$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa File: 3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa (raw, json) Hash identifier: 67fu2Hur9xCg6lV+QeErCi1MxxbcUhsi9FQSPJdjtzo= Subject key identifier: 37:BE:6C:9D:B3:96:15:48:85:B2:86:F9:3A:E5:58:10:AE:7F:7A:32 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D55BCB762E7E2AA80F8BFAA60 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 30036 IP address blocks: 97.64.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b7:62:e7:e2:aa:80:f8:bf:aa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=321de9bb-1d91-4330-8a2c-f5a704a1aa9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:45:cb:fd:18:7e:26:3c:7d:ee:a9:c8:21: 6b:e6:53:56:36:78:c6:c7:75:3b:18:0e:9b:00:a1: 1d:3c:dc:3e:e3:c7:1e:ae:c4:73:a4:c4:42:fa:47: f7:18:83:bf:fd:c7:89:10:3a:23:bc:15:c4:4a:2d: 05:fb:49:0e:6b:59:52:08:14:da:22:a6:18:d0:25: 8a:9c:48:9b:fc:37:50:6c:85:8d:ad:93:37:67:d3: 30:ff:46:59:aa:88:7d:bc:64:47:5f:2b:c5:2a:f3: 0f:79:79:f9:c9:ca:43:27:c5:b4:77:0a:96:41:62: 30:e5:db:00:72:d7:e8:f5:99:39:b9:3e:06:3e:66: e5:f5:65:94:6f:e5:0e:00:de:fb:fb:fe:28:e3:4b: 6b:d2:b8:85:18:86:51:9a:c1:c4:49:07:33:54:30: f4:d9:1c:29:24:69:36:ca:c7:16:1b:bc:e7:5b:34: 72:87:d8:18:04:59:ec:2a:2c:ad:8e:15:d4:a6:d5: 51:03:c5:8a:5d:34:e1:60:91:f1:9b:ff:40:9e:c7: 7d:bc:95:f0:9b:60:e2:06:69:bf:23:2e:89:30:b9: fc:ce:9c:22:fb:d3:72:80:c1:ba:c9:9d:b1:70:10: 08:c5:18:5c:a3:3f:d9:59:4f:3f:a6:b9:d2:f0:cb: cd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BE:6C:9D:B3:96:15:48:85:B2:86:F9:3A:E5:58:10:AE:7F:7A:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:4f:13:43:e3:5f:a5:84:c0:6b:ef:40:fd:22:0d:e2:9a:bd: 17:47:82:3e:7b:c6:f5:b3:dc:c0:43:3a:12:d9:4e:da:c1:dd: ef:2b:81:a7:7e:a2:8f:3c:c0:15:66:52:ad:8b:ef:14:43:95: 87:8a:8e:7c:ca:c0:81:05:03:64:ab:75:74:f6:6f:a2:7d:00: b5:3d:6a:4c:a7:4a:24:79:cb:94:27:a3:ae:27:43:9e:ae:a2: 81:c4:ee:5a:41:a4:1e:d7:cc:05:b2:55:2a:03:6c:51:c6:1b: b7:1e:48:5f:95:89:7a:e1:7e:0b:cb:2c:10:0c:59:a8:1d:02: 22:ec:94:a5:d7:68:6d:78:5d:a9:74:96:8d:13:5e:54:0f:a7: 90:bf:03:a5:20:ff:5e:21:9b:33:49:e4:63:e3:1d:76:81:70: 45:5e:d8:7f:3e:04:02:d9:95:b1:51:04:9e:27:2e:ad:ce:07: 2e:2b:c1:0e:17:90:e3:1b:08:8b:28:e5:06:74:39:b2:fc:13: aa:11:3b:2e:3e:59:c1:2e:a3:25:15:e0:60:f6:3d:09:88:48: bc:3f:95:30:1c:7b:f5:06:28:3f:dd:ff:09:a8:78:10:75:7c: 35:12:7a:bb:78:24:9c:bc:19:ab:c8:e7:97:2c:59:e6:5c:dc: ad:ba:27:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLdi5+KqgPi/qmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MzIxZGU5YmItMWQ5MS00MzMwLThhMmMtZjVhNzA0YTFhYTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq5Fy/0YfiY8fe6pyCFr5lNWNnjGx3U7GA6b AKEdPNw+48cersRzpMRC+kf3GIO//ceJEDojvBXESi0F+0kOa1lSCBTaIqYY0CWK nEib/DdQbIWNrZM3Z9Mw/0ZZqoh9vGRHXyvFKvMPeXn5ycpDJ8W0dwqWQWIw5dsA ctfo9Zk5uT4GPmbl9WWUb+UOAN77+/4o40tr0riFGIZRmsHESQczVDD02RwpJGk2 yscWG7znWzRyh9gYBFnsKiytjhXUptVRA8WKXTThYJHxm/9Ansd9vJXwm2DiBmm/ Iy6JMLn8zpwi+9NygMG6yZ2xcBAIxRhcoz/ZWU8/prnS8MvNFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDe+bJ2zlhVIhbKG+TrlWBCuf3oyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2RlNTZjNTAtMGRmOS0z ZDVjLTgyNDItOGUzZTljNjRlOWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNPE0PjX6WEwGvvQP0iDeKavRdHgj57xvWz3MBDOhLZTtrB3e8rgad+ oo88wBVmUq2L7xRDlYeKjnzKwIEFA2SrdXT2b6J9ALU9akynSiR5y5Qno64nQ56u ooHE7lpBpB7XzAWyVSoDbFHGG7ceSF+ViXrhfgvLLBAMWagdAiLslKXXaG14Xal0 lo0TXlQPp5C/A6Ug/14hmzNJ5GPjHXaBcEVe2H8+BALZlbFRBJ4nLq3OBy4rwQ4X kOMbCIso5QZ0ObL8E6oROy4+WcEuoyUV4GD2PQmISLw/lTAce/UGKD/d/wmoeBB1 fDUSert4JJy8GavI55csWeZc3K26J1Q= -----END CERTIFICATE-----Generated at Fri Apr 17 12:22:08 2026 by rpki-client