$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/8fb75c5a-9fd9-31e5-9777-4fe3352292d4.roa File: 8fb75c5a-9fd9-31e5-9777-4fe3352292d4.roa (raw, json) Hash identifier: 5sTf9kmG9emyQPRPiS6NAnjpvsJNIz2vTXdaLTuFLZo= Subject key identifier: 4C:F9:02:11:65:84:D5:4E:6B:40:79:73:3D:39:4D:8C:23:61:A4:F4 Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584D3B34E77DA939C3BBBAEA2080 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/8fb75c5a-9fd9-31e5-9777-4fe3352292d4.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 25752 IP address blocks: 65.87.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:e7:7d:a9:39:c3:bb:ba:ea:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=bab1e905-f49b-4649-b102-5001e9439169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e0:41:04:a7:38:33:a9:dc:de:fc:2a:34:cb: 82:96:7d:37:ed:f2:94:3b:96:17:f6:89:18:10:46: c8:ed:33:72:5e:68:26:c6:ad:99:5c:db:0a:92:4b: 6d:bd:66:49:7b:19:39:d8:91:78:c9:af:9f:6a:ac: 0a:5f:4d:84:1f:0f:84:4a:83:98:de:9c:5b:11:6e: 9f:72:60:58:20:0a:36:51:04:84:b7:ac:fe:fb:73: 86:6b:d7:e2:f4:86:bc:5c:03:f3:ad:7e:1f:1f:c1: da:c1:b5:28:97:f6:3c:05:37:50:08:3c:7f:15:cb: 17:77:f5:81:f8:0c:02:b2:03:f0:16:2f:60:20:df: 89:e1:c3:70:96:82:84:23:b4:c5:99:00:fc:64:b4: ab:ed:71:63:99:7f:4e:6c:d0:81:ae:e6:4a:4f:a6: da:4c:dc:43:0d:26:5b:42:0d:5c:e4:cb:fb:2e:05: 89:7e:ff:69:f4:25:d2:f1:26:0b:3a:2f:b3:fc:08: 6a:b7:9f:4d:94:05:28:59:5e:f3:8e:72:76:ed:16: 12:ab:03:08:b6:fb:51:0d:87:5d:bb:d4:b9:1f:d6: 91:ce:7f:ff:05:b8:a6:e6:6e:b4:51:4e:6a:f2:1e: c1:2b:b8:d9:44:d4:53:88:8e:30:f0:ee:b6:95:ec: b1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F9:02:11:65:84:D5:4E:6B:40:79:73:3D:39:4D:8C:23:61:A4:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/8fb75c5a-9fd9-31e5-9777-4fe3352292d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:78:57:9f:c3:aa:10:c4:cf:cb:e5:9c:2f:eb:f7:9e:ea:7d: b0:21:b6:60:df:f6:7a:75:c0:a1:b4:16:d5:b7:a0:ff:8a:39: 4a:33:29:28:3b:04:a7:3d:19:38:41:bb:07:7d:87:8f:df:88: f2:d0:44:21:f8:b9:e3:ed:10:8e:c2:fa:94:32:f0:74:a2:76: 5d:2f:b8:16:60:82:28:31:7e:90:5f:23:d0:e8:2b:75:15:88: ad:51:12:d5:44:79:49:d6:8e:12:31:cf:d2:3e:f7:97:34:c9: b7:05:e8:22:39:e9:66:ae:ab:69:96:6e:77:0a:6c:f5:fa:91: c9:7b:e5:5f:62:fb:3c:5d:b4:ee:fd:6b:4c:21:8c:c0:1f:9a: 73:87:e6:d7:05:6e:1f:f6:1f:c9:21:ff:92:22:53:65:dd:06: d9:14:ec:f2:cc:bd:26:29:61:1e:f1:2b:f7:ab:d4:cc:b6:a3: 1e:5a:ef:69:77:69:9c:b5:d8:9b:5d:ef:dd:ad:3c:7b:ba:33: c5:ab:58:32:e4:a2:d8:4d:dc:17:60:db:be:af:2f:70:d9:a8: 85:8e:67:62:0a:03:d3:d5:31:47:69:86:b2:76:81:73:16:d6: 6d:cf:82:23:2e:33:fb:d5:04:3e:16:4f:40:7c:86:2e:5a:48: 13:b8:25:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NOd9qTnDu7rqIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk YmFiMWU5MDUtZjQ5Yi00NjQ5LWIxMDItNTAwMWU5NDM5MTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluBBBKc4M6nc3vwqNMuCln037fKUO5YX9okY EEbI7TNyXmgmxq2ZXNsKkkttvWZJexk52JF4ya+faqwKX02EHw+ESoOY3pxbEW6f cmBYIAo2UQSEt6z++3OGa9fi9Ia8XAPzrX4fH8HawbUol/Y8BTdQCDx/FcsXd/WB +AwCsgPwFi9gIN+J4cNwloKEI7TFmQD8ZLSr7XFjmX9ObNCBruZKT6baTNxDDSZb Qg1c5Mv7LgWJfv9p9CXS8SYLOi+z/Ahqt59NlAUoWV7zjnJ27RYSqwMItvtRDYdd u9S5H9aRzn//Bbim5m60UU5q8h7BK7jZRNRTiI4w8O62leyxZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEz5AhFlhNVOa0B5cz05TYwjYaT0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvOGZiNzVjNWEtOWZkOS0z MWU1LTk3NzctNGZlMzM1MjI5MmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQVcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV4V5/DqhDEz8vlnC/r957qfbAhtmDf9np1wKG0FtW3oP+KOUozKSg7 BKc9GThBuwd9h4/fiPLQRCH4uePtEI7C+pQy8HSidl0vuBZggigxfpBfI9DoK3UV iK1REtVEeUnWjhIxz9I+95c0ybcF6CI56Wauq2mWbncKbPX6kcl75V9i+zxdtO79 a0whjMAfmnOH5tcFbh/2H8kh/5IiU2XdBtkU7PLMvSYpYR7xK/er1My2ox5a72l3 aZy12Jtd792tPHu6M8WrWDLkothN3Bdg276vL3DZqIWOZ2IKA9PVMUdphrJ2gXMW 1m3PgiMuM/vVBD4WT0B8hi5aSBO4JRc= -----END CERTIFICATE-----Generated at Thu Mar 26 07:22:43 2026 by rpki-client