$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/63b3751d-28a6-3690-ba92-b64284a64a6d.roa File: 63b3751d-28a6-3690-ba92-b64284a64a6d.roa (raw, json) Hash identifier: NyFl8+waSQ4SNx1fxF5sN7vmLKWk+2CoLn2q/k38dWE= Subject key identifier: CA:22:98:BB:7F:E1:9A:28:5D:08:58:7E:B2:EE:22:94:96:96:7B:09 Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584B20E8E3129B888A8B183DAF80 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/63b3751d-28a6-3690-ba92-b64284a64a6d.roa Signing time: Mon 08 Sep 2025 17:22:48 +0000 ROA not before: Mon 08 Sep 2025 17:22:48 +0000 ROA not after: Sun 07 Dec 2025 18:22:48 +0000 asID: 2914 IP address blocks: 65.87.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:e8:e3:12:9b:88:8a:8b:18:3d:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Sep 8 17:22:48 2025 GMT Not After : Dec 7 18:22:48 2025 GMT Subject: CN=be6b2bb9-a87e-4abe-9778-537575abf48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:78:df:7b:48:a1:f8:3e:16:8d:a2:1c:d2:4e: 2b:9b:d4:8c:3a:3b:02:f6:58:68:26:30:74:65:1d: 77:65:76:9e:f8:d8:46:48:b9:5f:9e:6a:59:21:2d: 4e:c6:7b:bf:17:bd:49:01:3a:bf:60:4d:e2:9e:bb: e3:42:7e:c1:63:70:c4:6b:e5:2c:bb:7e:ba:a6:a9: 90:f8:23:6a:b5:23:69:50:5d:57:a8:c6:8d:fd:4b: 0f:3b:06:40:f6:0f:fb:36:b1:0b:f4:38:14:d3:c1: 68:1e:38:7c:c9:58:c5:9e:88:a1:8b:5d:67:25:3f: 1a:d5:df:23:b1:71:8b:2a:ec:2c:31:22:a1:24:b6: 5f:cc:1d:10:f3:cf:25:0c:80:c3:8f:78:6f:0b:f6: b7:ee:03:51:16:92:1b:b8:81:fd:ba:f8:9f:29:54: 2b:28:57:54:03:4d:03:b6:42:3b:f9:5d:af:2d:8b: e0:d2:6d:fe:c3:36:97:a1:64:63:0f:14:d3:4d:dd: 20:58:3d:d3:23:36:79:3e:c4:f2:e3:52:f3:e5:99: 64:d1:09:37:c8:5f:b3:65:d4:f6:50:2b:59:6b:fe: 99:74:96:8f:3c:fe:28:35:00:a3:8b:8b:6e:08:2e: f0:a6:3a:12:29:a8:6e:9e:be:fc:ea:d5:2a:48:87: 8c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:22:98:BB:7F:E1:9A:28:5D:08:58:7E:B2:EE:22:94:96:96:7B:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/63b3751d-28a6-3690-ba92-b64284a64a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:2e:fa:52:f2:a8:2b:86:36:45:77:5d:e9:3f:df:78:a7:28: 70:6c:4e:8c:25:39:3a:c2:ac:f8:de:a4:c0:d8:22:ac:b4:40: bd:ee:44:d8:e9:87:ff:ab:00:e5:a8:e0:8f:3a:a8:2f:42:0c: 24:94:5f:e0:e6:67:a7:54:6a:c0:28:02:ce:00:c4:1e:ac:ea: 1e:75:45:2e:89:78:a8:b2:b9:f0:26:b7:ea:f5:63:d2:d1:2d: e0:0a:c3:ae:64:a8:55:b5:25:2b:49:f9:eb:e3:7b:99:6f:52: f9:ac:26:ab:d4:99:8b:d6:0f:8d:7d:35:80:56:9c:ff:00:6c: a2:21:46:54:e8:73:04:75:8a:9a:75:37:6b:3c:40:b9:ae:4b: 54:eb:e7:73:32:93:f9:a5:c0:37:24:64:49:e7:95:9f:db:d1: 6c:4e:28:4d:00:bd:3c:b7:53:ea:7f:73:5f:d2:3d:36:38:e7: ce:dd:d9:c4:2d:c1:53:02:58:39:dc:61:b6:70:22:ec:f6:4e: ff:d0:d8:1d:38:03:c7:e5:05:bb:88:86:52:ab:18:d1:da:d9: d4:5d:49:09:16:6e:e4:e4:22:f6:f0:fb:48:11:1c:73:d2:01: c2:0e:f7:fa:b6:1c:ef:06:8c:56:ee:52:c9:f1:17:a5:0c:66: 64:c0:64:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsg6OMSm4iKixg9r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDkwODE3MjI0OFoXDTI1MTIwNzE4MjI0OFowLzEtMCsGA1UEAxMk YmU2YjJiYjktYTg3ZS00YWJlLTk3NzgtNTM3NTc1YWJmNDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHjfe0ih+D4WjaIc0k4rm9SMOjsC9lhoJjB0 ZR13ZXae+NhGSLlfnmpZIS1Oxnu/F71JATq/YE3inrvjQn7BY3DEa+Usu366pqmQ +CNqtSNpUF1XqMaN/UsPOwZA9g/7NrEL9DgU08FoHjh8yVjFnoihi11nJT8a1d8j sXGLKuwsMSKhJLZfzB0Q888lDIDDj3hvC/a37gNRFpIbuIH9uvifKVQrKFdUA00D tkI7+V2vLYvg0m3+wzaXoWRjDxTTTd0gWD3TIzZ5PsTy41Lz5Zlk0Qk3yF+zZdT2 UCtZa/6ZdJaPPP4oNQCji4tuCC7wpjoSKahunr786tUqSIeMRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoimLt/4ZooXQhYfrLuIpSWlnsJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvNjNiMzc1MWQtMjhhNi0z NjkwLWJhOTItYjY0Mjg0YTY0YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQVcCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAu+lLyqCuGNkV3Xek/33inKHBsTowlOTrCrPjepMDYIqy0QL3uRNjp h/+rAOWo4I86qC9CDCSUX+DmZ6dUasAoAs4AxB6s6h51RS6JeKiyufAmt+r1Y9LR LeAKw65kqFW1JStJ+evje5lvUvmsJqvUmYvWD419NYBWnP8AbKIhRlTocwR1ipp1 N2s8QLmuS1Tr53Myk/mlwDckZEnnlZ/b0WxOKE0AvTy3U+p/c1/SPTY4587d2cQt wVMCWDncYbZwIuz2Tv/Q2B04A8flBbuIhlKrGNHa2dRdSQkWbuTkIvbw+0gRHHPS AcIO9/q2HO8GjFbuUsnxF6UMZmTAZOQ= -----END CERTIFICATE-----Generated at Wed Oct 8 12:01:34 2025 by rpki-client