$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/941148cd-44d7-351b-9303-cf04b68bb6de.roa File: 941148cd-44d7-351b-9303-cf04b68bb6de.roa (raw, json) Hash identifier: QCiQ/mKvMomppQx6tnXhXmZfGsce4n2nkUdL7SMJJfU= Subject key identifier: 56:1C:42:C3:CB:3D:EF:8D:EA:96:54:47:F5:AA:3D:2C:0F:55:CD:B5 Certificate issuer: /CN=05791d14-11f0-4527-a43c-e6b2425f6d16 Certificate serial: 010D0C9F4328584B2FC188347D093BCD454AE040 Authority key identifier: 53:51:5E:AE:54:4C:F2:11:56:B1:64:C7:39:72:A6:76:CC:56:2E:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/941148cd-44d7-351b-9303-cf04b68bb6de.roa Signing time: Sun 14 Sep 2025 01:00:33 +0000 ROA not before: Sun 14 Sep 2025 01:00:33 +0000 ROA not after: Sat 13 Dec 2025 02:00:33 +0000 asID: 32738 IP address blocks: 208.70.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/05791d14-11f0-4527-a43c-e6b2425f6d16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/05791d14-11f0-4527-a43c-e6b2425f6d16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2f:c1:88:34:7d:09:3b:cd:45:4a:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05791d14-11f0-4527-a43c-e6b2425f6d16 Validity Not Before: Sep 14 01:00:33 2025 GMT Not After : Dec 13 02:00:33 2025 GMT Subject: CN=b8e8a27a-8ad5-4918-807f-90e5edec0d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d2:96:b1:a6:ba:88:74:7d:23:31:5c:12:72: b0:3a:e4:d4:44:95:7f:75:af:61:cf:f7:65:cf:f5: 35:62:13:5b:e6:f1:05:c4:02:4d:70:3b:a9:b1:21: 30:64:6e:ce:11:be:b4:95:b6:a2:64:0e:37:2e:31: e1:b3:e1:84:40:da:81:8a:47:f7:24:a1:de:78:66: 57:8e:9e:93:1d:87:7f:c6:04:88:7a:fa:6c:61:00: 0c:03:5d:3d:94:9c:c2:3e:e1:c4:fa:2a:65:06:82: 04:36:d8:35:a3:69:00:16:5a:fb:47:6b:ff:9b:59: f7:b9:89:a7:01:53:b3:a9:d7:89:ec:51:15:eb:54: 96:b9:62:58:28:27:5b:7b:c4:4f:67:96:b0:59:86: 62:27:77:1a:4c:a2:7b:82:a0:5a:f7:95:82:74:41: 08:63:4e:b9:49:ba:c1:9e:23:51:60:f0:60:68:69: 26:88:a3:d9:0f:a2:1c:f6:6a:22:67:f5:2b:f9:e8: ab:e2:e5:0f:4d:81:50:32:27:dd:b4:df:ec:35:fa: ce:50:66:1b:4b:ee:38:10:a1:d6:8a:42:56:82:33: a0:e8:f8:c1:2d:09:de:ff:54:b1:3f:f5:8a:23:68: 5c:a2:e5:9c:b8:28:74:8b:d7:09:b2:3d:0a:8e:57: 65:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:1C:42:C3:CB:3D:EF:8D:EA:96:54:47:F5:AA:3D:2C:0F:55:CD:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/941148cd-44d7-351b-9303-cf04b68bb6de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16/05791d14-11f0-4527-a43c-e6b2425f6d16.crl X509v3 Authority Key Identifier: keyid:53:51:5E:AE:54:4C:F2:11:56:B1:64:C7:39:72:A6:76:CC:56:2E:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/05791d14-11f0-4527-a43c-e6b2425f6d16.cer sbgp-ipAddrBlock: critical IPv4: 208.70.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:54:36:37:31:7f:5e:ac:d5:d8:4e:f5:3d:8f:0b:79:dd:57: 14:78:2a:ed:b9:b0:c6:51:1c:21:30:1a:99:c6:83:88:a0:a3: 34:c1:3a:35:9b:22:b6:86:bc:a9:07:c8:bb:f5:c2:33:88:2b: 56:5c:46:f7:8f:57:48:f1:a7:3b:d4:8a:66:94:a7:a4:f1:3c: cc:93:a5:0c:70:52:6d:06:7d:85:45:60:56:89:4c:26:39:73: 3c:01:21:6e:c8:80:85:c2:86:69:c3:f6:39:a9:0b:8b:1f:40: 3b:87:7c:b0:b7:c7:c5:2a:66:44:3f:a3:ce:71:27:20:95:28: 3e:f8:ac:64:3f:f5:f6:79:c2:46:2e:bb:6d:23:58:8f:2d:ba: 52:80:b9:98:f6:37:aa:bd:7e:a0:01:f9:34:1e:fa:ac:8c:d0: 93:e7:d2:85:b4:45:6e:c7:4f:2d:ca:d9:cc:06:1c:67:e5:e7: 9f:17:9b:8c:77:46:af:98:34:55:1a:ae:12:16:2c:c6:4a:81: b6:15:f8:88:15:76:2c:7d:42:f3:b1:03:36:e8:95:ac:49:0b: b4:2c:a6:dc:4c:b9:02:b3:8f:cf:2c:b3:29:de:9a:e0:7f:a3: 86:04:4d:51:31:09:11:ef:b2:99:02:94:72:ea:a7:f9:1d:40: 71:a7:4f:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsvwYg0fQk7zUVK4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDU3OTFkMTQtMTFmMC00NTI3LWE0M2MtZTZiMjQyNWY2 ZDE2MB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk YjhlOGEyN2EtOGFkNS00OTE4LTgwN2YtOTBlNWVkZWMwZDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dKWsaa6iHR9IzFcEnKwOuTURJV/da9hz/dl z/U1YhNb5vEFxAJNcDupsSEwZG7OEb60lbaiZA43LjHhs+GEQNqBikf3JKHeeGZX jp6THYd/xgSIevpsYQAMA109lJzCPuHE+iplBoIENtg1o2kAFlr7R2v/m1n3uYmn AVOzqdeJ7FEV61SWuWJYKCdbe8RPZ5awWYZiJ3caTKJ7gqBa95WCdEEIY065SbrB niNRYPBgaGkmiKPZD6Ic9moiZ/Ur+eir4uUPTYFQMifdtN/sNfrOUGYbS+44EKHW ikJWgjOg6PjBLQne/1SxP/WKI2hcouWcuCh0i9cJsj0Kjldl+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYcQsPLPe+N6pZUR/WqPSwPVc21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wNTc5 MWQxNC0xMWYwLTQ1MjctYTQzYy1lNmIyNDI1ZjZkMTYvOTQxMTQ4Y2QtNDRkNy0z NTFiLTkzMDMtY2YwNGI2OGJiNmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMDU3OTFkMTQtMTFmMC00NTI3LWE0 M2MtZTZiMjQyNWY2ZDE2LzA1NzkxZDE0LTExZjAtNDUyNy1hNDNjLWU2YjI0MjVm NmQxNi5jcmwwHwYDVR0jBBgwFoAUU1FerlRM8hFWsWTHOXKmdsxWLvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wNTc5MWQxNC0xMWYwLTQ1MjctYTQzYy1lNmIy NDI1ZjZkMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxUNjcxf16s1dhO9T2PC3ndVxR4Ku25sMZRHCEwGpnGg4igozTBOjWb IraGvKkHyLv1wjOIK1ZcRvePV0jxpzvUimaUp6TxPMyTpQxwUm0GfYVFYFaJTCY5 czwBIW7IgIXChmnD9jmpC4sfQDuHfLC3x8UqZkQ/o85xJyCVKD74rGQ/9fZ5wkYu u20jWI8tulKAuZj2N6q9fqAB+TQe+qyM0JPn0oW0RW7HTy3K2cwGHGfl558Xm4x3 Rq+YNFUarhIWLMZKgbYV+IgVdix9QvOxAzbolaxJC7QsptxMuQKzj88ssynemuB/ o4YETVExCRHvspkClHLqp/kdQHGnT0Q= -----END CERTIFICATE-----Generated at Sat Oct 11 01:30:08 2025 by rpki-client