$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/56770b39-baf1-3ca3-9e60-505abe53ada8.roa File: 56770b39-baf1-3ca3-9e60-505abe53ada8.roa (raw, json) Hash identifier: UzLS+BbELBbloQiKi8MKwdIIzo6RMYJqrVZsX7ezPr8= Subject key identifier: 78:FA:F1:18:C4:88:FE:2D:D5:86:F3:97:78:B5:AD:89:AF:0F:51:13 Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7 Certificate serial: 010D0C9F4328584B8EACEB1A39406357A3EB3D80 Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/56770b39-baf1-3ca3-9e60-505abe53ada8.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 13638 IP address blocks: 173.241.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:eb:1a:39:40:63:57:a3:eb:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=d0a3bd90-3ac6-49aa-9c88-df87ce426717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5b:95:a0:eb:17:21:7a:de:d6:1e:d5:87:7e: 79:16:d1:fd:0d:bc:56:0f:00:d7:3f:0d:ba:78:d5: 85:5c:8c:85:3d:13:59:1c:24:fb:d5:52:e4:78:d3: 41:30:6a:4f:db:c7:83:24:47:28:3d:ca:0e:b4:ca: e3:38:ef:56:87:31:cf:a2:0c:2b:d2:56:a5:c3:24: 82:dc:be:93:9a:e0:47:a0:2c:c4:81:10:f2:dd:63: 52:3c:6a:ed:83:e7:f9:ec:a1:b5:4a:2a:43:65:cc: cf:0d:dd:a7:c7:c9:28:8b:9e:16:a7:ab:18:0e:8a: b3:25:5b:5c:20:18:a4:a2:7c:9e:19:21:f0:46:16: f0:1f:48:41:bd:5c:bb:de:3a:72:0b:4e:fb:25:9f: 10:73:bd:bd:0a:69:d8:80:78:c4:eb:2b:e1:86:92: 70:ac:55:33:57:09:60:0d:9e:0f:8f:f4:b9:f5:18: 46:24:a2:96:bd:ac:f7:01:2e:b5:d3:97:fa:c7:10: c1:b7:40:00:e3:ea:e1:87:a1:4d:5e:96:33:c7:7c: b2:00:b7:d7:9c:f8:76:3a:df:82:ad:97:86:e7:32: cd:eb:a2:c1:80:94:24:4d:bb:83:0d:4d:d4:1a:28: 99:a9:62:35:5f:92:92:53:11:bc:93:42:ff:2f:66: 66:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FA:F1:18:C4:88:FE:2D:D5:86:F3:97:78:B5:AD:89:AF:0F:51:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/56770b39-baf1-3ca3-9e60-505abe53ada8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl X509v3 Authority Key Identifier: keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer sbgp-ipAddrBlock: critical IPv4: 173.241.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:0f:95:d1:9d:8d:e2:d4:48:63:22:31:98:bb:d0:61:7b:0d: 76:84:a2:2b:1b:a5:53:d6:28:0d:5e:9e:98:a8:c6:a0:0c:0b: f3:2c:45:2d:f1:26:c0:a0:f3:52:2f:81:55:dc:4c:7f:11:6e: 9b:e9:de:58:e8:1b:6e:44:72:c4:1f:a8:e9:0e:78:5f:5e:48: 53:aa:47:64:dc:6d:d6:6a:16:8c:88:40:2f:63:cd:3f:f6:ad: 11:20:51:c5:b1:c6:8c:0b:46:11:2b:0c:5f:78:2e:c4:45:60: ff:ac:61:71:26:47:39:7a:79:d0:c3:00:ad:7f:6a:ae:4f:ce: c9:d9:06:12:20:a9:9e:25:b5:98:3c:1d:38:89:44:e2:ac:3e: 7e:f8:bf:b1:18:df:09:30:ec:0a:b9:13:a3:eb:1d:5b:b5:ee: ea:e9:30:44:ab:91:21:e8:09:f0:57:96:52:7c:59:9c:ea:5b: 1d:30:56:96:ed:81:e2:b8:77:54:4e:02:66:f1:fb:4b:f8:cd: c8:a3:fe:54:50:3d:7f:f8:6a:9e:c3:a4:08:d5:4f:8b:f3:6d: f4:49:15:66:13:e7:40:cd:8a:07:b6:86:15:0b:b5:3a:f5:8d: ce:cb:69:7b:22:3e:f6:e2:90:9f:d4:72:5a:7c:08:cf:5d:d2: c8:53:9b:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOsaOUBjV6PrPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4 ZmI3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZDBhM2JkOTAtM2FjNi00OWFhLTljODgtZGY4N2NlNDI2NzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1uVoOsXIXre1h7Vh355FtH9DbxWDwDXPw26 eNWFXIyFPRNZHCT71VLkeNNBMGpP28eDJEcoPcoOtMrjOO9WhzHPogwr0lalwySC 3L6TmuBHoCzEgRDy3WNSPGrtg+f57KG1SipDZczPDd2nx8koi54Wp6sYDoqzJVtc IBikonyeGSHwRhbwH0hBvVy73jpyC077JZ8Qc729CmnYgHjE6yvhhpJwrFUzVwlg DZ4Pj/S59RhGJKKWvaz3AS6105f6xxDBt0AA4+rhh6FNXpYzx3yyALfXnPh2Ot+C rZeG5zLN66LBgJQkTbuDDU3UGiiZqWI1X5KSUxG8k0L/L2ZmxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHj68RjEiP4t1Ybzl3i1rYmvD1ETMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2 YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvNTY3NzBiMzktYmFmMS0z Y2EzLTllNjAtNTA1YWJlNTNhZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3 NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5 MGUwMjhmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfEwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0PldGdjeLUSGMiMZi70GF7DXaEoisbpVPWKA1enpioxqAMC/MsRS3x JsCg81IvgVXcTH8Rbpvp3ljoG25EcsQfqOkOeF9eSFOqR2TcbdZqFoyIQC9jzT/2 rREgUcWxxowLRhErDF94LsRFYP+sYXEmRzl6edDDAK1/aq5PzsnZBhIgqZ4ltZg8 HTiJROKsPn74v7EY3wkw7Aq5E6PrHVu17urpMESrkSHoCfBXllJ8WZzqWx0wVpbt geK4d1ROAmbx+0v4zcij/lRQPX/4ap7DpAjVT4vzbfRJFWYT50DNige2hhULtTr1 jc7LaXsiPvbikJ/Uclp8CM9d0shTm3k= -----END CERTIFICATE-----Generated at Mon Oct 20 13:58:08 2025 by rpki-client