$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cc289894-21a1-3c64-b006-69e45fe7da5a.roa File: cc289894-21a1-3c64-b006-69e45fe7da5a.roa (raw, json) Hash identifier: C8/H95Z6iNzZ3FRVvCll2XtDlKc1WJE5czYhM3CpxYg= Subject key identifier: E7:F5:AE:17:C4:F1:66:EF:AA:43:28:17:0D:B0:49:BF:63:16:03:71 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B95AB01D31B46438966A35300 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cc289894-21a1-3c64-b006-69e45fe7da5a.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 97.64.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:ab:01:d3:1b:46:43:89:66:a3:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=bfa96590-3716-4cee-83fd-82d54fa0ac7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cf:dd:eb:47:11:91:cf:73:27:1f:ae:ea:37: dd:be:f2:eb:17:75:b2:15:77:90:fa:b4:a6:01:ca: bc:ca:15:a7:ef:0d:fe:d3:29:cb:5c:95:87:72:55: 32:f7:a7:7b:9c:da:cc:3a:e4:50:15:50:a7:9c:45: 0e:bc:3e:ae:da:e3:af:ba:aa:f9:9b:7b:4d:b5:db: 11:78:0b:06:19:21:b7:f0:73:a5:8b:d8:94:8b:93: 02:93:61:14:65:05:30:a9:e8:9f:92:29:e4:f5:25: cf:a0:03:c4:d2:3c:ca:38:b8:80:d0:eb:8e:3b:3f: 8e:5d:84:1a:08:74:cc:96:cc:bd:2a:c7:ab:b9:c8: 3b:e7:00:ca:cb:c1:fa:b7:cd:46:02:98:f4:46:66: fe:6a:50:c2:c7:db:16:09:78:9f:13:a8:02:82:e9: ba:af:b1:40:05:06:cb:4d:c2:b6:08:bf:87:ca:50: 06:81:4b:93:28:f7:91:43:4e:a6:54:cf:65:7c:ff: a2:f3:79:c8:9b:af:2f:ec:9c:6b:43:a6:e0:ab:30: 7c:da:e7:2c:39:b5:8c:34:d7:a8:d9:c2:bf:9d:2e: 67:da:09:b3:8d:e5:fc:54:c9:bc:f3:ec:a6:68:b1: 51:20:58:13:c2:c5:ce:c5:92:aa:d4:a0:b0:f9:d5: d1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F5:AE:17:C4:F1:66:EF:AA:43:28:17:0D:B0:49:BF:63:16:03:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cc289894-21a1-3c64-b006-69e45fe7da5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:c0:ed:46:13:c9:25:2b:79:bf:8c:13:ed:d3:a5:aa:88:4f: 66:62:88:73:77:31:0f:c9:a9:f9:36:be:6b:b3:f2:41:31:5f: a9:fb:af:7d:0d:05:04:86:1c:af:df:5a:d9:b8:ba:45:c0:94: a5:23:82:ba:21:75:57:90:4b:f8:ea:23:a8:6f:f7:d8:8f:ef: 09:f1:9e:e7:2d:70:b4:cb:5f:8e:2d:18:2e:61:18:39:e8:35: e2:43:47:2d:38:6a:1d:a0:5d:0f:01:82:6c:2d:a7:2b:98:d8: ed:0d:e1:2d:4e:f2:cf:9f:99:e0:1e:5a:58:95:f7:2f:3f:c1: f7:8a:0e:48:03:14:5d:be:c2:95:d2:c5:6a:e8:d3:a6:6a:03: b2:a4:ca:b9:a8:ca:fe:29:c5:c0:4d:18:1b:08:60:f8:3a:67: fe:40:42:c7:74:8d:ea:b2:61:9a:cc:50:10:05:40:6c:12:69: 6b:6e:9f:db:0d:37:6f:9a:40:c1:6a:12:ad:5c:8d:53:02:3a: 3e:e6:7a:90:65:7e:b8:27:9c:b7:4b:d7:80:2b:94:2e:e8:e0: 16:90:54:6f:31:b4:ca:ce:36:b2:f6:be:d0:67:9a:0e:eb:e9: cb:de:c6:15:be:e1:9c:37:f1:4e:54:6e:0b:f9:2d:d7:74:e6: f3:f7:0a:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqwHTG0ZDiWajUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk YmZhOTY1OTAtMzcxNi00Y2VlLTgzZmQtODJkNTRmYTBhYzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls/d60cRkc9zJx+u6jfdvvLrF3WyFXeQ+rSm Acq8yhWn7w3+0ynLXJWHclUy96d7nNrMOuRQFVCnnEUOvD6u2uOvuqr5m3tNtdsR eAsGGSG38HOli9iUi5MCk2EUZQUwqeifkink9SXPoAPE0jzKOLiA0OuOOz+OXYQa CHTMlsy9Kserucg75wDKy8H6t81GApj0Rmb+alDCx9sWCXifE6gCgum6r7FABQbL TcK2CL+HylAGgUuTKPeRQ06mVM9lfP+i83nIm68v7JxrQ6bgqzB82ucsObWMNNeo 2cK/nS5n2gmzjeX8VMm88+ymaLFRIFgTwsXOxZKq1KCw+dXRcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOf1rhfE8WbvqkMoFw2wSb9jFgNxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2MyODk4OTQtMjFhMS0z YzY0LWIwMDYtNjllNDVmZTdkYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPA7UYTySUreb+ME+3TpaqIT2ZiiHN3MQ/Jqfk2vmuz8kExX6n7r30N BQSGHK/fWtm4ukXAlKUjgrohdVeQS/jqI6hv99iP7wnxnuctcLTLX44tGC5hGDno NeJDRy04ah2gXQ8BgmwtpyuY2O0N4S1O8s+fmeAeWliV9y8/wfeKDkgDFF2+wpXS xWro06ZqA7Kkyrmoyv4pxcBNGBsIYPg6Z/5AQsd0jeqyYZrMUBAFQGwSaWtun9sN N2+aQMFqEq1cjVMCOj7mepBlfrgnnLdL14ArlC7o4BaQVG8xtMrONrL2vtBnmg7r 6cvexhW+4Zw38U5Ubgv5Ldd05vP3Csc= -----END CERTIFICATE-----Generated at Wed Nov 5 11:16:09 2025 by rpki-client