$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3fd8fde-2788-3cf7-888e-517625ab1167.roa File: a3fd8fde-2788-3cf7-888e-517625ab1167.roa (raw, json) Hash identifier: 6WPHbE7jvUPrdYXGT4OQkIqUpoPqCU2LPSbPd6ILYaY= Subject key identifier: 7E:38:70:F2:B4:D5:2A:43:D6:DF:D4:04:87:39:27:1A:B4:F0:BC:E5 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B95A78859E91F45215687D380 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3fd8fde-2788-3cf7-888e-517625ab1167.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 97.64.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:88:59:e9:1f:45:21:56:87:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=86b201cc-215f-43f8-af92-8b419865155a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1f:ad:fc:2e:6d:8c:0f:fa:d7:e0:e4:b8:08: be:78:73:5c:66:54:33:5e:fd:8e:87:54:56:b6:fd: 7b:2b:f4:f2:75:4c:45:ae:40:18:1b:1f:74:1b:4b: 35:1c:31:5b:96:03:65:57:b1:ef:cf:d7:ac:d6:e6: 98:5e:85:1f:87:73:3e:d4:03:28:57:86:5c:0e:3f: 13:9a:36:93:26:4c:97:a5:80:19:a7:8d:6f:d9:c9: 14:eb:25:0d:a3:53:8f:28:98:aa:71:00:db:cc:b1: fb:e2:bc:59:22:a8:69:b5:58:9b:87:0b:0d:bd:65: 21:a0:7a:c1:f7:5c:16:af:08:a1:48:ec:08:e0:11: 80:b5:17:29:65:57:cb:f1:91:f0:97:5d:35:2a:4b: 6d:18:5d:25:1c:bf:f9:7e:57:0a:10:44:d5:08:12: b4:1a:56:c4:1d:1e:b0:6e:25:99:a3:7f:9f:8f:81: e4:fd:ca:9f:76:41:d0:d2:a5:f4:a0:dd:56:91:98: 25:3b:04:45:d9:3a:ec:16:9f:af:73:af:d3:c9:6c: cd:19:12:9d:b4:8d:bd:6b:01:69:4b:f6:b3:64:86: 03:4c:7a:32:6e:d5:c9:07:e4:37:f0:c0:1d:54:f0: c3:74:21:42:a9:da:63:02:19:93:23:3c:3b:05:83: 9f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:38:70:F2:B4:D5:2A:43:D6:DF:D4:04:87:39:27:1A:B4:F0:BC:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a3fd8fde-2788-3cf7-888e-517625ab1167.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:0c:06:36:7d:ce:5d:8a:90:26:cc:65:7d:1a:5d:e8:56:51: 3e:37:4c:ef:85:50:b4:b2:38:62:d9:b7:14:a3:4c:21:b9:1d: d8:ea:01:37:98:e6:d3:41:a7:52:69:32:39:e7:9c:0f:bf:97: de:e3:e2:8c:18:6d:46:5a:67:78:93:59:a2:74:f7:2c:48:a6: 12:af:58:dc:88:48:16:83:43:82:3a:ab:b0:f1:61:42:03:40: 4b:bf:09:91:27:a9:fc:f0:c4:ae:33:75:7c:cd:b4:eb:f6:37: 20:3a:e4:7b:c7:82:8b:57:bd:0d:26:54:4a:8c:97:de:98:6b: 9f:dd:33:92:e6:10:29:7e:7a:bd:55:07:d8:fe:14:a9:79:6f: c4:85:53:98:a9:d4:b5:9a:1c:59:e5:75:e7:d7:5f:ca:4b:f6: 4c:cb:f4:3d:04:1d:04:1d:a5:70:2a:32:4a:29:27:1f:95:d4: 5d:aa:56:79:d5:83:5a:6b:8c:8c:2b:4e:66:15:18:85:f1:e3: c5:e2:c9:b9:3b:b8:99:ab:01:31:66:b1:63:78:c9:c4:d9:25: 44:0f:84:ba:1e:d6:33:9b:13:82:56:4c:70:d0:2a:63:b6:34: b4:38:a4:36:97:0c:17:83:c9:27:34:01:35:06:cc:a6:26:09: f4:b1:a7:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4hZ6R9FIVaH04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ODZiMjAxY2MtMjE1Zi00M2Y4LWFmOTItOGI0MTk4NjUxNTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB+t/C5tjA/61+DkuAi+eHNcZlQzXv2Oh1RW tv17K/TydUxFrkAYGx90G0s1HDFblgNlV7Hvz9es1uaYXoUfh3M+1AMoV4ZcDj8T mjaTJkyXpYAZp41v2ckU6yUNo1OPKJiqcQDbzLH74rxZIqhptVibhwsNvWUhoHrB 91wWrwihSOwI4BGAtRcpZVfL8ZHwl101KkttGF0lHL/5flcKEETVCBK0GlbEHR6w biWZo3+fj4Hk/cqfdkHQ0qX0oN1WkZglOwRF2TrsFp+vc6/TyWzNGRKdtI29awFp S/azZIYDTHoybtXJB+Q38MAdVPDDdCFCqdpjAhmTIzw7BYOfGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH44cPK01SpD1t/UBIc5Jxq08LzlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTNmZDhmZGUtMjc4OC0z Y2Y3LTg4OGUtNTE3NjI1YWIxMTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcMBjZ9zl2KkCbMZX0aXehWUT43TO+FULSyOGLZtxSjTCG5HdjqATeY 5tNBp1JpMjnnnA+/l97j4owYbUZaZ3iTWaJ09yxIphKvWNyISBaDQ4I6q7DxYUID QEu/CZEnqfzwxK4zdXzNtOv2NyA65HvHgotXvQ0mVEqMl96Ya5/dM5LmECl+er1V B9j+FKl5b8SFU5ip1LWaHFnldefXX8pL9kzL9D0EHQQdpXAqMkopJx+V1F2qVnnV g1prjIwrTmYVGIXx48Xiybk7uJmrATFmsWN4ycTZJUQPhLoe1jObE4JWTHDQKmO2 NLQ4pDaXDBeDySc0ATUGzKYmCfSxpxM= -----END CERTIFICATE-----Generated at Wed Nov 5 00:14:11 2025 by rpki-client