$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dcf6e6ef-e626-3577-9ae0-3733b8a03174.roa File: dcf6e6ef-e626-3577-9ae0-3733b8a03174.roa (raw, json) Hash identifier: sPh3UHxw53i9daCT+uzuwmyAioaFCTU9oVgNX7FH+6A= Subject key identifier: 7D:88:94:A7:D0:5D:B3:2D:8F:77:EA:AE:45:C3:D0:96:19:40:DE:26 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D55BCB456D3DA1C6516CC6640 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dcf6e6ef-e626-3577-9ae0-3733b8a03174.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 30036 IP address blocks: 97.64.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b4:56:d3:da:1c:65:16:cc:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=89c533c1-ecb6-4cde-9651-0782feaac8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f6:bd:55:ef:98:28:7f:58:a5:a0:6a:ed:d0: 9d:2c:76:cc:23:d6:a6:50:f9:e5:e0:d0:5e:b2:e3: fc:e2:a0:a6:9e:bb:03:c8:ff:8b:98:d2:fa:df:51: be:5d:a2:58:48:72:82:b8:55:aa:d6:85:2a:b0:3d: b4:ab:e4:fb:0a:f8:74:5d:2e:04:cc:60:bc:63:2b: 7d:f6:16:01:14:bc:11:15:ed:90:65:05:31:5f:5d: 33:47:13:e7:69:b3:bd:97:42:ea:e3:4c:33:87:91: 32:22:41:ea:44:82:f9:96:f8:00:7f:de:53:14:0c: f5:a8:f9:38:1c:3c:85:6b:0d:b1:f9:91:10:69:94: 42:30:de:d8:6b:fc:68:ff:10:fe:85:87:91:29:eb: bf:2e:47:7d:36:2f:6e:9c:f5:0b:b3:68:b0:88:54: a2:c9:28:78:bb:b6:3a:76:cb:49:78:01:93:46:df: 6a:5c:4b:99:3f:60:52:d4:9c:8c:6a:a8:2c:3b:34: da:1a:65:09:d5:cb:85:a5:10:be:e2:f7:70:58:ff: c9:44:6f:b8:ca:5a:fc:76:ff:02:27:a6:8a:83:54: 26:9a:e6:34:f6:8a:e7:0d:44:b8:10:32:f7:2a:95: e2:12:24:c4:4d:09:a8:f7:33:60:e0:ba:f7:6f:90: f5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:88:94:A7:D0:5D:B3:2D:8F:77:EA:AE:45:C3:D0:96:19:40:DE:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dcf6e6ef-e626-3577-9ae0-3733b8a03174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:d5:ef:c3:eb:29:0c:2d:81:8d:f2:9c:2b:26:8e:a1:b1:c4: 0f:43:61:2f:b1:c8:29:50:e5:3c:bd:45:df:a5:7b:0f:1a:bc: ba:58:28:87:59:58:9d:29:18:0a:2f:bd:41:a2:2e:72:bc:73: ba:2e:83:b4:0b:a8:e4:34:9d:c9:50:c2:52:3b:7c:2c:40:25: c3:06:27:87:a3:54:61:a4:fc:89:34:62:fa:fc:ab:97:ac:34: e6:57:84:c5:12:69:b3:e9:44:76:d2:00:4d:3f:f7:4c:cc:80: 92:68:1e:c8:ff:f8:c3:2b:c7:42:cc:5d:de:fa:3d:99:c8:49: 63:1c:10:9a:4e:4e:36:ff:34:54:db:ac:49:d2:13:39:dd:09: 94:7e:ae:4e:5f:3f:32:74:e2:50:0d:2f:eb:e4:cf:90:f2:25: 5b:96:73:d3:1b:d0:fe:47:16:22:ca:aa:3f:d5:9c:b4:56:0f: 6a:a6:53:d3:bf:58:9e:29:1a:99:3f:d4:d7:89:e4:c9:2c:03: cd:15:97:6b:ed:28:c0:7d:1c:64:bc:65:40:de:4c:52:b6:2a: 49:ee:3c:9c:87:5d:0e:f8:c3:b5:52:87:f4:9b:dd:6a:14:81: e6:64:73:18:87:3f:73:93:fe:b4:b8:a4:70:49:bc:a8:f1:c2: c9:fd:25:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLRW09ocZRbMZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ODljNTMzYzEtZWNiNi00Y2RlLTk2NTEtMDc4MmZlYWFjOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfa9Ve+YKH9YpaBq7dCdLHbMI9amUPnl4NBe suP84qCmnrsDyP+LmNL631G+XaJYSHKCuFWq1oUqsD20q+T7Cvh0XS4EzGC8Yyt9 9hYBFLwRFe2QZQUxX10zRxPnabO9l0Lq40wzh5EyIkHqRIL5lvgAf95TFAz1qPk4 HDyFaw2x+ZEQaZRCMN7Ya/xo/xD+hYeRKeu/Lkd9Ni9unPULs2iwiFSiySh4u7Y6 dstJeAGTRt9qXEuZP2BS1JyMaqgsOzTaGmUJ1cuFpRC+4vdwWP/JRG+4ylr8dv8C J6aKg1QmmuY09ornDUS4EDL3KpXiEiTETQmo9zNg4Lr3b5D1ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2IlKfQXbMtj3fqrkXD0JYZQN4mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGNmNmU2ZWYtZTYyNi0z NTc3LTlhZTAtMzczM2I4YTAzMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDV78PrKQwtgY3ynCsmjqGxxA9DYS+xyClQ5Ty9Rd+lew8avLpYKIdZ WJ0pGAovvUGiLnK8c7oug7QLqOQ0nclQwlI7fCxAJcMGJ4ejVGGk/Ik0Yvr8q5es NOZXhMUSabPpRHbSAE0/90zMgJJoHsj/+MMrx0LMXd76PZnISWMcEJpOTjb/NFTb rEnSEzndCZR+rk5fPzJ04lANL+vkz5DyJVuWc9Mb0P5HFiLKqj/VnLRWD2qmU9O/ WJ4pGpk/1NeJ5MksA80Vl2vtKMB9HGS8ZUDeTFK2KknuPJyHXQ74w7VSh/Sb3WoU geZkcxiHP3OT/rS4pHBJvKjxwsn9JUw= -----END CERTIFICATE-----Generated at Fri Apr 17 11:35:57 2026 by rpki-client