$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/994b7732-d7de-3b18-a8de-e115b2b14bef.roa File: 994b7732-d7de-3b18-a8de-e115b2b14bef.roa (raw, json) Hash identifier: dg7Kfue7x5cBqfmLcNUMopUA3eV0rzVElGCNjz6sOes= Subject key identifier: 57:0B:67:59:E6:6C:3C:9F:BA:CC:99:C6:0A:50:24:0F:B1:48:A0:6A Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F498C227B66F041CE17F2E400 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/994b7732-d7de-3b18-a8de-e115b2b14bef.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 96.63.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:22:7b:66:f0:41:ce:17:f2:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=838902f7-5cff-4e3e-8c4a-8eee85f46d42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:df:88:bb:39:2b:47:ee:a8:04:bd:4b:fc:96: 09:9c:90:db:d6:88:02:7c:4a:07:ac:18:24:7d:59: 9d:09:cc:c9:46:e2:9a:8e:b5:40:78:da:95:b2:7b: 1f:71:b3:18:e4:5e:17:14:d0:ec:6d:d2:87:d3:a7: f4:42:5e:c7:8f:e3:ee:3b:09:2a:eb:00:c5:6c:a9: d5:94:fc:56:28:d4:41:46:59:52:3e:e0:ac:bf:66: 26:6a:9d:52:b3:db:7c:4b:9e:ca:8b:df:59:5e:f1: 8e:03:9c:b3:34:9d:8e:aa:0e:66:ba:6a:1e:0c:f3: 45:5e:d7:65:3c:1f:5e:b2:c6:02:de:e1:87:da:34: 22:c8:7b:9e:32:94:25:bd:8d:13:24:f0:83:e2:09: e9:8d:0d:79:1b:09:16:26:7a:55:92:c8:01:92:f2: fa:7f:17:38:90:e3:e2:c2:35:3d:38:b4:0f:19:88: 25:ae:9d:e5:fa:ec:fd:71:03:c3:71:f1:52:b1:aa: fe:d1:81:4d:8f:96:4e:81:ec:3a:9b:95:3a:cd:21: ca:df:c4:b6:35:c2:4e:5d:ef:15:15:39:f7:2e:c1: 32:59:70:fc:b9:da:c4:3d:67:58:66:a3:94:04:4b: fd:0e:4e:3f:f1:b6:56:57:26:47:04:aa:1d:f3:f7: c5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0B:67:59:E6:6C:3C:9F:BA:CC:99:C6:0A:50:24:0F:B1:48:A0:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/994b7732-d7de-3b18-a8de-e115b2b14bef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 96.63.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:99:2e:e9:92:5e:9e:f3:de:4b:b3:ac:87:12:25:45:5d:6a: 6f:d6:f7:3e:78:9e:53:b3:6c:03:1d:21:55:6d:6f:a6:d2:78: e5:34:7c:6e:6b:13:86:d1:f7:3e:8f:72:47:95:17:35:ac:a3: 3e:b2:f8:9a:18:64:55:2a:0f:90:21:1c:1a:5f:74:0b:7d:1a: 75:07:84:e0:c9:a4:e9:25:d8:c8:1e:cf:64:86:10:08:cd:7e: 07:ad:98:83:b8:90:06:7f:35:cd:e0:98:12:79:56:04:9f:c2: 5a:8e:92:86:71:59:1d:68:3d:47:c1:c6:16:5a:7e:d3:ef:63: 68:d2:4b:49:8e:e5:01:5b:68:26:66:b7:f5:b3:7f:87:62:31: 9d:ad:d1:8a:2e:ec:2f:13:ce:9d:04:2d:01:cb:c3:20:26:1b: aa:0e:7f:d3:cc:17:3e:16:06:d5:1c:bc:66:45:88:28:cc:b7: 0b:64:be:46:65:75:34:ef:22:f1:ee:96:cb:23:7c:69:a0:23: e4:e2:61:bc:c5:90:af:85:e9:44:3b:27:46:48:15:90:59:b0: eb:e3:d7:a9:42:a7:b4:8f:1e:5d:a8:f9:44:5f:31:78:d1:a8: d7:71:9f:48:f0:fc:df:2b:1c:85:9e:76:36:70:49:e3:7c:0e: 5b:26:df:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjCJ7ZvBBzhfy5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODM4OTAyZjctNWNmZi00ZTNlLThjNGEtOGVlZTg1ZjQ2ZDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN+IuzkrR+6oBL1L/JYJnJDb1ogCfEoHrBgk fVmdCczJRuKajrVAeNqVsnsfcbMY5F4XFNDsbdKH06f0Ql7Hj+PuOwkq6wDFbKnV lPxWKNRBRllSPuCsv2Ymap1Ss9t8S57Ki99ZXvGOA5yzNJ2Oqg5mumoeDPNFXtdl PB9essYC3uGH2jQiyHueMpQlvY0TJPCD4gnpjQ15GwkWJnpVksgBkvL6fxc4kOPi wjU9OLQPGYglrp3l+uz9cQPDcfFSsar+0YFNj5ZOgew6m5U6zSHK38S2NcJOXe8V FTn3LsEyWXD8udrEPWdYZqOUBEv9Dk4/8bZWVyZHBKod8/fFVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcLZ1nmbDyfusyZxgpQJA+xSKBqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvOTk0Yjc3MzItZDdkZS0z YjE4LWE4ZGUtZTExNWIyYjE0YmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYD/yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaZLumSXp7z3kuzrIcSJUVdam/W9z54nlOzbAMdIVVtb6bSeOU0fG5r E4bR9z6PckeVFzWsoz6y+JoYZFUqD5AhHBpfdAt9GnUHhODJpOkl2Mgez2SGEAjN fgetmIO4kAZ/Nc3gmBJ5VgSfwlqOkoZxWR1oPUfBxhZaftPvY2jSS0mO5QFbaCZm t/Wzf4diMZ2t0You7C8Tzp0ELQHLwyAmG6oOf9PMFz4WBtUcvGZFiCjMtwtkvkZl dTTvIvHulssjfGmgI+TiYbzFkK+F6UQ7J0ZIFZBZsOvj16lCp7SPHl2o+URfMXjR qNdxn0jw/N8rHIWedjZwSeN8Dlsm3zg= -----END CERTIFICATE-----Generated at Fri Sep 25 16:36:09 2026 by rpki-client