$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa File: 3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa (raw, json) Hash identifier: m5d2fFOF8K0LKgWxmDj7g+N2AXP2Xbt7KOkXTJqzxEc= Subject key identifier: 7A:91:A4:D0:95:B0:BE:FA:87:16:4A:14:0C:FD:F0:4F:B3:10:FF:17 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AB4EF02DB5D9AF843DAE55600 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 30036 IP address blocks: 97.64.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ef:02:db:5d:9a:f8:43:da:e5:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=bf129106-6ca6-4689-b408-7b1a62bbbf88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:df:9e:8f:c9:1e:3c:b0:0e:8e:ca:3d:ae:5e: e5:01:ff:98:77:47:51:2e:98:a3:ff:27:9c:7a:79: 62:e6:84:ee:43:79:96:f4:ca:37:26:a9:91:e4:40: df:1d:29:48:ac:f4:4f:42:96:26:e6:b8:53:e0:ea: 44:0b:bb:f6:50:5d:52:8b:0a:92:74:f5:83:c0:1d: ed:3b:4d:81:11:27:8b:db:8f:e5:f7:70:c0:34:e8: 83:55:18:35:ea:60:7e:7b:00:fc:a5:7d:bb:e5:3a: ce:f9:e6:c0:4b:00:61:d0:0f:a8:42:aa:34:c3:5c: 16:fa:d9:af:c7:35:fe:2e:b9:9b:39:0b:c2:a5:ce: be:72:c3:c7:f5:6e:24:96:cc:50:4c:82:01:3e:6b: 5c:9c:d3:90:a1:2c:b9:82:fa:a3:c8:f2:67:ea:1f: b9:b4:88:e1:31:f2:62:ba:af:6e:ca:59:07:98:d8: 5e:91:d2:4b:ea:64:35:4b:1a:02:b8:09:b2:33:61: 68:8a:67:f8:d7:9f:b5:5e:d3:f0:43:08:82:01:95: c8:3a:5f:22:17:08:4f:68:5a:cc:b5:10:df:b5:04: 7c:4b:f7:38:b0:dd:36:23:1f:16:51:f3:b6:6b:46: 83:6e:1f:47:57:f8:a6:6a:55:5d:3a:b0:01:c8:49: 92:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:91:A4:D0:95:B0:BE:FA:87:16:4A:14:0C:FD:F0:4F:B3:10:FF:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3de56c50-0df9-3d5c-8242-8e3e9c64e9f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:4e:0b:41:12:75:8c:5c:44:6d:2c:58:66:46:88:4a:21:72: 48:61:e6:d6:35:7e:a6:ab:c8:fc:0a:e4:b1:ee:e7:51:62:ab: c4:9d:b8:5f:de:88:bf:6a:73:a7:b6:b9:95:3d:4f:5a:aa:26: 68:7d:61:ca:0a:31:3a:0c:76:69:2a:f7:e2:cc:03:f3:90:ff: a5:fc:a9:15:8c:dd:b9:7c:7f:90:f5:a8:94:c2:4b:59:b2:dc: a7:3f:37:ad:6a:43:7f:75:78:8f:80:b9:57:fe:9f:da:aa:33: 34:f2:b5:d4:7c:5a:1a:1b:bd:00:b6:6b:24:1a:77:03:74:e0: 20:8a:95:68:bb:75:f0:4b:7a:51:82:ce:57:4c:f0:85:56:1f: eb:45:17:97:0f:8c:d7:c0:2d:f8:2d:95:44:a2:d0:f8:68:1e: 82:db:77:9e:79:e5:48:44:ad:3e:e0:0b:d8:59:41:14:e0:d2: 94:bb:e6:be:a1:e9:21:83:c4:f2:f5:52:86:83:60:97:53:5f: 88:cf:90:1a:1b:78:5a:d9:50:10:0d:97:13:65:44:7d:fc:b9: 56:d7:d5:f3:d5:75:5b:07:7f:bc:d0:14:95:de:99:82:14:88: c5:b5:c3:5d:ec:df:0f:23:c4:68:7b:42:e3:23:e8:44:3a:df: e3:5d:3d:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq07wLbXZr4Q9rlVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YmYxMjkxMDYtNmNhNi00Njg5LWI0MDgtN2IxYTYyYmJiZjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd+ej8kePLAOjso9rl7lAf+Yd0dRLpij/yec enli5oTuQ3mW9Mo3JqmR5EDfHSlIrPRPQpYm5rhT4OpEC7v2UF1SiwqSdPWDwB3t O02BESeL24/l93DANOiDVRg16mB+ewD8pX275TrO+ebASwBh0A+oQqo0w1wW+tmv xzX+LrmbOQvCpc6+csPH9W4klsxQTIIBPmtcnNOQoSy5gvqjyPJn6h+5tIjhMfJi uq9uylkHmNhekdJL6mQ1SxoCuAmyM2Foimf415+1XtPwQwiCAZXIOl8iFwhPaFrM tRDftQR8S/c4sN02Ix8WUfO2a0aDbh9HV/imalVdOrAByEmS7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqRpNCVsL76hxZKFAz98E+zEP8XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2RlNTZjNTAtMGRmOS0z ZDVjLTgyNDItOGUzZTljNjRlOWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADROC0ESdYxcRG0sWGZGiEohckhh5tY1fqaryPwK5LHu51Fiq8SduF/e iL9qc6e2uZU9T1qqJmh9YcoKMToMdmkq9+LMA/OQ/6X8qRWM3bl8f5D1qJTCS1my 3Kc/N61qQ391eI+AuVf+n9qqMzTytdR8WhobvQC2ayQadwN04CCKlWi7dfBLelGC zldM8IVWH+tFF5cPjNfALfgtlUSi0PhoHoLbd5555UhErT7gC9hZQRTg0pS75r6h 6SGDxPL1UoaDYJdTX4jPkBobeFrZUBANlxNlRH38uVbX1fPVdVsHf7zQFJXemYIU iMW1w13s3w8jxGh7QuMj6EQ63+NdPVg= -----END CERTIFICATE-----Generated at Thu Aug 7 03:22:02 2025 by rpki-client