$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/d48cbae7-733c-39ce-83f2-f13a8de67abd.roa File: d48cbae7-733c-39ce-83f2-f13a8de67abd.roa (raw, json) Hash identifier: I6sAotgRC4xZY/xsreAMx/dSSWICMspP7aelH7GOilQ= Subject key identifier: 82:61:93:8C:B7:24:0A:C0:47:91:DC:80:37:BD:02:41:14:39:05:3E Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584D11726C363D23079254DBE0C0 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/d48cbae7-733c-39ce-83f2-f13a8de67abd.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 46488 IP address blocks: 65.87.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:6c:36:3d:23:07:92:54:db:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=6576035e-3421-43ee-8a92-066e502cc35e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:23:67:9a:a2:21:44:32:72:04:62:b9:b7:16: 93:7e:b1:f9:a8:3c:e6:e9:9f:42:48:74:a6:72:cd: e9:96:e6:da:3f:df:e6:43:38:68:4f:3e:17:41:41: e5:bc:60:07:f5:48:9f:ee:62:3d:7e:c6:98:76:89: 5d:5a:4e:88:fd:f7:2f:21:d1:5a:64:f4:b7:30:b6: 98:a9:a6:e3:e4:4c:78:af:a8:95:fb:8e:9e:ae:1b: 3f:a9:28:e2:b9:a7:9b:af:c4:8c:f2:82:c0:9e:4f: cf:16:97:6d:55:ad:8d:79:1e:d6:33:f3:6b:c2:26: 90:c1:57:cf:5d:46:49:b8:a3:36:1f:72:49:39:40: d6:5c:d4:3a:b5:f0:69:ba:43:d0:72:b9:26:c3:4e: d4:5b:54:ca:4a:cc:aa:fe:f0:e5:22:8a:55:84:aa: b4:c0:3e:32:ff:4d:2a:22:8d:01:62:45:03:94:e3: 00:1c:d5:ab:b2:9b:af:be:5f:00:e0:13:c5:67:9c: 57:bc:81:d3:a0:20:cc:ad:f0:89:86:a2:53:26:19: 4c:08:2e:db:c3:c2:f2:80:38:1a:aa:d0:72:90:42: 42:fb:b1:af:6c:d0:ff:e3:5b:32:85:18:0f:92:a5: a8:23:6b:b1:e3:da:4a:4e:ab:4c:41:72:a0:20:5e: 3c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:61:93:8C:B7:24:0A:C0:47:91:DC:80:37:BD:02:41:14:39:05:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/d48cbae7-733c-39ce-83f2-f13a8de67abd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:29:24:67:74:3f:3e:83:7b:66:a1:a6:ec:f2:fe:b6:1e:0f: 76:1d:c1:ea:0e:c7:91:3c:b9:a4:91:00:a9:4b:77:e1:50:89: d7:ba:f0:a1:7f:0d:38:b6:91:b7:e7:df:71:52:2e:5a:da:8a: 32:de:60:31:82:d6:00:43:a5:1d:40:0a:62:e1:b5:35:01:2d: 98:6a:df:57:36:c8:8c:ba:09:1d:11:d6:fe:b8:f5:13:7e:69: 6a:02:7b:17:08:1f:c5:8d:58:d9:0b:f1:d8:79:ae:3b:8b:f5: a4:a8:68:eb:51:67:e7:09:75:50:e7:a3:6f:75:84:c2:bc:b1: c2:6c:fd:0f:ab:e8:8a:9a:84:e7:e8:78:3e:84:47:95:47:ea: bc:ce:8d:e8:2f:eb:97:ba:6c:d6:e6:6c:a3:72:a3:5b:58:08: 66:c3:7d:83:f7:3b:bd:88:61:eb:4a:4f:3d:1d:6e:0b:f1:b2: c6:f3:b6:47:23:65:fe:bc:0e:18:4b:fb:26:af:58:bc:01:e5: 21:93:5d:95:5c:0f:6e:9b:95:03:ba:1a:55:dd:23:c9:38:09: 90:2d:0e:a1:c0:09:9f:78:e1:92:0d:7f:8f:97:db:bc:2d:9e: be:26:09:cb:55:ed:26:1d:a1:b3:fe:76:3c:a4:89:1d:e5:61: 5d:f5:1b:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Rcmw2PSMHklTb4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk NjU3NjAzNWUtMzQyMS00M2VlLThhOTItMDY2ZTUwMmNjMzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSNnmqIhRDJyBGK5txaTfrH5qDzm6Z9CSHSm cs3plubaP9/mQzhoTz4XQUHlvGAH9Uif7mI9fsaYdoldWk6I/fcvIdFaZPS3MLaY qabj5Ex4r6iV+46erhs/qSjiuaebr8SM8oLAnk/PFpdtVa2NeR7WM/NrwiaQwVfP XUZJuKM2H3JJOUDWXNQ6tfBpukPQcrkmw07UW1TKSsyq/vDlIopVhKq0wD4y/00q Io0BYkUDlOMAHNWrspuvvl8A4BPFZ5xXvIHToCDMrfCJhqJTJhlMCC7bw8LygDga qtBykEJC+7GvbND/41syhRgPkqWoI2ux49pKTqtMQXKgIF48aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJhk4y3JArAR5HcgDe9AkEUOQU+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvZDQ4Y2JhZTctNzMzYy0z OWNlLTgzZjItZjEzYThkZTY3YWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMpJGd0Pz6De2ahpuzy/rYeD3YdweoOx5E8uaSRAKlLd+FQide68KF/ DTi2kbfn33FSLlraijLeYDGC1gBDpR1ACmLhtTUBLZhq31c2yIy6CR0R1v649RN+ aWoCexcIH8WNWNkL8dh5rjuL9aSoaOtRZ+cJdVDno291hMK8scJs/Q+r6IqahOfo eD6ER5VH6rzOjegv65e6bNbmbKNyo1tYCGbDfYP3O72IYetKTz0dbgvxssbztkcj Zf68DhhL+yavWLwB5SGTXZVcD26blQO6GlXdI8k4CZAtDqHACZ944ZINf4+X27wt nr4mCctV7SYdobP+djykiR3lYV31G+w= -----END CERTIFICATE-----Generated at Thu Mar 26 12:21:21 2026 by rpki-client