$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af3b7bb0-e922-3bf4-9766-0847af16df6b.roa File: af3b7bb0-e922-3bf4-9766-0847af16df6b.roa (raw, json) Hash identifier: pONpdiyTZRGC5udnPuAboAaw0SBN93CmABXGJC7vKO4= Subject key identifier: 45:1C:4D:53:95:36:85:48:AB:F2:0B:96:8E:C5:00:38:68:87:25:35 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D524348CC757E220FC0B03D00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af3b7bb0-e922-3bf4-9766-0847af16df6b.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 30036 IP address blocks: 97.64.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:48:cc:75:7e:22:0f:c0:b0:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=9a4d3ae6-c3ff-4cc2-977c-f4f908e8c42e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f6:e6:89:54:67:a3:bd:09:57:1a:c3:d9:f9: 72:7f:d6:01:86:3f:9c:c7:dd:90:00:a6:c5:1e:18: eb:cb:f7:5a:3a:06:c3:91:1f:1f:64:b6:24:b1:b7: a0:7b:e1:1e:a1:c4:41:48:bd:be:4e:5e:7e:f8:55: 54:8d:c7:7e:e4:ce:f9:67:08:69:a0:c1:13:47:3b: 58:e8:49:dd:42:48:a5:65:bd:92:f3:09:c9:4a:16: 21:49:53:ea:1e:5c:4d:42:38:28:70:0c:cb:ca:f7: b3:ec:3c:98:3f:73:e5:c0:39:7d:9b:3e:af:2d:6d: 83:69:65:52:6c:c8:ee:cc:06:94:f9:6d:fc:b9:0c: b5:d4:e9:8f:e3:00:1e:70:fa:45:15:d5:65:dc:ef: 96:5f:7c:97:4f:bf:d1:e6:e0:7f:e9:cb:9a:bd:f0: fa:76:9f:94:e1:39:b7:77:c0:46:a1:98:a8:9e:5b: b3:90:65:f5:f5:f5:dd:d7:c3:00:13:51:9b:b0:af: 1c:8e:51:5d:ad:02:42:bd:f1:37:f5:e3:77:63:87: 1f:ae:c6:9f:b5:84:5b:a0:81:55:55:62:fc:ef:ac: 11:6b:f3:12:19:ad:f3:fe:15:d4:f7:53:1f:0c:a3: 48:6b:60:0f:63:9b:e3:8d:90:a2:4d:bf:ac:7f:b5: 03:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1C:4D:53:95:36:85:48:AB:F2:0B:96:8E:C5:00:38:68:87:25:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/af3b7bb0-e922-3bf4-9766-0847af16df6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:d7:21:f0:2c:d3:95:34:b0:86:34:5a:bd:11:82:3f:18:fe: 67:5d:8d:61:cc:f0:ec:62:73:b1:80:06:ba:a9:c0:67:21:d3: 6d:61:c5:1d:45:c3:94:bf:f7:15:85:62:b4:2e:04:8d:49:0f: 11:bf:a0:fa:7b:8c:90:6a:95:19:64:c1:d5:4c:47:1d:74:7e: 0e:ab:fe:d4:33:f6:f3:63:47:82:14:c3:2f:c9:5c:ec:48:71: 08:a4:23:1f:80:9f:73:20:81:da:76:f5:56:20:bc:ae:17:ae: 4d:90:95:1d:a1:dd:42:e6:90:56:4f:97:4e:9e:37:67:9d:81: 71:3a:e1:7b:5b:1b:4c:20:95:1e:0e:9c:72:70:b6:7e:e3:db: 77:69:93:31:f2:75:24:71:09:89:20:30:cf:c3:8c:b3:0d:7e: 86:e9:42:f6:36:3e:ad:bd:e8:b3:6f:38:a2:7f:f8:24:7d:d2: 6b:08:55:ae:eb:ba:3d:0e:46:9d:69:c2:de:72:fe:1f:1e:92: 0f:72:d1:e5:bc:4c:93:ec:c7:e3:61:37:83:87:50:28:3d:c3: bb:fb:91:da:52:cc:ca:7d:dd:8c:1b:73:a9:75:e6:b3:99:46: 39:52:d3:ac:8a:aa:34:a3:c2:c1:01:7d:51:dd:9e:d1:79:8f: ae:11:5d:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ0jMdX4iD8CwPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk OWE0ZDNhZTYtYzNmZi00Y2MyLTk3N2MtZjRmOTA4ZThjNDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fbmiVRno70JVxrD2flyf9YBhj+cx92QAKbF Hhjry/daOgbDkR8fZLYksbege+EeocRBSL2+Tl5++FVUjcd+5M75ZwhpoMETRztY 6EndQkilZb2S8wnJShYhSVPqHlxNQjgocAzLyvez7DyYP3PlwDl9mz6vLW2DaWVS bMjuzAaU+W38uQy11OmP4wAecPpFFdVl3O+WX3yXT7/R5uB/6cuavfD6dp+U4Tm3 d8BGoZionluzkGX19fXd18MAE1GbsK8cjlFdrQJCvfE39eN3Y4cfrsaftYRboIFV VWL876wRa/MSGa3z/hXU91MfDKNIa2APY5vjjZCiTb+sf7UDbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUcTVOVNoVIq/ILlo7FADhohyU1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWYzYjdiYjAtZTkyMi0z YmY0LTk3NjYtMDg0N2FmMTZkZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPXIfAs05U0sIY0Wr0Rgj8Y/mddjWHM8Oxic7GABrqpwGch021hxR1F w5S/9xWFYrQuBI1JDxG/oPp7jJBqlRlkwdVMRx10fg6r/tQz9vNjR4IUwy/JXOxI cQikIx+An3Mggdp29VYgvK4Xrk2QlR2h3ULmkFZPl06eN2edgXE64XtbG0wglR4O nHJwtn7j23dpkzHydSRxCYkgMM/DjLMNfobpQvY2Pq296LNvOKJ/+CR90msIVa7r uj0ORp1pwt5y/h8ekg9y0eW8TJPsx+NhN4OHUCg9w7v7kdpSzMp93Ywbc6l15rOZ RjlS06yKqjSjwsEBfVHdntF5j64RXYs= -----END CERTIFICATE-----Generated at Fri Apr 17 11:43:35 2026 by rpki-client