$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d0c68888-d58c-3805-92c3-c32d74063604.roa File: d0c68888-d58c-3805-92c3-c32d74063604.roa (raw, json) Hash identifier: cS44AZfXaVQhqLdPXdOr+Se43Cg5uSb3k/4YElCAlnQ= Subject key identifier: 70:1E:77:4C:3F:B8:79:D3:60:C3:CA:84:67:7B:02:8F:B4:0B:4A:A5 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D5243C67AB13A28A27A44B000 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d0c68888-d58c-3805-92c3-c32d74063604.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 30036 IP address blocks: 97.64.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:c6:7a:b1:3a:28:a2:7a:44:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=4581ec14-16aa-4acd-bbd4-ba479ebfcae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:95:c7:b9:f9:aa:42:40:69:c3:e3:50:33:21: 10:e6:b8:a0:6f:f8:c9:20:fb:ab:86:a4:2a:df:79: fc:30:2c:53:bb:24:7b:bd:0a:fe:a5:22:52:0f:ae: 98:a9:c8:c1:f9:9b:a5:03:af:1c:b2:ef:e8:a4:68: 6e:3c:38:99:98:cf:20:91:3b:c7:5b:ab:f1:d2:58: e3:4d:ca:7a:d6:88:fa:79:d6:24:2d:ee:db:c8:c3: 0b:ff:52:65:27:4b:57:71:69:ad:15:b4:b8:b2:f3: bf:8f:18:f3:5f:f8:4b:92:1c:0c:08:5a:37:12:d4: 90:8b:ba:56:cf:66:f9:77:c9:0e:a6:57:4a:13:25: 3f:95:c6:02:57:c8:4a:12:b2:57:33:ac:50:89:7c: cb:97:f3:83:06:a9:4b:49:5b:91:7f:7d:32:84:d6: b8:94:9a:26:f7:cc:a2:7d:a8:21:89:5a:51:7c:25: f3:cf:94:04:18:c7:9d:f1:9c:ba:ac:72:33:ca:93: bc:7b:6a:1a:a1:2a:3d:23:fb:2c:34:98:4c:b4:c5: df:32:96:7c:ad:6f:29:79:15:fc:bc:a8:c3:10:db: d7:78:67:06:69:e5:88:78:53:8b:44:0e:06:80:1b: 5f:5f:d2:e3:5c:06:c5:92:81:7b:08:b3:48:79:c0: 8c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1E:77:4C:3F:B8:79:D3:60:C3:CA:84:67:7B:02:8F:B4:0B:4A:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d0c68888-d58c-3805-92c3-c32d74063604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:83:3b:53:7b:7e:f2:ab:b0:a3:da:20:78:01:3f:c3:4d:e9: cc:f0:28:dc:c1:46:5e:be:dc:37:a3:b3:b6:71:b4:dd:6d:14: b9:8c:36:df:14:ed:b2:70:84:e1:f8:65:15:50:36:38:a3:6f: 51:9f:54:e4:a4:a0:ef:ea:45:ac:95:b9:80:e4:65:58:51:d5: 2a:00:a9:e3:fb:c0:66:c3:0a:a4:23:3b:f8:56:9c:7e:a7:91: b9:b7:87:ee:0e:79:3e:92:00:66:c0:3e:68:cf:3e:d8:c4:a9: 47:32:69:66:1f:be:43:d2:da:d9:b5:5e:12:5a:d0:bc:35:b3: 3c:1b:5f:f6:16:6d:d0:ea:1a:7f:74:d5:0a:87:bd:ed:fe:d4: ba:d4:5b:60:7a:03:05:5d:d1:e8:7a:b6:15:57:a5:06:d0:bf: 84:e0:3b:a3:6c:cc:b8:3d:5a:b4:90:05:36:91:40:84:19:a5: bd:a0:b3:3b:86:05:cc:c1:27:f1:df:9e:6e:ae:2c:d6:be:f3: 56:27:5b:e6:dc:3b:87:22:43:86:20:d8:b7:f7:3a:7b:3e:95: a2:f8:8b:1c:9d:17:e0:d4:16:63:59:0d:07:7d:c0:97:9e:82: fa:fa:ad:99:50:82:d4:37:ff:1e:fe:e9:3a:6f:93:b5:ca:0e: c5:3b:a1:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ8Z6sTooonpEsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk NDU4MWVjMTQtMTZhYS00YWNkLWJiZDQtYmE0NzllYmZjYWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpXHufmqQkBpw+NQMyEQ5rigb/jJIPurhqQq 33n8MCxTuyR7vQr+pSJSD66YqcjB+ZulA68csu/opGhuPDiZmM8gkTvHW6vx0ljj Tcp61oj6edYkLe7byMML/1JlJ0tXcWmtFbS4svO/jxjzX/hLkhwMCFo3EtSQi7pW z2b5d8kOpldKEyU/lcYCV8hKErJXM6xQiXzLl/ODBqlLSVuRf30yhNa4lJom98yi faghiVpRfCXzz5QEGMed8Zy6rHIzypO8e2oaoSo9I/ssNJhMtMXfMpZ8rW8peRX8 vKjDENvXeGcGaeWIeFOLRA4GgBtfX9LjXAbFkoF7CLNIecCM0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAed0w/uHnTYMPKhGd7Ao+0C0qlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZDBjNjg4ODgtZDU4Yy0z ODA1LTkyYzMtYzMyZDc0MDYzNjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUDSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6DO1N7fvKrsKPaIHgBP8NN6czwKNzBRl6+3Dejs7ZxtN1tFLmMNt8U 7bJwhOH4ZRVQNjijb1GfVOSkoO/qRayVuYDkZVhR1SoAqeP7wGbDCqQjO/hWnH6n kbm3h+4OeT6SAGbAPmjPPtjEqUcyaWYfvkPS2tm1XhJa0Lw1szwbX/YWbdDqGn90 1QqHve3+1LrUW2B6AwVd0eh6thVXpQbQv4TgO6NszLg9WrSQBTaRQIQZpb2gszuG BczBJ/Hfnm6uLNa+81YnW+bcO4ciQ4Yg2Lf3Ons+laL4ixydF+DUFmNZDQd9wJee gvr6rZlQgtQ3/x7+6Tpvk7XKDsU7oaQ= -----END CERTIFICATE-----Generated at Fri Apr 17 21:32:52 2026 by rpki-client