$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/95e399c5-d3c0-3740-baca-1db3bc70002a.roa File: 95e399c5-d3c0-3740-baca-1db3bc70002a.roa (raw, json) Hash identifier: frNHGXg1QeEnZD30AkjB8+m1K+XaJ0ccV53HmpOh9Mo= Subject key identifier: 09:AA:24:DC:45:76:EA:EA:B6:90:F1:5D:F7:F2:FD:5F:DF:33:C1:C7 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D55BA3E399CAC0A43C6AB88C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/95e399c5-d3c0-3740-baca-1db3bc70002a.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 30036 IP address blocks: 97.64.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:3e:39:9c:ac:0a:43:c6:ab:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=8b9ae5bc-3cd0-48d9-8002-3782abd6050b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:38:99:12:0a:b8:36:08:24:7d:de:85:d5:b4: 79:2e:35:9c:f8:c6:43:45:55:94:b2:a4:a7:92:91: 84:07:06:40:3b:1b:b1:6b:be:89:4c:2b:9b:bd:68: 03:6d:79:52:04:d0:23:63:52:d9:29:00:50:9d:98: dc:0a:43:18:0a:c8:27:f1:ed:08:3a:74:c3:d2:a7: a2:fe:f8:74:86:58:e4:f0:9b:c6:84:19:d7:f5:b8: 1e:c0:45:42:16:b8:01:57:5b:20:67:24:82:96:6b: 2e:66:1b:35:f3:8f:09:c6:93:f2:df:19:7c:fe:d7: 43:e2:15:06:87:8a:e0:46:e2:81:49:44:07:04:8d: 21:c5:58:34:99:a0:27:4c:19:90:4f:1f:56:90:00: 45:c2:74:64:fc:57:cc:07:2c:2b:83:df:6a:5a:21: ac:76:69:19:53:d4:ea:a1:02:fc:7a:ca:c4:28:4d: f8:c8:9e:09:ec:eb:b8:cc:12:e3:0a:35:ca:c2:ec: b6:2a:ee:d3:fe:32:d3:69:19:50:e7:23:0f:16:82: 02:fd:41:4b:9d:b7:37:26:f8:da:42:01:e2:b9:01: ec:e5:21:23:d4:84:28:36:3b:b4:83:10:1b:4d:45: 04:f3:1d:ca:1b:e1:ef:85:01:3a:b9:c2:13:c3:ff: b0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AA:24:DC:45:76:EA:EA:B6:90:F1:5D:F7:F2:FD:5F:DF:33:C1:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/95e399c5-d3c0-3740-baca-1db3bc70002a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:fd:aa:b4:89:10:04:5c:52:dc:a9:40:a6:f9:12:1d:b4:fb: da:4d:d2:d2:5a:b6:e6:f2:37:20:5d:6a:0f:b2:f9:0e:52:44: 3d:4b:02:c7:79:f0:16:d9:c5:6f:2c:c4:25:94:48:f9:d0:3b: 66:ab:d9:17:da:b0:28:65:ee:e4:9c:1d:ac:62:2f:b1:d0:e0: 01:c5:4f:5f:ab:e1:d9:94:20:e8:3f:f3:9d:7d:6b:9e:b2:4a: eb:24:b4:0d:46:ea:d7:56:f9:16:cc:ea:bf:09:2e:64:78:d4: 5e:42:55:54:c6:b2:1d:34:15:0e:c6:d5:ae:c4:db:87:7d:fa: 04:35:18:ae:55:75:cc:5d:02:13:6f:76:4e:6c:9b:8e:65:e5: 2e:7a:ad:70:65:b5:f8:c1:ac:f6:7a:a3:4b:62:42:c8:0c:44: 30:90:04:31:8a:40:51:e4:3c:a7:31:a9:4e:2c:9b:ab:03:02: a3:0c:c7:6e:04:27:5c:8c:b0:62:27:91:66:8b:f5:02:d6:9e: 3c:26:6c:c8:ea:c5:bf:9b:e0:c8:f7:54:9b:b3:d0:bc:ef:cc: 60:dd:a1:72:8f:59:27:88:51:40:35:12:52:a0:88:2b:c6:1f: 1e:08:60:c6:73:06:51:8a:46:63:fa:13:f0:1e:89:86:21:17: 6d:74:da:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuj45nKwKQ8ariMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk OGI5YWU1YmMtM2NkMC00OGQ5LTgwMDItMzc4MmFiZDYwNTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojiZEgq4Nggkfd6F1bR5LjWc+MZDRVWUsqSn kpGEBwZAOxuxa76JTCubvWgDbXlSBNAjY1LZKQBQnZjcCkMYCsgn8e0IOnTD0qei /vh0hljk8JvGhBnX9bgewEVCFrgBV1sgZySClmsuZhs1848JxpPy3xl8/tdD4hUG h4rgRuKBSUQHBI0hxVg0maAnTBmQTx9WkABFwnRk/FfMBywrg99qWiGsdmkZU9Tq oQL8esrEKE34yJ4J7Ou4zBLjCjXKwuy2Ku7T/jLTaRlQ5yMPFoIC/UFLnbc3Jvja QgHiuQHs5SEj1IQoNju0gxAbTUUE8x3KG+HvhQE6ucITw/+wJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmqJNxFdurqtpDxXffy/V/fM8HHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTVlMzk5YzUtZDNjMC0z NzQwLWJhY2EtMWRiM2JjNzAwMDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEX9qrSJEARcUtypQKb5Eh20+9pN0tJatubyNyBdag+y+Q5SRD1LAsd5 8BbZxW8sxCWUSPnQO2ar2RfasChl7uScHaxiL7HQ4AHFT1+r4dmUIOg/8519a56y SusktA1G6tdW+RbM6r8JLmR41F5CVVTGsh00FQ7G1a7E24d9+gQ1GK5VdcxdAhNv dk5sm45l5S56rXBltfjBrPZ6o0tiQsgMRDCQBDGKQFHkPKcxqU4sm6sDAqMMx24E J1yMsGInkWaL9QLWnjwmbMjqxb+b4Mj3VJuz0LzvzGDdoXKPWSeIUUA1ElKgiCvG Hx4IYMZzBlGKRmP6E/AeiYYhF2102qI= -----END CERTIFICATE-----Generated at Fri Apr 17 12:22:14 2026 by rpki-client