$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/963b8bff-1896-3add-838d-b10debcde759.roa File: 963b8bff-1896-3add-838d-b10debcde759.roa (raw, json) Hash identifier: VuNSQcOWiR9Yn6Oh5yuEuozrGjZkZ3h8nZOj2Xu5b3k= Subject key identifier: 2E:8E:59:7B:68:6B:EE:75:B7:D9:D0:69:6E:AC:13:BA:AE:C1:34:12 Certificate issuer: /CN=87a7a98d-6ed8-48cc-953b-32292e94edde Certificate serial: 010D0C9F4328584D143D341B36362E2DFA00F9E0 Authority key identifier: B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/963b8bff-1896-3add-838d-b10debcde759.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 32477 IP address blocks: 64.9.192.0/20 maxlen: 24 64.9.208.0/21 maxlen: 24 64.9.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:34:1b:36:36:2e:2d:fa:00:f9:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87a7a98d-6ed8-48cc-953b-32292e94edde Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=894cd2ff-cc1e-4946-bb31-db889901a6ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:52:2e:de:e2:07:dd:a5:b8:44:c2:78:62:13: 71:a6:1a:8e:94:d9:df:c0:c7:8f:6f:3f:2b:a8:4a: 13:89:e2:3d:81:31:72:35:d9:9f:25:d4:f0:5c:2b: a6:f4:0d:a6:f4:89:d2:cb:07:71:3a:df:e0:23:2e: d3:b5:7a:70:aa:7b:f8:a4:bb:4e:60:07:be:c6:18: 52:e8:32:32:62:3a:ad:f2:69:68:75:69:01:70:71: 65:e9:ef:17:80:b7:53:e5:ad:e3:fc:65:5b:7a:fb: c2:c3:a7:96:79:46:24:14:4c:a2:78:9d:55:88:b8: 87:30:26:fc:12:04:f3:a4:9b:de:52:9c:e8:6e:9b: 06:5c:e5:db:c5:8f:a1:8f:ff:00:71:d3:6c:36:e5: 03:fc:39:69:44:f7:10:6e:6e:ce:62:36:3f:9e:fd: b8:f8:6c:44:2c:93:6a:96:d9:11:ad:2c:ed:85:f1: 46:59:a1:e0:34:e3:36:a3:c4:90:6a:6a:b4:c3:89: b8:d3:45:67:64:e4:61:56:4b:96:35:55:08:6e:97: fd:ad:13:76:0a:19:b5:01:2e:26:17:5a:60:ec:f5: 43:e3:1d:9e:51:7d:b9:52:2e:b0:a3:92:27:af:58: 1f:e3:a5:9a:5c:46:ad:f6:49:57:43:e7:c9:f0:65: c3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8E:59:7B:68:6B:EE:75:B7:D9:D0:69:6E:AC:13:BA:AE:C1:34:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/963b8bff-1896-3add-838d-b10debcde759.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl X509v3 Authority Key Identifier: keyid:B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer sbgp-ipAddrBlock: critical IPv4: 64.9.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:64:37:4b:62:46:aa:d1:97:35:fd:80:4f:65:09:21:df:7e: aa:8b:b6:11:3c:1e:07:7d:09:dc:a9:2d:f3:a5:de:35:00:e6: 36:e2:c1:a1:10:14:c6:c8:c2:c8:9f:6a:65:05:d4:68:7c:1d: e2:70:f0:eb:cc:23:25:cb:98:34:e6:27:18:58:29:94:8e:81: b5:22:07:6d:b4:eb:f8:2b:68:e4:3f:85:66:da:ad:d7:40:c7: 5a:04:0b:c4:6e:ee:b5:e4:66:4e:60:f9:af:61:05:c0:7e:50: 99:a7:50:3e:ac:79:e5:10:3a:68:8f:32:74:97:c3:cd:0a:40: 94:06:6a:7d:54:55:98:3b:f6:29:16:5c:47:11:1e:ac:ef:b0: 02:9f:79:d8:55:91:ab:16:48:3c:e5:40:55:16:d2:c3:f9:c5: 18:39:3d:b8:e4:a1:1c:fc:80:be:54:d2:7b:51:89:0b:26:f0: dd:66:00:b8:29:dd:81:f2:f8:c2:47:3c:e5:52:e4:60:72:1e: 9d:2b:33:b5:b2:99:11:fe:ec:b9:a5:80:9c:f1:d2:d2:74:26: 73:12:0a:f1:66:f2:b3:ee:88:88:50:c3:b2:80:0d:28:3e:81: 48:21:b1:7f:3a:a4:14:1f:f0:48:15:ac:df:09:53:e9:53:aa: 62:94:1a:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPTQbNjYuLfoA+eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdhN2E5OGQtNmVkOC00OGNjLTk1M2ItMzIyOTJlOTRl ZGRlMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ODk0Y2QyZmYtY2MxZS00OTQ2LWJiMzEtZGI4ODk5MDFhNmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFIu3uIH3aW4RMJ4YhNxphqOlNnfwMePbz8r qEoTieI9gTFyNdmfJdTwXCum9A2m9InSywdxOt/gIy7TtXpwqnv4pLtOYAe+xhhS 6DIyYjqt8mlodWkBcHFl6e8XgLdT5a3j/GVbevvCw6eWeUYkFEyieJ1ViLiHMCb8 EgTzpJveUpzobpsGXOXbxY+hj/8AcdNsNuUD/DlpRPcQbm7OYjY/nv24+GxELJNq ltkRrSzthfFGWaHgNOM2o8SQamq0w4m400VnZORhVkuWNVUIbpf9rRN2Chm1AS4m F1pg7PVD4x2eUX25Ui6wo5Inr1gf46WaXEat9klXQ+fJ8GXDRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6OWXtoa+51t9nQaW6sE7quwTQSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84N2E3 YTk4ZC02ZWQ4LTQ4Y2MtOTUzYi0zMjI5MmU5NGVkZGUvOTYzYjhiZmYtMTg5Ni0z YWRkLTgzOGQtYjEwZGViY2RlNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODdhN2E5OGQtNmVkOC00OGNjLTk1 M2ItMzIyOTJlOTRlZGRlLzg3YTdhOThkLTZlZDgtNDhjYy05NTNiLTMyMjkyZTk0 ZWRkZS5jcmwwHwYDVR0jBBgwFoAUs0j+Y6H+R1dk/0RTBlXAV0Ul380wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84N2E3YTk4ZC02ZWQ4LTQ4Y2MtOTUzYi0zMjI5 MmU5NGVkZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQAnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxkN0tiRqrRlzX9gE9lCSHffqqLthE8Hgd9CdypLfOl3jUA5jbiwaEQ FMbIwsifamUF1Gh8HeJw8OvMIyXLmDTmJxhYKZSOgbUiB2206/graOQ/hWbarddA x1oEC8Ru7rXkZk5g+a9hBcB+UJmnUD6seeUQOmiPMnSXw80KQJQGan1UVZg79ikW XEcRHqzvsAKfedhVkasWSDzlQFUW0sP5xRg5PbjkoRz8gL5U0ntRiQsm8N1mALgp 3YHy+MJHPOVS5GByHp0rM7WymRH+7LmlgJzx0tJ0JnMSCvFm8rPuiIhQw7KADSg+ gUghsX86pBQf8EgVrN8JU+lTqmKUGpI= -----END CERTIFICATE-----Generated at Thu Mar 26 13:38:50 2026 by rpki-client