$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f97b9a75-5039-380e-a409-0a55af4c3990.roa File: f97b9a75-5039-380e-a409-0a55af4c3990.roa (raw, json) Hash identifier: boXMZ0/T2yKUOFdCoy0LFmGKmOBmcWZDKp829KIQdMo= Subject key identifier: C6:D3:4F:96:FD:53:9F:86:2C:D4:C5:35:0B:16:F8:EE:1B:E4:5A:54 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B95A7916BB58962A3F64A42C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f97b9a75-5039-380e-a409-0a55af4c3990.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 97.64.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:91:6b:b5:89:62:a3:f6:4a:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=5afc0ada-f55d-42f3-bf11-98ff2eee5541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:df:29:33:ac:06:d2:fe:2f:a2:4e:cb:0d:29: 60:1c:46:4c:ad:2f:ba:71:cb:1c:3b:5b:7d:00:0e: 98:46:46:05:34:74:c3:58:bc:31:41:d1:53:95:e5: 71:59:21:7a:da:36:2c:25:c4:b9:ca:e9:d5:1d:9d: b4:69:e0:4d:cf:fc:3c:d5:8f:a0:55:50:24:53:8f: 61:43:3a:56:cd:5c:eb:48:76:67:b2:df:e5:64:1e: bf:4d:3c:45:81:37:62:09:e5:91:17:ba:05:76:01: d1:91:f1:10:c4:be:53:9e:c6:d1:56:17:53:f8:ec: fe:19:1c:3d:46:b9:d7:cb:1f:c4:a9:d9:dc:ba:04: 5d:70:e6:03:75:99:d7:1e:2a:99:05:a0:89:96:39: 91:c1:4f:c3:84:32:47:81:af:f2:5a:e4:b3:9d:d0: 3a:88:62:3b:c1:24:60:a7:7a:4c:df:e7:c5:2b:14: 5d:82:14:45:b3:0a:66:18:a1:60:de:ce:f3:a3:14: bf:2c:c7:c2:53:61:b3:11:6d:6a:b3:91:1e:3d:12: 3e:9d:05:c1:06:3b:83:b2:de:21:b6:3c:98:e9:f6: 85:d5:1c:79:a3:63:11:c8:57:b4:09:cb:7e:03:75: b6:fe:10:6b:57:58:71:5a:a9:a5:a5:ee:34:e4:50: c7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D3:4F:96:FD:53:9F:86:2C:D4:C5:35:0B:16:F8:EE:1B:E4:5A:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f97b9a75-5039-380e-a409-0a55af4c3990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 97.64.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:47:10:a6:74:c4:a3:71:d9:31:58:1c:c8:14:a7:24:80:db: 74:c8:5b:48:ff:06:64:fc:35:10:0e:37:c2:16:ae:d3:18:0d: 75:28:f3:f8:f7:68:83:59:4b:80:55:e3:67:73:9b:57:de:da: 20:11:51:b8:0a:61:73:c2:ab:7a:a9:ce:a1:a6:a3:33:9e:11: 40:fb:54:ab:b9:a4:97:14:44:03:f6:89:17:11:48:fb:d5:7e: f3:57:db:a3:e1:5a:ff:12:a5:e3:fd:62:6c:d7:09:c7:cc:00: 43:e0:4f:6a:e4:39:ca:ec:ec:3e:f2:c0:84:8f:ad:88:15:3a: d2:1d:cf:d8:08:d9:72:2b:38:8c:aa:68:f8:81:97:c5:10:f9: 83:ef:50:a2:4b:fe:e8:43:86:c1:25:c9:6f:7e:34:0a:f1:7a: 06:e1:da:1d:16:bd:66:4a:5d:a2:94:dd:b1:78:b3:30:5a:f7: 4b:80:6c:7a:73:b5:bc:c3:28:95:68:da:48:b8:91:b5:b4:42: 56:ce:49:07:2e:00:5f:71:db:53:95:fa:84:8b:77:d5:14:0a: 10:c1:3a:f1:7d:74:50:a2:2e:34:cd:2b:cf:84:50:91:cd:ca: 31:25:55:ad:1e:fd:3d:e3:18:f2:4e:0e:8c:32:4f:76:84:c4: 02:fc:40:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp5FrtYlio/ZKQsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NWFmYzBhZGEtZjU1ZC00MmYzLWJmMTEtOThmZjJlZWU1NTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN8pM6wG0v4vok7LDSlgHEZMrS+6ccscO1t9 AA6YRkYFNHTDWLwxQdFTleVxWSF62jYsJcS5yunVHZ20aeBNz/w81Y+gVVAkU49h QzpWzVzrSHZnst/lZB6/TTxFgTdiCeWRF7oFdgHRkfEQxL5TnsbRVhdT+Oz+GRw9 RrnXyx/EqdncugRdcOYDdZnXHiqZBaCJljmRwU/DhDJHga/yWuSzndA6iGI7wSRg p3pM3+fFKxRdghRFswpmGKFg3s7zoxS/LMfCU2GzEW1qs5EePRI+nQXBBjuDst4h tjyY6faF1Rx5o2MRyFe0Cct+A3W2/hBrV1hxWqmlpe405FDHIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbTT5b9U5+GLNTFNQsW+O4b5FpUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZjk3YjlhNzUtNTAzOS0z ODBlLWE0MDktMGE1NWFmNGMzOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUCYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtHEKZ0xKNx2TFYHMgUpySA23TIW0j/BmT8NRAON8IWrtMYDXUo8/j3 aINZS4BV42dzm1fe2iARUbgKYXPCq3qpzqGmozOeEUD7VKu5pJcURAP2iRcRSPvV fvNX26PhWv8SpeP9YmzXCcfMAEPgT2rkOcrs7D7ywISPrYgVOtIdz9gI2XIrOIyq aPiBl8UQ+YPvUKJL/uhDhsElyW9+NArxegbh2h0WvWZKXaKU3bF4szBa90uAbHpz tbzDKJVo2ki4kbW0QlbOSQcuAF9x21OV+oSLd9UUChDBOvF9dFCiLjTNK8+EUJHN yjElVa0e/T3jGPJODowyT3aExAL8QPs= -----END CERTIFICATE-----Generated at Wed Nov 5 03:11:30 2025 by rpki-client