$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/96ff3873-db62-363d-9266-eb3debfc44a5.roa File: 96ff3873-db62-363d-9266-eb3debfc44a5.roa (raw, json) Hash identifier: Y1ee59QNq8gZmOFuSJC02xgsV3S7/PO0xCVd2bmBzF0= Subject key identifier: 6B:D6:D3:61:B3:80:26:95:30:09:B4:EE:88:60:11:6B:B2:FD:2E:C9 Certificate issuer: /CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Certificate serial: 010D0C9F4328584D20AF571505606FEED375B100 Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/96ff3873-db62-363d-9266-eb3debfc44a5.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 213122 IP address blocks: 64.112.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:57:15:05:60:6f:ee:d3:75:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=0c3e84ca-8b03-4b89-bd62-d4533134819e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:59:c9:18:a9:ea:24:9b:dc:e6:5d:45:96:fa: df:c0:29:b4:78:7e:8e:91:9f:13:a6:ad:5d:5f:8c: 22:b0:bb:07:1e:5c:37:76:f1:5c:1f:7a:98:d2:89: 50:8f:0b:54:0e:23:e1:6d:f1:75:7f:e6:0b:e3:ee: 70:bf:a6:da:52:2b:ce:cf:47:d1:0d:7b:45:dd:75: aa:e3:c3:99:60:2b:5a:da:2c:dd:ed:b0:55:09:ac: 56:c3:3b:83:a9:f9:5b:51:c8:64:95:a7:0f:fe:6e: 4c:36:9f:55:45:b8:b3:43:31:35:d4:ff:ba:92:50: 76:55:bb:35:3f:0c:89:76:62:a1:ca:cb:53:a6:ea: d4:4c:29:c6:a9:60:9c:98:33:75:c5:6c:6d:5f:de: e5:77:a2:f6:6c:6d:33:8d:2b:ff:09:f3:28:17:4e: 05:6e:b0:ff:73:22:d1:46:60:a5:a2:9b:34:fb:5a: 66:d1:97:50:dc:d0:e7:ca:ac:4c:7a:6d:ee:fe:47: b5:42:3f:20:91:ae:e2:27:ae:ed:ad:e4:da:65:d9: a3:66:a2:e4:8c:5a:d2:46:d2:c7:40:1a:31:5d:5a: cb:38:52:c2:0b:ab:3e:d6:ac:29:4b:62:2e:7f:37: 59:34:ea:1d:eb:6c:e1:71:88:b6:fa:6b:3b:b0:17: 22:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D6:D3:61:B3:80:26:95:30:09:B4:EE:88:60:11:6B:B2:FD:2E:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/96ff3873-db62-363d-9266-eb3debfc44a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl X509v3 Authority Key Identifier: keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer sbgp-ipAddrBlock: critical IPv4: 64.112.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:69:08:43:45:fa:9a:32:ab:65:73:66:43:29:28:71:e5:ae: 1a:91:23:bb:49:ee:48:8c:0c:30:10:34:15:60:b5:05:9a:09: 66:9b:50:73:4a:53:55:d0:6a:b6:58:c2:a3:5d:9b:23:ad:7c: 2f:e7:19:f6:b7:bd:fb:db:38:49:a3:5c:bd:98:ac:70:8b:cf: c0:46:75:7f:40:57:52:91:ff:be:78:be:52:91:e3:f1:53:b6: 5a:e3:47:07:7e:c2:33:46:b8:a0:7f:47:1e:c3:a1:eb:59:24: 6b:b0:72:57:48:1d:cd:4c:1e:13:8e:4b:40:41:47:67:ff:08: 59:0c:2a:70:1f:b0:88:a8:dc:1c:9e:f7:ee:95:08:84:11:c1: 64:36:7e:08:f9:63:42:6c:9d:00:68:36:b6:a1:39:b9:43:7b: d2:b5:00:7d:7f:eb:4f:3c:67:d7:68:d7:11:b5:17:d3:f3:97: 1d:02:fe:01:4f:4f:55:43:bd:f7:69:9a:6f:d8:2b:61:4e:c6: 09:ad:61:90:3b:cd:9c:d9:48:06:fe:1e:46:7c:3e:7c:df:d6: 93:68:1a:be:34:a0:0a:51:44:87:c2:ec:51:6b:8d:16:2d:21: cd:21:ee:f6:0d:61:f2:f3:d5:0b:df:2c:f4:f7:31:89:63:6d: a7:da:bf:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1cVBWBv7tN1sQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I0NDRiZDgtYmU2ZC00ODUzLWE0NjAtYjU3N2I2Zjg0 YjY1MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk MGMzZTg0Y2EtOGIwMy00Yjg5LWJkNjItZDQ1MzMxMzQ4MTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1nJGKnqJJvc5l1FlvrfwCm0eH6OkZ8Tpq1d X4wisLsHHlw3dvFcH3qY0olQjwtUDiPhbfF1f+YL4+5wv6baUivOz0fRDXtF3XWq 48OZYCta2izd7bBVCaxWwzuDqflbUchklacP/m5MNp9VRbizQzE11P+6klB2Vbs1 PwyJdmKhystTpurUTCnGqWCcmDN1xWxtX97ld6L2bG0zjSv/CfMoF04FbrD/cyLR RmClops0+1pm0ZdQ3NDnyqxMem3u/ke1Qj8gka7iJ67treTaZdmjZqLkjFrSRtLH QBoxXVrLOFLCC6s+1qwpS2IufzdZNOod62zhcYi2+ms7sBcisQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvW02GzgCaVMAm07ohgEWuy/S7JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0 NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3YjZmODRiNjUvOTZmZjM4NzMtZGI2Mi0z NjNkLTkyNjYtZWIzZGViZmM0NGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2I0NDRiZDgtYmU2ZC00ODUzLWE0 NjAtYjU3N2I2Zjg0YjY1L2NiNDQ0YmQ4LWJlNmQtNDg1My1hNDYwLWI1NzdiNmY4 NGI2NS5jcmwwHwYDVR0jBBgwFoAULaGwjDZqpw9uqZGyu0dezX7XWAkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYjQ0NGJkOC1iZTZkLTQ4NTMtYTQ2MC1iNTc3 YjZmODRiNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHBXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlpCENF+poyq2VzZkMpKHHlrhqRI7tJ7kiMDDAQNBVgtQWaCWabUHNK U1XQarZYwqNdmyOtfC/nGfa3vfvbOEmjXL2YrHCLz8BGdX9AV1KR/754vlKR4/FT tlrjRwd+wjNGuKB/Rx7DoetZJGuwcldIHc1MHhOOS0BBR2f/CFkMKnAfsIio3Bye 9+6VCIQRwWQ2fgj5Y0JsnQBoNrahOblDe9K1AH1/6088Z9do1xG1F9Pzlx0C/gFP T1VDvfdpmm/YK2FOxgmtYZA7zZzZSAb+HkZ8Pnzf1pNoGr40oApRRIfC7FFrjRYt Ic0h7vYNYfLz1QvfLPT3MYljbafav3A= -----END CERTIFICATE-----Generated at Fri Mar 13 13:32:04 2026 by rpki-client