$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c23b7d35-a8be-3049-8815-122237815b0d.roa File: c23b7d35-a8be-3049-8815-122237815b0d.roa (raw, json) Hash identifier: cyxIHnfQHfARv7blUJ2UJxgVhuqMjZ0DBc6zCll/F60= Subject key identifier: 87:A9:D0:E0:F0:E7:EB:17:AA:25:A1:15:F9:08:AA:B4:8A:73:D3:6A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D5243C3866F7F537BFCF39900 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c23b7d35-a8be-3049-8815-122237815b0d.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 30036 IP address blocks: 97.64.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:c3:86:6f:7f:53:7b:fc:f3:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=a3ecb975-febb-4e78-bad5-cbb841c99cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f6:e3:53:70:1e:29:17:44:c5:03:f6:45:86: 49:6d:d2:e0:b9:79:ba:a4:1b:f3:90:4b:62:f5:5f: 62:43:15:b4:8e:de:56:e6:95:41:dc:d0:a3:fc:3f: a5:8d:4d:93:e4:30:de:46:fe:f6:f9:ce:bb:db:aa: 75:9e:fe:cb:a7:c5:98:f5:50:06:59:6a:9e:85:c6: 47:11:48:f1:af:a6:6e:6f:5e:f3:9c:9c:25:23:af: ed:da:da:43:1d:b3:74:ad:6b:e2:ef:ef:c9:2b:18: 93:55:31:16:9b:e7:c1:35:a2:78:bd:a8:f0:c5:c0: 7b:d7:1c:4c:52:6c:ad:81:91:c7:7b:e1:70:26:01: 20:1c:62:60:1f:a3:30:8b:6d:84:6e:dd:b1:48:50: f1:ed:30:6e:37:82:20:88:6f:db:81:90:2d:ea:0d: 56:2e:7b:f5:3f:07:a0:2e:89:e2:d4:95:11:91:34: 1d:f1:15:fe:b6:b9:fe:ed:f6:40:96:97:86:a3:66: 64:45:5c:5d:d8:eb:05:2c:eb:97:b6:46:14:6c:03: f8:00:e7:65:58:3d:82:18:d7:04:48:6f:e1:1d:d5: 18:d6:84:44:31:31:08:ab:ec:cd:c8:2c:10:b3:66: 30:79:4d:ff:b6:e2:a5:c5:1b:45:42:fe:41:62:07: 13:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A9:D0:E0:F0:E7:EB:17:AA:25:A1:15:F9:08:AA:B4:8A:73:D3:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c23b7d35-a8be-3049-8815-122237815b0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:b6:fc:5a:ec:52:73:e5:1a:77:94:ef:20:8d:1f:49:2c:fa: 8b:53:6c:ae:bd:4a:3d:6b:72:ca:b0:b6:70:76:80:60:8b:27: 80:4d:6d:a2:68:32:8a:da:1a:00:bc:ee:d6:b3:34:82:c3:16: 77:cc:d6:ba:dc:a0:cf:e5:62:1a:76:f8:ef:18:87:39:81:da: 0e:9b:bb:c1:ad:ab:4b:9f:e3:46:07:a2:74:4a:38:c4:48:e6: 7f:34:bc:36:0a:64:95:e0:8b:a2:d0:77:81:11:4b:aa:4c:b6: c5:ed:90:2d:d6:f8:53:b0:b9:d6:2a:88:93:fa:07:9a:03:49: 6d:66:fb:1a:a6:11:33:cf:87:b0:ca:e8:23:74:17:33:d6:39: d8:31:9d:16:3d:c8:06:cc:85:d0:63:47:37:93:12:ac:85:a1: 58:4d:14:d6:1c:d0:d4:27:8c:95:02:bf:9c:08:d0:52:12:04: c4:aa:f5:65:cd:bd:51:9e:22:39:5c:20:ed:d0:7d:3b:c5:09: bb:8f:29:a1:6a:cc:ec:85:19:20:90:72:1d:7d:af:02:b8:e0: ae:b9:64:4f:51:61:69:59:e2:38:64:f1:2f:78:b4:a9:91:98: 20:44:c1:cf:3e:3b:0a:22:f6:c2:e6:e5:63:4f:d0:53:14:b7: 58:5f:d8:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ8OGb39Te/zzmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk YTNlY2I5NzUtZmViYi00ZTc4LWJhZDUtY2JiODQxYzk5Y2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/bjU3AeKRdExQP2RYZJbdLguXm6pBvzkEti 9V9iQxW0jt5W5pVB3NCj/D+ljU2T5DDeRv72+c6726p1nv7Lp8WY9VAGWWqehcZH EUjxr6Zub17znJwlI6/t2tpDHbN0rWvi7+/JKxiTVTEWm+fBNaJ4vajwxcB71xxM UmytgZHHe+FwJgEgHGJgH6Mwi22Ebt2xSFDx7TBuN4IgiG/bgZAt6g1WLnv1Pweg Loni1JURkTQd8RX+trn+7fZAlpeGo2ZkRVxd2OsFLOuXtkYUbAP4AOdlWD2CGNcE SG/hHdUY1oREMTEIq+zNyCwQs2YweU3/tuKlxRtFQv5BYgcTuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIep0ODw5+sXqiWhFfkIqrSKc9NqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYzIzYjdkMzUtYThiZS0z MDQ5LTg4MTUtMTIyMjM3ODE1YjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEC2/FrsUnPlGneU7yCNH0ks+otTbK69Sj1rcsqwtnB2gGCLJ4BNbaJo MoraGgC87tazNILDFnfM1rrcoM/lYhp2+O8YhzmB2g6bu8Gtq0uf40YHonRKOMRI 5n80vDYKZJXgi6LQd4ERS6pMtsXtkC3W+FOwudYqiJP6B5oDSW1m+xqmETPPh7DK 6CN0FzPWOdgxnRY9yAbMhdBjRzeTEqyFoVhNFNYc0NQnjJUCv5wI0FISBMSq9WXN vVGeIjlcIO3QfTvFCbuPKaFqzOyFGSCQch19rwK44K65ZE9RYWlZ4jhk8S94tKmR mCBEwc8+Owoi9sLm5WNP0FMUt1hf2OU= -----END CERTIFICATE-----Generated at Fri Apr 17 19:10:49 2026 by rpki-client