$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bbc18156-6001-351d-b9d1-313481b001b0.roa File: bbc18156-6001-351d-b9d1-313481b001b0.roa (raw, json) Hash identifier: XHbuZovbx11UeWzikm52Dw9nNrU9FjCs4WXcF+uKyT8= Subject key identifier: D5:E3:6B:81:BB:B1:03:C5:C3:E1:2E:64:AF:3D:1A:C7:90:F8:04:45 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B95A786E8B89BD0ECDCC52500 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bbc18156-6001-351d-b9d1-313481b001b0.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 97.64.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:86:e8:b8:9b:d0:ec:dc:c5:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=f1f0983a-5308-4033-aea6-03825e5ab721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:de:b8:33:bd:fb:bb:4e:bc:14:34:95:93:7b: de:89:83:2c:bf:6b:38:03:23:7f:5c:71:22:e0:c1: 96:55:e1:be:fa:87:1c:3b:00:49:5a:6d:05:7a:91: d7:2d:99:a6:07:06:64:71:67:32:79:7a:ca:58:97: 44:ac:70:f2:9f:e6:de:74:8c:d3:55:8d:d4:ab:31: 49:14:77:1c:75:02:64:8b:45:e3:6d:f3:36:23:d1: fb:c5:59:04:c6:f9:2a:26:83:ce:c9:2f:ee:f4:0e: bc:79:88:05:0f:cf:03:0d:a2:61:f2:d1:d7:01:e6: 47:03:78:5a:06:1a:5e:5a:46:3d:b0:02:a1:7c:6f: d3:75:5e:04:4d:f1:68:a3:ec:20:7d:ed:b8:38:94: 9d:35:d9:fd:92:2f:5a:ab:72:3a:81:d1:2d:33:74: af:fe:97:79:81:10:20:fa:35:22:c2:59:d7:5c:d6: 4f:29:a6:27:32:2c:00:3b:ef:d9:ad:f2:cd:cd:bd: 74:82:15:3e:02:97:3e:b0:52:82:df:05:a2:79:dc: bf:18:6f:ae:35:9b:c5:05:b2:36:16:c2:ef:f0:1a: bb:f9:c4:ab:fa:e5:f2:09:09:a8:02:96:23:e6:45: c9:84:a0:ab:4d:00:db:fe:66:41:0e:e7:f9:88:f1: d3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E3:6B:81:BB:B1:03:C5:C3:E1:2E:64:AF:3D:1A:C7:90:F8:04:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bbc18156-6001-351d-b9d1-313481b001b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:7c:0a:a6:1c:a9:0e:58:a3:ac:31:a4:af:47:b7:a5:5d:f3: 2c:08:8b:a9:5a:47:a3:c5:f7:f5:ef:d0:72:2e:ec:84:10:02: 49:21:47:24:c1:18:00:85:db:05:20:92:7f:55:9d:4f:b7:c3: a1:f5:19:e6:75:04:89:bb:12:be:21:e8:8e:a0:7d:86:4c:5c: c7:ea:fa:50:db:84:ed:e4:e1:1f:9d:3c:b9:47:4f:93:a5:7e: 8f:9a:25:06:d9:ad:bb:46:7f:22:eb:e6:88:13:64:eb:41:70: 13:5c:bb:bf:e3:f6:88:c2:fd:34:63:ae:d3:04:57:44:94:dc: 01:22:32:73:de:1a:3c:90:55:f4:2b:d3:b4:13:a5:dd:93:64: b5:9d:8b:7a:63:a8:4e:8d:b7:8f:05:44:2d:d9:58:e8:44:60: f8:b9:be:dd:3f:ae:d9:1c:41:a0:17:d2:31:28:33:d2:cb:3b: d7:7f:90:aa:2f:7f:06:19:27:8a:ce:42:e6:75:9e:82:a0:56: 45:2d:5b:0c:ec:56:1b:68:ef:dc:82:6b:74:af:99:9e:07:2e: 31:51:27:b4:6c:7f:e3:61:6a:05:4e:da:23:57:d5:fd:38:88: 8a:39:a2:05:43:90:f3:b3:08:40:88:fc:19:23:45:89:04:7f: d7:2d:2d:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp4bouJvQ7NzFJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZjFmMDk4M2EtNTMwOC00MDMzLWFlYTYtMDM4MjVlNWFiNzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp964M737u068FDSVk3veiYMsv2s4AyN/XHEi 4MGWVeG++occOwBJWm0FepHXLZmmBwZkcWcyeXrKWJdErHDyn+bedIzTVY3UqzFJ FHccdQJki0XjbfM2I9H7xVkExvkqJoPOyS/u9A68eYgFD88DDaJh8tHXAeZHA3ha BhpeWkY9sAKhfG/TdV4ETfFoo+wgfe24OJSdNdn9ki9aq3I6gdEtM3Sv/pd5gRAg +jUiwlnXXNZPKaYnMiwAO+/ZrfLNzb10ghU+Apc+sFKC3wWiedy/GG+uNZvFBbI2 FsLv8Bq7+cSr+uXyCQmoApYj5kXJhKCrTQDb/mZBDuf5iPHTkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXja4G7sQPFw+EuZK89GseQ+ARFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmJjMTgxNTYtNjAwMS0z NTFkLWI5ZDEtMzEzNDgxYjAwMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGR8CqYcqQ5Yo6wxpK9Ht6Vd8ywIi6laR6PF9/Xv0HIu7IQQAkkhRyTB GACF2wUgkn9VnU+3w6H1GeZ1BIm7Er4h6I6gfYZMXMfq+lDbhO3k4R+dPLlHT5Ol fo+aJQbZrbtGfyLr5ogTZOtBcBNcu7/j9ojC/TRjrtMEV0SU3AEiMnPeGjyQVfQr 07QTpd2TZLWdi3pjqE6Nt48FRC3ZWOhEYPi5vt0/rtkcQaAX0jEoM9LLO9d/kKov fwYZJ4rOQuZ1noKgVkUtWwzsVhto79yCa3SvmZ4HLjFRJ7Rsf+NhagVO2iNX1f04 iIo5ogVDkPOzCECI/BkjRYkEf9ctLec= -----END CERTIFICATE-----Generated at Tue Nov 4 21:33:18 2025 by rpki-client