$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/5c78cad0-3ad2-33d3-91f8-8162ca042994.roa File: 5c78cad0-3ad2-33d3-91f8-8162ca042994.roa (raw, json) Hash identifier: DAcd8zjdujYYd6xfr0Vf2RCN+j1RkE0eLNuXdXbzX4Q= Subject key identifier: E2:53:36:31:51:75:AC:72:77:2E:C7:85:D1:2F:88:6C:D4:D4:0E:1F Certificate issuer: /CN=56b85935-4ce1-48c7-a19f-f7ab026f59a3 Certificate serial: 010D0C9F4328584A761E4243C68C4D990B0D7280 Authority key identifier: 9B:EC:E6:5C:34:B1:AF:71:C0:5C:11:CC:2C:F7:E9:DD:3A:DA:0E:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/5c78cad0-3ad2-33d3-91f8-8162ca042994.roa Signing time: Wed 09 Jul 2025 13:07:07 +0000 ROA not before: Wed 09 Jul 2025 13:07:07 +0000 ROA not after: Tue 07 Oct 2025 13:07:07 +0000 asID: 13654 IP address blocks: 68.171.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/56b85935-4ce1-48c7-a19f-f7ab026f59a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/56b85935-4ce1-48c7-a19f-f7ab026f59a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1e:42:43:c6:8c:4d:99:0b:0d:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b85935-4ce1-48c7-a19f-f7ab026f59a3 Validity Not Before: Jul 9 13:07:07 2025 GMT Not After : Oct 7 13:07:07 2025 GMT Subject: CN=81ec6658-4013-44d7-be21-30be847d0d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8d:7f:ac:ad:43:97:fb:a3:07:1b:36:2f:aa: 41:76:69:b9:f5:02:6d:4e:79:dc:1d:6a:fb:13:88: 7b:b6:6d:6a:ab:08:31:a3:30:29:65:6a:09:75:79: 72:7a:42:71:23:de:cf:ad:2b:51:fd:6c:51:1e:cb: cb:05:ad:30:35:d9:b9:48:7e:b5:c3:84:28:25:1c: fc:ab:0e:7c:8d:8a:18:3f:b5:77:1a:2d:27:b5:e5: e2:74:27:8d:55:06:3e:38:c0:e9:ad:0e:6c:47:3d: 8f:33:76:99:eb:22:4c:ff:5c:e2:d7:df:e9:05:46: 3f:31:c7:28:fe:62:52:9e:ef:e0:50:f3:a0:af:f6: 1d:bb:a0:7c:74:26:69:c4:25:45:40:60:ed:4f:42: 4b:2e:57:05:50:61:e0:43:45:a7:30:42:15:1a:a7: a4:d2:8a:1a:60:9b:87:be:ff:d6:36:8e:3c:b8:50: 13:a3:fd:6d:13:4d:92:be:49:5f:6e:22:fc:39:02: 99:59:a7:01:de:41:3e:00:a6:2b:ba:19:97:9e:e2: bd:d0:67:35:f9:e3:0f:d3:6e:4a:72:e8:23:7e:ce: 14:8d:e4:f5:32:77:9e:14:ef:dd:c6:3b:2d:b6:75: 3b:81:43:58:59:4b:a3:b3:e7:97:49:5a:ec:48:60: 58:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:53:36:31:51:75:AC:72:77:2E:C7:85:D1:2F:88:6C:D4:D4:0E:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/5c78cad0-3ad2-33d3-91f8-8162ca042994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3/56b85935-4ce1-48c7-a19f-f7ab026f59a3.crl X509v3 Authority Key Identifier: keyid:9B:EC:E6:5C:34:B1:AF:71:C0:5C:11:CC:2C:F7:E9:DD:3A:DA:0E:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/56b85935-4ce1-48c7-a19f-f7ab026f59a3.cer sbgp-ipAddrBlock: critical IPv4: 68.171.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:93:ab:e9:8d:dd:2b:e0:dd:67:0f:ff:1f:b0:1e:d1:47:c4: a2:7c:eb:c1:62:ef:52:ed:c4:0b:6c:36:f6:69:88:99:7e:50: bf:68:76:33:dd:f8:e6:66:5d:a1:50:b1:c0:fd:5f:63:70:a2: c8:78:18:be:5f:8a:75:ff:a0:a3:4f:4c:7f:a0:ec:d2:ec:d5: a6:e3:02:45:ac:da:65:c1:bf:de:67:24:3f:f3:10:e4:b2:7a: 35:14:9a:bc:f5:55:7d:dc:ca:bb:c7:6b:21:0c:ee:66:f3:d7: 7c:20:34:f4:b0:49:5a:d4:58:76:53:83:3e:fc:9a:96:14:e5: 14:96:11:f8:79:16:47:3e:4d:ba:cd:cd:7e:ce:0d:24:1a:1c: 57:c0:c8:bf:75:00:e2:4b:ef:ce:d3:3a:52:cd:d0:09:a5:a9: 74:6e:08:85:31:5a:ca:f8:03:5b:30:f2:e9:b8:f5:db:b6:10: 92:17:a9:a3:a9:11:e6:ce:e0:36:91:16:fb:73:d3:f0:e7:fa: af:3c:6d:4a:90:9a:77:e7:e9:05:e0:ca:09:69:f4:d0:41:01: f4:0b:fb:ed:8c:a4:ff:a4:d6:2c:24:da:ce:20:80:73:63:43: 13:89:01:69:d6:a9:16:57:8a:1d:fe:5a:53:35:24:f7:f1:c8: c0:b9:ac:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2HkJDxoxNmQsNcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZiODU5MzUtNGNlMS00OGM3LWExOWYtZjdhYjAyNmY1 OWEzMB4XDTI1MDcwOTEzMDcwN1oXDTI1MTAwNzEzMDcwN1owLzEtMCsGA1UEAxMk ODFlYzY2NTgtNDAxMy00NGQ3LWJlMjEtMzBiZTg0N2QwZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno1/rK1Dl/ujBxs2L6pBdmm59QJtTnncHWr7 E4h7tm1qqwgxozApZWoJdXlyekJxI97PrStR/WxRHsvLBa0wNdm5SH61w4QoJRz8 qw58jYoYP7V3Gi0nteXidCeNVQY+OMDprQ5sRz2PM3aZ6yJM/1zi19/pBUY/Mcco /mJSnu/gUPOgr/Ydu6B8dCZpxCVFQGDtT0JLLlcFUGHgQ0WnMEIVGqek0ooaYJuH vv/WNo48uFATo/1tE02SvklfbiL8OQKZWacB3kE+AKYruhmXnuK90Gc1+eMP025K cugjfs4UjeT1MneeFO/dxjsttnU7gUNYWUujs+eXSVrsSGBYMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJTNjFRdaxydy7HhdEviGzU1A4fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81NmI4 NTkzNS00Y2UxLTQ4YzctYTE5Zi1mN2FiMDI2ZjU5YTMvNWM3OGNhZDAtM2FkMi0z M2QzLTkxZjgtODE2MmNhMDQyOTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTZiODU5MzUtNGNlMS00OGM3LWEx OWYtZjdhYjAyNmY1OWEzLzU2Yjg1OTM1LTRjZTEtNDhjNy1hMTlmLWY3YWIwMjZm NTlhMy5jcmwwHwYDVR0jBBgwFoAUm+zmXDSxr3HAXBHMLPfp3TraDncwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81NmI4NTkzNS00Y2UxLTQ4YzctYTE5Zi1mN2Fi MDI2ZjU5YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaTq+mN3Svg3WcP/x+wHtFHxKJ868Fi71LtxAtsNvZpiJl+UL9odjPd +OZmXaFQscD9X2Nwosh4GL5finX/oKNPTH+g7NLs1abjAkWs2mXBv95nJD/zEOSy ejUUmrz1VX3cyrvHayEM7mbz13wgNPSwSVrUWHZTgz78mpYU5RSWEfh5Fkc+TbrN zX7ODSQaHFfAyL91AOJL787TOlLN0AmlqXRuCIUxWsr4A1sw8um49du2EJIXqaOp EebO4DaRFvtz0/Dn+q88bUqQmnfn6QXgyglp9NBBAfQL++2MpP+k1iwk2s4ggHNj QxOJAWnWqRZXih3+WlM1JPfxyMC5rDY= -----END CERTIFICATE-----Generated at Sun Aug 10 15:57:37 2025 by rpki-client