$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/864fb58d-479d-3fa2-8674-fb97d8aa308a.roa File: 864fb58d-479d-3fa2-8674-fb97d8aa308a.roa (raw, json) Hash identifier: cjsNJY2pjPsJJ7Lhdc7GBdWxdFBwxGQs/f4K5qmGHgg= Subject key identifier: D9:CE:9E:98:E2:50:6F:0D:6D:7E:B1:01:B9:9F:3F:F7:6C:87:BF:FA Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584F549D4ED9A4783967BFBC6D80 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/864fb58d-479d-3fa2-8674-fb97d8aa308a.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 23473 IP address blocks: 96.63.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:4e:d9:a4:78:39:67:bf:bc:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=bf5ec7a6-b18a-452f-b551-27c0189ba94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:64:ce:1a:4d:de:45:76:46:ec:ac:d8:83:bb: a7:aa:1d:86:d3:dc:5f:00:fc:72:e0:b0:c4:30:fc: c6:de:ec:26:59:0f:ed:42:c9:65:a5:21:8c:8f:9e: f0:37:1f:68:51:24:94:8e:17:4c:52:53:ec:25:9a: 09:f0:d6:5f:5f:30:9a:f1:3e:e7:61:ae:ef:ea:7a: 83:c8:d9:8f:50:07:9d:63:d8:20:48:68:a1:e6:cb: a5:22:26:c7:b3:0c:01:f0:ee:ef:34:cc:24:67:40: 71:6d:13:75:5c:1a:0b:52:c9:e8:d0:97:eb:ea:1f: ca:8b:f5:6c:c9:8a:fe:a3:05:83:ec:44:40:9b:a9: f1:f5:e9:41:cf:90:90:fc:ce:92:69:63:b3:d7:6d: 95:56:b7:a0:2d:01:62:8c:10:93:a2:00:ba:09:79: e3:a4:00:76:58:26:5d:bc:f3:1c:ea:85:f9:f9:e7: 19:2b:ac:6f:33:55:11:bf:e3:f8:12:9a:d8:07:08: 99:34:b7:6c:32:98:67:d9:97:15:3a:9a:61:52:44: 28:02:cd:b5:40:e1:aa:81:e5:c3:8e:87:7f:06:d9: b5:c9:bf:91:45:34:e2:fd:64:33:5a:de:91:e5:f0: 5d:1b:3e:df:d7:ee:64:d4:7e:9d:96:48:6d:8d:53: 9c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CE:9E:98:E2:50:6F:0D:6D:7E:B1:01:B9:9F:3F:F7:6C:87:BF:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/864fb58d-479d-3fa2-8674-fb97d8aa308a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 96.63.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:b3:15:f9:93:1a:a2:c1:0f:fd:52:c9:74:94:34:22:cf:92: 6b:8e:f0:9f:82:82:d0:9a:91:91:4b:d4:5f:21:c1:34:26:11: d7:fe:cd:26:b3:85:79:3a:11:02:70:60:fa:79:b6:47:3b:cb: 8d:ec:20:2e:e3:30:e8:2f:02:7d:cb:da:e8:02:6f:9f:d6:ba: 8b:90:d8:43:f8:bd:b3:c0:75:70:b7:71:e3:03:49:bb:69:0a: b8:f3:07:9d:4f:91:d5:06:42:fe:c6:1d:ed:8c:c1:79:39:07: 7b:07:dc:c2:60:2c:02:4b:e1:f1:8b:f3:d9:34:97:e0:85:80: f7:85:9b:40:c6:76:ff:ba:95:59:b2:9d:4c:ce:37:bb:4e:fd: ce:ce:97:47:c7:97:43:54:07:f4:cb:32:69:81:e8:e0:33:65: 1d:7c:65:23:27:4a:ac:a5:20:cb:52:43:f5:6a:f1:4d:90:d3: a2:61:06:dd:38:1b:90:10:ac:c1:39:b1:ac:fa:28:f5:c3:07: 0a:d9:fb:b8:23:2f:c7:1a:33:72:5d:74:00:ae:ce:3d:30:6f: 16:7f:4b:11:33:ef:8a:73:cb:e2:82:01:db:23:9a:fc:5e:6e: 6c:ca:38:6c:d6:8c:52:15:b8:0d:6e:17:2b:42:12:5f:3a:29: 86:8f:00:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnU7ZpHg5Z7+8bYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YmY1ZWM3YTYtYjE4YS00NTJmLWI1NTEtMjdjMDE4OWJhOTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2TOGk3eRXZG7KzYg7unqh2G09xfAPxy4LDE MPzG3uwmWQ/tQsllpSGMj57wNx9oUSSUjhdMUlPsJZoJ8NZfXzCa8T7nYa7v6nqD yNmPUAedY9ggSGih5sulIibHswwB8O7vNMwkZ0BxbRN1XBoLUsno0Jfr6h/Ki/Vs yYr+owWD7ERAm6nx9elBz5CQ/M6SaWOz122VVregLQFijBCTogC6CXnjpAB2WCZd vPMc6oX5+ecZK6xvM1URv+P4EprYBwiZNLdsMphn2ZcVOpphUkQoAs21QOGqgeXD jod/Btm1yb+RRTTi/WQzWt6R5fBdGz7f1+5k1H6dlkhtjVOcUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnOnpjiUG8NbX6xAbmfP/dsh7/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvODY0ZmI1OGQtNDc5ZC0z ZmEyLTg2NzQtZmI5N2Q4YWEzMDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYD/2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOzFfmTGqLBD/1SyXSUNCLPkmuO8J+CgtCakZFL1F8hwTQmEdf+zSaz hXk6EQJwYPp5tkc7y43sIC7jMOgvAn3L2ugCb5/WuouQ2EP4vbPAdXC3ceMDSbtp CrjzB51PkdUGQv7GHe2MwXk5B3sH3MJgLAJL4fGL89k0l+CFgPeFm0DGdv+6lVmy nUzON7tO/c7Ol0fHl0NUB/TLMmmB6OAzZR18ZSMnSqylIMtSQ/Vq8U2Q06JhBt04 G5AQrME5saz6KPXDBwrZ+7gjL8caM3JddACuzj0wbxZ/SxEz74pzy+KCAdsjmvxe bmzKOGzWjFIVuA1uFytCEl86KYaPAFI= -----END CERTIFICATE-----Generated at Sun Oct 4 22:17:41 2026 by rpki-client