$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/489befd5-0a00-341e-967c-ec49a0a2b329.roa File: 489befd5-0a00-341e-967c-ec49a0a2b329.roa (raw, json) Hash identifier: M344HvCAy1BDg4NuRMz3iCnedTxndkmM5gBP18UCWf4= Subject key identifier: 78:B9:39:8C:08:46:15:6C:55:37:51:C4:CE:42:8C:FD:14:12:6A:A4 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B92DD8C16F49AA44C01A974A8 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/489befd5-0a00-341e-967c-ec49a0a2b329.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 97.64.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:8c:16:f4:9a:a4:4c:01:a9:74:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=9ca7f597-8573-4f59-9966-ff898abfc132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:61:e5:d5:27:39:9d:fb:78:66:e2:e3:b2:1b: 7b:ca:57:72:b7:21:10:9b:1a:42:d0:95:cc:c8:ca: d8:3a:fe:cd:e7:65:2b:08:5f:9f:27:d5:cf:22:76: 40:2c:ee:e7:26:b5:48:88:1b:2f:dd:96:39:75:a2: 8f:15:2d:1d:91:28:68:4e:e2:1b:0d:19:fa:e3:a6: d4:c2:33:87:c9:a2:d2:aa:91:0e:6a:69:96:ad:ce: 45:49:ea:f6:26:29:e8:b6:26:d2:61:d9:10:5c:30: 01:66:08:b3:3b:b6:55:3b:97:c8:4a:f6:07:de:cd: 94:11:fd:3c:66:e8:fe:ad:03:75:a8:e3:2d:58:74: 05:20:f0:d7:1f:42:46:68:1f:87:4d:e7:b2:ec:a3: 20:95:10:cd:c7:4c:bc:0a:0c:47:90:20:aa:6f:e4: c6:1b:4c:3f:e0:85:48:de:86:63:b1:ba:c3:c2:a4: cc:5f:02:08:38:49:1a:3d:94:04:54:4a:23:59:86: 32:ee:f2:c8:3a:af:cd:d4:46:e0:4f:56:8c:a2:01: ea:f1:ed:4b:ac:b2:91:74:e2:94:ae:42:d6:43:94: 1b:54:43:23:da:38:67:96:a5:8f:98:18:7c:35:a2: ad:ca:1b:f7:25:e1:8a:3a:df:b5:ca:c0:81:37:31: d4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B9:39:8C:08:46:15:6C:55:37:51:C4:CE:42:8C:FD:14:12:6A:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/489befd5-0a00-341e-967c-ec49a0a2b329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:0c:be:57:12:f6:52:a7:20:45:a5:4a:45:23:ae:0d:53:24: a6:45:73:44:af:43:f6:c3:93:fe:69:d4:60:34:f1:20:03:b1: b0:04:9d:72:ba:7a:78:27:7a:34:9f:bf:d8:77:db:9e:7a:3f: e8:8a:35:a4:ec:38:c6:8b:2f:9b:f7:7c:9a:84:a6:6f:a8:b1: 72:37:83:96:2e:1a:2a:b1:be:2f:d3:da:97:ab:72:91:b2:08: be:b2:ef:20:e3:eb:d4:29:23:38:5b:d4:68:53:7b:91:88:41: f9:30:52:f2:f1:a8:73:18:ff:d6:d5:85:da:b1:e3:63:38:8f: ab:a0:70:fc:2e:2d:d1:cf:60:11:a2:63:82:d8:ae:75:ff:c6: 36:52:67:1d:23:3e:90:2d:bb:15:5f:2d:05:b4:16:52:69:ce: b5:4e:22:d8:9f:d8:ca:92:3e:45:39:39:1c:e7:b2:8c:47:ad: 46:3f:aa:d6:a4:f6:79:b6:e5:b0:96:fd:9a:93:90:63:1c:3d: 25:fd:e3:2e:61:15:df:ef:61:f9:3f:52:6f:17:ef:08:28:e8: 02:a2:5f:88:44:a1:f2:2c:3a:5d:78:2d:4e:2e:b9:a2:de:e9: b4:5e:e4:31:48:13:27:77:6e:6b:b3:75:db:68:88:09:e2:bd: 6b:07:80:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3YwW9JqkTAGpdKgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk OWNhN2Y1OTctODU3My00ZjU5LTk5NjYtZmY4OThhYmZjMTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWHl1Sc5nft4ZuLjsht7yldytyEQmxpC0JXM yMrYOv7N52UrCF+fJ9XPInZALO7nJrVIiBsv3ZY5daKPFS0dkShoTuIbDRn646bU wjOHyaLSqpEOammWrc5FSer2JinotibSYdkQXDABZgizO7ZVO5fISvYH3s2UEf08 Zuj+rQN1qOMtWHQFIPDXH0JGaB+HTeey7KMglRDNx0y8CgxHkCCqb+TGG0w/4IVI 3oZjsbrDwqTMXwIIOEkaPZQEVEojWYYy7vLIOq/N1EbgT1aMogHq8e1LrLKRdOKU rkLWQ5QbVEMj2jhnlqWPmBh8NaKtyhv3JeGKOt+1ysCBNzHUowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHi5OYwIRhVsVTdRxM5CjP0UEmqkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDg5YmVmZDUtMGEwMC0z NDFlLTk2N2MtZWM0OWEwYTJiMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkMvlcS9lKnIEWlSkUjrg1TJKZFc0SvQ/bDk/5p1GA08SADsbAEnXK6 engnejSfv9h32556P+iKNaTsOMaLL5v3fJqEpm+osXI3g5YuGiqxvi/T2percpGy CL6y7yDj69QpIzhb1GhTe5GIQfkwUvLxqHMY/9bVhdqx42M4j6ugcPwuLdHPYBGi Y4LYrnX/xjZSZx0jPpAtuxVfLQW0FlJpzrVOItif2MqSPkU5ORznsoxHrUY/qtak 9nm25bCW/ZqTkGMcPSX94y5hFd/vYfk/Um8X7wgo6AKiX4hEofIsOl14LU4uuaLe 6bRe5DFIEyd3bmuzddtoiAnivWsHgPg= -----END CERTIFICATE-----Generated at Wed Nov 5 08:56:07 2025 by rpki-client