$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/3d48e574-2ad6-3ec9-9fa5-e869a1850174.roa File: 3d48e574-2ad6-3ec9-9fa5-e869a1850174.roa (raw, json) Hash identifier: VRuod1KUUlDWPRsdQlAJiOo+BM4Ax0hYUumMT4gATvM= Subject key identifier: EA:27:67:F2:4A:7D:29:0A:EE:7D:DE:10:35:EA:13:EB:BC:BD:7F:39 Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584B4D11E09FF14268D31EC0C600 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/3d48e574-2ad6-3ec9-9fa5-e869a1850174.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 21840 IP address blocks: 65.87.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:e0:9f:f1:42:68:d3:1e:c0:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=82a0562c-1327-4ba7-9309-ce8ac88a41bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b4:69:c0:dd:e1:30:60:7b:57:9f:cd:03:b5: 7d:4d:33:81:20:1a:92:43:80:72:de:ff:88:8d:98: 5a:90:af:0b:a5:fc:73:aa:89:74:b8:7e:e3:72:7b: 98:94:8b:80:e1:13:7e:73:2d:1a:4f:cd:67:da:28: d9:2c:0c:43:f4:07:46:20:d2:b6:36:87:e4:5a:0d: f0:0a:b3:fe:fd:f6:b2:1c:59:b9:b2:5d:f0:98:ce: c9:06:c2:f2:f9:9b:35:7d:1a:b0:7a:c0:1f:2a:76: e1:fd:74:f5:7d:6c:04:a1:83:10:b6:eb:db:5f:61: d3:c1:48:0a:d6:ec:4a:e3:00:17:17:be:b5:c6:31: 14:bb:c3:84:ac:9c:b5:c1:a5:ba:85:02:eb:ae:0a: f7:98:ce:cf:1a:f7:70:d1:cf:cd:55:18:6c:ac:f3: 6d:b0:c6:76:ff:36:a6:44:6e:6d:94:e5:8a:9c:db: 6e:e6:11:de:ea:aa:d7:b7:02:24:dd:28:f4:fb:d5: c5:76:e7:95:bd:61:d9:66:e2:00:70:1b:50:72:38: f3:5d:bc:61:27:d2:16:07:21:fe:9f:04:96:c6:90: 0e:06:51:9a:d9:3b:9a:21:2e:93:92:c7:c7:4b:24: e8:6a:18:35:e7:b4:ea:ad:aa:68:a1:97:6f:23:2e: 45:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:27:67:F2:4A:7D:29:0A:EE:7D:DE:10:35:EA:13:EB:BC:BD:7F:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/3d48e574-2ad6-3ec9-9fa5-e869a1850174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:35:fd:fd:48:0a:74:d6:4f:f0:8e:45:ae:4d:4d:08:ba:1e: b6:87:e1:36:aa:9d:9e:56:6a:b1:ff:52:cc:59:4d:38:9a:4b: a5:26:36:55:07:6d:b0:bd:89:f1:96:37:b3:59:94:a0:9f:31: 31:4e:82:07:61:be:bb:f0:01:39:ca:ba:89:6a:89:08:d2:15: 3b:70:b3:be:97:5b:e4:de:0b:75:2f:e9:c2:03:d1:5e:04:eb: 4a:fe:3a:3a:6c:d7:e2:aa:40:15:4a:08:bf:5e:12:53:79:8b: 20:39:aa:46:ec:a3:b4:58:7f:94:73:47:b8:cc:b3:e5:86:07: b1:ae:bc:07:1d:9f:79:3b:4f:02:0f:7d:a5:69:09:7d:6c:08: b2:b2:31:4a:88:e3:88:e8:62:95:94:3c:a2:5a:5b:53:43:7d: 24:05:44:05:c4:ac:e6:f5:1c:a4:f1:36:4f:e1:d4:26:4a:6d: f5:97:8b:7a:bd:12:8f:e9:60:e8:7d:a2:37:e8:c9:25:13:34: c4:3c:04:f5:b1:22:f5:55:00:48:59:2e:79:fc:d3:4b:20:d2: 41:0f:67:83:11:a1:4f:55:8b:82:ce:94:ab:15:5a:1a:0b:56: f1:bb:c6:e0:1c:32:a0:32:8d:5a:58:a8:b9:d2:8e:b4:b5:27: f3:a5:b3:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEeCf8UJo0x7AxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ODJhMDU2MmMtMTMyNy00YmE3LTkzMDktY2U4YWM4OGE0MWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLRpwN3hMGB7V5/NA7V9TTOBIBqSQ4By3v+I jZhakK8Lpfxzqol0uH7jcnuYlIuA4RN+cy0aT81n2ijZLAxD9AdGINK2NofkWg3w CrP+/fayHFm5sl3wmM7JBsLy+Zs1fRqwesAfKnbh/XT1fWwEoYMQtuvbX2HTwUgK 1uxK4wAXF761xjEUu8OErJy1waW6hQLrrgr3mM7PGvdw0c/NVRhsrPNtsMZ2/zam RG5tlOWKnNtu5hHe6qrXtwIk3Sj0+9XFdueVvWHZZuIAcBtQcjjzXbxhJ9IWByH+ nwSWxpAOBlGa2TuaIS6TksfHSyToahg157TqrapooZdvIy5FsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOonZ/JKfSkK7n3eEDXqE+u8vX85MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvM2Q0OGU1NzQtMmFkNi0z ZWM5LTlmYTUtZTg2OWExODUwMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAE1/f1ICnTWT/CORa5NTQi6HraH4TaqnZ5WarH/UsxZTTiaS6UmNlUH bbC9ifGWN7NZlKCfMTFOggdhvrvwATnKuolqiQjSFTtws76XW+TeC3Uv6cID0V4E 60r+Ojps1+KqQBVKCL9eElN5iyA5qkbso7RYf5RzR7jMs+WGB7GuvAcdn3k7TwIP faVpCX1sCLKyMUqI44joYpWUPKJaW1NDfSQFRAXErOb1HKTxNk/h1CZKbfWXi3q9 Eo/pYOh9ojfoySUTNMQ8BPWxIvVVAEhZLnn800sg0kEPZ4MRoU9Vi4LOlKsVWhoL VvG7xuAcMqAyjVpYqLnSjrS1J/Ols+4= -----END CERTIFICATE-----Generated at Sat Oct 11 12:15:03 2025 by rpki-client