$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/faa4b138-2a66-3a38-85b9-47b64616ab70.roa File: faa4b138-2a66-3a38-85b9-47b64616ab70.roa (raw, json) Hash identifier: ddgMmgudrNUYGAi8ZPTz0fDesxgcxlrjklO8ADow/oM= Subject key identifier: 69:63:C2:01:00:08:1A:67:95:74:28:90:89:13:90:0E:35:00:A9:32 Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584B1806E360EA8442F21E96E500 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/faa4b138-2a66-3a38-85b9-47b64616ab70.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 7018 IP address blocks: 65.87.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:e3:60:ea:84:42:f2:1e:96:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=371af7aa-af8f-4a49-a565-3a90b355e579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:86:ef:0e:5d:ca:24:a5:3f:4f:fd:bb:f5:77: 22:dd:08:3f:1c:8c:7b:10:b4:49:4d:93:63:d9:53: 60:bc:7a:7a:21:ff:40:2d:23:e1:00:f0:56:9c:46: 4c:eb:5a:d0:f6:b4:7f:41:27:0f:28:f7:a0:b1:29: 45:bf:f0:2c:9b:f3:79:1a:fb:1c:ae:ba:e4:ec:ee: d0:c9:d4:d4:72:2f:cb:61:4a:fd:6e:1a:09:64:f6: 97:a8:52:09:e1:c6:80:c2:1d:ae:5b:a1:cc:f6:fc: 9c:96:2e:90:68:85:d1:af:27:8a:43:af:d4:d4:82: 5d:dc:ba:7f:fa:a1:12:b3:e3:2d:98:be:6c:c7:59: 3d:dd:4b:1a:e0:c4:05:09:17:5a:ff:32:de:07:e7: ce:35:90:b6:90:8f:7b:6b:15:b1:10:eb:ba:02:d9: 02:12:2c:dd:2d:b7:68:6c:96:47:f6:5b:d8:05:50: d9:45:63:63:71:79:f9:df:9e:ec:0a:2c:25:c9:d6: 26:74:a2:e4:24:fb:96:45:7d:86:a0:18:91:2a:65: 1c:59:52:f0:83:d8:b9:81:44:10:e9:7d:7c:16:f4: 01:6e:dd:d4:5f:e5:af:95:b0:7c:61:9c:a9:e8:03: 3b:03:38:98:41:59:5b:e3:f8:a1:de:95:4f:03:9c: 88:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:63:C2:01:00:08:1A:67:95:74:28:90:89:13:90:0E:35:00:A9:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/faa4b138-2a66-3a38-85b9-47b64616ab70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:b4:06:4b:c0:57:a3:77:42:2e:da:0e:0c:06:12:2d:36:35: 86:5a:89:41:a4:79:54:ba:ab:fc:2a:f9:6e:2d:e4:b7:52:00: 3f:1b:18:82:69:5d:1b:6c:1c:d4:15:cb:5e:7d:b2:f0:b9:67: 80:7f:e0:fa:ab:0f:74:84:cc:24:43:56:a1:c1:b5:02:17:d2: a2:7b:21:f3:b9:d3:66:54:34:12:9c:eb:3e:76:9d:5b:2e:7f: 6e:44:8e:ae:5e:01:d7:32:f6:7e:b0:24:90:eb:4a:6a:28:30: b1:d5:f8:5d:4c:14:32:2f:94:9d:4f:87:93:03:92:65:25:a4: 3b:71:01:bc:a8:07:95:65:1d:07:32:96:64:20:85:85:82:c7: 6d:ad:f8:79:ca:0c:d7:82:44:1a:38:c0:4f:4a:c1:97:be:15: 8b:2b:c5:6c:9d:47:91:17:ce:8c:81:ab:ec:02:19:a9:2e:f2: 6a:66:ed:da:5c:35:a6:c0:df:c8:ed:d1:e5:8f:a5:72:dd:d5: 61:72:3c:19:4d:c9:bd:b6:24:5e:15:e6:42:f1:f2:28:78:34: e8:67:18:1b:5d:6b:9b:d6:84:5d:f1:b0:08:3f:86:99:e6:7f: c5:98:a1:9c:42:e5:21:6c:45:85:7e:97:6e:92:2f:4e:95:be: 99:90:22:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBuNg6oRC8h6W5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MzcxYWY3YWEtYWY4Zi00YTQ5LWE1NjUtM2E5MGIzNTVlNTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYbvDl3KJKU/T/279Xci3Qg/HIx7ELRJTZNj 2VNgvHp6If9ALSPhAPBWnEZM61rQ9rR/QScPKPegsSlFv/Asm/N5Gvscrrrk7O7Q ydTUci/LYUr9bhoJZPaXqFIJ4caAwh2uW6HM9vycli6QaIXRryeKQ6/U1IJd3Lp/ +qESs+MtmL5sx1k93Usa4MQFCRda/zLeB+fONZC2kI97axWxEOu6AtkCEizdLbdo bJZH9lvYBVDZRWNjcXn5357sCiwlydYmdKLkJPuWRX2GoBiRKmUcWVLwg9i5gUQQ 6X18FvQBbt3UX+WvlbB8YZyp6AM7AziYQVlb4/ih3pVPA5yIyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGljwgEACBpnlXQokIkTkA41AKkyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvZmFhNGIxMzgtMmE2Ni0z YTM4LTg1YjktNDdiNjQ2MTZhYjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACe0BkvAV6N3Qi7aDgwGEi02NYZaiUGkeVS6q/wq+W4t5LdSAD8bGIJp XRtsHNQVy159svC5Z4B/4PqrD3SEzCRDVqHBtQIX0qJ7IfO502ZUNBKc6z52nVsu f25Ejq5eAdcy9n6wJJDrSmooMLHV+F1MFDIvlJ1Ph5MDkmUlpDtxAbyoB5VlHQcy lmQghYWCx22t+HnKDNeCRBo4wE9KwZe+FYsrxWydR5EXzoyBq+wCGaku8mpm7dpc NabA38jt0eWPpXLd1WFyPBlNyb22JF4V5kLx8ih4NOhnGBtda5vWhF3xsAg/hpnm f8WYoZxC5SFsRYV+l26SL06VvpmQIjQ= -----END CERTIFICATE-----Generated at Wed Nov 5 13:24:35 2025 by rpki-client