$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/847eef0b-5e6f-3b79-b566-76f0bf987985.roa File: 847eef0b-5e6f-3b79-b566-76f0bf987985.roa (raw, json) Hash identifier: 2iEW1AfkaQtVMXCwCrZind0PXQ+hwT4X6iV1dOVprHw= Subject key identifier: 62:3C:18:86:0C:63:3D:F5:AB:EE:06:90:C8:D7:98:91:B0:7E:65:32 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B95A787AC6D054EA7EBA84C00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/847eef0b-5e6f-3b79-b566-76f0bf987985.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 97.64.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:87:ac:6d:05:4e:a7:eb:a8:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=76dc1310-b4e6-4a05-8dfb-09463162c68b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bd:d9:e6:2d:20:5d:3c:fc:65:5b:f6:46:cf: 0b:ba:e6:9c:69:76:a7:f5:42:96:29:e2:45:76:c5: b1:f9:90:37:53:91:a3:2e:ae:fe:1b:59:7d:e9:cf: e6:5a:e3:f3:72:20:2a:7c:98:5b:68:de:14:da:65: f1:04:fb:e3:3c:ff:0f:c8:27:06:69:32:fc:2d:10: a2:c0:3e:45:33:36:62:0d:2a:f3:c4:5f:ad:c3:36: ed:39:a5:73:8c:94:ef:eb:99:e8:6c:e0:3a:8b:42: 44:53:a1:9b:e5:04:fb:29:25:4a:cb:43:2c:df:40: d4:46:b7:bb:8b:2e:84:8d:c9:91:15:19:31:37:36: b4:fa:83:7b:79:62:16:f8:8e:d1:b6:4c:3e:d0:b4: ac:bd:a7:b9:50:c1:b2:44:c4:e2:e8:f5:d1:8d:7b: 36:b4:d5:da:07:54:5d:40:11:f5:b3:5f:f3:e4:64: 0f:77:a3:d9:0e:19:7d:0d:67:22:ab:00:35:93:c7: a6:72:b8:f0:b0:f5:f4:22:06:93:55:cd:9b:ee:d3: 85:fb:dd:59:9d:4b:b4:64:07:68:63:e6:22:c3:ce: 7c:ac:82:d1:e3:6c:fb:06:bf:0f:9d:f6:d8:d0:f9: c5:35:f1:d8:26:db:9a:22:74:7f:8d:b2:ed:10:10: 58:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3C:18:86:0C:63:3D:F5:AB:EE:06:90:C8:D7:98:91:B0:7E:65:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/847eef0b-5e6f-3b79-b566-76f0bf987985.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:da:5f:93:17:34:bc:fd:71:4b:95:16:9f:13:3a:5c:bb:9d: 88:21:bd:34:0d:d1:c5:39:c4:8b:97:c2:c9:71:98:b2:5c:54: b7:dd:e9:f4:76:92:0d:86:97:c6:75:3c:b0:58:50:ce:25:79: 32:9d:04:11:a7:76:49:31:c4:a5:cd:ce:83:b0:31:4e:94:c3: 24:f9:6b:5e:e9:2e:8c:a4:c5:67:f1:6d:f0:e2:7b:80:5b:72: 20:a3:79:4f:f5:b0:c6:42:74:90:65:22:3e:1f:fa:f9:1a:f1: 84:1e:fa:fe:42:ba:4d:43:bf:64:18:59:8a:c8:d7:f8:22:f7: 9a:75:67:e5:97:11:f7:01:24:7f:83:7c:08:36:97:ed:76:32: 6b:3b:f8:1c:a9:97:32:cf:a7:11:2c:2b:7f:c1:47:fc:24:49: 80:88:6f:6d:0f:54:60:5a:95:60:17:96:3c:b4:1d:b0:c0:64: 8f:92:05:b7:be:fc:36:04:e6:94:75:60:7c:4d:cd:1f:0f:15: fc:de:2f:b0:fa:8e:ff:e6:18:da:f5:cb:8c:09:c9:fd:c4:5a: c4:75:dd:33:41:ab:77:2f:1f:b7:c5:5f:fd:0d:80:be:1a:a3: 8c:98:1e:56:7e:26:e8:d2:c8:08:b6:74:be:f5:8e:db:60:0d: 07:a4:a4:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4esbQVOp+uoTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NzZkYzEzMTAtYjRlNi00YTA1LThkZmItMDk0NjMxNjJjNjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL3Z5i0gXTz8ZVv2Rs8LuuacaXan9UKWKeJF dsWx+ZA3U5GjLq7+G1l96c/mWuPzciAqfJhbaN4U2mXxBPvjPP8PyCcGaTL8LRCi wD5FMzZiDSrzxF+twzbtOaVzjJTv65nobOA6i0JEU6Gb5QT7KSVKy0Ms30DURre7 iy6EjcmRFRkxNza0+oN7eWIW+I7Rtkw+0LSsvae5UMGyRMTi6PXRjXs2tNXaB1Rd QBH1s1/z5GQPd6PZDhl9DWciqwA1k8emcrjwsPX0IgaTVc2b7tOF+91ZnUu0ZAdo Y+Yiw858rILR42z7Br8PnfbY0PnFNfHYJtuaInR/jbLtEBBYawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGI8GIYMYz31q+4GkMjXmJGwfmUyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODQ3ZWVmMGItNWU2Zi0z Yjc5LWI1NjYtNzZmMGJmOTg3OTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHraX5MXNLz9cUuVFp8TOly7nYghvTQN0cU5xIuXwslxmLJcVLfd6fR2 kg2Gl8Z1PLBYUM4leTKdBBGndkkxxKXNzoOwMU6UwyT5a17pLoykxWfxbfDie4Bb ciCjeU/1sMZCdJBlIj4f+vka8YQe+v5Cuk1Dv2QYWYrI1/gi95p1Z+WXEfcBJH+D fAg2l+12Mms7+ByplzLPpxEsK3/BR/wkSYCIb20PVGBalWAXljy0HbDAZI+SBbe+ /DYE5pR1YHxNzR8PFfzeL7D6jv/mGNr1y4wJyf3EWsR13TNBq3cvH7fFX/0NgL4a o4yYHlZ+JujSyAi2dL71jttgDQekpLQ= -----END CERTIFICATE-----Generated at Wed Nov 5 16:21:15 2025 by rpki-client