$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/555c0bc8-ee66-3fdb-ba71-d7f6c6458be9.roa File: 555c0bc8-ee66-3fdb-ba71-d7f6c6458be9.roa (raw, json) Hash identifier: cGq5P38espNZJ6fjyRMgoviO4A5bA7jqpL/paorzF/Y= Subject key identifier: 14:49:D5:14:A2:F3:9D:D1:EF:6F:FC:10:1B:2F:EB:82:CE:D1:52:A6 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584ADA9BC1DA76E02316E7692C00 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/555c0bc8-ee66-3fdb-ba71-d7f6c6458be9.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 6461 IP address blocks: 68.170.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c1:da:76:e0:23:16:e7:69:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=847a3d0f-70f3-46ba-8416-a7c164d82713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:19:a0:05:99:6d:10:66:79:4a:38:e6:90:04: 0e:6b:f9:f1:2d:40:f1:e2:75:3e:5a:39:b5:5c:a2: 1f:6e:09:3a:30:a9:29:34:7b:75:b9:e5:31:9d:7e: 0b:fb:fe:6d:24:5f:ae:b2:93:2c:9f:03:66:24:41: 8a:71:e4:7d:ba:5f:eb:ff:91:d3:3d:b2:02:9b:e6: fc:70:4f:2d:4b:7c:d8:74:a9:99:2e:06:8c:59:29: 55:40:06:79:59:59:13:7a:7e:34:5b:0f:82:18:2e: 75:47:6d:55:04:0c:f1:c5:27:ff:a9:69:11:b5:9f: 6f:f5:75:d9:a5:46:1b:f8:53:a8:ea:ec:b9:1d:40: 9b:41:f3:46:b0:96:b1:ad:74:b2:b9:65:7f:ad:36: 23:36:52:71:bf:b1:5c:87:99:49:e9:e4:50:cb:ce: 29:00:54:1d:85:d4:02:7a:df:84:9b:0d:25:37:97: 2e:ba:75:72:77:e5:cd:c0:0a:a7:74:72:83:34:92: 89:f5:6a:5d:16:9f:41:aa:8d:a9:3c:30:b0:92:43: 24:ef:81:ee:b7:d1:e2:d7:5e:4a:57:3b:7c:14:f7: b2:9c:c6:93:4d:3c:7b:7a:73:eb:54:fb:04:39:05: d9:92:ab:2c:aa:19:94:3d:d5:fb:93:32:c1:ba:82: 1e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:49:D5:14:A2:F3:9D:D1:EF:6F:FC:10:1B:2F:EB:82:CE:D1:52:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/555c0bc8-ee66-3fdb-ba71-d7f6c6458be9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 68.170.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:df:f0:7e:26:01:d6:49:18:ed:a0:9f:1c:72:8c:be:93:fc: 9e:03:34:59:b2:2d:68:1a:ab:6b:fd:69:87:d8:44:f6:aa:9b: cd:f7:bf:64:40:d2:88:46:ce:63:52:76:4d:85:f0:f4:dd:2e: 96:2e:dd:6d:49:0e:05:19:7f:fc:54:a0:4b:f8:07:ba:06:68: ae:d4:5b:1d:c2:fa:26:24:1f:d3:54:b0:67:16:b3:88:5f:73: e1:d4:ce:2e:25:ba:0c:b5:dc:1b:bd:22:e2:20:57:76:21:69: 85:76:27:39:81:e5:0f:fa:43:ac:8c:cb:dd:ca:49:7b:cb:43: 14:79:1c:53:d6:a4:81:f3:01:bb:d6:f0:3b:20:ef:0e:21:30: d5:17:d9:12:04:58:cb:63:7e:82:d9:24:be:f5:9f:a4:e3:f7: 62:e2:f5:ef:b7:1a:26:c0:9f:52:b3:80:e2:d2:63:b5:d4:80: d2:38:c8:19:fc:9b:68:16:4e:f6:9a:46:b7:b6:6f:ce:56:ef: 6a:e0:5c:cf:49:55:7a:eb:4b:7d:66:ad:cd:aa:69:32:45:c0: d4:29:4a:6e:ee:90:25:4c:5e:7f:f7:ee:c4:88:7d:75:90:2a: 51:0d:43:87:f1:7c:18:bc:39:7b:97:5b:d6:2f:28:c7:e0:16: 28:0a:d1:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8HaduAjFudpLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk ODQ3YTNkMGYtNzBmMy00NmJhLTg0MTYtYTdjMTY0ZDgyNzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRmgBZltEGZ5SjjmkAQOa/nxLUDx4nU+Wjm1 XKIfbgk6MKkpNHt1ueUxnX4L+/5tJF+uspMsnwNmJEGKceR9ul/r/5HTPbICm+b8 cE8tS3zYdKmZLgaMWSlVQAZ5WVkTen40Ww+CGC51R21VBAzxxSf/qWkRtZ9v9XXZ pUYb+FOo6uy5HUCbQfNGsJaxrXSyuWV/rTYjNlJxv7Fch5lJ6eRQy84pAFQdhdQC et+Emw0lN5cuunVyd+XNwAqndHKDNJKJ9WpdFp9Bqo2pPDCwkkMk74Hut9Hi115K Vzt8FPeynMaTTTx7enPrVPsEOQXZkqssqhmUPdX7kzLBuoIelQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRJ1RSi853R72/8EBsv64LO0VKmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvNTU1YzBiYzgtZWU2Ni0z ZmRiLWJhNzEtZDdmNmM2NDU4YmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbf8H4mAdZJGO2gnxxyjL6T/J4DNFmyLWgaq2v9aYfYRPaqm833v2RA 0ohGzmNSdk2F8PTdLpYu3W1JDgUZf/xUoEv4B7oGaK7UWx3C+iYkH9NUsGcWs4hf c+HUzi4lugy13Bu9IuIgV3YhaYV2JzmB5Q/6Q6yMy93KSXvLQxR5HFPWpIHzAbvW 8Dsg7w4hMNUX2RIEWMtjfoLZJL71n6Tj92Li9e+3GibAn1KzgOLSY7XUgNI4yBn8 m2gWTvaaRre2b85W72rgXM9JVXrrS31mrc2qaTJFwNQpSm7ukCVMXn/37sSIfXWQ KlENQ4fxfBi8OXuXW9YvKMfgFigK0cI= -----END CERTIFICATE-----Generated at Sat Aug 23 22:52:14 2025 by rpki-client