$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b519a9e6-173e-30b8-bb31-f6c7a6700c8c.roa File: b519a9e6-173e-30b8-bb31-f6c7a6700c8c.roa (raw, json) Hash identifier: 7dzDe4KLE2Kwox9KpAb+EQgeqEI6zofDEL3QLpM31C4= Subject key identifier: 1A:AD:4F:D1:F4:69:A7:A8:7A:D5:2E:12:3C:2F:F4:EB:3B:01:D8:63 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584F77835BEBE525F39A9CE877C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b519a9e6-173e-30b8-bb31-f6c7a6700c8c.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 30036 IP address blocks: 97.64.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:5b:eb:e5:25:f3:9a:9c:e8:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=a91c1d89-a0aa-461d-8f1c-d134c15c184c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5d:26:34:f6:da:d5:67:56:c6:3e:d3:e0:08: d5:95:49:ea:3e:69:e2:53:dc:4c:b6:b3:fb:54:4a: d8:dc:f6:f0:44:23:c6:a4:72:2e:5b:a7:f9:2e:6e: 56:02:66:cd:0f:0d:c2:6b:3d:d6:f6:88:d7:ec:d4: cf:0c:5e:cf:f5:d9:71:ca:60:f6:14:c6:5e:a1:45: 9a:0a:dc:6f:b5:59:8b:9b:38:5f:1f:a0:3f:78:07: 7f:ac:0f:ea:fb:c1:8c:0e:74:74:4a:51:a6:bf:83: 43:6b:bc:ed:1f:f3:77:d4:bd:fd:2c:19:50:6e:7d: 5f:56:12:2d:2d:48:57:38:01:6e:bc:3c:f6:c2:4b: 29:6d:cf:e4:16:e2:a0:47:6b:3f:34:b1:31:b7:f1: 14:dd:60:d0:b3:64:33:a3:8d:05:98:d7:76:33:44: a6:9f:86:5a:48:ce:78:e2:3e:d0:03:79:ef:d9:6d: c5:39:08:fa:d3:73:3e:f9:34:6e:57:68:8a:e9:bf: 37:00:f3:2e:bc:37:a3:64:46:59:37:59:51:d0:cc: e2:d3:ee:c7:28:70:5e:04:4e:03:37:9a:4d:7d:6b: 66:17:76:29:92:98:c8:13:42:45:d4:4f:72:41:c5: 0c:5e:f7:33:bf:41:50:48:52:3d:0c:21:eb:82:e8: 4d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AD:4F:D1:F4:69:A7:A8:7A:D5:2E:12:3C:2F:F4:EB:3B:01:D8:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b519a9e6-173e-30b8-bb31-f6c7a6700c8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:22:4a:2d:de:22:06:6e:da:27:4a:e7:dc:f9:ea:e9:a2:ca: 95:0d:3d:b5:b6:86:e9:7b:8f:ea:63:2a:a7:f3:11:87:7a:8e: 4c:bf:9f:7b:96:84:b9:5c:4b:33:12:5c:e2:cd:67:75:cf:29: cf:d9:3e:2f:ee:c0:a1:ba:f7:e2:fa:7c:74:03:d9:75:c0:a0: 73:ee:72:0a:3e:48:d1:48:99:3b:28:bb:27:de:f1:69:cd:fe: 63:7f:ff:23:00:bf:a0:16:d8:ba:55:7c:f2:42:29:90:ea:03: ab:c9:92:c4:29:0a:c8:98:e2:a5:5f:82:3a:1f:86:10:a8:f8: 49:cb:2e:5b:bc:3c:dc:8e:3b:b5:d4:ee:48:dd:9d:db:d9:86: e5:14:29:02:53:8d:b1:7e:4e:9a:8d:23:93:67:fa:0b:84:1a: 1f:14:5c:a6:97:00:b9:4a:b1:0a:8d:17:bc:45:95:6c:42:47: 3a:fc:e2:aa:04:11:ce:b6:fb:d5:3f:db:88:71:3f:76:c8:d1: 67:db:70:a7:a2:7a:0c:df:56:e7:85:87:95:99:ff:c9:7a:be: 90:e2:44:b9:d6:03:42:21:8f:98:1a:23:3b:0b:dc:1f:ab:9f: 9d:dc:6f:96:09:88:cc:1d:a0:60:04:ab:45:4e:a0:4f:1d:99: ea:a4:0c:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g1vr5SXzmpzod8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk YTkxYzFkODktYTBhYS00NjFkLThmMWMtZDEzNGMxNWMxODRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF0mNPba1WdWxj7T4AjVlUnqPmniU9xMtrP7 VErY3PbwRCPGpHIuW6f5Lm5WAmbNDw3Caz3W9ojX7NTPDF7P9dlxymD2FMZeoUWa CtxvtVmLmzhfH6A/eAd/rA/q+8GMDnR0SlGmv4NDa7ztH/N31L39LBlQbn1fVhIt LUhXOAFuvDz2wkspbc/kFuKgR2s/NLExt/EU3WDQs2Qzo40FmNd2M0Smn4ZaSM54 4j7QA3nv2W3FOQj603M++TRuV2iK6b83APMuvDejZEZZN1lR0Mzi0+7HKHBeBE4D N5pNfWtmF3YpkpjIE0JF1E9yQcUMXvczv0FQSFI9DCHrguhNPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqtT9H0aaeoetUuEjwv9Os7AdhjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjUxOWE5ZTYtMTczZS0z MGI4LWJiMzEtZjZjN2E2NzAwYzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUiSi3eIgZu2idK59z56umiypUNPbW2hul7j+pjKqfzEYd6jky/n3uW hLlcSzMSXOLNZ3XPKc/ZPi/uwKG69+L6fHQD2XXAoHPucgo+SNFImTsouyfe8WnN /mN//yMAv6AW2LpVfPJCKZDqA6vJksQpCsiY4qVfgjofhhCo+EnLLlu8PNyOO7XU 7kjdndvZhuUUKQJTjbF+TpqNI5Nn+guEGh8UXKaXALlKsQqNF7xFlWxCRzr84qoE Ec62+9U/24hxP3bI0WfbcKeiegzfVueFh5WZ/8l6vpDiRLnWA0Ihj5gaIzsL3B+r n53cb5YJiMwdoGAEq0VOoE8dmeqkDJY= -----END CERTIFICATE-----Generated at Sun Oct 11 23:47:25 2026 by rpki-client