$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f97b9a75-5039-380e-a409-0a55af4c3990.roa File: f97b9a75-5039-380e-a409-0a55af4c3990.roa (raw, json) Hash identifier: TjS+tQDe5h3TjYhU/6OAYXPv9gSNIb6CYHR8VfgaqVE= Subject key identifier: 4B:EB:25:CA:A3:24:AB:94:22:30:D0:ED:3E:8D:7B:78:20:26:63:7A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C751C23886B80C7D3BF9AE180 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f97b9a75-5039-380e-a409-0a55af4c3990.roa Signing time: Thu 08 Jan 2026 14:00:39 +0000 ROA not before: Thu 08 Jan 2026 14:00:39 +0000 ROA not after: Wed 08 Apr 2026 13:00:39 +0000 asID: 30036 IP address blocks: 97.64.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:1c:23:88:6b:80:c7:d3:bf:9a:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 8 14:00:39 2026 GMT Not After : Apr 8 13:00:39 2026 GMT Subject: CN=09bf76c2-8c5b-448b-b32b-ac4d64a52a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d6:64:e4:36:75:e9:85:75:d4:c8:af:2c:d7: d6:97:f8:d8:17:3d:30:a3:3c:61:fe:20:a2:e7:29: 4b:78:68:d2:0b:7e:9a:30:7f:09:1e:cc:73:5f:e7: 31:ff:56:b8:88:50:7d:ae:c6:91:f0:ff:ed:12:47: ef:01:5e:35:5b:62:ad:c3:ee:15:63:8f:d1:6f:2f: e6:27:df:09:1a:8e:d0:a0:92:2a:4c:5e:05:56:9d: 94:7c:87:ca:64:03:c9:5c:f4:92:e2:90:b2:33:e4: 83:8e:a7:da:07:14:3d:cb:7a:cc:c9:da:fa:8b:be: 45:0d:bc:a9:59:b8:e3:3a:ed:ce:5c:f7:8a:c1:16: eb:8e:d8:73:2c:da:68:a9:8d:44:5d:32:23:16:08: cb:ca:90:94:02:85:8b:d3:87:5b:5e:e8:7f:17:55: 03:f6:a1:96:92:75:a2:94:74:5e:fd:4a:e6:6d:2a: 83:7f:b2:c2:c4:91:cb:e1:f1:af:96:8e:95:72:f1: 78:f9:0b:d9:e8:1b:65:e1:f2:34:1e:61:f4:8a:75: e6:b1:54:0b:da:2f:86:6e:53:36:e7:c6:2b:eb:ed: 91:4d:29:22:98:5a:12:18:53:7e:d3:c1:bb:91:9e: 45:8f:8b:21:6a:b6:cb:76:a3:7f:4d:65:5f:34:9e: a7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EB:25:CA:A3:24:AB:94:22:30:D0:ED:3E:8D:7B:78:20:26:63:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f97b9a75-5039-380e-a409-0a55af4c3990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f2:d6:c6:a5:f8:1a:05:92:47:4d:14:ae:a5:64:25:c2:41: c8:dd:72:8e:da:f4:b2:87:dc:50:bb:1a:07:9b:19:74:25:c4: 44:b6:a8:87:f5:d6:5d:0c:90:2a:e1:3f:ae:d2:f7:0b:f8:28: 92:bc:7b:ce:6c:39:d9:02:db:be:f4:f1:f7:32:bd:69:eb:a6: e6:d2:9e:e8:25:f6:31:46:06:8d:dd:1f:f2:6f:d5:43:08:ae: 51:b9:8e:92:b0:3f:8a:d0:d1:e2:ff:89:ec:47:eb:a3:69:e7: 2e:f8:e6:4d:17:64:ba:fc:8e:c0:f6:10:5e:8a:07:85:82:82: 88:69:6e:4d:9a:25:83:4d:9b:25:92:6d:a1:07:6f:24:01:73: 76:59:58:63:20:42:12:60:60:70:4e:8a:ac:f1:f9:91:b0:a4: 74:30:e1:28:96:76:d4:32:a1:38:e4:7b:af:dd:d3:a5:5b:23: 49:08:5b:e9:e5:48:7a:bf:1a:02:e0:f8:9f:92:6f:34:df:ac: b2:26:fe:57:e4:b3:97:8a:95:d1:56:0e:6a:40:06:6a:38:8e: 09:1c:d8:df:8f:cc:02:4a:e1:0e:88:f4:a3:a4:d7:ab:38:64: a8:23:7e:aa:2f:e8:4d:c4:08:9e:0f:3e:c2:48:ab:73:7e:53: cd:02:75:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1HCOIa4DH07+a4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk MDliZjc2YzItOGM1Yi00NDhiLWIzMmItYWM0ZDY0YTUyYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dZk5DZ16YV11MivLNfWl/jYFz0wozxh/iCi 5ylLeGjSC36aMH8JHsxzX+cx/1a4iFB9rsaR8P/tEkfvAV41W2Ktw+4VY4/Rby/m J98JGo7QoJIqTF4FVp2UfIfKZAPJXPSS4pCyM+SDjqfaBxQ9y3rMydr6i75FDbyp WbjjOu3OXPeKwRbrjthzLNpoqY1EXTIjFgjLypCUAoWL04dbXuh/F1UD9qGWknWi lHRe/UrmbSqDf7LCxJHL4fGvlo6VcvF4+QvZ6Btl4fI0HmH0inXmsVQL2i+GblM2 58Yr6+2RTSkimFoSGFN+08G7kZ5Fj4sharbLdqN/TWVfNJ6nxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvrJcqjJKuUIjDQ7T6Ne3ggJmN6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjk3YjlhNzUtNTAzOS0z ODBlLWE0MDktMGE1NWFmNGMzOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPy1sal+BoFkkdNFK6lZCXCQcjdco7a9LKH3FC7GgebGXQlxES2qIf1 1l0MkCrhP67S9wv4KJK8e85sOdkC27708fcyvWnrpubSnugl9jFGBo3dH/Jv1UMI rlG5jpKwP4rQ0eL/iexH66Np5y745k0XZLr8jsD2EF6KB4WCgohpbk2aJYNNmyWS baEHbyQBc3ZZWGMgQhJgYHBOiqzx+ZGwpHQw4SiWdtQyoTjke6/d06VbI0kIW+nl SHq/GgLg+J+SbzTfrLIm/lfks5eKldFWDmpABmo4jgkc2N+PzAJK4Q6I9KOk16s4 ZKgjfqov6E3ECJ4PPsJIq3N+U80CdQY= -----END CERTIFICATE-----Generated at Mon Mar 2 12:44:48 2026 by rpki-client