa (raw, json) Hash identifier: 0w8DOwflyzKTlyvgaDcdbGd/+AWmevgK9lDkzcvqw6c= Subject key identifier: E9:E2:F7:80:2C:7E:E9:D4:7F:57:E3:91:5C:37:66:03:86:E6:C3:07 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B95A78816B04A2ABCBCCA9380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2fb8b598-8f2c-35b8-81f1-2336d0f05373.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 97.64.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:88:16:b0:4a:2a:bc:bc:ca:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=a11c629c-b955-46fa-afd3-1af4ea8b45d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:28:1d:1d:c2:65:18:55:83:07:30:34:dd:ef: d7:b4:ea:36:2a:55:1c:6a:51:8e:22:0e:8c:d1:c4: 96:cd:35:00:68:6e:8e:25:5c:28:eb:cb:a3:86:4b: b6:9a:28:70:6d:07:6b:44:fa:c1:8a:30:86:fb:ad: 29:d9:fc:1a:e8:4b:8e:82:14:b5:3a:34:06:b0:be: 21:f9:69:95:34:29:67:c7:2b:ac:be:92:b3:77:8a: ce:80:03:6d:b2:f5:d3:83:a1:93:09:68:48:72:34: 21:5b:bf:13:52:1a:ee:85:eb:b3:7c:6a:4f:84:30: 05:7a:19:6e:b7:b3:dd:00:b7:5d:be:97:e5:56:dc: 83:bc:63:be:42:de:80:75:b6:b3:ef:cf:e6:b6:8a: b0:30:59:a4:d1:d1:98:6c:71:40:a3:93:40:56:a5: 40:f8:ff:1d:ca:f9:91:6f:48:b7:2f:eb:4a:7f:a6: 58:dc:f1:20:b4:c6:75:54:12:af:a0:c5:e6:72:a6: f8:e4:74:9b:2f:c2:fc:d6:22:99:a4:41:6a:55:04: 0b:51:05:b5:4b:60:e9:41:d5:8e:10:c4:82:7f:e1: d0:f5:3c:0a:c6:19:24:98:4c:a7:78:57:37:cc:89: 8b:64:b4:30:62:91:fb:28:23:9c:f7:c9:89:59:b2: 68:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E2:F7:80:2C:7E:E9:D4:7F:57:E3:91:5C:37:66:03:86:E6:C3:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2fb8b598-8f2c-35b8-81f1-2336d0f05373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:12:fe:7d:16:ca:9b:99:75:01:0a:18:0c:b1:04:a1:9e:be: b0:a0:a9:ff:6c:3b:cb:da:98:53:a6:cf:d3:14:c8:5d:2c:3c: b0:ef:a7:88:5d:d7:20:13:07:73:6e:1e:7b:dd:50:2b:8b:97: ba:84:5a:37:b5:30:e9:22:e3:9e:26:89:e7:53:97:5b:5d:33: 88:79:d9:ec:d8:6a:0c:5d:b8:f8:16:7c:e8:0b:d3:d2:46:0d: e7:03:91:80:63:fb:44:43:fd:c9:9b:f7:ab:69:28:fd:83:b7: 87:10:b2:73:c8:91:be:07:91:b7:ef:5b:f2:5e:7d:e9:be:30: 40:57:84:fb:da:4e:46:a1:f7:39:ce:e1:1f:f4:3d:9b:1c:fc: 56:78:27:f3:ef:a4:ee:23:0a:3e:c0:dc:83:b4:1a:45:9e:be: a7:d6:24:ed:ad:43:02:f6:49:02:06:ad:12:bc:60:83:4c:47: f7:e6:a0:db:50:ad:11:ef:a1:c3:ad:db:af:a5:92:f8:46:dd: 8a:3d:85:17:0d:30:2e:ef:b4:d4:14:9f:79:12:fc:ee:1c:4e: 0a:3f:c1:a3:be:bd:e7:66:c4:87:bb:5a:0a:55:80:8f:21:20: 82:7b:f5:c9:2a:8d:2c:de:14:73:0c:8d:39:70:89:bd:dc:88: 66:83:12:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4gWsEoqvLzKk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YTExYzYyOWMtYjk1NS00NmZhLWFmZDMtMWFmNGVhOGI0NWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSgdHcJlGFWDBzA03e/XtOo2KlUcalGOIg6M 0cSWzTUAaG6OJVwo68ujhku2mihwbQdrRPrBijCG+60p2fwa6EuOghS1OjQGsL4h +WmVNClnxyusvpKzd4rOgANtsvXTg6GTCWhIcjQhW78TUhruheuzfGpPhDAFehlu t7PdALddvpflVtyDvGO+Qt6Adbaz78/mtoqwMFmk0dGYbHFAo5NAVqVA+P8dyvmR b0i3L+tKf6ZY3PEgtMZ1VBKvoMXmcqb45HSbL8L81iKZpEFqVQQLUQW1S2DpQdWO EMSCf+HQ9TwKxhkkmEyneFc3zImLZLQwYpH7KCOc98mJWbJo5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOni94AsfunUf1fjkVw3ZgOG5sMHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmZiOGI1OTgtOGYyYy0z NWI4LTgxZjEtMjMzNmQwZjA1MzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAS/n0WypuZdQEKGAyxBKGevrCgqf9sO8vamFOmz9MUyF0sPLDvp4hd 1yATB3NuHnvdUCuLl7qEWje1MOki454miedTl1tdM4h52ezYagxduPgWfOgL09JG DecDkYBj+0RD/cmb96tpKP2Dt4cQsnPIkb4HkbfvW/Jefem+MEBXhPvaTkah9znO 4R/0PZsc/FZ4J/PvpO4jCj7A3IO0GkWevqfWJO2tQwL2SQIGrRK8YINMR/fmoNtQ rRHvocOt26+lkvhG3Yo9hRcNMC7vtNQUn3kS/O4cTgo/waO+vedmxIe7WgpVgI8h IIJ79ckqjSzeFHMMjTlwib3ciGaDEoE= -----END CERTIFICATE-----Generated at Wed Nov 5 08:59:07 2025 by rpki-client