$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/963b8bff-1896-3add-838d-b10debcde759.roa File: 963b8bff-1896-3add-838d-b10debcde759.roa (raw, json) Hash identifier: uZjhpXcqaa1qUKdOwPRY4ZcQ9SBiVxz21aY8Zk40kl4= Subject key identifier: 90:01:0C:AA:E7:84:0F:1D:A3:3D:22:23:21:AD:1C:80:AC:FB:0E:A0 Certificate issuer: /CN=87a7a98d-6ed8-48cc-953b-32292e94edde Certificate serial: 010D0C9F4328584EA79622FAE8B7A32E56E0F31C Authority key identifier: B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/963b8bff-1896-3add-838d-b10debcde759.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 32477 IP address blocks: 64.9.192.0/20 maxlen: 24 64.9.208.0/21 maxlen: 24 64.9.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:22:fa:e8:b7:a3:2e:56:e0:f3:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87a7a98d-6ed8-48cc-953b-32292e94edde Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=cb8b51b7-2bfc-4eba-a6d9-4ea131826039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:22:b5:45:87:71:e9:a0:4d:45:33:03:ae:ac: 5d:fd:f5:c5:4c:da:1e:77:7d:8b:7b:2b:db:b5:4f: a7:28:d8:29:ee:6e:e7:fc:02:0d:f2:de:0a:b3:ea: 37:56:58:81:81:5d:f7:c2:c7:b3:9c:ef:fc:41:6d: 55:62:c0:9d:46:06:d8:4b:06:f2:be:ff:a1:ab:5e: 73:e7:c5:5f:a6:01:24:43:ec:06:1d:4f:42:01:ea: f0:6d:9b:a7:ef:a2:43:a4:a2:44:47:3e:5c:1d:7f: e6:c5:02:5a:7e:91:b2:50:62:ff:5e:9b:5f:31:c9: 9a:29:9d:ad:7a:07:96:60:66:96:ec:40:0b:f2:49: 26:25:03:5b:ea:9d:b6:5e:35:d5:3b:6f:80:6d:7a: df:8d:ce:9e:cb:08:06:ab:89:d4:9b:3e:32:51:82: 4c:b2:9e:b3:9f:78:b4:8c:c1:55:64:b3:71:77:c7: ca:8a:3c:85:d6:83:b3:bb:8d:cf:f1:7f:76:29:20: 2e:6f:da:9c:a3:b3:36:1c:08:65:d5:0d:dd:d4:1d: 08:97:bd:51:77:ac:f2:70:f3:80:6f:43:93:bd:94: 01:24:a5:33:cb:ca:2d:4d:d8:7b:60:ef:58:a2:06: 49:02:67:7b:6e:56:73:6b:f8:ef:6b:bc:90:f5:d2: e2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:01:0C:AA:E7:84:0F:1D:A3:3D:22:23:21:AD:1C:80:AC:FB:0E:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/963b8bff-1896-3add-838d-b10debcde759.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl X509v3 Authority Key Identifier: keyid:B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer sbgp-ipAddrBlock: critical IPv4: 64.9.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:5d:c8:fb:32:7d:5c:2f:91:42:28:6c:9e:9b:22:fc:dd:78: b9:3c:d3:04:f4:8e:59:3d:97:05:9a:4a:c0:2e:f2:bd:fd:79: 9a:ff:40:77:6e:1e:40:17:b9:74:52:a6:36:87:55:d2:3d:0e: 02:c2:83:99:90:ed:db:f5:18:b0:b8:0f:54:2c:74:e7:30:94: c5:ea:64:61:9d:90:7d:3b:cf:93:22:98:7a:c8:03:24:ba:bb: be:ae:ee:a2:e7:e9:4d:07:16:34:05:9f:d8:ef:93:fa:ad:ba: 5d:57:cc:b0:57:a7:bc:3f:a7:2b:ff:35:f5:6f:48:4f:26:36: 1d:b2:a2:c0:4d:7d:ce:81:c3:3e:28:00:63:67:0b:4e:59:e0: 3a:62:ce:e6:a0:f1:6c:85:b4:1f:ea:9f:5e:c0:6b:b1:0d:47: 2f:06:08:33:2d:34:7d:f6:43:27:bd:28:d4:b3:67:1a:b2:95: a2:10:ff:12:83:d7:d3:9d:0b:6b:d8:3a:78:fe:38:a5:74:6d: 53:38:15:44:f4:4f:fb:ff:8a:bd:0f:03:fe:e5:f6:6a:9e:7e: d6:5c:18:d4:42:18:ac:dc:be:84:0a:f2:0e:83:87:c8:96:98: f1:1c:fc:80:f4:b2:d4:82:8c:ba:34:91:d0:a1:b5:4f:9a:c6: 11:c8:7b:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nliL66LejLlbg8xwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdhN2E5OGQtNmVkOC00OGNjLTk1M2ItMzIyOTJlOTRl ZGRlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Y2I4YjUxYjctMmJmYy00ZWJhLWE2ZDktNGVhMTMxODI2MDM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSK1RYdx6aBNRTMDrqxd/fXFTNoed32Leyvb tU+nKNgp7m7n/AIN8t4Ks+o3VliBgV33wseznO/8QW1VYsCdRgbYSwbyvv+hq15z 58VfpgEkQ+wGHU9CAerwbZun76JDpKJERz5cHX/mxQJafpGyUGL/XptfMcmaKZ2t egeWYGaW7EAL8kkmJQNb6p22XjXVO2+AbXrfjc6eywgGq4nUmz4yUYJMsp6zn3i0 jMFVZLNxd8fKijyF1oOzu43P8X92KSAub9qco7M2HAhl1Q3d1B0Il71Rd6zycPOA b0OTvZQBJKUzy8otTdh7YO9YogZJAmd7blZza/jva7yQ9dLi2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJABDKrnhA8doz0iIyGtHICs+w6gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84N2E3 YTk4ZC02ZWQ4LTQ4Y2MtOTUzYi0zMjI5MmU5NGVkZGUvOTYzYjhiZmYtMTg5Ni0z YWRkLTgzOGQtYjEwZGViY2RlNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODdhN2E5OGQtNmVkOC00OGNjLTk1 M2ItMzIyOTJlOTRlZGRlLzg3YTdhOThkLTZlZDgtNDhjYy05NTNiLTMyMjkyZTk0 ZWRkZS5jcmwwHwYDVR0jBBgwFoAUs0j+Y6H+R1dk/0RTBlXAV0Ul380wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84N2E3YTk4ZC02ZWQ4LTQ4Y2MtOTUzYi0zMjI5 MmU5NGVkZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQAnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtdyPsyfVwvkUIobJ6bIvzdeLk80wT0jlk9lwWaSsAu8r39eZr/QHdu HkAXuXRSpjaHVdI9DgLCg5mQ7dv1GLC4D1QsdOcwlMXqZGGdkH07z5MimHrIAyS6 u76u7qLn6U0HFjQFn9jvk/qtul1XzLBXp7w/pyv/NfVvSE8mNh2yosBNfc6Bwz4o AGNnC05Z4Dpizuag8WyFtB/qn17Aa7ENRy8GCDMtNH32Qye9KNSzZxqylaIQ/xKD 19OdC2vYOnj+OKV0bVM4FUT0T/v/ir0PA/7l9mqeftZcGNRCGKzcvoQK8g6Dh8iW mPEc/ID0stSCjLo0kdChtU+axhHIe1Y= -----END CERTIFICATE-----Generated at Wed Jul 29 08:33:48 2026 by rpki-client