$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/826a4506-faff-3fc0-834f-c2447661ac44.roa File: 826a4506-faff-3fc0-834f-c2447661ac44.roa (raw, json) Hash identifier: ++CfOKqGkZpsL18EMpcebDwdPqNMRQBwbid4KzRiSJA= Subject key identifier: B5:96:48:E6:61:2B:F2:16:C8:8E:2D:A2:70:CA:AE:86:54:71:00:B1 Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584D19B4BB8E13E4E08AA74CB060 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/826a4506-faff-3fc0-834f-c2447661ac44.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 5065 IP address blocks: 65.87.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:bb:8e:13:e4:e0:8a:a7:4c:b0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=a0722b71-94a9-4cf5-a551-0d2b6d0f90ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c2:8b:d7:f0:8e:ab:15:25:7b:99:59:45:93: 3d:7c:83:b5:08:67:26:70:c9:68:8c:4e:5d:af:05: 3d:ec:88:a7:36:f9:66:df:e3:b0:11:b0:bd:aa:c9: 96:f7:8e:00:a1:d5:66:72:eb:09:08:85:5c:94:ab: 23:f0:86:8f:b2:d2:cd:3f:96:43:e4:3e:04:2b:69: 7c:d9:cd:5f:fd:89:cf:aa:77:cf:46:83:62:08:f7: 93:bd:85:67:ae:0c:02:3e:a7:78:42:fa:09:04:52: b4:9c:22:06:54:23:fb:8a:91:13:76:08:63:e2:85: f3:59:61:fe:e1:31:fd:51:7b:e5:75:87:a8:19:27: 2d:30:8f:b2:85:49:6d:b8:3c:79:d6:cf:be:12:36: 26:48:25:27:ef:ba:a6:e3:a5:41:dd:54:88:3e:4b: 96:d7:68:06:f1:97:f4:ff:60:6c:ec:54:a6:cc:4a: db:6b:71:2c:b6:0a:4e:b6:da:47:be:68:79:1d:82: de:88:a0:e6:dd:b3:08:37:72:37:b5:33:c7:9d:c0: 19:58:62:da:b6:54:98:1e:4f:de:05:4f:ff:7e:bf: 83:34:e9:a0:39:cc:e7:97:13:84:ef:a3:dc:d3:04: db:6e:1e:c3:d9:3c:8e:eb:29:b4:56:31:f8:7e:24: f9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:96:48:E6:61:2B:F2:16:C8:8E:2D:A2:70:CA:AE:86:54:71:00:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/826a4506-faff-3fc0-834f-c2447661ac44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:69:2c:95:40:6d:0d:93:46:bf:f1:0a:58:42:f3:3c:d8:3a: dd:5e:9f:6c:e9:c4:a3:8a:9b:07:73:c5:23:70:07:25:ba:67: c4:3b:ec:dd:ab:da:28:29:e3:62:e6:72:a4:4e:44:a8:6f:f4: 4a:c7:cf:b5:3a:3f:c9:70:87:59:45:7b:07:fc:62:cc:c6:6d: 4f:4e:55:8c:14:de:89:f4:4b:e1:df:95:4e:5e:8e:b5:38:fd: 39:e7:ee:f2:6f:bf:1b:b6:af:13:1a:27:8a:a7:8e:cc:af:40: 3e:45:ae:b6:34:e0:4f:40:17:3a:04:40:b0:fc:6d:fd:8a:29: 34:52:4c:37:2e:66:5c:f2:ac:32:ab:2a:2c:a4:e9:e7:66:11: 71:a4:03:3b:85:91:64:b2:6d:f4:9d:63:b9:9e:00:a9:fd:9d: 78:44:78:88:1b:e7:e0:8e:6d:69:be:9b:6a:af:73:73:8d:6d: be:b2:4e:66:0c:3f:98:80:21:7e:eb:0f:e3:f1:3a:1a:18:4e: 58:81:4c:a6:b8:15:0b:7f:10:90:c8:20:6b:c7:13:29:80:09: 49:58:f1:ae:e7:24:9c:2c:af:9f:f4:c2:09:67:f8:55:48:91: 4d:4e:80:14:e7:69:ca:8b:51:d2:b9:99:07:92:ac:67:92:f3: 44:34:c1:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtLuOE+TgiqdMsGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YTA3MjJiNzEtOTRhOS00Y2Y1LWE1NTEtMGQyYjZkMGY5MGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cKL1/COqxUle5lZRZM9fIO1CGcmcMlojE5d rwU97IinNvlm3+OwEbC9qsmW944AodVmcusJCIVclKsj8IaPstLNP5ZD5D4EK2l8 2c1f/YnPqnfPRoNiCPeTvYVnrgwCPqd4QvoJBFK0nCIGVCP7ipETdghj4oXzWWH+ 4TH9UXvldYeoGSctMI+yhUltuDx51s++EjYmSCUn77qm46VB3VSIPkuW12gG8Zf0 /2Bs7FSmzErba3EstgpOttpHvmh5HYLeiKDm3bMIN3I3tTPHncAZWGLatlSYHk/e BU//fr+DNOmgOcznlxOE76Pc0wTbbh7D2TyO6ym0VjH4fiT5LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWWSOZhK/IWyI4tonDKroZUcQCxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvODI2YTQ1MDYtZmFmZi0z ZmMwLTgzNGYtYzI0NDc2NjFhYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQVcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhpLJVAbQ2TRr/xClhC8zzYOt1en2zpxKOKmwdzxSNwByW6Z8Q77N2r 2igp42LmcqRORKhv9ErHz7U6P8lwh1lFewf8YszGbU9OVYwU3on0S+HflU5ejrU4 /Tnn7vJvvxu2rxMaJ4qnjsyvQD5FrrY04E9AFzoEQLD8bf2KKTRSTDcuZlzyrDKr Kiyk6edmEXGkAzuFkWSybfSdY7meAKn9nXhEeIgb5+CObWm+m2qvc3ONbb6yTmYM P5iAIX7rD+PxOhoYTliBTKa4FQt/EJDIIGvHEymACUlY8a7nJJwsr5/0wgln+FVI kU1OgBTnacqLUdK5mQeSrGeS80Q0wWk= -----END CERTIFICATE-----Generated at Thu Mar 26 17:54:16 2026 by rpki-client