$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/7de08db9-0304-3a90-9fff-6d912f94593f.roa File: 7de08db9-0304-3a90-9fff-6d912f94593f.roa (raw, json) Hash identifier: Vhzyw24+qo/ElDwe/SkVNnXA0YJtIbRi7zIT0UaAVvE= Subject key identifier: D5:CC:14:B2:E4:BC:90:03:DA:DA:EA:BA:4D:B7:7D:F0:7B:D2:14:49 Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584B28C6DAA8D8415AD66C1DD880 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/7de08db9-0304-3a90-9fff-6d912f94593f.roa Signing time: Thu 11 Sep 2025 13:00:41 +0000 ROA not before: Thu 11 Sep 2025 13:00:41 +0000 ROA not after: Wed 10 Dec 2025 14:00:41 +0000 asID: 54339 IP address blocks: 65.87.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:28:c6:da:a8:d8:41:5a:d6:6c:1d:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Sep 11 13:00:41 2025 GMT Not After : Dec 10 14:00:41 2025 GMT Subject: CN=b730ebb1-8d26-4d34-8e1b-4cb9c23c537d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:33:8b:40:66:e2:67:5a:eb:e4:db:63:c9:9c: 99:2c:6f:eb:a2:22:28:11:02:ee:c7:70:3e:89:90: b1:cf:44:4d:d9:a8:57:50:8e:d5:43:b4:5c:fa:b1: f5:e2:f3:45:91:09:69:82:57:8a:60:83:fd:9f:da: 94:7e:de:48:44:8b:2d:db:9f:a3:32:4d:f4:3e:15: 60:9e:00:9a:91:f4:3c:a2:2f:1e:75:f5:a4:4d:d9: fe:ee:9c:69:a3:f5:e5:e8:30:d4:fe:53:e3:d6:61: cb:4d:dc:67:48:00:0e:47:f0:88:2e:d9:9f:60:62: b4:d0:ed:11:cc:47:20:62:1e:89:04:01:a9:cd:27: 02:29:a9:da:62:47:f0:e7:85:cb:7d:3a:01:ba:93: 3c:ef:92:66:43:b1:7b:99:3a:6f:5d:62:00:f4:27: 3c:ef:64:0a:72:cf:f5:d7:6d:b6:4f:6d:54:08:5e: 78:96:84:d2:65:25:df:c7:e4:f5:85:b1:6c:3a:aa: ba:62:3b:23:92:a2:cb:70:7d:7d:ba:9d:2d:6d:5a: ff:da:05:51:d7:19:18:80:46:db:8c:1c:ac:35:9c: df:13:f6:cf:d5:f2:fa:dd:0b:4d:75:ff:98:d7:08: ac:a3:0e:d9:d3:ca:08:be:ea:8a:fd:3e:0a:d9:9d: f7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CC:14:B2:E4:BC:90:03:DA:DA:EA:BA:4D:B7:7D:F0:7B:D2:14:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/7de08db9-0304-3a90-9fff-6d912f94593f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:f0:19:b5:44:1f:92:f5:ea:db:37:6e:17:29:77:e5:d1:ab: 44:eb:66:16:d9:97:bc:57:79:c4:d2:6f:c2:9b:8a:bd:ea:7b: 83:02:37:9b:d8:68:5c:65:c8:3b:1c:f3:09:b0:7e:ab:9b:30: f3:62:db:24:06:61:10:eb:c9:9e:cf:60:7a:5c:03:d3:26:9d: 8e:ba:14:cb:26:71:0f:d4:43:71:7c:f8:5e:76:54:2f:85:0e: d7:14:50:5a:fa:3e:79:e9:5c:e2:ce:ef:b5:0e:ef:80:69:cc: 59:6a:e0:ac:a7:e7:c7:90:2a:91:94:0e:85:8c:e8:44:f4:e0: 42:04:89:df:27:d6:c2:24:f6:7b:9f:ed:7a:4f:25:39:41:8d: 20:c3:b8:8a:43:e2:d2:e2:09:4b:ac:03:dd:03:d1:98:e8:89: 49:33:5c:d7:19:c1:37:99:6d:03:e1:d6:89:2b:82:2e:fc:ea: 17:c7:21:71:d6:96:fc:c2:9a:93:cd:93:2b:5e:c5:a6:bb:c3: 8b:2f:e6:f7:0a:e4:7d:40:ea:67:41:04:dc:ed:83:73:23:36: cf:27:ed:ff:ad:c0:70:9e:bc:82:27:d6:7d:4f:f8:46:45:d6: 61:e2:2c:a7:e4:e2:0d:23:2b:1e:53:e8:64:71:6a:9c:e9:03: c5:fc:e6:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsoxtqo2EFa1mwd2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDkxMTEzMDA0MVoXDTI1MTIxMDE0MDA0MVowLzEtMCsGA1UEAxMk YjczMGViYjEtOGQyNi00ZDM0LThlMWItNGNiOWMyM2M1MzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzOLQGbiZ1rr5NtjyZyZLG/roiIoEQLux3A+ iZCxz0RN2ahXUI7VQ7Rc+rH14vNFkQlpgleKYIP9n9qUft5IRIst25+jMk30PhVg ngCakfQ8oi8edfWkTdn+7pxpo/Xl6DDU/lPj1mHLTdxnSAAOR/CILtmfYGK00O0R zEcgYh6JBAGpzScCKanaYkfw54XLfToBupM875JmQ7F7mTpvXWIA9Cc872QKcs/1 1222T21UCF54loTSZSXfx+T1hbFsOqq6YjsjkqLLcH19up0tbVr/2gVR1xkYgEbb jBysNZzfE/bP1fL63QtNdf+Y1wisow7Z08oIvuqK/T4K2Z33aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXMFLLkvJAD2trquk23ffB70hRJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvN2RlMDhkYjktMDMwNC0z YTkwLTlmZmYtNmQ5MTJmOTQ1OTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjwGbVEH5L16ts3bhcpd+XRq0TrZhbZl7xXecTSb8Kbir3qe4MCN5vY aFxlyDsc8wmwfqubMPNi2yQGYRDryZ7PYHpcA9MmnY66FMsmcQ/UQ3F8+F52VC+F DtcUUFr6PnnpXOLO77UO74BpzFlq4Kyn58eQKpGUDoWM6ET04EIEid8n1sIk9nuf 7XpPJTlBjSDDuIpD4tLiCUusA90D0ZjoiUkzXNcZwTeZbQPh1okrgi786hfHIXHW lvzCmpPNkytexaa7w4sv5vcK5H1A6mdBBNztg3MjNs8n7f+twHCevIIn1n1P+EZF 1mHiLKfk4g0jKx5T6GRxapzpA8X85u0= -----END CERTIFICATE-----Generated at Mon Oct 20 05:06:59 2025 by rpki-client