$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8fda8a0-e7be-34ad-bc27-695d4212186a.roa File: b8fda8a0-e7be-34ad-bc27-695d4212186a.roa (raw, json) Hash identifier: tvWkmYCBaoIhAPG4v0Yow9NBLfRAUyRsq4MDDg8DdQs= Subject key identifier: 32:DA:6E:58:D5:79:C9:C1:0A:6E:1E:31:03:0E:83:7F:C2:93:A8:EB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B95AB01A8D696947388F1B600 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8fda8a0-e7be-34ad-bc27-695d4212186a.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 97.64.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:ab:01:a8:d6:96:94:73:88:f1:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=c0e28ff6-2e8e-4f53-a6b6-09c66e6c92c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:a0:d2:fa:26:c8:4b:cb:5e:82:d9:9f:46: e4:83:66:41:c8:f2:8f:b8:1d:8f:2f:86:55:b4:ba: 91:e5:8b:d6:10:8d:60:81:73:3c:07:68:d1:28:33: 2d:65:b1:00:64:89:3d:9f:e4:42:78:15:bc:12:88: a1:1f:aa:0f:47:13:23:1c:71:b3:13:4f:4c:ed:58: 89:fd:ea:a8:a7:71:47:f9:1a:95:e0:81:8e:8b:3b: ec:6b:b2:45:42:67:21:cf:00:d4:d6:02:50:9d:8f: b8:13:69:d8:6b:23:5b:f3:56:59:d9:1a:2d:65:cb: 5f:86:fb:05:97:dc:85:20:b7:b2:d2:b1:f1:a2:c4: 37:c3:91:9a:92:cc:48:46:76:1f:c5:36:4d:a2:71: fb:f2:01:54:c5:b1:a5:7c:b1:f0:a1:39:9c:bb:ca: 0f:11:18:bb:a5:d4:c1:6e:98:84:ef:98:2a:a7:aa: 75:d8:30:50:be:7d:1b:5d:36:4a:21:a4:d8:eb:85: 2c:7e:83:5f:98:9a:4e:37:e0:8d:a8:75:6e:26:71: c0:68:a7:ad:5e:86:e5:19:ce:fa:b2:13:b9:90:39: 7d:fe:61:40:39:f2:12:f6:eb:84:3d:b4:47:8a:32: 77:32:86:ac:d9:1c:a6:94:54:98:24:b2:5a:01:ee: 46:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DA:6E:58:D5:79:C9:C1:0A:6E:1E:31:03:0E:83:7F:C2:93:A8:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8fda8a0-e7be-34ad-bc27-695d4212186a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:aa:b4:e1:28:c1:5c:b0:f9:b8:54:3c:cb:08:84:2e:2a:13: 84:29:5b:21:ca:25:99:c1:d5:b4:9c:27:22:cf:f4:62:ab:83: c1:80:06:48:fe:fc:b4:45:57:c6:0e:03:d6:6a:b1:11:5f:f2: b9:be:9e:d7:3e:6d:ef:9b:51:19:cb:bb:ea:55:ef:d7:78:09: b7:b5:84:c0:76:f2:eb:e5:13:c4:04:b5:ac:16:2f:b3:ec:00: 95:23:bd:6d:e3:65:b9:3f:77:59:2c:37:02:fe:be:51:62:8f: 2e:14:56:e9:5c:73:64:0d:01:1c:e8:40:45:f8:46:2a:68:f9: f4:07:0d:ca:e9:03:a2:91:a6:4d:5e:1b:6d:07:5c:a4:55:be: 84:da:07:54:b6:e1:d5:6d:94:9b:6e:0f:9f:5c:a5:4b:56:31: 58:91:23:1a:f3:4a:71:fd:60:f3:06:62:f9:e0:c4:97:b4:e4: 48:10:e7:23:da:e2:d7:99:55:02:38:69:85:0d:93:52:e0:06: af:77:df:e2:10:c7:11:5f:ee:e1:a2:87:cf:f3:77:ca:36:92: 69:aa:31:80:69:ee:1d:55:df:11:a2:de:34:be:5d:50:ed:f3: b5:df:37:ce:4d:57:a4:31:1b:a8:fd:72:ba:f5:06:28:f8:06: d1:11:a6:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqwGo1paUc4jxtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YzBlMjhmZjYtMmU4ZS00ZjUzLWE2YjYtMDljNjZlNmM5MmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTmg0vomyEvLXoLZn0bkg2ZByPKPuB2PL4ZV tLqR5YvWEI1ggXM8B2jRKDMtZbEAZIk9n+RCeBW8EoihH6oPRxMjHHGzE09M7ViJ /eqop3FH+RqV4IGOizvsa7JFQmchzwDU1gJQnY+4E2nYayNb81ZZ2RotZctfhvsF l9yFILey0rHxosQ3w5GaksxIRnYfxTZNonH78gFUxbGlfLHwoTmcu8oPERi7pdTB bpiE75gqp6p12DBQvn0bXTZKIaTY64UsfoNfmJpON+CNqHVuJnHAaKetXoblGc76 shO5kDl9/mFAOfIS9uuEPbRHijJ3Moas2RymlFSYJLJaAe5G5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLabljVecnBCm4eMQMOg3/Ck6jrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjhmZGE4YTAtZTdiZS0z NGFkLWJjMjctNjk1ZDQyMTIxODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiqtOEowVyw+bhUPMsIhC4qE4QpWyHKJZnB1bScJyLP9GKrg8GABkj+ /LRFV8YOA9ZqsRFf8rm+ntc+be+bURnLu+pV79d4Cbe1hMB28uvlE8QEtawWL7Ps AJUjvW3jZbk/d1ksNwL+vlFijy4UVulcc2QNARzoQEX4Ripo+fQHDcrpA6KRpk1e G20HXKRVvoTaB1S24dVtlJtuD59cpUtWMViRIxrzSnH9YPMGYvngxJe05EgQ5yPa 4teZVQI4aYUNk1LgBq933+IQxxFf7uGih8/zd8o2kmmqMYBp7h1V3xGi3jS+XVDt 87XfN85NV6QxG6j9crr1Bij4BtERpgk= -----END CERTIFICATE-----Generated at Wed Nov 5 00:00:09 2025 by rpki-client