$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/3c268bbe-b6f7-386b-a0f0-79336ca4fea9.roa File: 3c268bbe-b6f7-386b-a0f0-79336ca4fea9.roa (raw, json) Hash identifier: CN6tscWn9BqLtYP2VUIBpndVPTmrv7XGwR5GYEiNJ8A= Subject key identifier: 40:88:7A:2F:78:53:09:87:64:DF:A0:C2:D7:DD:1C:75:C4:7A:57:8D Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584D3F64D1A8ADDBB77C09500700 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/3c268bbe-b6f7-386b-a0f0-79336ca4fea9.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 402101 IP address blocks: 65.87.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d1:a8:ad:db:b7:7c:09:50:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=60de7a55-13c4-4026-b7cf-b0869d4d0572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b8:bb:2a:ae:b4:15:02:2e:46:0a:1b:39:70: 7f:0b:c5:f8:60:2c:c0:7a:3f:c7:b1:21:71:8b:a2: 63:ea:8f:4e:19:35:ef:5f:c4:63:5e:b4:a8:bf:9b: f4:2e:7c:66:36:28:f6:77:da:ad:e8:81:84:d3:02: b3:e9:c7:14:4c:40:40:2f:7c:24:6e:7f:90:e4:4b: 7c:57:8c:f4:13:fb:eb:47:4b:23:b2:29:97:6b:68: e8:d8:02:e6:5a:d0:cc:07:0d:bc:14:65:ac:57:0c: 44:6e:e4:92:77:ea:f4:f6:b8:3d:ed:45:b5:b9:08: 13:4c:3f:d5:0d:9f:ac:39:a1:47:8e:c1:e9:9b:62: ec:fc:8b:eb:4a:6f:42:6f:85:58:b0:71:51:fc:db: 31:bf:24:7d:96:e4:b4:d6:1d:9a:04:75:f7:e9:1f: 14:f8:ea:4c:29:09:b3:d9:55:ad:1a:2a:c3:24:41: 25:4b:2e:ce:d5:cd:2b:f9:dd:7e:f2:a4:d3:7c:b2: 93:38:61:bc:74:e2:e2:1a:f8:ef:2c:0c:1a:43:74: 1b:69:5c:2e:18:57:da:7d:d3:e7:df:97:e1:d6:65: ea:09:55:7b:4c:0a:b0:98:af:a5:7b:25:a9:26:7c: 01:c9:dd:04:64:9b:6c:8f:e8:20:e0:7a:71:70:e1: e8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:88:7A:2F:78:53:09:87:64:DF:A0:C2:D7:DD:1C:75:C4:7A:57:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/3c268bbe-b6f7-386b-a0f0-79336ca4fea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:8b:8e:d6:ad:cc:76:14:60:a2:f3:b2:c1:49:d2:85:38:8e: a3:8e:2c:f5:c0:56:ff:0c:d1:d0:9d:0f:b9:36:8f:8c:ec:d1: 72:e4:da:d3:a3:c7:86:a8:b9:30:34:36:61:ea:e5:33:75:4a: 3d:d9:76:df:26:63:af:1f:d0:b1:75:b9:de:87:4a:16:61:56: 86:fa:21:41:86:22:a3:fa:5c:c1:05:4d:8d:c1:e6:fb:cb:b4: dd:78:29:df:76:31:a0:e2:e1:ff:ee:73:0d:4d:37:d1:38:15: af:38:90:ec:f7:22:41:88:36:17:49:cc:71:bc:46:50:85:8e: 29:98:95:a7:4b:19:bc:ae:95:2d:5e:26:98:80:19:fd:62:81: 43:6c:13:e8:60:0a:ba:5e:89:e1:34:b5:de:e6:63:d2:08:9f: aa:e7:d0:d4:ce:0d:32:aa:78:22:8d:59:fb:39:60:51:4d:e3: aa:db:a3:d9:b6:24:26:88:87:c1:43:90:2a:30:6a:67:8f:b5: a9:09:db:81:67:5a:34:a7:b4:e7:be:54:5d:49:45:3f:69:ab: 4e:10:1b:eb:61:08:86:5d:70:ec:5c:7d:fc:ee:50:11:79:63: 3a:e6:2f:49:2b:8d:73:06:bb:46:a5:f3:91:06:e9:17:d8:ba: 0a:8d:9e:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNGordu3fAlQBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NjBkZTdhNTUtMTNjNC00MDI2LWI3Y2YtYjA4NjlkNGQwNTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Li7Kq60FQIuRgobOXB/C8X4YCzAej/HsSFx i6Jj6o9OGTXvX8RjXrSov5v0LnxmNij2d9qt6IGE0wKz6ccUTEBAL3wkbn+Q5Et8 V4z0E/vrR0sjsimXa2jo2ALmWtDMBw28FGWsVwxEbuSSd+r09rg97UW1uQgTTD/V DZ+sOaFHjsHpm2Ls/IvrSm9Cb4VYsHFR/NsxvyR9luS01h2aBHX36R8U+OpMKQmz 2VWtGirDJEElSy7O1c0r+d1+8qTTfLKTOGG8dOLiGvjvLAwaQ3QbaVwuGFfafdPn 35fh1mXqCVV7TAqwmK+leyWpJnwByd0EZJtsj+gg4HpxcOHolwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECIei94UwmHZN+gwtfdHHXEeleNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvM2MyNjhiYmUtYjZmNy0z ODZiLWEwZjAtNzkzMzZjYTRmZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiLjtatzHYUYKLzssFJ0oU4jqOOLPXAVv8M0dCdD7k2j4zs0XLk2tOj x4aouTA0NmHq5TN1Sj3Zdt8mY68f0LF1ud6HShZhVob6IUGGIqP6XMEFTY3B5vvL tN14Kd92MaDi4f/ucw1NN9E4Fa84kOz3IkGINhdJzHG8RlCFjimYladLGbyulS1e JpiAGf1igUNsE+hgCrpeieE0td7mY9IIn6rn0NTODTKqeCKNWfs5YFFN46rbo9m2 JCaIh8FDkCowamePtakJ24FnWjSntOe+VF1JRT9pq04QG+thCIZdcOxcffzuUBF5 YzrmL0krjXMGu0al85EG6RfYugqNnkE= -----END CERTIFICATE-----Generated at Thu Mar 26 13:01:40 2026 by rpki-client