$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/ef494090-aba7-39db-8156-d416d68d068e.roa File: ef494090-aba7-39db-8156-d416d68d068e.roa (raw, json) Hash identifier: XAuKpuX63RnQnLtjWw8Gy4Ad+uVl2qglmbyH+MmF7fo= Subject key identifier: 0A:6A:AD:98:73:CA:CD:A5:54:C2:7F:9E:46:80:0D:F7:FD:DF:69:56 Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584CF1577FB5F9BCA9044F514EC0 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/ef494090-aba7-39db-8156-d416d68d068e.roa Signing time: Sun 22 Feb 2026 02:00:32 +0000 ROA not before: Sun 22 Feb 2026 02:00:32 +0000 ROA not after: Sat 23 May 2026 01:00:32 +0000 asID: 7018 IP address blocks: 65.87.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f1:57:7f:b5:f9:bc:a9:04:4f:51:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Feb 22 02:00:32 2026 GMT Not After : May 23 01:00:32 2026 GMT Subject: CN=36922cb4-26d1-4da0-98f8-aaff25d8a2a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:32:5a:31:29:e3:0f:a9:66:e2:c4:47:69:9c: e3:49:b3:d1:fe:57:b4:a3:ca:75:e0:ce:ef:98:8d: 28:26:db:cf:02:f0:91:9f:50:28:c3:e6:9b:b9:53: 2e:d3:21:3f:36:c3:dc:81:d2:4c:5b:02:1e:49:22: 8a:1c:06:57:91:45:34:91:c5:7d:fa:45:d7:f1:3c: 7e:79:81:d9:0d:d6:fb:9d:3f:00:16:3f:00:9e:0c: d5:d0:37:00:5f:55:d7:33:70:6b:00:bb:db:01:10: f1:cd:78:a8:ba:f5:2b:c7:fe:49:36:23:f3:22:1c: 68:1d:c3:75:e6:d1:71:f5:af:1a:e0:76:01:03:e8: e8:ea:31:8d:b2:67:c1:be:fd:1a:e0:45:30:12:a3: cd:c0:ef:ec:2d:a1:a2:c7:76:9c:6d:71:6a:43:b8: 71:c9:c4:12:b0:7b:77:7c:e3:ee:62:de:ee:a5:f3: a0:33:80:9e:3b:d4:1e:ba:a1:5e:6a:db:8c:39:1a: 51:b9:1a:8a:9f:78:17:06:c7:f5:41:c6:e0:11:91: 26:78:39:7b:5e:20:0d:24:62:ce:84:5e:c9:4f:ec: 50:85:66:71:18:d0:14:c6:d2:07:4c:45:66:81:f1: b1:0d:51:a6:32:18:ad:06:15:9b:08:c5:43:61:ff: f4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6A:AD:98:73:CA:CD:A5:54:C2:7F:9E:46:80:0D:F7:FD:DF:69:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/ef494090-aba7-39db-8156-d416d68d068e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:dd:16:fc:57:0d:3e:3a:a5:5b:eb:f3:9d:a6:e1:80:29:ad: 5c:61:f5:da:60:07:da:85:48:1f:6f:76:4d:db:ec:db:c5:ac: 60:55:8d:02:85:94:b8:e0:f7:25:3e:8e:b5:48:9d:4e:41:3d: 5a:b3:f2:58:f1:83:b1:3e:77:4a:f4:53:75:6d:e5:80:bd:3e: 50:94:cd:68:d6:28:a8:4e:54:78:0a:3c:8f:a6:c3:72:ee:35: 3e:2c:8d:c3:e3:f1:6c:c9:96:fd:0b:a1:c6:70:e1:90:7a:b2: 48:01:7b:1b:5b:62:73:70:ee:62:fe:b7:2b:4b:9f:8f:90:12: 83:b7:ee:38:5d:53:f2:39:34:67:00:47:72:5c:20:78:a5:ad: a2:ce:de:2f:b8:65:13:54:5c:6f:b1:63:61:5f:75:21:80:d2: a4:79:dc:6f:61:af:90:70:59:0f:56:69:50:2d:6e:bc:61:5f: b9:a0:5a:b8:cf:1f:b5:50:6e:f0:8b:da:eb:e7:3b:7d:80:a3: d0:0d:10:9e:d5:1e:a3:1c:3d:a6:af:11:00:6e:6f:e4:37:79: 81:ba:04:0f:46:1e:bf:75:df:5d:43:ab:4d:a2:dc:ec:b6:5a: 99:2c:4a:dc:06:e1:d0:15:46:2c:96:b8:c2:55:a1:e8:a5:53: 83:09:4a:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzxV3+1+bypBE9RTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI2MDIyMjAyMDAzMloXDTI2MDUyMzAxMDAzMlowLzEtMCsGA1UEAxMk MzY5MjJjYjQtMjZkMS00ZGEwLTk4ZjgtYWFmZjI1ZDhhMmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjJaMSnjD6lm4sRHaZzjSbPR/le0o8p14M7v mI0oJtvPAvCRn1Aow+abuVMu0yE/NsPcgdJMWwIeSSKKHAZXkUU0kcV9+kXX8Tx+ eYHZDdb7nT8AFj8AngzV0DcAX1XXM3BrALvbARDxzXiouvUrx/5JNiPzIhxoHcN1 5tFx9a8a4HYBA+jo6jGNsmfBvv0a4EUwEqPNwO/sLaGix3acbXFqQ7hxycQSsHt3 fOPuYt7upfOgM4CeO9QeuqFeatuMORpRuRqKn3gXBsf1QcbgEZEmeDl7XiANJGLO hF7JT+xQhWZxGNAUxtIHTEVmgfGxDVGmMhitBhWbCMVDYf/0RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApqrZhzys2lVMJ/nkaADff932lWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvZWY0OTQwOTAtYWJhNy0z OWRiLTgxNTYtZDQxNmQ2OGQwNjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQVcCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPdFvxXDT46pVvr852m4YAprVxh9dpgB9qFSB9vdk3b7NvFrGBVjQKF lLjg9yU+jrVInU5BPVqz8ljxg7E+d0r0U3Vt5YC9PlCUzWjWKKhOVHgKPI+mw3Lu NT4sjcPj8WzJlv0LocZw4ZB6skgBextbYnNw7mL+tytLn4+QEoO37jhdU/I5NGcA R3JcIHilraLO3i+4ZRNUXG+xY2FfdSGA0qR53G9hr5BwWQ9WaVAtbrxhX7mgWrjP H7VQbvCL2uvnO32Ao9ANEJ7VHqMcPaavEQBub+Q3eYG6BA9GHr91311Dq02i3Oy2 WpksStwG4dAVRiyWuMJVoeilU4MJSkg= -----END CERTIFICATE-----Generated at Thu Feb 26 12:09:55 2026 by rpki-client