$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ba12e8b-1ba3-35cf-a9de-eaacfb5a1e03.roa File: 8ba12e8b-1ba3-35cf-a9de-eaacfb5a1e03.roa (raw, json) Hash identifier: gaxZAhmYA++EECZyd5c2WvFkHC/nSLfw3v3M+ZUK2m0= Subject key identifier: 21:FB:A3:78:5E:36:2E:34:6E:36:C6:F3:F9:F7:59:3A:A0:0E:22:AD Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D5243C2D386B5823EADDEA8C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ba12e8b-1ba3-35cf-a9de-eaacfb5a1e03.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 30036 IP address blocks: 97.64.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:c2:d3:86:b5:82:3e:ad:de:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=8c953022-e26d-46c8-9180-5096d72a2e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5d:9e:7c:54:b2:f2:6d:7d:ab:20:77:f5:33: f1:ae:b1:d8:d6:c6:eb:61:cf:cd:65:7a:15:cd:b1: 9c:41:5a:67:fc:98:85:d3:ed:1c:9f:75:09:a1:e3: 47:00:b9:6c:74:f9:be:3f:e4:9e:08:3c:c2:64:ee: 03:0a:af:81:30:56:23:fa:24:1e:30:3f:8e:05:75: de:f6:c6:b5:9f:94:01:7d:6e:e0:32:f8:1a:fa:34: f9:92:bb:1e:47:59:82:7c:a4:ef:a6:8c:e9:21:1b: 13:35:fc:e9:8d:f5:80:0d:8f:6b:51:b3:f7:03:1a: 26:f5:10:1d:ba:24:b7:b4:5d:ad:d1:70:f6:23:f6: 5f:e5:6b:ff:e5:9d:f3:b8:7b:a0:72:80:4d:67:70: b8:31:fb:62:8c:6a:b2:9f:7c:87:68:47:56:89:bb: e3:45:76:b2:04:fe:6d:5c:dc:6d:6c:f6:76:14:f8: 77:ae:99:e7:b4:d7:cc:5f:86:0e:46:58:69:28:2f: 4d:89:a1:de:15:0f:6d:80:ea:18:7b:ae:b5:d2:a7: e5:30:11:19:f9:d0:29:25:82:a4:9e:a9:c9:d6:34: 5c:2b:44:de:83:ef:b2:c2:a8:94:f2:d4:41:88:21: af:5f:54:72:f0:bd:6a:dc:82:ba:c9:47:c7:1c:19: 3d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FB:A3:78:5E:36:2E:34:6E:36:C6:F3:F9:F7:59:3A:A0:0E:22:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ba12e8b-1ba3-35cf-a9de-eaacfb5a1e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d7:36:75:75:02:df:27:4a:42:69:63:98:93:4b:4d:27:e5: de:de:7d:2b:b0:d6:ea:20:e2:aa:6e:c5:69:f5:f2:6a:5c:a7: ad:09:86:42:12:33:c1:14:2b:5c:97:01:12:c6:ef:6a:12:ba: 3e:c0:c7:a5:09:ae:0e:d1:da:08:c1:ad:de:2a:99:c9:2d:0a: bc:24:39:f7:35:fc:46:8f:fa:dc:e1:77:91:94:2a:b4:0a:64: f2:12:d6:45:ce:3e:fc:d4:e9:ab:91:6f:e3:ff:1b:a9:d1:f8: 25:d0:ba:29:df:5f:1b:08:63:1c:21:1e:9a:0e:15:a4:66:b3: f1:c2:16:1f:a7:d4:b4:cf:27:dc:56:41:2b:e2:26:de:2a:e6: 7d:0b:2f:af:f4:f1:f7:07:ef:de:bb:69:48:c7:64:3a:c2:53: 37:f7:98:6d:59:3c:49:b5:44:78:36:d5:4e:93:dd:43:3d:d8: 7f:76:b1:f8:cb:ec:37:be:76:e5:4c:91:fc:8c:00:1a:61:ac: 78:93:8f:02:bd:26:a6:09:2d:11:67:99:7a:d1:7d:98:9c:34: c9:05:10:10:29:6f:ff:19:8c:c6:f5:6c:8b:ec:9a:d4:23:54: cb:a2:52:8a:87:85:17:33:e3:f7:5c:f2:89:7d:3d:03:1d:7d: fb:bc:c1:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ8LThrWCPq3eqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk OGM5NTMwMjItZTI2ZC00NmM4LTkxODAtNTA5NmQ3MmEyZTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl2efFSy8m19qyB39TPxrrHY1sbrYc/NZXoV zbGcQVpn/JiF0+0cn3UJoeNHALlsdPm+P+SeCDzCZO4DCq+BMFYj+iQeMD+OBXXe 9sa1n5QBfW7gMvga+jT5krseR1mCfKTvpozpIRsTNfzpjfWADY9rUbP3Axom9RAd uiS3tF2t0XD2I/Zf5Wv/5Z3zuHugcoBNZ3C4MftijGqyn3yHaEdWibvjRXayBP5t XNxtbPZ2FPh3rpnntNfMX4YORlhpKC9NiaHeFQ9tgOoYe6610qflMBEZ+dApJYKk nqnJ1jRcK0Teg++ywqiU8tRBiCGvX1Ry8L1q3IK6yUfHHBk9AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCH7o3heNi40bjbG8/n3WTqgDiKtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGJhMTJlOGItMWJhMy0z NWNmLWE5ZGUtZWFhY2ZiNWExZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHXNnV1At8nSkJpY5iTS00n5d7efSuw1uog4qpuxWn18mpcp60JhkIS M8EUK1yXARLG72oSuj7Ax6UJrg7R2gjBrd4qmcktCrwkOfc1/EaP+tzhd5GUKrQK ZPIS1kXOPvzU6auRb+P/G6nR+CXQuinfXxsIYxwhHpoOFaRms/HCFh+n1LTPJ9xW QSviJt4q5n0LL6/08fcH7967aUjHZDrCUzf3mG1ZPEm1RHg21U6T3UM92H92sfjL 7De+duVMkfyMABphrHiTjwK9JqYJLRFnmXrRfZicNMkFEBApb/8ZjMb1bIvsmtQj VMuiUoqHhRcz4/dc8ol9PQMdffu8wck= -----END CERTIFICATE-----Generated at Fri Apr 17 11:40:13 2026 by rpki-client