$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/826a4506-faff-3fc0-834f-c2447661ac44.roa File: 826a4506-faff-3fc0-834f-c2447661ac44.roa (raw, json) Hash identifier: 0dsqW8GlyJ3StIPrNFjyUKnzC/ym4tGhuwvSV9lYf6A= Subject key identifier: AE:25:BB:C6:B0:BB:57:A7:5E:71:00:05:0B:F8:4D:3F:F4:7D:5F:A4 Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584B583C900C0273436AAA822400 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/826a4506-faff-3fc0-834f-c2447661ac44.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 5065 IP address blocks: 65.87.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:90:0c:02:73:43:6a:aa:82:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=13e1843b-6a0e-457d-9a35-58e32cd33ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:65:d3:39:76:92:29:fb:21:34:0c:38:e0:bc: 8b:63:17:be:c8:97:7b:49:f2:9e:0d:58:d0:99:94: fc:07:cd:57:69:93:8e:50:28:c8:55:87:25:57:68: be:8f:23:4e:5c:a1:96:dd:c7:34:86:b7:86:8e:cb: 80:6e:0b:bf:de:f8:f3:3d:f2:a2:0e:a9:01:41:d4: ae:ee:ee:9f:ed:38:d3:9f:f4:de:ef:a3:22:3c:02: bf:42:fe:99:88:34:9b:26:47:c4:e0:46:3c:2a:d3: 5f:55:8d:8b:de:4f:7a:be:0a:c9:89:90:35:0d:c4: 8a:f0:9d:40:e2:a4:98:4f:de:c2:11:d0:c4:44:ad: 58:ef:43:4b:8d:e1:b5:af:54:0d:f3:cf:2b:99:69: 40:f6:9c:fb:db:b3:f1:66:e7:1b:81:32:34:94:e1: 54:22:64:43:86:b9:e6:cc:9e:16:04:98:12:24:97: 82:00:8d:81:fd:9a:fa:0b:8d:0e:69:85:ab:26:81: 65:74:d7:6d:69:5e:a4:a1:04:47:6c:10:da:d2:92: 03:5a:00:3c:e3:b2:20:92:56:d9:ab:57:24:0d:06: 44:8e:ba:0a:aa:27:83:b3:22:39:44:f8:ee:da:ae: c3:68:1b:0f:55:8f:0a:0f:2d:f2:38:c8:30:fd:23: d9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:25:BB:C6:B0:BB:57:A7:5E:71:00:05:0B:F8:4D:3F:F4:7D:5F:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/826a4506-faff-3fc0-834f-c2447661ac44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:36:8a:73:f9:63:c6:b8:1a:86:0d:61:8a:5f:1e:e6:1d:e6: 15:5d:72:0b:98:e2:09:3c:26:4a:62:c1:67:05:38:c3:44:ed: 7f:cb:5f:66:6c:7c:41:d9:8e:2b:98:cb:d7:f3:bb:e3:5f:ea: 91:a0:14:5b:f1:4e:04:06:52:5a:ee:7a:94:da:23:dc:a7:6b: 25:40:9a:9c:19:77:42:4b:f0:93:7d:3d:c6:46:65:ad:26:e2: 96:d2:d5:d2:55:f8:95:27:2d:d8:95:0f:b0:97:9f:e5:15:e4: 00:62:2c:28:ad:93:91:66:bf:3d:16:d7:5a:ea:e7:66:f6:2f: 75:10:f2:e7:6d:9e:f9:b0:ff:62:01:26:f9:b4:7f:f7:96:7a: 59:7e:12:01:aa:52:30:6c:b1:87:5f:9f:25:06:de:27:45:56: 11:87:be:88:46:be:1f:c6:96:fa:46:c7:30:0f:24:26:1a:b7: b6:f0:73:c3:ee:85:8d:7c:9b:be:fa:3d:dd:88:50:06:56:13: c6:a1:12:b4:63:fc:7a:e9:e9:80:c0:ae:de:6c:76:4e:d2:8b: fe:bb:46:61:5f:32:2b:88:3e:da:bf:f1:ce:cc:7c:a1:41:0d: 2d:6a:60:53:4a:3b:e8:02:0e:72:3c:8a:62:58:10:38:9d:03: 25:a4:37:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJAMAnNDaqqCJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk MTNlMTg0M2ItNmEwZS00NTdkLTlhMzUtNThlMzJjZDMzZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGXTOXaSKfshNAw44LyLYxe+yJd7SfKeDVjQ mZT8B81XaZOOUCjIVYclV2i+jyNOXKGW3cc0hreGjsuAbgu/3vjzPfKiDqkBQdSu 7u6f7TjTn/Te76MiPAK/Qv6ZiDSbJkfE4EY8KtNfVY2L3k96vgrJiZA1DcSK8J1A 4qSYT97CEdDERK1Y70NLjeG1r1QN888rmWlA9pz727PxZucbgTI0lOFUImRDhrnm zJ4WBJgSJJeCAI2B/Zr6C40OaYWrJoFldNdtaV6koQRHbBDa0pIDWgA847IgklbZ q1ckDQZEjroKqieDsyI5RPju2q7DaBsPVY8KDy3yOMgw/SPZdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4lu8awu1enXnEABQv4TT/0fV+kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvODI2YTQ1MDYtZmFmZi0z ZmMwLTgzNGYtYzI0NDc2NjFhYzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQVcEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF82inP5Y8a4GoYNYYpfHuYd5hVdcguY4gk8JkpiwWcFOMNE7X/LX2Zs fEHZjiuYy9fzu+Nf6pGgFFvxTgQGUlruepTaI9ynayVAmpwZd0JL8JN9PcZGZa0m 4pbS1dJV+JUnLdiVD7CXn+UV5ABiLCitk5Fmvz0W11rq52b2L3UQ8udtnvmw/2IB Jvm0f/eWell+EgGqUjBssYdfnyUG3idFVhGHvohGvh/GlvpGxzAPJCYat7bwc8Pu hY18m776Pd2IUAZWE8ahErRj/Hrp6YDArt5sdk7Si/67RmFfMiuIPtq/8c7MfKFB DS1qYFNKO+gCDnI8imJYEDidAyWkN14= -----END CERTIFICATE-----Generated at Sat Oct 11 12:16:55 2025 by rpki-client