$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/9dbe0597-903d-34a9-8315-3dd91ef42978.roa File: 9dbe0597-903d-34a9-8315-3dd91ef42978.roa (raw, json) Hash identifier: b85YBh69jx06Tts9Z+Za9Zv3v8MaeaWe5NeN5kr79nk= Subject key identifier: 1D:26:4F:F1:AF:7E:F7:08:84:CE:1A:8E:EF:38:E1:05:36:FE:0E:82 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584B79BCB47461BD85D482CBB6C0 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/9dbe0597-903d-34a9-8315-3dd91ef42978.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 22765 IP address blocks: 68.170.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b4:74:61:bd:85:d4:82:cb:b6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=759ccf3c-bbb9-443f-b71c-9d21ef192219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:55:f3:c2:63:ec:2a:8a:0d:b5:32:18:a7:9b: f8:45:d0:e6:c5:cf:25:2b:52:75:2a:01:9d:f1:2d: e9:33:f5:11:a1:23:5b:11:60:b4:06:32:2b:9a:74: 65:72:2c:99:b7:9e:13:fb:60:19:89:31:ee:73:b7: da:0c:c7:ab:d1:57:39:bd:de:db:20:23:01:a7:93: 88:74:8c:f0:84:e5:4c:f0:c9:52:67:96:41:d6:73: f6:f0:2d:a5:ee:9e:c7:ed:13:4d:ff:ca:5b:59:ac: 0a:54:3b:23:4e:e4:9e:fb:c5:fa:0a:1a:41:78:a9: 6a:25:6e:6e:65:2d:05:e5:4a:99:c5:f3:eb:96:fe: 97:52:07:d1:d2:d3:18:98:8c:18:d2:8a:0c:50:33: 3a:a9:49:92:6f:81:f9:b1:17:0a:b9:ec:da:88:cc: d0:5e:6b:88:d1:6a:34:dc:f0:45:93:ad:f8:8a:da: c1:3f:82:78:bf:9c:d6:7c:4a:1d:81:13:4d:2e:5b: 44:17:62:24:7b:f5:05:c3:31:dd:2c:d6:3c:e3:68: 7c:cf:a2:1f:ba:19:0e:c6:b0:ec:81:94:09:71:f5: 45:18:53:8b:ab:a9:e2:0e:71:4f:2e:8b:32:a8:fd: df:2e:c3:79:5b:37:2f:bb:2c:33:41:48:3c:de:ad: d6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:26:4F:F1:AF:7E:F7:08:84:CE:1A:8E:EF:38:E1:05:36:FE:0E:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/9dbe0597-903d-34a9-8315-3dd91ef42978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 68.170.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:17:39:f8:0c:84:90:22:18:be:c9:e2:84:5e:cf:9d:af:af: 0a:b7:57:80:3a:12:04:bb:e5:2c:d0:b5:66:b6:09:51:ad:31: 68:67:f2:1c:cf:de:6c:6f:2b:65:a9:d6:cc:3f:9c:a7:d1:54: 7c:30:77:9d:ea:39:8b:ea:1e:58:e5:92:57:03:8b:98:08:39: 06:48:16:85:c7:fd:d0:8e:47:a4:6e:b9:93:f5:36:96:79:9d: 05:7a:76:31:41:c5:0d:98:73:5c:a3:08:2e:66:cd:d3:c9:ce: 8f:31:28:b2:b2:fb:d7:f0:e7:8f:da:03:c7:7e:ea:5e:ae:cc: 95:fe:31:e6:c7:c5:3f:45:09:90:e9:f6:25:cf:90:5b:e1:17: 36:ad:6e:ab:03:41:21:fe:f6:e5:f3:da:64:2d:58:de:35:69: 26:38:3a:11:fb:6e:69:71:26:91:92:e5:62:6b:59:46:c4:4c: fa:68:12:dd:7a:c5:79:87:4c:8b:6f:45:47:53:32:4b:03:f4: d9:20:96:55:7a:81:15:da:26:7f:1a:94:13:d4:06:a0:11:1d: fa:91:41:4c:de:7d:34:28:a6:a7:6f:dd:61:fb:45:48:7c:b9: 08:26:f0:ec:9b:bf:cb:06:bf:1e:19:db:c2:4e:3a:43:d4:84: 59:6c:6d:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLR0Yb2F1ILLtsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk NzU5Y2NmM2MtYmJiOS00NDNmLWI3MWMtOWQyMWVmMTkyMjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVXzwmPsKooNtTIYp5v4RdDmxc8lK1J1KgGd 8S3pM/URoSNbEWC0BjIrmnRlciyZt54T+2AZiTHuc7faDMer0Vc5vd7bICMBp5OI dIzwhOVM8MlSZ5ZB1nP28C2l7p7H7RNN/8pbWawKVDsjTuSe+8X6ChpBeKlqJW5u ZS0F5UqZxfPrlv6XUgfR0tMYmIwY0ooMUDM6qUmSb4H5sRcKuezaiMzQXmuI0Wo0 3PBFk634itrBP4J4v5zWfEodgRNNLltEF2Ike/UFwzHdLNY842h8z6IfuhkOxrDs gZQJcfVFGFOLq6niDnFPLosyqP3fLsN5WzcvuywzQUg83q3WbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0mT/GvfvcIhM4aju844QU2/g6CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvOWRiZTA1OTctOTAzZC0z NGE5LTgzMTUtM2RkOTFlZjQyOTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKrJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAXOfgMhJAiGL7J4oRez52vrwq3V4A6EgS75SzQtWa2CVGtMWhn8hzP 3mxvK2Wp1sw/nKfRVHwwd53qOYvqHljlklcDi5gIOQZIFoXH/dCOR6RuuZP1NpZ5 nQV6djFBxQ2Yc1yjCC5mzdPJzo8xKLKy+9fw54/aA8d+6l6uzJX+MebHxT9FCZDp 9iXPkFvhFzatbqsDQSH+9uXz2mQtWN41aSY4OhH7bmlxJpGS5WJrWUbETPpoEt16 xXmHTItvRUdTMksD9NkgllV6gRXaJn8alBPUBqARHfqRQUzefTQopqdv3WH7RUh8 uQgm8Oybv8sGvx4Z28JOOkPUhFlsbU0= -----END CERTIFICATE-----Generated at Mon Nov 3 14:36:30 2025 by rpki-client