$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/963b8bff-1896-3add-838d-b10debcde759.roa File: 963b8bff-1896-3add-838d-b10debcde759.roa (raw, json) Hash identifier: tkiSVFK0P59/6ZBT1GPkiPIEXZ+kuhnGxHGky5qeEJw= Subject key identifier: E6:42:59:8F:03:29:80:AD:0E:06:E2:65:98:49:1C:F3:B6:65:C4:88 Certificate issuer: /CN=87a7a98d-6ed8-48cc-953b-32292e94edde Certificate serial: 010D0C9F4328584B534EC92E1FA8A1342C26CB80 Authority key identifier: B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/963b8bff-1896-3add-838d-b10debcde759.roa Signing time: Fri 26 Sep 2025 16:52:13 +0000 ROA not before: Fri 26 Sep 2025 16:52:13 +0000 ROA not after: Thu 25 Dec 2025 17:52:13 +0000 asID: 32477 IP address blocks: 64.9.192.0/20 maxlen: 24 64.9.208.0/21 maxlen: 24 64.9.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:53:4e:c9:2e:1f:a8:a1:34:2c:26:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87a7a98d-6ed8-48cc-953b-32292e94edde Validity Not Before: Sep 26 16:52:13 2025 GMT Not After : Dec 25 17:52:13 2025 GMT Subject: CN=9f55d10b-554a-4e0a-9e77-a8ad02664ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8e:76:22:89:bd:f2:32:e1:c2:ba:93:ff:9a: 3e:93:22:8b:4d:09:6c:fa:dd:77:7c:5c:5b:35:13: c0:6d:2a:9b:1e:d4:2a:2e:c9:1c:39:75:0e:35:86: 62:29:70:46:71:26:fc:34:65:04:98:9b:48:9b:ac: 1a:93:51:ae:f1:bd:c5:8b:8e:05:0d:a9:9f:1d:42: 62:2c:11:3a:7c:36:18:2f:9b:25:a7:62:0d:d7:ca: 45:f5:96:ad:01:46:29:da:87:59:95:fc:8b:1f:97: de:14:43:54:22:95:ae:a8:85:49:ca:42:4d:e0:f7: ee:04:00:43:24:9b:fa:6b:86:54:56:a2:96:36:db: 55:10:d3:b6:fa:a3:fc:9b:21:c9:2e:8f:75:a1:5b: 7f:e9:a7:7a:bc:7f:dc:76:f2:51:1f:57:0a:f6:b2: 34:84:b7:ce:96:93:2c:b6:7e:ae:c8:bb:1f:2d:ec: f7:87:90:d4:9a:38:89:43:95:94:5e:4f:e0:fa:9c: 20:ba:3a:3b:74:50:03:f3:83:9d:fa:fa:13:ae:1a: 07:6d:c8:52:31:0d:67:46:19:21:8a:14:ea:87:2b: bf:0c:15:c1:34:8b:81:f8:b7:8b:c6:4e:47:fc:cc: 1d:d3:37:68:72:00:cd:73:36:0f:bd:fb:25:6f:ba: c1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:42:59:8F:03:29:80:AD:0E:06:E2:65:98:49:1C:F3:B6:65:C4:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/963b8bff-1896-3add-838d-b10debcde759.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl X509v3 Authority Key Identifier: keyid:B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer sbgp-ipAddrBlock: critical IPv4: 64.9.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:d5:3b:38:96:cc:12:6f:10:47:15:87:a6:bb:16:e2:a1:5c: 68:2f:af:8c:75:9d:4b:0e:24:0a:65:de:09:29:f5:7c:ac:d8: 8e:af:49:4e:ef:10:6d:1d:be:65:87:27:fb:16:dd:f3:c0:e8: a9:16:f3:3d:a8:1d:b7:99:fe:d1:c0:e7:11:0c:e9:9a:f1:10: bf:5c:11:40:db:81:a6:14:b8:61:d2:b9:17:4b:e5:ed:45:08: 13:2a:42:23:de:aa:a1:0d:9c:76:b2:2e:f8:8b:94:d9:54:6e: a6:df:5a:f6:a2:59:fd:af:81:2c:83:24:e0:07:3e:57:6d:45: f4:d4:81:dd:4e:33:bd:81:9c:70:d7:2f:e1:1a:c8:58:3c:c3: 52:0a:2f:a6:d3:2f:b3:d8:be:fd:89:cc:b3:59:d1:05:7e:14: 4c:25:ce:92:64:11:22:a7:70:cc:c1:3e:dc:51:5e:b6:ce:12: c1:b5:28:5f:84:62:11:9c:2c:58:bd:e4:78:8d:9c:4b:a7:76: c7:23:4c:70:36:46:59:f4:94:7b:53:e5:02:3f:af:fe:66:3a: 6c:ba:b4:93:d4:2c:11:b5:47:c1:76:54:60:37:50:dc:3c:86: 51:5f:03:03:fa:3b:23:36:38:d8:96:b1:7c:5c:f3:be:57:a6: 21:9e:22:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtTTskuH6ihNCwmy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdhN2E5OGQtNmVkOC00OGNjLTk1M2ItMzIyOTJlOTRl ZGRlMB4XDTI1MDkyNjE2NTIxM1oXDTI1MTIyNTE3NTIxM1owLzEtMCsGA1UEAxMk OWY1NWQxMGItNTU0YS00ZTBhLTllNzctYThhZDAyNjY0ZWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj452Iom98jLhwrqT/5o+kyKLTQls+t13fFxb NRPAbSqbHtQqLskcOXUONYZiKXBGcSb8NGUEmJtIm6wak1Gu8b3Fi44FDamfHUJi LBE6fDYYL5slp2IN18pF9ZatAUYp2odZlfyLH5feFENUIpWuqIVJykJN4PfuBABD JJv6a4ZUVqKWNttVENO2+qP8myHJLo91oVt/6ad6vH/cdvJRH1cK9rI0hLfOlpMs tn6uyLsfLez3h5DUmjiJQ5WUXk/g+pwgujo7dFAD84Od+voTrhoHbchSMQ1nRhkh ihTqhyu/DBXBNIuB+LeLxk5H/Mwd0zdocgDNczYPvfslb7rBRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZCWY8DKYCtDgbiZZhJHPO2ZcSIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84N2E3 YTk4ZC02ZWQ4LTQ4Y2MtOTUzYi0zMjI5MmU5NGVkZGUvOTYzYjhiZmYtMTg5Ni0z YWRkLTgzOGQtYjEwZGViY2RlNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODdhN2E5OGQtNmVkOC00OGNjLTk1 M2ItMzIyOTJlOTRlZGRlLzg3YTdhOThkLTZlZDgtNDhjYy05NTNiLTMyMjkyZTk0 ZWRkZS5jcmwwHwYDVR0jBBgwFoAUs0j+Y6H+R1dk/0RTBlXAV0Ul380wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84N2E3YTk4ZC02ZWQ4LTQ4Y2MtOTUzYi0zMjI5 MmU5NGVkZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQAnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzVOziWzBJvEEcVh6a7FuKhXGgvr4x1nUsOJApl3gkp9Xys2I6vSU7v EG0dvmWHJ/sW3fPA6KkW8z2oHbeZ/tHA5xEM6ZrxEL9cEUDbgaYUuGHSuRdL5e1F CBMqQiPeqqENnHayLviLlNlUbqbfWvaiWf2vgSyDJOAHPldtRfTUgd1OM72BnHDX L+EayFg8w1IKL6bTL7PYvv2JzLNZ0QV+FEwlzpJkESKncMzBPtxRXrbOEsG1KF+E YhGcLFi95HiNnEundscjTHA2Rln0lHtT5QI/r/5mOmy6tJPULBG1R8F2VGA3UNw8 hlFfAwP6OyM2ONiWsXxc875XpiGeIuI= -----END CERTIFICATE-----Generated at Wed Oct 8 19:39:55 2025 by rpki-client