$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1013b58b-c978-32db-a484-4f958d5cd161.roa File: 1013b58b-c978-32db-a484-4f958d5cd161.roa (raw, json) Hash identifier: tSA8It2A6mNZ9CYvyeD3zO+7mRocPK0T+VvCT5YCahE= Subject key identifier: 27:BF:8B:9B:B0:DE:FE:A1:B8:91:63:A4:79:22:AB:93:42:03:30:5C Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584C969C471AA5B86B84E61FC180 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1013b58b-c978-32db-a484-4f958d5cd161.roa Signing time: Tue 20 Jan 2026 14:00:39 +0000 ROA not before: Tue 20 Jan 2026 14:00:39 +0000 ROA not after: Mon 20 Apr 2026 13:00:39 +0000 asID: 5650 IP address blocks: 65.87.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:96:9c:47:1a:a5:b8:6b:84:e6:1f:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Jan 20 14:00:39 2026 GMT Not After : Apr 20 13:00:39 2026 GMT Subject: CN=1343cc96-b4f8-414b-9a70-5bd84e328cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:33:08:d4:58:76:a6:27:51:56:3a:1c:6d:04: a1:31:85:74:fd:f8:eb:15:3c:6e:12:3c:7e:4e:1b: 8a:58:9c:eb:be:9b:54:0d:00:2a:10:80:1a:3f:ed: 21:b5:e0:d8:c6:5c:0c:a7:20:e5:9b:54:9e:1b:d6: ef:22:ec:c4:15:57:43:bb:c7:51:ca:e2:62:93:b2: f8:c0:05:21:ab:9e:bb:27:d7:f7:ab:63:8c:30:87: d7:db:7c:3c:29:35:3f:74:1b:48:44:3a:a0:53:ab: 60:e2:7f:8d:c7:71:26:b1:e7:6e:7c:51:16:6e:57: fb:68:c3:54:6d:e4:02:63:45:bf:26:3d:a2:6d:2f: 08:8a:0c:47:cd:56:59:50:25:50:85:22:6c:56:62: d6:d7:68:80:f2:dc:4f:42:2e:6a:21:4c:b4:e7:3c: a5:27:a5:e0:82:67:66:9b:c0:b8:d6:15:0d:a7:ec: 50:f7:e9:ab:f7:60:63:cb:db:f4:68:22:76:ee:4a: 89:38:01:e6:33:4e:84:ad:7d:0b:57:f0:2f:e4:5d: f7:14:4a:7c:00:90:de:2b:e1:31:72:5d:8e:9c:b2: df:c8:90:18:d7:36:8b:0a:38:57:b1:ae:92:33:37: 28:d6:a4:48:b1:21:a6:dc:b5:24:e4:4a:63:4f:a7: 4e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:BF:8B:9B:B0:DE:FE:A1:B8:91:63:A4:79:22:AB:93:42:03:30:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1013b58b-c978-32db-a484-4f958d5cd161.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:25:58:0e:89:14:d5:73:b2:1c:e7:f9:18:26:ff:db:83:ec: c3:53:e9:6c:07:33:ad:38:f3:2f:b9:f4:f7:cd:5a:b7:c5:fe: 8c:40:5b:97:28:a4:ab:cd:a2:f5:f0:aa:44:75:d0:3c:24:00: 63:86:b9:a7:1c:54:ee:6c:bf:16:3e:cf:a5:91:28:b2:94:b8: 4e:c4:20:98:36:36:b7:40:f2:c7:8f:21:34:72:a8:59:80:e4: a3:a1:a3:4b:e2:51:37:28:52:26:c5:7f:0f:09:39:5a:80:f6: 1f:6e:a3:e0:bf:42:ad:22:7b:94:4d:39:b2:0c:cc:79:3d:4b: 13:a0:0e:11:d6:a5:1b:c6:d7:24:6c:ce:d5:bb:44:43:b5:83: e6:f7:f3:06:61:e2:ea:5b:73:14:7f:65:6a:ce:5b:d8:6a:f9: e1:2b:24:85:99:67:70:96:3b:d3:2c:da:04:6a:c3:ca:4e:02: 7a:ac:b5:3c:c4:ff:e5:0b:48:1a:f8:cb:33:24:16:20:70:a6: f4:b3:00:71:2e:4c:ab:ab:14:53:14:71:27:67:a9:27:c0:2e: 88:80:56:a1:54:5b:39:f6:c2:76:f5:1f:a1:b2:46:b9:09:37: 58:22:bb:64:c5:ac:f3:d0:a4:0e:fe:6a:7e:04:43:63:36:07: a0:e8:54:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyWnEcapbhrhOYfwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI2MDEyMDE0MDAzOVoXDTI2MDQyMDEzMDAzOVowLzEtMCsGA1UEAxMk MTM0M2NjOTYtYjRmOC00MTRiLTlhNzAtNWJkODRlMzI4Y2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDMI1Fh2pidRVjocbQShMYV0/fjrFTxuEjx+ ThuKWJzrvptUDQAqEIAaP+0hteDYxlwMpyDlm1SeG9bvIuzEFVdDu8dRyuJik7L4 wAUhq567J9f3q2OMMIfX23w8KTU/dBtIRDqgU6tg4n+Nx3EmsedufFEWblf7aMNU beQCY0W/Jj2ibS8IigxHzVZZUCVQhSJsVmLW12iA8txPQi5qIUy05zylJ6Xggmdm m8C41hUNp+xQ9+mr92Bjy9v0aCJ27kqJOAHmM06ErX0LV/Av5F33FEp8AJDeK+Ex cl2OnLLfyJAY1zaLCjhXsa6SMzco1qRIsSGm3LUk5EpjT6dOdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCe/i5uw3v6huJFjpHkiq5NCAzBcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvMTAxM2I1OGItYzk3OC0z MmRiLWE0ODQtNGY5NThkNWNkMTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQVccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAlWA6JFNVzshzn+Rgm/9uD7MNT6WwHM6048y+59PfNWrfF/oxAW5co pKvNovXwqkR10DwkAGOGuaccVO5svxY+z6WRKLKUuE7EIJg2NrdA8sePITRyqFmA 5KOho0viUTcoUibFfw8JOVqA9h9uo+C/Qq0ie5RNObIMzHk9SxOgDhHWpRvG1yRs ztW7REO1g+b38wZh4upbcxR/ZWrOW9hq+eErJIWZZ3CWO9Ms2gRqw8pOAnqstTzE /+ULSBr4yzMkFiBwpvSzAHEuTKurFFMUcSdnqSfALoiAVqFUWzn2wnb1H6GyRrkJ N1giu2TFrPPQpA7+an4EQ2M2B6DoVCc= -----END CERTIFICATE-----Generated at Thu Feb 26 12:10:36 2026 by rpki-client