$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/555c0bc8-ee66-3fdb-ba71-d7f6c6458be9.roa File: 555c0bc8-ee66-3fdb-ba71-d7f6c6458be9.roa (raw, json) Hash identifier: aJq8UMn/gmj8L1kMtxIrSeATIK5DV9gUvVUOVga+en8= Subject key identifier: 35:35:28:86:83:D3:C4:1E:5E:29:70:5D:E4:58:C5:B4:BB:7C:30:E5 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584BBB758C6C375104535D57DE20 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/555c0bc8-ee66-3fdb-ba71-d7f6c6458be9.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 6461 IP address blocks: 68.170.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:8c:6c:37:51:04:53:5d:57:de:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=6122239e-7823-4855-b3c3-a611b5940486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:21:55:92:ba:66:30:1d:9b:96:fd:4a:f2:50: be:19:35:89:7e:b1:07:fa:b2:24:58:ae:96:39:0a: db:64:4b:dc:3d:e3:1a:06:91:d0:ad:e6:87:4c:5e: 53:0e:52:62:cd:33:3f:dd:34:3e:13:28:d5:65:f7: 8c:8b:fc:db:21:8e:91:4d:1b:23:98:cf:d2:3b:e9: 99:a2:67:fe:8f:51:46:46:1b:f1:cf:98:f2:0f:f6: c6:6f:f1:b4:5b:b4:94:ae:14:9b:1f:0b:13:94:60: bb:ef:da:eb:5f:e1:42:7d:ef:5a:ef:6a:2a:82:2e: 14:63:a4:99:0f:e8:81:ec:f0:02:ae:55:77:53:ba: 36:37:74:f8:0d:9f:81:40:89:51:85:be:9a:1f:6f: 6e:a5:91:b6:df:73:f9:b1:4c:b7:de:29:b6:c4:bc: d6:44:42:a4:27:f5:e0:8e:c1:0e:1a:c8:bc:4c:73: 1a:4d:81:1c:1d:ba:03:3b:d7:23:63:5c:57:eb:1b: 39:53:fe:47:f0:01:d1:ba:18:c1:42:eb:0f:6f:dd: 95:79:66:05:1a:73:e9:cb:de:e7:c3:9e:d8:cd:93: 04:dc:4a:4e:b2:ba:6b:2e:59:b9:6e:e2:b3:b3:6d: 12:37:39:cf:af:ad:a3:ea:17:8f:be:e3:8f:4c:56: cb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:35:28:86:83:D3:C4:1E:5E:29:70:5D:E4:58:C5:B4:BB:7C:30:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/555c0bc8-ee66-3fdb-ba71-d7f6c6458be9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 68.170.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:96:a9:e8:37:6a:f7:26:d2:b5:04:18:dd:91:cc:ad:db:ac: 39:17:57:44:ed:63:89:eb:a6:79:ae:a7:1d:33:79:26:92:ba: 2f:d0:ff:8e:31:83:6f:7a:d2:f3:d2:03:1d:dc:6a:9d:60:26: 15:b4:35:dc:4a:0f:1e:fa:62:8b:0b:06:cd:34:09:08:01:97: cb:76:ac:50:47:22:0e:1c:04:bf:6b:e2:a7:61:e2:4b:cd:5b: 1c:db:cc:fe:3b:e1:45:57:e8:0a:91:79:54:ac:5a:99:c2:9f: 09:35:a9:3a:bd:8c:08:a4:a7:3e:12:de:5e:a1:e6:fd:44:1d: f5:16:b0:35:0a:df:68:e1:b1:fe:6e:14:66:66:11:d4:13:41: 2d:e0:d3:ea:7d:49:1a:c4:bc:8c:f1:68:d9:7a:4d:8b:00:a1: 42:a7:f7:f9:e8:94:c3:f0:d1:bf:bd:56:02:7a:73:2f:0f:9f: ae:ec:46:fe:0c:06:a7:42:ec:d3:cb:5a:a9:43:96:b7:a5:62: 9c:10:85:e6:46:ed:62:43:17:02:db:f7:8e:2e:0e:e9:d5:92: 14:7d:38:9f:c8:57:d2:4b:58:6e:11:8d:a6:38:01:7b:14:67: 49:45:c7:f2:cc:08:d0:04:9b:e6:25:f1:e6:5f:0f:23:28:1e: 18:d6:df:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYxsN1EEU11X3iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk NjEyMjIzOWUtNzgyMy00ODU1LWIzYzMtYTYxMWI1OTQwNDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCFVkrpmMB2blv1K8lC+GTWJfrEH+rIkWK6W OQrbZEvcPeMaBpHQreaHTF5TDlJizTM/3TQ+EyjVZfeMi/zbIY6RTRsjmM/SO+mZ omf+j1FGRhvxz5jyD/bGb/G0W7SUrhSbHwsTlGC779rrX+FCfe9a72oqgi4UY6SZ D+iB7PACrlV3U7o2N3T4DZ+BQIlRhb6aH29upZG233P5sUy33im2xLzWREKkJ/Xg jsEOGsi8THMaTYEcHboDO9cjY1xX6xs5U/5H8AHRuhjBQusPb92VeWYFGnPpy97n w57YzZME3EpOsrprLlm5buKzs20SNznPr62j6hePvuOPTFbL7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDU1KIaD08QeXilwXeRYxbS7fDDlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvNTU1YzBiYzgtZWU2Ni0z ZmRiLWJhNzEtZDdmNmM2NDU4YmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+Wqeg3avcm0rUEGN2RzK3brDkXV0TtY4nrpnmupx0zeSaSui/Q/44x g2960vPSAx3cap1gJhW0NdxKDx76YosLBs00CQgBl8t2rFBHIg4cBL9r4qdh4kvN WxzbzP474UVX6AqReVSsWpnCnwk1qTq9jAikpz4S3l6h5v1EHfUWsDUK32jhsf5u FGZmEdQTQS3g0+p9SRrEvIzxaNl6TYsAoUKn9/nolMPw0b+9VgJ6cy8Pn67sRv4M BqdC7NPLWqlDlrelYpwQheZG7WJDFwLb944uDunVkhR9OJ/IV9JLWG4RjaY4AXsU Z0lFx/LMCNAEm+Yl8eZfDyMoHhjW31s= -----END CERTIFICATE-----Generated at Mon Nov 3 14:38:50 2025 by rpki-client