$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1013b58b-c978-32db-a484-4f958d5cd161.roa File: 1013b58b-c978-32db-a484-4f958d5cd161.roa (raw, json) Hash identifier: oNYIBJbYaL8Hr28wPMDV6c55DA4MWFSczuQlBgqjo6Q= Subject key identifier: 85:25:D0:03:F3:EB:B2:C3:D9:7A:D5:5E:E0:C2:F2:1C:CD:4A:13:D2 Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584D773A6FDD1573F31C9C1E9300 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1013b58b-c978-32db-a484-4f958d5cd161.roa Signing time: Sat 11 Apr 2026 01:00:24 +0000 ROA not before: Sat 11 Apr 2026 01:00:24 +0000 ROA not after: Fri 10 Jul 2026 01:00:24 +0000 asID: 5650 IP address blocks: 65.87.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:77:3a:6f:dd:15:73:f3:1c:9c:1e:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Apr 11 01:00:24 2026 GMT Not After : Jul 10 01:00:24 2026 GMT Subject: CN=0e90e703-9cdf-4817-8805-684be01a680d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f7:7c:ed:b3:33:f4:a9:f0:0b:0c:8f:db:4c: a5:bc:03:9a:8a:49:49:87:0e:ba:58:c4:46:33:da: 38:df:fa:cd:e4:68:19:2b:b0:73:80:b4:4c:9f:46: 16:5a:e6:9b:6a:5c:61:87:ba:05:71:11:14:5b:dd: c6:2d:96:78:10:fc:bf:0b:ae:8b:a6:22:99:c4:81: 63:a1:0e:9f:49:20:ad:c9:9a:e7:16:e4:a0:09:2f: 13:29:a0:1d:9f:e4:2d:13:1e:52:39:cb:dc:e3:5e: 7e:8f:27:67:e8:2c:f2:ac:24:d9:66:d3:ba:b4:8a: f8:d1:83:2d:3a:1c:f1:58:b0:6d:ba:0c:b9:79:70: b4:0b:11:c3:63:fb:5d:98:43:aa:42:9a:0f:b6:87: 49:9f:47:ce:e2:c2:2e:07:bb:16:a7:1b:79:ce:d9: 95:5b:50:34:c9:8b:63:ec:75:62:06:b3:6e:7e:1f: 6b:4f:cf:09:ed:90:ca:c3:12:72:ff:43:4f:7a:af: 82:19:b7:61:fa:69:8f:40:5c:8d:bc:96:7e:de:ae: ae:36:b3:4e:a6:9f:48:96:c7:16:45:ee:cd:96:d5: 3f:da:dd:e7:2d:0b:cc:7f:ab:32:42:73:5e:46:30: 98:4b:9a:fa:5e:ff:fe:16:c4:47:ed:66:7a:09:14: 7b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:25:D0:03:F3:EB:B2:C3:D9:7A:D5:5E:E0:C2:F2:1C:CD:4A:13:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1013b58b-c978-32db-a484-4f958d5cd161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:45:04:35:ed:2f:7d:e3:bd:76:df:4d:90:74:ee:2f:1b:d1: 7b:ac:7b:50:af:d0:f2:01:52:ed:a4:e9:38:2c:e9:8d:b3:b5: 36:0a:9c:58:a4:3e:2e:25:36:a8:fb:b8:04:24:b5:70:41:28: c7:e2:31:4f:6b:f4:66:c9:aa:d5:5f:d4:96:f6:71:b6:f4:6b: 2e:29:b2:c5:82:d7:6d:94:ff:2d:9f:81:9d:89:08:4f:c8:4b: 4f:c7:38:d6:64:b7:05:aa:c9:f0:6a:e6:7f:8b:39:8a:47:9a: 8f:3d:ad:41:bf:a6:59:45:ba:e1:23:c9:18:62:29:9f:c0:ff: fe:0a:3d:ee:fd:2f:a5:86:b5:25:5d:51:10:24:da:ef:d7:1c: f9:52:1d:85:17:e3:39:e1:6c:14:df:96:d7:ab:f9:15:fb:2d: c8:01:b4:b9:4c:37:9d:10:55:9f:6c:36:29:8d:31:ae:a4:7d: 07:23:23:44:c9:c6:c4:e8:bd:bb:f5:79:a7:bc:fc:bb:75:6c: 9d:44:ab:b6:13:23:92:7c:60:4f:b6:97:a3:0c:63:84:38:c9: 4c:49:0f:0f:ad:a4:8f:06:c8:eb:45:71:38:cd:18:32:b1:d6: 04:43:b4:3b:b1:74:fa:cd:09:b4:80:72:ff:d3:c5:f3:d0:1b: f8:cb:b4:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE13Om/dFXPzHJwekwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI2MDQxMTAxMDAyNFoXDTI2MDcxMDAxMDAyNFowLzEtMCsGA1UEAxMk MGU5MGU3MDMtOWNkZi00ODE3LTg4MDUtNjg0YmUwMWE2ODBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPd87bMz9KnwCwyP20ylvAOaiklJhw66WMRG M9o43/rN5GgZK7BzgLRMn0YWWuabalxhh7oFcREUW93GLZZ4EPy/C66LpiKZxIFj oQ6fSSCtyZrnFuSgCS8TKaAdn+QtEx5SOcvc415+jydn6CzyrCTZZtO6tIr40YMt OhzxWLBtugy5eXC0CxHDY/tdmEOqQpoPtodJn0fO4sIuB7sWpxt5ztmVW1A0yYtj 7HViBrNufh9rT88J7ZDKwxJy/0NPeq+CGbdh+mmPQFyNvJZ+3q6uNrNOpp9IlscW Re7NltU/2t3nLQvMf6syQnNeRjCYS5r6Xv/+FsRH7WZ6CRR7gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUl0APz67LD2XrVXuDC8hzNShPSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvMTAxM2I1OGItYzk3OC0z MmRiLWE0ODQtNGY5NThkNWNkMTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQVccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxFBDXtL33jvXbfTZB07i8b0Xuse1Cv0PIBUu2k6Tgs6Y2ztTYKnFik Pi4lNqj7uAQktXBBKMfiMU9r9GbJqtVf1Jb2cbb0ay4pssWC122U/y2fgZ2JCE/I S0/HONZktwWqyfBq5n+LOYpHmo89rUG/pllFuuEjyRhiKZ/A//4KPe79L6WGtSVd URAk2u/XHPlSHYUX4znhbBTflter+RX7LcgBtLlMN50QVZ9sNimNMa6kfQcjI0TJ xsTovbv1eae8/Lt1bJ1Eq7YTI5J8YE+2l6MMY4Q4yUxJDw+tpI8GyOtFcTjNGDKx 1gRDtDuxdPrNCbSAcv/TxfPQG/jLtHs= -----END CERTIFICATE-----Generated at Mon Apr 13 09:29:41 2026 by rpki-client