$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ebc1cff2-805e-397e-a4fe-3c3b29878a81.roa File: ebc1cff2-805e-397e-a4fe-3c3b29878a81.roa (raw, json) Hash identifier: 5sE88S9g7DRk/dLTvpPalcRUYf3GzCadSeanVX4aBaU= Subject key identifier: 07:B5:35:46:31:1C:4C:42:DD:93:4B:D7:B8:B5:0C:C2:50:32:A3:E1 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F4972EC3CAF1DE9B2A914C880 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ebc1cff2-805e-397e-a4fe-3c3b29878a81.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 96.63.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:ec:3c:af:1d:e9:b2:a9:14:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3a114a18-7e11-4d6a-9188-3fad80de3e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:74:68:2e:74:78:22:9b:34:c9:7e:74:88:87: 34:b3:cb:2c:d7:e3:6f:25:de:82:dc:46:59:7e:1f: 54:64:9e:56:fe:d7:b8:65:c7:21:f5:3c:04:c0:52: b0:11:2f:6d:cc:93:ce:f7:2f:12:c8:a5:d0:a5:9c: fc:c8:c0:2f:8a:15:9e:cf:b8:6a:0a:df:a8:85:6a: bd:c1:5b:4d:ad:22:1d:3f:f1:7d:60:d0:e2:90:36: 4a:de:d5:c5:8a:85:6f:53:f1:2b:88:8f:34:22:7d: c5:60:c1:94:c1:7f:e1:70:b9:e7:2c:ae:96:da:dd: ac:3a:ad:bf:53:b2:27:f9:ba:29:63:ac:a4:61:8d: 4e:5e:4a:c4:e2:c6:83:99:54:55:27:94:ea:95:79: 48:5d:e8:10:2f:77:85:8e:85:50:60:47:3e:db:a1: 3e:3e:7f:17:d4:f8:6e:7e:7d:8d:8a:df:87:da:70: 22:64:85:72:e0:fd:ed:54:eb:54:23:75:94:59:59: b6:db:d5:59:1c:15:ab:0b:58:b0:15:8e:a9:07:93: 6c:1c:51:87:89:9d:87:b7:9d:78:f5:07:bf:0e:2a: 2f:7a:4d:a8:93:b8:cd:f7:76:bd:f1:40:75:7e:4f: b0:02:71:ba:b2:79:d1:7a:3c:72:72:a2:07:9c:b7: cf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B5:35:46:31:1C:4C:42:DD:93:4B:D7:B8:B5:0C:C2:50:32:A3:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ebc1cff2-805e-397e-a4fe-3c3b29878a81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 96.63.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:a5:49:b0:ea:92:54:75:df:e3:fd:45:1b:55:0c:64:12:76: c2:65:f8:54:fc:02:6f:55:1c:ca:43:3b:63:cd:02:9c:6d:71: 1b:0f:a8:2a:fe:b0:c9:e8:6d:47:07:12:02:ee:54:91:f9:3a: ad:06:e4:7c:47:6d:f8:07:a2:bd:06:06:34:b8:7a:69:c0:d4: ad:e0:ac:60:da:92:e5:61:c0:27:e8:a6:fe:ca:c5:7b:2e:63: 39:57:51:e2:fc:9f:b3:84:82:86:7b:c3:2e:bc:e1:29:61:f7: ee:d7:12:a5:66:f9:bd:0b:c9:f4:03:ee:23:6e:8e:df:e1:58: 44:d6:92:32:27:78:77:3b:a9:a2:db:c7:57:a9:1a:d0:52:f1: 7b:96:e2:64:2d:04:0a:58:28:3d:33:53:f1:e0:89:56:df:af: 8d:2b:dd:fc:f5:f5:eb:67:5f:63:92:16:0f:b5:9f:61:78:52: cc:df:33:f0:db:ec:b6:26:57:cc:47:bd:c5:45:bf:10:39:03: a5:a5:e0:28:23:d4:1f:3c:98:9d:b5:a3:34:8b:62:41:37:00: 35:75:4d:2d:7d:80:18:4b:41:b1:08:3a:fe:23:0a:58:53:e6: 7a:24:9e:b9:23:a7:9c:cd:00:44:ec:e8:87:e8:f9:1e:76:6a: 29:6f:f8:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcuw8rx3psqkUyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2ExMTRhMTgtN2UxMS00ZDZhLTkxODgtM2ZhZDgwZGUzZTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HRoLnR4Ips0yX50iIc0s8ss1+NvJd6C3EZZ fh9UZJ5W/te4Zcch9TwEwFKwES9tzJPO9y8SyKXQpZz8yMAvihWez7hqCt+ohWq9 wVtNrSIdP/F9YNDikDZK3tXFioVvU/EriI80In3FYMGUwX/hcLnnLK6W2t2sOq2/ U7In+bopY6ykYY1OXkrE4saDmVRVJ5TqlXlIXegQL3eFjoVQYEc+26E+Pn8X1Phu fn2Nit+H2nAiZIVy4P3tVOtUI3WUWVm229VZHBWrC1iwFY6pB5NsHFGHiZ2Ht514 9Qe/Diovek2ok7jN93a98UB1fk+wAnG6snnRejxycqIHnLfPwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAe1NUYxHExC3ZNL17i1DMJQMqPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvZWJjMWNmZjItODA1ZS0z OTdlLWE0ZmUtM2MzYjI5ODc4YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYD/qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGelSbDqklR13+P9RRtVDGQSdsJl+FT8Am9VHMpDO2PNApxtcRsPqCr+ sMnobUcHEgLuVJH5Oq0G5HxHbfgHor0GBjS4emnA1K3grGDakuVhwCfopv7KxXsu YzlXUeL8n7OEgoZ7wy684Slh9+7XEqVm+b0LyfQD7iNujt/hWETWkjIneHc7qaLb x1epGtBS8XuW4mQtBApYKD0zU/HgiVbfr40r3fz19etnX2OSFg+1n2F4UszfM/Db 7LYmV8xHvcVFvxA5A6Wl4Cgj1B88mJ21ozSLYkE3ADV1TS19gBhLQbEIOv4jClhT 5noknrkjp5zNAETs6Ifo+R52ailv+Bo= -----END CERTIFICATE-----Generated at Sat Sep 26 09:15:49 2026 by rpki-client