$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/ef494090-aba7-39db-8156-d416d68d068e.roa File: ef494090-aba7-39db-8156-d416d68d068e.roa (raw, json) Hash identifier: cGvmW33KKs9SWuaoRZ1VrzGFC+67G5gcyGpELQKttog= Subject key identifier: 6A:CC:D8:B8:1D:CB:49:EF:E6:CE:41:31:9F:F5:03:8E:DD:2D:07:6F Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584B3126F8579BF58965FEF98580 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/ef494090-aba7-39db-8156-d416d68d068e.roa Signing time: Sun 14 Sep 2025 13:00:42 +0000 ROA not before: Sun 14 Sep 2025 13:00:42 +0000 ROA not after: Sat 13 Dec 2025 14:00:42 +0000 asID: 7018 IP address blocks: 65.87.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:31:26:f8:57:9b:f5:89:65:fe:f9:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Sep 14 13:00:42 2025 GMT Not After : Dec 13 14:00:42 2025 GMT Subject: CN=53269e7b-e9e0-43be-bbf6-f8c0452cc8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e0:fc:2a:1b:69:38:4e:ca:2b:47:47:3e:08: 73:1e:44:7e:e7:d2:d7:92:cd:3e:2a:ab:e8:67:3e: 9f:10:10:2b:64:ac:e8:77:72:1c:63:b5:55:51:da: 1b:cc:c3:48:ec:e7:9c:d0:d2:28:9b:68:9c:bf:85: ca:2c:cd:66:cb:9a:9d:8a:e1:c4:7b:63:de:05:79: e0:e0:3a:f2:8a:d9:80:60:74:0f:37:8c:ec:b9:47: 4a:a8:24:99:3c:65:5e:b9:5b:72:54:b0:d8:b8:e5: f0:73:04:48:f2:a9:e2:fc:eb:bd:c0:5c:40:82:0f: 90:7f:49:10:6a:9a:6d:cd:12:9a:cf:27:0f:1f:26: 73:c8:f5:79:69:9f:e6:dc:d8:f6:f8:3c:fb:ca:9f: 1b:d7:ab:09:a2:9a:ed:33:af:fc:68:3d:3d:2a:31: ea:42:30:48:94:fc:20:29:14:ed:38:db:94:d0:b6: 55:ee:f6:e5:72:27:a5:3c:ed:e2:34:f2:32:70:6e: 65:3e:69:a8:41:30:64:13:6b:d3:97:44:b3:ec:98: 6a:3f:d0:81:ba:2f:23:f3:01:bb:0d:32:69:9b:65: 20:c0:a1:ca:c2:30:bc:34:f1:ce:1a:d7:d0:e4:56: ab:8f:fe:74:c7:ee:4c:5b:c2:15:d2:ba:1b:7b:2d: c9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CC:D8:B8:1D:CB:49:EF:E6:CE:41:31:9F:F5:03:8E:DD:2D:07:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/ef494090-aba7-39db-8156-d416d68d068e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ce:0e:61:ff:16:99:14:8a:2b:8a:1d:2c:f8:8c:66:d2:aa: 22:32:96:96:16:59:3c:42:8f:f7:5b:bd:98:09:71:af:59:32: f0:ea:99:91:6d:2e:48:27:6b:1c:24:47:4e:5b:ee:e5:ca:77: ac:f5:1e:e2:a8:fa:ef:23:14:ab:13:12:74:8d:36:ed:85:f2: 5b:a0:20:95:ff:44:5e:ae:d5:96:cd:47:27:0d:3b:12:74:93: 0b:cb:69:aa:90:ef:64:96:99:6a:2a:83:f5:78:1a:00:4b:d8: 55:78:b4:ff:6d:93:f2:a2:d5:18:4b:64:66:b3:a3:dd:f4:97: cf:1f:43:90:9b:62:48:2f:fd:8c:2d:f1:ed:45:80:be:1b:49: b5:6d:ee:63:c1:46:4f:3b:22:41:de:86:6a:47:70:0f:f7:48: 29:04:93:d7:dc:85:0f:0c:10:a0:96:d3:61:95:a4:09:e5:d9: 08:f5:d0:3e:7e:90:8f:3e:6e:34:5d:a8:6e:01:b8:da:a8:64: 40:8f:16:8b:f6:d0:b6:de:45:4b:04:0b:da:ad:d4:94:c7:8c: 74:12:14:19:83:72:38:75:41:c1:b0:fa:96:31:79:48:0f:20: 73:3c:0e:da:e3:1c:61:fe:c1:59:29:ce:b3:f8:cf:02:23:a4: e9:f9:28:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsxJvhXm/WJZf75hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDkxNDEzMDA0MloXDTI1MTIxMzE0MDA0MlowLzEtMCsGA1UEAxMk NTMyNjllN2ItZTllMC00M2JlLWJiZjYtZjhjMDQ1MmNjOGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+D8KhtpOE7KK0dHPghzHkR+59LXks0+Kqvo Zz6fEBArZKzod3IcY7VVUdobzMNI7Oec0NIom2icv4XKLM1my5qdiuHEe2PeBXng 4DryitmAYHQPN4zsuUdKqCSZPGVeuVtyVLDYuOXwcwRI8qni/Ou9wFxAgg+Qf0kQ apptzRKazycPHyZzyPV5aZ/m3Nj2+Dz7yp8b16sJoprtM6/8aD09KjHqQjBIlPwg KRTtONuU0LZV7vblcielPO3iNPIycG5lPmmoQTBkE2vTl0Sz7JhqP9CBui8j8wG7 DTJpm2UgwKHKwjC8NPHOGtfQ5Farj/50x+5MW8IV0robey3JBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrM2Lgdy0nv5s5BMZ/1A47dLQdvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvZWY0OTQwOTAtYWJhNy0z OWRiLTgxNTYtZDQxNmQ2OGQwNjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQVcCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLODmH/FpkUiiuKHSz4jGbSqiIylpYWWTxCj/dbvZgJca9ZMvDqmZFt LkgnaxwkR05b7uXKd6z1HuKo+u8jFKsTEnSNNu2F8lugIJX/RF6u1ZbNRycNOxJ0 kwvLaaqQ72SWmWoqg/V4GgBL2FV4tP9tk/Ki1RhLZGazo930l88fQ5CbYkgv/Ywt 8e1FgL4bSbVt7mPBRk87IkHehmpHcA/3SCkEk9fchQ8MEKCW02GVpAnl2Qj10D5+ kI8+bjRdqG4BuNqoZECPFov20LbeRUsEC9qt1JTHjHQSFBmDcjh1QcGw+pYxeUgP IHM8DtrjHGH+wVkpzrP4zwIjpOn5KK8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:08:44 2025 by rpki-client