$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/56a2efe2-bf6a-3116-82d0-5ab8387bbd0e.roa File: 56a2efe2-bf6a-3116-82d0-5ab8387bbd0e.roa (raw, json) Hash identifier: IHCK35wFQjm3KwcTopee3NfpNLGLiEh/d70jA/z58hU= Subject key identifier: 2E:55:6C:0C:B8:3C:5F:E2:84:B8:6C:3B:8A:95:90:B1:94:8F:C5:57 Certificate issuer: /CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Certificate serial: 010D0C9F4328584B004BE1AC2AC52F97C0A39990 Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/56a2efe2-bf6a-3116-82d0-5ab8387bbd0e.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 400317 IP address blocks: 204.117.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:e1:ac:2a:c5:2f:97:c0:a3:99:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=0f2dd1cc-d6c6-43c0-aa86-72682b464b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8c:43:46:aa:76:b0:48:32:5e:f2:1f:e5:00: c1:87:cd:9b:2e:b6:db:89:9f:5d:8f:b8:72:d6:c2: a1:af:2b:55:c9:20:d5:e9:48:73:b6:72:83:94:9d: 1e:a6:df:fd:d6:6f:60:06:7d:fc:a5:17:61:21:f5: 46:87:9e:0c:6a:79:ed:75:bd:5e:62:61:de:fd:ef: 0e:54:f4:7b:c8:0a:ae:40:d2:d2:69:f9:ea:93:ef: b6:84:5b:ec:5a:93:74:f8:80:ec:59:20:8d:c4:b9: ee:d0:2b:ee:d5:8d:05:5b:73:48:74:4a:d4:bb:14: e3:0b:9e:7f:6d:94:b8:b9:cd:a5:5d:9b:0c:b2:b0: 2f:1f:af:ae:d5:e5:44:bd:78:ba:03:78:14:ba:34: 6f:dd:42:7e:71:d8:76:1e:0d:c5:b1:b2:9b:f5:e7: 4d:f0:4a:32:3a:cb:f0:2c:e3:4e:42:ca:ca:03:59: 4d:25:a5:9b:f0:29:1b:f7:95:c0:5b:ad:3e:f3:23: a9:98:08:bb:73:5a:fb:0d:38:01:fb:dd:0e:ac:e1: d4:7f:7d:fc:80:8a:54:11:f9:d2:de:e6:87:32:91: 5c:d7:b8:83:0d:d7:c9:e0:ab:97:30:bf:ed:7f:2d: 58:80:02:73:67:79:9c:04:ef:8c:08:8b:7d:17:c4: a3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:55:6C:0C:B8:3C:5F:E2:84:B8:6C:3B:8A:95:90:B1:94:8F:C5:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/56a2efe2-bf6a-3116-82d0-5ab8387bbd0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl X509v3 Authority Key Identifier: keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer sbgp-ipAddrBlock: critical IPv4: 204.117.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d5:9e:e0:43:7a:e3:93:0e:41:7b:e8:56:28:77:be:d2:c1: 39:14:fb:ef:fc:0e:ca:37:de:75:63:14:87:fb:f1:a2:a4:4b: e0:9d:cc:a8:42:4c:de:c9:9c:a5:7d:e1:89:53:f2:35:5c:10: 5b:f4:40:21:ec:c8:d1:56:39:ff:42:9d:82:a2:07:a2:4a:61: 93:07:50:4f:13:03:b3:9c:03:4a:a4:87:1c:23:2e:02:16:36: df:76:9d:86:44:4b:fb:dd:f5:17:04:a7:e8:1c:b3:6b:20:27: d2:35:55:f2:ff:cc:d0:30:7c:17:33:ac:79:b6:8e:5e:9f:cc: c6:e4:87:19:13:d3:ed:7b:e9:e1:db:2e:a1:e1:05:1c:8e:05: 64:91:98:f9:cb:04:64:a1:24:86:76:ef:93:b5:1f:8d:0d:e5: 98:dc:74:2b:89:b6:55:2a:a9:36:8e:d5:02:bc:b4:d7:a3:99: 11:b3:b4:5b:a6:08:3a:e9:7e:79:8f:9d:e2:cb:b2:d6:4b:42: 10:35:19:63:33:2f:e6:44:48:48:55:1d:ca:2f:58:63:eb:5e: bb:30:79:ec:91:65:7b:e4:82:d9:3e:52:43:60:60:a2:c7:0d: 8f:4c:f4:96:46:18:e1:17:a9:4a:2b:e0:12:a2:fa:86:5b:49: e3:cf:06:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS+GsKsUvl8CjmZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDM3MGM0OWUtZjcwYy00NmZiLWEzMGYtZGYyNDc1ODUy Y2MyMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MGYyZGQxY2MtZDZjNi00M2MwLWFhODYtNzI2ODJiNDY0YjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYxDRqp2sEgyXvIf5QDBh82bLrbbiZ9dj7hy 1sKhrytVySDV6UhztnKDlJ0ept/91m9gBn38pRdhIfVGh54Manntdb1eYmHe/e8O VPR7yAquQNLSafnqk++2hFvsWpN0+IDsWSCNxLnu0Cvu1Y0FW3NIdErUuxTjC55/ bZS4uc2lXZsMsrAvH6+u1eVEvXi6A3gUujRv3UJ+cdh2Hg3FsbKb9edN8EoyOsvw LONOQsrKA1lNJaWb8Ckb95XAW60+8yOpmAi7c1r7DTgB+90OrOHUf338gIpUEfnS 3uaHMpFc17iDDdfJ4KuXML/tfy1YgAJzZ3mcBO+MCIt9F8SjWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5VbAy4PF/ihLhsO4qVkLGUj8VXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcw YzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0NzU4NTJjYzIvNTZhMmVmZTItYmY2YS0z MTE2LTgyZDAtNWFiODM4N2JiZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDM3MGM0OWUtZjcwYy00NmZiLWEz MGYtZGYyNDc1ODUyY2MyL2QzNzBjNDllLWY3MGMtNDZmYi1hMzBmLWRmMjQ3NTg1 MmNjMi5jcmwwHwYDVR0jBBgwFoAUooa1EEFiDY7Lz82x8x6qqiVcZ5EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kMzcwYzQ5ZS1mNzBjLTQ2ZmItYTMwZi1kZjI0 NzU4NTJjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzHUBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3VnuBDeuOTDkF76FYod77SwTkU++/8Dso33nVjFIf78aKkS+CdzKhC TN7JnKV94YlT8jVcEFv0QCHsyNFWOf9CnYKiB6JKYZMHUE8TA7OcA0qkhxwjLgIW Nt92nYZES/vd9RcEp+gcs2sgJ9I1VfL/zNAwfBczrHm2jl6fzMbkhxkT0+176eHb LqHhBRyOBWSRmPnLBGShJIZ275O1H40N5ZjcdCuJtlUqqTaO1QK8tNejmRGztFum CDrpfnmPneLLstZLQhA1GWMzL+ZESEhVHcovWGPrXrsweeyRZXvkgtk+UkNgYKLH DY9M9JZGGOEXqUor4BKi+oZbSePPBiY= -----END CERTIFICATE-----Generated at Fri Oct 10 17:25:44 2025 by rpki-client