$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/cab5aace-74ac-3d69-ba56-f9c38c5c9db4.roa File: cab5aace-74ac-3d69-ba56-f9c38c5c9db4.roa (raw, json) Hash identifier: bA2fyVOz1Mbpgyy4eyaae39sa/D5KWRGU3pq+DsLhqw= Subject key identifier: 03:24:38:57:F7:B1:71:DB:B2:42:38:BE:C7:18:2D:0E:85:C1:E9:6D Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584BBB758C945C430A786F520980 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/cab5aace-74ac-3d69-ba56-f9c38c5c9db4.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 6461 IP address blocks: 209.183.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:8c:94:5c:43:0a:78:6f:52:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=22ba0662-7630-4547-b1ad-c7674be9809f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:66:58:ff:d3:db:31:6a:b0:42:d7:3a:c8:14: 64:95:86:ae:69:a2:62:7d:26:f6:31:54:26:1e:8e: 07:7b:f6:0b:41:80:5d:d7:50:6d:40:01:57:c2:c5: a9:fe:7f:7d:09:97:b6:e3:84:26:e0:6f:f2:18:ec: 1e:47:ba:2b:9a:e8:a4:8d:f6:f8:d4:51:89:4a:02: f0:ca:b5:5b:75:fc:a5:74:05:53:8d:be:9b:c7:0b: b5:dc:79:67:ba:b1:a5:64:c5:cd:cc:40:83:a7:cc: df:17:29:dd:98:9c:af:05:b7:96:f1:ed:f6:6f:2c: c6:b1:5f:4f:89:63:37:cf:cf:45:54:08:e6:72:58: 7e:0a:1c:09:9b:f9:6d:9e:a4:ba:26:47:de:fc:da: aa:a7:b6:de:6a:07:9e:76:64:df:83:1b:b1:a5:fa: e8:2d:a9:e2:f8:19:2a:ed:fe:bd:3a:f2:2d:b2:c7: c2:2d:31:91:95:b4:c0:5d:7d:cb:4d:f8:7d:ff:e8: 0e:e6:70:67:eb:fe:18:15:f0:72:12:d1:8e:f4:2d: 0b:8a:f7:c9:96:a9:8f:31:85:f1:74:fa:e5:ed:be: 0a:ed:ce:f0:6c:93:4f:ad:97:d7:40:b5:78:ad:67: 0c:72:fa:7d:88:7b:13:de:4b:41:df:02:77:5c:59: 2f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:24:38:57:F7:B1:71:DB:B2:42:38:BE:C7:18:2D:0E:85:C1:E9:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/cab5aace-74ac-3d69-ba56-f9c38c5c9db4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 209.183.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:54:b4:75:4a:0c:1d:8c:c0:08:97:c8:05:6f:85:b2:b0:98: da:82:25:40:6d:20:56:8a:2e:74:49:33:77:91:b2:52:0b:ad: 42:88:42:84:33:7c:23:24:54:e9:ad:c5:fd:37:46:67:e5:3e: b7:a7:ab:e5:96:83:d8:98:60:e4:12:45:c5:f4:bc:6c:84:1d: 90:b4:2b:51:3f:d7:c5:21:1a:0e:38:df:64:36:4a:15:b9:27: 63:6d:8f:34:e6:83:5a:78:96:21:48:96:d8:3f:bb:0b:9e:41: 69:35:23:85:0b:c9:21:40:0c:85:0f:90:72:3d:aa:1a:5e:74: df:4a:d3:ac:6c:59:9e:42:b0:5a:0b:8e:bd:0e:f0:b8:c2:ba: d7:69:8f:05:3b:0a:69:09:db:dd:96:52:6f:2f:62:c3:78:08: a7:2a:bd:fc:c2:ec:d3:33:a4:66:66:48:19:e4:49:da:a7:bc: e8:b9:a4:74:b6:ea:d0:9d:e2:3e:e2:87:0f:e1:cf:90:01:0e: 88:f9:0b:9c:04:59:90:45:d0:f8:42:eb:29:c9:8e:5b:a4:9a: eb:ab:e3:20:4d:83:02:91:50:6b:9e:c8:9e:ec:f4:6f:ef:42: 7f:6b:1a:9a:36:13:95:1b:51:73:2f:8e:3f:16:01:2a:dd:ad: 3c:80:20:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dYyUXEMKeG9SCYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MjJiYTA2NjItNzYzMC00NTQ3LWIxYWQtYzc2NzRiZTk4MDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWZY/9PbMWqwQtc6yBRklYauaaJifSb2MVQm Ho4He/YLQYBd11BtQAFXwsWp/n99CZe244Qm4G/yGOweR7ormuikjfb41FGJSgLw yrVbdfyldAVTjb6bxwu13HlnurGlZMXNzECDp8zfFyndmJyvBbeW8e32byzGsV9P iWM3z89FVAjmclh+ChwJm/ltnqS6Jkfe/Nqqp7beageedmTfgxuxpfroLani+Bkq 7f69OvItssfCLTGRlbTAXX3LTfh9/+gO5nBn6/4YFfByEtGO9C0LivfJlqmPMYXx dPrl7b4K7c7wbJNPrZfXQLV4rWcMcvp9iHsT3ktB3wJ3XFkvsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMkOFf3sXHbskI4vscYLQ6FweltMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvY2FiNWFhY2UtNzRhYy0z ZDY5LWJhNTYtZjljMzhjNWM5ZGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0bewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABUtHVKDB2MwAiXyAVvhbKwmNqCJUBtIFaKLnRJM3eRslILrUKIQoQz fCMkVOmtxf03RmflPrenq+WWg9iYYOQSRcX0vGyEHZC0K1E/18UhGg4432Q2ShW5 J2NtjzTmg1p4liFIltg/uwueQWk1I4ULySFADIUPkHI9qhpedN9K06xsWZ5CsFoL jr0O8LjCutdpjwU7CmkJ292WUm8vYsN4CKcqvfzC7NMzpGZmSBnkSdqnvOi5pHS2 6tCd4j7ihw/hz5ABDoj5C5wEWZBF0PhC6ynJjlukmuur4yBNgwKRUGueyJ7s9G/v Qn9rGpo2E5UbUXMvjj8WASrdrTyAICI= -----END CERTIFICATE-----Generated at Mon Nov 3 14:34:53 2025 by rpki-client