$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/3a21d805-3564-3ec7-981f-7f99bdf1700f.roa File: 3a21d805-3564-3ec7-981f-7f99bdf1700f.roa (raw, json) Hash identifier: ZRW5jmAh26UEeSr6Bkwwoee1SqRkjVq7MaocFhuPguU= Subject key identifier: BB:C3:47:AF:76:63:64:DC:98:9A:85:A7:B9:DB:63:3B:BE:8B:46:73 Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Certificate serial: 010D0C9F4328584F2EED2A29A1474BB676FCEC80 Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/3a21d805-3564-3ec7-981f-7f99bdf1700f.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 35908 IP address blocks: 97.64.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:2a:29:a1:47:4b:b6:76:fc:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=1e06993d-af59-471f-afcd-c08bdb2335b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:17:fa:fc:43:89:99:a1:3f:1d:52:49:95:30: ad:ea:53:57:a3:18:35:33:dd:1b:40:f0:d2:bb:a2: df:b8:9b:db:0a:a4:6e:fc:4c:d6:82:04:9e:b3:fc: 88:26:98:87:e9:d8:bb:b0:10:33:46:d2:b1:3f:3c: 2c:01:61:fb:eb:84:1d:ef:5f:a5:a0:e2:47:24:48: 30:6d:db:c9:8f:6d:54:f4:ec:90:e3:b8:e1:57:3e: e9:61:6d:a6:d9:81:24:21:0d:44:60:52:a6:dc:75: 32:71:1b:38:9f:72:da:7e:a6:89:bd:6c:6d:b8:1f: 0d:4f:b3:c8:1d:54:bd:b6:0f:ff:5d:75:5c:cd:a4: 31:b5:d8:b6:e7:cc:c0:f1:9c:2f:dc:3a:64:14:15: 3f:17:40:2c:7b:04:09:85:22:23:ea:58:c2:25:07: 9f:09:f7:aa:55:25:f4:3f:dd:e3:b0:6a:d2:d6:55: 1c:b9:8e:ee:1b:92:59:8b:84:86:9c:12:d2:a6:9f: 71:59:d1:bd:df:8f:17:dc:b8:86:8c:53:c2:2b:9b: 24:41:a5:43:f9:f6:e2:9e:93:1d:e9:a7:bd:3b:dc: 12:f6:8b:50:7b:6a:65:15:4b:e7:b7:1f:3e:f5:c8: ac:5e:b9:2b:2b:96:ee:5f:c8:8f:cb:60:c4:b1:35: 09:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C3:47:AF:76:63:64:DC:98:9A:85:A7:B9:DB:63:3B:BE:8B:46:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/3a21d805-3564-3ec7-981f-7f99bdf1700f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl X509v3 Authority Key Identifier: keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer sbgp-ipAddrBlock: critical IPv4: 97.64.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d6:52:d2:d1:ca:4b:ce:af:9b:f5:8d:01:95:c8:1c:a9:35: 43:ec:9c:2b:54:b2:bc:69:b3:65:27:6e:6a:1f:87:51:a3:7a: 98:b6:cf:8a:d1:8e:8f:90:7f:f1:58:36:9e:b9:c9:03:18:72: 88:97:20:68:18:3e:e4:03:aa:82:2a:82:fb:3b:df:fd:f1:7f: 6d:10:39:6e:80:e7:f2:b1:00:8b:9b:2c:7e:68:cd:e1:72:a5: 59:1f:67:c6:50:1c:07:c9:c5:d2:5a:98:ee:08:fe:01:08:6b: 08:0e:c4:17:de:f8:af:71:50:49:c3:42:31:85:0e:e2:49:1c: 76:c0:fc:0f:3c:b1:5b:ba:b6:0f:7b:55:31:ca:c9:b2:eb:bf: 37:9d:d9:e5:f3:f7:8e:5e:78:44:00:a0:c9:e0:7f:6a:14:a4: a0:48:8c:bd:f4:17:60:85:9e:c2:98:fe:a7:53:8f:3c:43:2a: 7c:00:ab:60:9d:a0:f5:2a:a7:b5:c0:4a:dc:a5:30:13:23:5e: d8:c0:e4:4e:96:ce:cc:a1:4d:09:0c:51:d7:a4:d0:10:ad:45: be:dc:94:84:0b:01:23:93:2a:08:b9:96:46:3c:c5:c8:48:11: ac:67:47:ff:81:ff:92:6a:d1:ed:0b:cc:c6:6d:7a:d0:55:3d: c1:aa:be:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7SopoUdLtnb87IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz ZWJmMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk MWUwNjk5M2QtYWY1OS00NzFmLWFmY2QtYzA4YmRiMjMzNWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhf6/EOJmaE/HVJJlTCt6lNXoxg1M90bQPDS u6LfuJvbCqRu/EzWggSes/yIJpiH6di7sBAzRtKxPzwsAWH764Qd71+loOJHJEgw bdvJj21U9OyQ47jhVz7pYW2m2YEkIQ1EYFKm3HUycRs4n3LafqaJvWxtuB8NT7PI HVS9tg//XXVczaQxtdi258zA8Zwv3DpkFBU/F0AsewQJhSIj6ljCJQefCfeqVSX0 P93jsGrS1lUcuY7uG5JZi4SGnBLSpp9xWdG9348X3LiGjFPCK5skQaVD+fbinpMd 6ae9O9wS9otQe2plFUvntx8+9cisXrkrK5buX8iPy2DEsTUJYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvDR692Y2TcmJqFp7nbYzu+i0ZzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvM2EyMWQ4MDUtMzU2NC0z ZWM3LTk4MWYtN2Y5OWJkZjE3MDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm YmFhZjNlYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUBhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPWUtLRykvOr5v1jQGVyBypNUPsnCtUsrxps2Unbmofh1Gjepi2z4rR jo+Qf/FYNp65yQMYcoiXIGgYPuQDqoIqgvs73/3xf20QOW6A5/KxAIubLH5ozeFy pVkfZ8ZQHAfJxdJamO4I/gEIawgOxBfe+K9xUEnDQjGFDuJJHHbA/A88sVu6tg97 VTHKybLrvzed2eXz945eeEQAoMngf2oUpKBIjL30F2CFnsKY/qdTjzxDKnwAq2Cd oPUqp7XAStylMBMjXtjA5E6WzsyhTQkMUdek0BCtRb7clIQLASOTKgi5lkY8xchI EaxnR/+B/5Jq0e0LzMZtetBVPcGqvlw= -----END CERTIFICATE-----Generated at Mon Sep 21 04:17:42 2026 by rpki-client