$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/6393d3bc-f4c9-368f-ba32-e1cbbb0df0a6.roa File: 6393d3bc-f4c9-368f-ba32-e1cbbb0df0a6.roa (raw, json) Hash identifier: HRWJDbnTRPWVpxA/GKDCV+5UD8xLI4j+c8wIqQ6HkKY= Subject key identifier: 03:3C:5D:46:04:03:D5:84:93:91:1F:55:E5:FF:13:88:9B:DC:96:7F Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584EE4F1F738B2C3E1D9B5A745C0 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/6393d3bc-f4c9-368f-ba32-e1cbbb0df0a6.roa Signing time: Thu 20 Aug 2026 01:00:12 +0000 ROA not before: Thu 20 Aug 2026 01:00:12 +0000 ROA not after: Wed 18 Nov 2026 02:00:12 +0000 asID: 23473 IP address blocks: 96.63.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:f1:f7:38:b2:c3:e1:d9:b5:a7:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Aug 20 01:00:12 2026 GMT Not After : Nov 18 02:00:12 2026 GMT Subject: CN=853076e8-0769-4660-9bec-1be466e4f8f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a9:dd:07:87:ab:8e:e3:ea:56:2f:eb:40:15: eb:5b:e6:fb:52:15:6f:43:56:db:dd:aa:d0:fa:65: f3:1b:d9:04:4a:2e:b8:33:28:f2:ff:25:15:e1:67: 2f:f9:63:5a:2e:f6:61:38:51:65:d0:b1:54:85:30: 3c:2d:c3:1e:46:82:2a:6c:e4:98:00:cb:b8:5a:2e: 1b:77:15:b2:c5:98:36:5c:9e:71:19:cc:a6:a8:e6: 4d:52:16:c2:20:58:ea:61:15:d8:61:1a:b9:a8:ee: c8:39:db:45:1e:22:7d:b4:62:19:0b:74:ee:82:98: 72:2c:53:88:2d:7b:68:5b:85:12:8c:15:9f:b2:0b: ab:e4:7d:a3:8b:ca:b6:15:17:f1:de:b0:99:f2:83: b4:89:c8:27:21:30:15:5e:f1:2a:a6:37:fc:b2:78: f5:79:17:f9:ee:f3:e0:8a:7c:ce:4e:75:34:c5:da: 6d:9e:d4:ef:c0:60:37:51:fc:be:02:2b:e4:b8:b8: ff:c4:b3:fe:d1:9a:ca:ec:ae:6c:ab:89:b1:28:04: 32:65:b0:f8:2f:2a:73:79:30:c6:d4:3a:f1:db:a4: 5f:49:31:49:f1:4a:dd:5b:37:ca:b7:f8:87:41:2c: ca:a7:9f:f4:8a:b0:03:f1:66:0e:0f:9d:06:06:a7: 75:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3C:5D:46:04:03:D5:84:93:91:1F:55:E5:FF:13:88:9B:DC:96:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/6393d3bc-f4c9-368f-ba32-e1cbbb0df0a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 96.63.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:3d:2c:0a:e0:47:ca:45:e0:3d:bb:65:d6:62:98:c1:38:eb: dc:12:6d:91:37:a0:44:15:77:09:52:3d:3a:22:8b:64:76:08: 69:c4:73:23:30:87:40:dd:b0:4a:3f:9c:16:c1:c4:ee:c0:80: ec:5d:4b:75:7b:a6:57:e7:8c:9c:cf:48:31:ac:99:03:fe:ad: 48:9a:cb:25:05:65:a5:c0:d6:43:88:90:73:00:56:b7:e3:05: 4d:c7:e5:61:5a:64:b9:94:7f:13:22:56:a7:91:ff:a4:84:9a: 62:30:aa:c2:cc:d7:91:b8:01:19:bd:ea:b0:13:a6:97:f0:e9: f9:7a:6e:bf:4c:41:30:46:fd:b5:ab:0f:8c:be:32:20:28:75: 3a:ef:7e:86:5e:da:38:aa:f9:fa:e6:1b:e1:f7:76:a9:22:79: cc:71:b6:00:c1:03:ac:e6:16:35:fa:0e:a4:6d:2c:45:dc:f1: a0:82:b3:91:c2:da:b3:84:24:cd:65:b9:8b:c6:72:4d:b7:5d: ec:a1:94:68:e8:e3:69:9b:f4:2d:ae:3a:82:0b:07:00:86:1b: cc:20:81:81:a2:a8:f1:8a:a0:a6:2e:a9:b1:03:3f:fd:a5:69: cc:52:da:91:ef:e3:b9:03:f7:38:ed:14:96:fc:6f:2c:83:df: 8a:03:f0:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7k8fc4ssPh2bWnRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk ODUzMDc2ZTgtMDc2OS00NjYwLTliZWMtMWJlNDY2ZTRmOGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkandB4erjuPqVi/rQBXrW+b7UhVvQ1bb3arQ +mXzG9kESi64Myjy/yUV4Wcv+WNaLvZhOFFl0LFUhTA8LcMeRoIqbOSYAMu4Wi4b dxWyxZg2XJ5xGcymqOZNUhbCIFjqYRXYYRq5qO7IOdtFHiJ9tGIZC3TugphyLFOI LXtoW4USjBWfsgur5H2ji8q2FRfx3rCZ8oO0icgnITAVXvEqpjf8snj1eRf57vPg inzOTnU0xdptntTvwGA3Ufy+AivkuLj/xLP+0ZrK7K5sq4mxKAQyZbD4LypzeTDG 1Drx26RfSTFJ8UrdWzfKt/iHQSzKp5/0irAD8WYOD50GBqd1KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAM8XUYEA9WEk5EfVeX/E4ib3JZ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvNjM5M2QzYmMtZjRjOS0z NjhmLWJhMzItZTFjYmJiMGRmMGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYD/ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo9LArgR8pF4D27ZdZimME469wSbZE3oEQVdwlSPToii2R2CGnEcyMw h0DdsEo/nBbBxO7AgOxdS3V7plfnjJzPSDGsmQP+rUiayyUFZaXA1kOIkHMAVrfj BU3H5WFaZLmUfxMiVqeR/6SEmmIwqsLM15G4ARm96rATppfw6fl6br9MQTBG/bWr D4y+MiAodTrvfoZe2jiq+frmG+H3dqkiecxxtgDBA6zmFjX6DqRtLEXc8aCCs5HC 2rOEJM1luYvGck23XeyhlGjo42mb9C2uOoILBwCGG8wggYGiqPGKoKYuqbEDP/2l acxS2pHv47kD9zjtFJb8byyD34oD8IU= -----END CERTIFICATE-----Generated at Sat Sep 26 13:56:28 2026 by rpki-client