$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/963b8bff-1896-3add-838d-b10debcde759.roa File: 963b8bff-1896-3add-838d-b10debcde759.roa (raw, json) Hash identifier: hhquvgy1wzKx1Jg9mXebCiMvD4lIzgbqQ9L4TR6WXJc= Subject key identifier: 1B:5E:FC:28:BC:B2:05:5C:59:99:AA:3A:F5:78:AD:86:BA:A8:ED:B9 Certificate issuer: /CN=87a7a98d-6ed8-48cc-953b-32292e94edde Certificate serial: 010D0C9F4328584DF4DB4C7798BB0AD483318F00 Authority key identifier: B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/963b8bff-1896-3add-838d-b10debcde759.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 32477 IP address blocks: 64.9.192.0/20 maxlen: 24 64.9.208.0/21 maxlen: 24 64.9.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:4c:77:98:bb:0a:d4:83:31:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87a7a98d-6ed8-48cc-953b-32292e94edde Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=848e17d8-5d5d-4cfb-8d5f-18a51d3692bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f8:a7:38:fa:cd:2c:fa:28:e7:87:3f:a1:d4: d4:01:48:59:a2:58:e0:82:ee:6b:90:70:58:3a:92: fc:ee:7f:93:3a:f0:48:c6:92:c0:7d:55:97:0a:5f: 30:4e:03:f6:34:d7:d5:b9:4c:1c:11:4f:04:b7:b2: 9e:23:8a:ab:22:ac:9a:52:a1:1c:86:12:3c:64:ce: 8c:bb:70:e3:c4:04:80:7d:a5:70:ce:5c:b0:ae:07: 9a:fe:53:70:e7:11:96:51:b7:4f:21:76:42:3c:07: 1e:76:ac:8a:ec:c9:cf:93:58:d5:1f:94:8c:df:91: 71:e4:0c:c1:05:61:61:1f:49:00:f6:24:0f:b8:18: db:bd:fa:1d:34:e3:a2:00:b7:2d:19:41:68:21:5b: ed:fb:59:90:7e:87:0a:5a:45:ee:f2:79:a0:0b:85: 16:a4:b0:3f:27:3b:da:37:30:a9:09:02:e2:52:04: 00:d2:3b:8e:c1:da:6b:b0:da:7c:fa:2a:fb:20:08: 1b:66:22:e4:00:d8:f7:cd:ec:94:ff:f1:b2:4b:47: c1:23:08:11:ef:ae:33:d5:53:be:45:d1:8e:6a:f3: c6:28:43:26:51:0a:af:ce:a9:f2:d6:23:63:f7:ae: 75:22:4c:8c:73:d3:7f:96:c1:b6:93:3e:c5:c3:1a: c7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5E:FC:28:BC:B2:05:5C:59:99:AA:3A:F5:78:AD:86:BA:A8:ED:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/963b8bff-1896-3add-838d-b10debcde759.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl X509v3 Authority Key Identifier: keyid:B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer sbgp-ipAddrBlock: critical IPv4: 64.9.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:45:b7:34:77:f1:54:f3:9b:30:0c:08:a0:ac:41:f5:ba:12: e7:a4:80:56:b8:6d:88:76:d1:c4:48:92:c0:b2:43:67:86:d8: dd:9a:4e:a7:a8:75:c9:3c:d2:b0:8b:06:35:89:34:99:95:e8: db:6a:e3:41:62:e5:f6:b6:1e:0d:a6:1b:19:5e:43:21:63:17: 4f:7c:87:72:a2:65:22:99:f6:c0:91:80:7d:1e:df:cc:ed:07: d6:0b:3c:0f:d1:f3:81:91:b8:13:df:fa:90:a4:fd:4d:d8:61: 28:00:10:e5:48:d0:cc:dc:95:c2:f0:cd:6e:cb:06:52:e7:b3: a5:9d:ed:0f:ef:a3:6f:e8:60:15:f8:78:3c:f8:f0:27:dd:d6: 6e:ed:c5:59:d2:40:d3:6c:0c:50:74:dd:83:04:0f:9e:5a:7d: 68:0e:b9:45:6a:ed:3f:b1:07:e3:8d:14:f6:74:9b:09:97:37: 4f:eb:67:dd:28:e4:26:06:66:45:04:5f:d9:cc:97:45:9b:11: c3:a6:e3:85:71:1b:e2:a7:df:95:10:65:40:0f:ac:f8:15:dd: 6c:bf:98:57:f4:d0:69:d5:bc:4b:63:1f:76:d3:78:41:a7:94: b6:c3:68:06:ed:63:8f:bc:ac:20:05:a1:0a:54:a7:ee:90:f8: 71:ff:54:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3020x3mLsK1IMxjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdhN2E5OGQtNmVkOC00OGNjLTk1M2ItMzIyOTJlOTRl ZGRlMB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk ODQ4ZTE3ZDgtNWQ1ZC00Y2ZiLThkNWYtMThhNTFkMzY5MmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfinOPrNLPoo54c/odTUAUhZoljggu5rkHBY OpL87n+TOvBIxpLAfVWXCl8wTgP2NNfVuUwcEU8Et7KeI4qrIqyaUqEchhI8ZM6M u3DjxASAfaVwzlywrgea/lNw5xGWUbdPIXZCPAcedqyK7MnPk1jVH5SM35Fx5AzB BWFhH0kA9iQPuBjbvfodNOOiALctGUFoIVvt+1mQfocKWkXu8nmgC4UWpLA/Jzva NzCpCQLiUgQA0juOwdprsNp8+ir7IAgbZiLkANj3zeyU//GyS0fBIwgR764z1VO+ RdGOavPGKEMmUQqvzqny1iNj9651IkyMc9N/lsG2kz7FwxrHVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBte/Ci8sgVcWZmqOvV4rYa6qO25MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84N2E3 YTk4ZC02ZWQ4LTQ4Y2MtOTUzYi0zMjI5MmU5NGVkZGUvOTYzYjhiZmYtMTg5Ni0z YWRkLTgzOGQtYjEwZGViY2RlNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODdhN2E5OGQtNmVkOC00OGNjLTk1 M2ItMzIyOTJlOTRlZGRlLzg3YTdhOThkLTZlZDgtNDhjYy05NTNiLTMyMjkyZTk0 ZWRkZS5jcmwwHwYDVR0jBBgwFoAUs0j+Y6H+R1dk/0RTBlXAV0Ul380wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84N2E3YTk4ZC02ZWQ4LTQ4Y2MtOTUzYi0zMjI5 MmU5NGVkZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQAnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVFtzR38VTzmzAMCKCsQfW6EuekgFa4bYh20cRIksCyQ2eG2N2aTqeo dck80rCLBjWJNJmV6Ntq40Fi5fa2Hg2mGxleQyFjF098h3KiZSKZ9sCRgH0e38zt B9YLPA/R84GRuBPf+pCk/U3YYSgAEOVI0MzclcLwzW7LBlLns6Wd7Q/vo2/oYBX4 eDz48Cfd1m7txVnSQNNsDFB03YMED55afWgOuUVq7T+xB+ONFPZ0mwmXN0/rZ90o 5CYGZkUEX9nMl0WbEcOm44VxG+Kn35UQZUAPrPgV3Wy/mFf00GnVvEtjH3bTeEGn lLbDaAbtY4+8rCAFoQpUp+6Q+HH/VLw= -----END CERTIFICATE-----Generated at Wed Jun 10 03:39:26 2026 by rpki-client