$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/cab5aace-74ac-3d69-ba56-f9c38c5c9db4.roa File: cab5aace-74ac-3d69-ba56-f9c38c5c9db4.roa (raw, json) Hash identifier: +JGHDNuXG9WKLMfVh0i1KoSeLzp9SFkQopsp7BKGqgI= Subject key identifier: ED:FB:35:93:D8:04:C9:A2:FF:D6:4E:47:AC:F3:D8:E2:B0:CA:6A:9C Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584ADA9BC200692381C55189BD80 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/cab5aace-74ac-3d69-ba56-f9c38c5c9db4.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 6461 IP address blocks: 209.183.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:c2:00:69:23:81:c5:51:89:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=6b9d41e6-1021-42c0-8958-53b2ee4bc0bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0c:bd:ff:2e:74:23:66:1c:70:43:5b:91:eb: 44:ca:8c:d0:b6:2d:01:e1:66:b4:fc:2f:c1:eb:09: 33:77:ae:92:b9:cb:a0:92:93:a3:af:f8:c7:f5:d5: dc:65:6e:22:5e:d0:8c:2f:22:4d:f6:a3:ed:c0:5b: b1:a0:d6:31:de:61:df:3c:f1:2c:f4:f8:0d:2d:08: c2:2e:69:5c:4d:32:53:8b:3f:17:69:47:8f:9f:a8: 96:95:d4:7e:b0:1b:24:17:c1:5b:9d:39:a0:54:f3: 17:ae:86:26:a5:b5:9f:e2:b6:03:05:45:ce:5d:42: 0f:ae:be:90:0c:a1:5d:8f:17:21:c8:60:4b:9c:6b: 3f:f4:dd:e1:49:3d:d5:ae:0f:f6:06:bc:2d:cd:2c: 42:01:d6:cd:5a:f3:0b:fb:65:c6:d3:d5:98:65:c5: 47:ac:fe:9b:02:83:f6:83:ca:1e:3c:d6:3f:a9:b8: 6f:bd:dd:a8:45:4b:ad:1e:fe:53:59:93:33:e5:24: d0:30:87:7f:cb:ed:1e:5d:9a:29:92:27:6d:cb:59: 3e:db:01:0a:3a:a2:6c:cc:bd:7c:0a:f6:1e:40:8b: b8:d8:30:95:87:17:6d:1d:67:31:4d:cd:01:d6:5a: 57:39:2d:c3:3a:b2:f5:ee:90:5f:ac:db:64:39:17: b4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FB:35:93:D8:04:C9:A2:FF:D6:4E:47:AC:F3:D8:E2:B0:CA:6A:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/cab5aace-74ac-3d69-ba56-f9c38c5c9db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 209.183.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:b8:9b:6d:23:2f:48:f7:94:ba:4b:fe:0f:3e:35:3c:7d:5f: 37:59:d3:b1:ef:27:3d:85:20:21:c6:93:ea:c8:a9:bf:e6:e5: b3:44:95:0d:00:ff:6f:ba:72:79:a1:bd:1b:71:d2:f2:5c:e9: ea:82:90:9d:88:1a:33:87:c8:12:35:27:f4:6e:b3:3c:a6:63: 57:f2:d7:f8:00:74:ea:0d:6e:d0:c3:56:28:c4:d7:06:28:58: ea:50:2d:50:27:a0:6f:3f:ea:39:ae:c6:25:31:62:c8:d5:59: f2:ce:41:8b:9a:f5:61:12:a3:3c:a0:31:77:9a:c7:5b:36:8d: 61:70:bb:40:70:c5:48:c7:e0:54:6d:cd:4e:85:07:2e:ea:2d: 41:87:6e:9c:fd:84:f1:c6:94:89:76:3e:95:16:46:9a:20:f5: b7:ab:f5:e5:ab:06:31:1f:6e:94:03:ee:da:0f:ab:45:6c:ce: 21:7b:41:70:08:0e:7e:df:af:47:28:93:78:d8:b6:58:5c:55: b2:10:2f:ba:a5:5a:25:f8:b0:7e:ce:2f:ad:32:8b:8a:19:f7: 6b:63:6e:e9:70:71:7e:26:78:c2:d3:6d:80:c0:c2:ae:6b:17: 31:f4:b2:6f:5a:6e:69:2c:d1:c3:b8:e6:c7:f4:b8:8f:ac:cc: 49:38:96:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram8IAaSOBxVGJvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk NmI5ZDQxZTYtMTAyMS00MmMwLTg5NTgtNTNiMmVlNGJjMGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQy9/y50I2YccENbketEyozQti0B4Wa0/C/B 6wkzd66SucugkpOjr/jH9dXcZW4iXtCMLyJN9qPtwFuxoNYx3mHfPPEs9PgNLQjC LmlcTTJTiz8XaUePn6iWldR+sBskF8FbnTmgVPMXroYmpbWf4rYDBUXOXUIPrr6Q DKFdjxchyGBLnGs/9N3hST3Vrg/2BrwtzSxCAdbNWvML+2XG09WYZcVHrP6bAoP2 g8oePNY/qbhvvd2oRUutHv5TWZMz5STQMId/y+0eXZopkidty1k+2wEKOqJszL18 CvYeQIu42DCVhxdtHWcxTc0B1lpXOS3DOrL17pBfrNtkORe0dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO37NZPYBMmi/9ZOR6zz2OKwymqcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvY2FiNWFhY2UtNzRhYy0z ZDY5LWJhNTYtZjljMzhjNWM5ZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0bewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHS4m20jL0j3lLpL/g8+NTx9XzdZ07HvJz2FICHGk+rIqb/m5bNElQ0A /2+6cnmhvRtx0vJc6eqCkJ2IGjOHyBI1J/RuszymY1fy1/gAdOoNbtDDVijE1wYo WOpQLVAnoG8/6jmuxiUxYsjVWfLOQYua9WESozygMXeax1s2jWFwu0BwxUjH4FRt zU6FBy7qLUGHbpz9hPHGlIl2PpUWRpog9ber9eWrBjEfbpQD7toPq0VsziF7QXAI Dn7fr0cok3jYtlhcVbIQL7qlWiX4sH7OL60yi4oZ92tjbulwcX4meMLTbYDAwq5r FzH0sm9abmks0cO45sf0uI+szEk4lmo= -----END CERTIFICATE-----Generated at Sun Aug 24 00:40:54 2025 by rpki-client