$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/fcf0007a-8a03-3772-9f7e-1d54e1ab6701.roa File: fcf0007a-8a03-3772-9f7e-1d54e1ab6701.roa (raw, json) Hash identifier: RFFyBcjEr8Dga7fg2WlhUDfGYUjN1hSV7OqjCx7hAUM= Subject key identifier: D2:8D:DF:CC:7F:0B:A5:42:08:D7:58:48:DA:29:05:94:9F:E3:AF:D3 Certificate issuer: /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Certificate serial: 010D0C9F4328584BB55429390211C6C21412FE40 Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/fcf0007a-8a03-3772-9f7e-1d54e1ab6701.roa Signing time: Fri 31 Oct 2025 21:18:35 +0000 ROA not before: Fri 31 Oct 2025 21:18:35 +0000 ROA not after: Thu 29 Jan 2026 22:18:35 +0000 asID: 834 IP address blocks: 65.87.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b5:54:29:39:02:11:c6:c2:14:12:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3 Validity Not Before: Oct 31 21:18:35 2025 GMT Not After : Jan 29 22:18:35 2026 GMT Subject: CN=a0c7bfee-1140-4552-9f0a-258ffa80f70a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:87:c9:6e:1f:36:74:0a:42:04:a2:e6:85:aa: 30:5e:4d:91:81:b1:3e:11:25:2d:da:34:de:d2:ce: 0c:a6:f6:74:fb:d8:46:c6:18:c0:62:80:c2:d8:90: fc:01:b4:84:87:98:86:e3:a2:f0:2a:84:bd:95:c6: 10:9e:c7:b4:8d:11:38:17:0a:07:34:7d:ac:23:7f: 1a:6c:7d:2c:db:4e:ea:ce:86:1e:de:47:35:4a:ba: 85:28:83:e3:cf:6e:ac:14:70:bd:a4:69:84:bd:aa: 2d:ae:0d:e6:98:c1:03:1e:cf:84:92:b1:f1:d5:88: 28:95:81:b9:87:b6:2e:fd:4f:c7:36:e3:7d:0d:d2: 7f:c8:48:2d:ab:6a:1c:a6:e1:5d:8d:ca:c2:90:42: 9f:59:ac:53:b2:bd:fa:a8:6f:36:2c:71:a0:45:02: 1b:72:78:78:12:85:54:bd:3c:86:c7:a0:fe:01:4a: 23:a8:df:9f:bf:f6:ec:96:ab:bf:0b:3b:f9:2b:d9: 5a:2c:94:6b:c2:34:17:c0:96:d1:0d:57:76:7c:f0: 4b:6a:dd:9c:7d:f6:c4:a4:11:7d:b0:35:21:2e:98: 14:0b:29:03:c0:46:76:16:f5:db:50:1d:4e:45:77: 6f:b3:d0:f0:a2:30:9c:56:38:d7:eb:36:88:51:06: e8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8D:DF:CC:7F:0B:A5:42:08:D7:58:48:DA:29:05:94:9F:E3:AF:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/fcf0007a-8a03-3772-9f7e-1d54e1ab6701.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl X509v3 Authority Key Identifier: keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer sbgp-ipAddrBlock: critical IPv4: 65.87.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:1c:c6:33:30:4b:a3:43:8a:e2:f9:8f:d7:1b:36:e9:3b:d9: 33:aa:e4:4e:05:cf:8e:31:5e:81:fd:c0:cf:1c:7b:46:dc:ef: 4c:00:a0:fc:74:22:07:88:e3:16:98:6c:0e:fa:38:94:77:ed: c2:7d:6a:72:43:2e:21:ef:aa:7c:44:8b:c0:6b:c9:52:e7:a3: d2:90:04:b2:4f:4b:90:aa:f9:bd:6e:de:e0:b9:87:ba:4c:80: 98:74:08:e3:2d:c4:8b:43:19:70:ff:a8:d6:32:1d:36:46:e3: 6b:51:bc:89:c6:b8:c8:4a:47:fc:2f:b9:86:0d:15:9a:24:41: 4b:e0:3c:a0:6b:0b:99:a9:25:a2:ca:6e:86:5e:1a:16:87:ec: 2c:5f:d7:29:dd:08:6a:75:7a:26:76:90:e9:e8:27:e2:4d:9f: 10:96:12:96:fd:88:69:ac:2a:7a:de:f7:46:b3:f6:9e:7f:95: 88:04:d3:70:38:5d:67:c9:3d:e9:5f:b5:34:1b:9f:23:45:1a: 06:45:cc:4c:ba:e7:ff:1e:ce:2b:1f:f8:bc:0a:d3:9b:05:14: a2:af:87:8c:34:94:b1:13:df:89:86:52:95:16:bd:5c:69:93: a3:80:98:e0:a8:cc:fa:23:12:d6:e1:d7:34:df:2c:d3:89:49: ba:b9:4d:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu1VCk5AhHGwhQS/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzZTI3NjgtMTJhNC00YWUyLTkyZjctMDI1ZDNmM2Jk NWYzMB4XDTI1MTAzMTIxMTgzNVoXDTI2MDEyOTIyMTgzNVowLzEtMCsGA1UEAxMk YTBjN2JmZWUtMTE0MC00NTUyLTlmMGEtMjU4ZmZhODBmNzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4fJbh82dApCBKLmhaowXk2RgbE+ESUt2jTe 0s4MpvZ0+9hGxhjAYoDC2JD8AbSEh5iG46LwKoS9lcYQnse0jRE4FwoHNH2sI38a bH0s207qzoYe3kc1SrqFKIPjz26sFHC9pGmEvaotrg3mmMEDHs+EkrHx1YgolYG5 h7Yu/U/HNuN9DdJ/yEgtq2ocpuFdjcrCkEKfWaxTsr36qG82LHGgRQIbcnh4EoVU vTyGx6D+AUojqN+fv/bslqu/Czv5K9laLJRrwjQXwJbRDVd2fPBLat2cffbEpBF9 sDUhLpgUCykDwEZ2FvXbUB1ORXdvs9DwojCcVjjX6zaIUQboSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKN38x/C6VCCNdYSNopBZSf46/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODNl Mjc2OC0xMmE0LTRhZTItOTJmNy0wMjVkM2YzYmQ1ZjMvZmNmMDAwN2EtOGEwMy0z NzcyLTlmN2UtMWQ1NGUxYWI2NzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTgzZTI3NjgtMTJhNC00YWUyLTky ZjctMDI1ZDNmM2JkNWYzLzk4M2UyNzY4LTEyYTQtNGFlMi05MmY3LTAyNWQzZjNi ZDVmMy5jcmwwHwYDVR0jBBgwFoAUorYygIDZiGVj8i/5Y+6g6sBVk/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODNlMjc2OC0xMmE0LTRhZTItOTJmNy0wMjVk M2YzYmQ1ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQVcOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkcxjMwS6NDiuL5j9cbNuk72TOq5E4Fz44xXoH9wM8ce0bc70wAoPx0 IgeI4xaYbA76OJR37cJ9anJDLiHvqnxEi8BryVLno9KQBLJPS5Cq+b1u3uC5h7pM gJh0COMtxItDGXD/qNYyHTZG42tRvInGuMhKR/wvuYYNFZokQUvgPKBrC5mpJaLK boZeGhaH7Cxf1yndCGp1eiZ2kOnoJ+JNnxCWEpb9iGmsKnre90az9p5/lYgE03A4 XWfJPelftTQbnyNFGgZFzEy65/8ezisf+LwK05sFFKKvh4w0lLET34mGUpUWvVxp k6OAmOCozPojEtbh1zTfLNOJSbq5TaM= -----END CERTIFICATE-----Generated at Tue Nov 4 21:03:21 2025 by rpki-client