$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/93f91237-eda5-3bf5-bd92-72ef1498e276.roa File: 93f91237-eda5-3bf5-bd92-72ef1498e276.roa (raw, json) Hash identifier: iJfzlFqWZHwA8DIi0qFokEndn22a6EvyrIzXfQ5m+EA= Subject key identifier: 67:50:D4:48:33:00:6D:A1:F7:34:7D:96:B9:41:0F:18:DC:D4:74:90 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AB220BA0A07BDB8BA615EAE80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/93f91237-eda5-3bf5-bd92-72ef1498e276.roa Signing time: Thu 31 Jul 2025 01:00:32 +0000 ROA not before: Thu 31 Jul 2025 01:00:32 +0000 ROA not after: Wed 29 Oct 2025 01:00:32 +0000 asID: 30036 IP address blocks: 97.64.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:20:ba:0a:07:bd:b8:ba:61:5e:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jul 31 01:00:32 2025 GMT Not After : Oct 29 01:00:32 2025 GMT Subject: CN=7211bf11-ca20-41b2-886c-1b534c8d4f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c6:e4:2d:6a:74:67:4b:51:c3:e4:c1:e3:6b: 26:72:63:87:9b:c9:81:b0:e2:92:3a:00:fe:09:d4: 3a:66:5b:0e:44:9e:22:bd:59:61:fd:83:6f:c8:39: 2f:e3:8e:ef:76:8c:d7:d5:9d:0a:53:d8:c9:55:71: 3d:32:ad:b4:67:d0:c2:d9:d7:fd:d8:d6:b9:da:d7: b8:e5:58:ae:42:c7:3d:60:a7:5e:cd:8d:da:a1:2c: 87:ef:53:f8:25:e9:88:82:3e:47:c3:24:5f:b6:4d: 15:7f:bc:5d:91:d2:ab:9f:6d:6c:05:0b:9a:e5:dc: 60:b0:9a:7d:ab:5b:d7:99:5c:31:a5:a0:f9:4a:a8: db:93:87:73:60:27:bb:69:18:54:1f:c9:fa:d5:92: 05:61:29:cc:8d:75:a3:2e:47:d3:43:cf:8f:60:80: d7:54:bb:46:09:a0:10:e3:58:f3:cd:9b:eb:48:41: 89:f6:8d:64:e2:1d:f9:c9:a8:3a:7c:65:04:33:83: 30:91:7b:d7:a6:fe:a7:e7:dd:11:99:3a:bf:e8:4b: 73:26:bb:ce:66:e5:3a:e3:a1:91:3f:0c:dd:89:31: 6d:7a:1c:31:84:fc:f1:10:7d:ea:e2:b6:e4:d1:c8: 93:f7:d4:3b:a7:f3:da:73:85:3c:54:eb:2a:e1:9c: 7c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:50:D4:48:33:00:6D:A1:F7:34:7D:96:B9:41:0F:18:DC:D4:74:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/93f91237-eda5-3bf5-bd92-72ef1498e276.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:ab:f3:21:59:fc:53:43:b2:62:64:1f:66:53:f2:6c:b8:02: ff:a0:dc:98:46:2e:3c:a6:87:5c:ce:39:48:b3:cb:48:fd:10: f4:6e:45:4c:14:3f:7f:36:39:b2:42:c5:52:26:1e:06:85:07: d3:68:7c:37:54:a3:bc:0a:4c:b9:eb:db:1d:9d:b1:e8:8d:25: bc:79:33:c0:77:38:79:b7:52:8e:00:ee:97:42:d3:2f:83:e8: 22:70:aa:c7:18:b6:d3:b3:32:5e:66:b4:bf:b1:02:2f:f9:fa: 8b:a4:d4:d5:8a:81:ed:e6:b1:20:3b:99:5d:5d:47:1a:db:1f: 40:fc:b1:67:7b:9d:3d:da:58:93:ba:12:80:a2:16:f8:bd:c4: 06:80:66:c3:67:9a:27:9e:aa:8d:b5:9c:91:4e:51:06:12:e5: a8:aa:ad:60:00:53:6f:de:21:65:28:47:f3:3f:9e:85:62:a4: 1b:b8:f2:34:78:22:65:c5:96:83:3e:9f:23:e2:51:21:f0:0d: 37:e0:15:1e:79:77:a2:73:1c:07:c9:59:f3:ef:0c:de:01:c2: 3c:84:77:1c:89:ff:69:aa:cf:e7:4d:b2:5d:ca:86:4b:c5:c9: de:30:13:e7:37:6e:27:d6:4d:26:b4:2d:3f:bf:85:db:13:f3: 5d:b8:27:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyILoKB724umFeroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk NzIxMWJmMTEtY2EyMC00MWIyLTg4NmMtMWI1MzRjOGQ0ZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosbkLWp0Z0tRw+TB42smcmOHm8mBsOKSOgD+ CdQ6ZlsORJ4ivVlh/YNvyDkv447vdozX1Z0KU9jJVXE9Mq20Z9DC2df92Na52te4 5ViuQsc9YKdezY3aoSyH71P4JemIgj5HwyRftk0Vf7xdkdKrn21sBQua5dxgsJp9 q1vXmVwxpaD5Sqjbk4dzYCe7aRhUH8n61ZIFYSnMjXWjLkfTQ8+PYIDXVLtGCaAQ 41jzzZvrSEGJ9o1k4h35yag6fGUEM4MwkXvXpv6n590RmTq/6EtzJrvOZuU646GR PwzdiTFtehwxhPzxEH3q4rbk0ciT99Q7p/Pac4U8VOsq4Zx8GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdQ1EgzAG2h9zR9lrlBDxjc1HSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTNmOTEyMzctZWRhNS0z YmY1LWJkOTItNzJlZjE0OThlMjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+r8yFZ/FNDsmJkH2ZT8my4Av+g3JhGLjymh1zOOUizy0j9EPRuRUwU P382ObJCxVImHgaFB9NofDdUo7wKTLnr2x2dseiNJbx5M8B3OHm3Uo4A7pdC0y+D 6CJwqscYttOzMl5mtL+xAi/5+ouk1NWKge3msSA7mV1dRxrbH0D8sWd7nT3aWJO6 EoCiFvi9xAaAZsNnmieeqo21nJFOUQYS5aiqrWAAU2/eIWUoR/M/noVipBu48jR4 ImXFloM+nyPiUSHwDTfgFR55d6JzHAfJWfPvDN4BwjyEdxyJ/2mqz+dNsl3KhkvF yd4wE+c3bifWTSa0LT+/hdsT8124JxA= -----END CERTIFICATE-----Generated at Thu Aug 7 01:19:09 2025 by rpki-client