$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa File: 1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa (raw, json) Hash identifier: 7ULxR0MjitMuBh/lqJrQFR8hdSTV6S/NUQz4CYQYrnk= Subject key identifier: 5C:B7:FF:41:E9:E6:69:DF:22:B1:57:B1:DA:44:4E:CA:7F:39:6F:10 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F43285849F87A8F09373ED48DD8F44700 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 22765 IP address blocks: 72.20.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:8f:09:37:3e:d4:8d:d8:f4:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=68372bd3-0e8a-4b7b-9735-8e7dc6911323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a4:30:4e:2c:1e:41:a1:6c:93:73:3d:14:69: 91:d5:74:c9:7e:ea:02:04:6a:2f:a2:37:90:c9:27: 48:fb:79:ae:9e:b6:38:79:f2:f6:fb:c2:db:82:ae: b7:37:79:ed:a0:dd:bc:ae:1b:00:42:d4:d3:48:2c: 17:42:40:7b:28:0e:45:55:47:4c:22:47:73:c6:ef: 34:66:3d:5e:aa:90:72:48:1c:d6:52:66:74:3b:2e: 72:60:78:b5:2e:23:22:53:e4:bf:cb:1d:14:9a:cd: 07:01:c8:f6:e5:47:49:1d:a6:ff:0a:82:a7:e6:d9: 3e:4c:5e:92:42:31:3c:7a:34:07:1a:eb:a1:1d:ca: a2:0a:0d:3b:af:15:72:84:4a:5d:61:ed:2b:1f:39: 4d:80:0c:7b:b3:b2:e0:28:9b:cc:81:3d:b9:75:0d: 34:c9:e7:f0:80:dc:35:2e:92:d3:33:64:e2:b0:ce: c4:1a:44:f8:d1:61:d2:22:dc:0c:58:f8:2d:c9:7e: e7:fb:45:c6:a8:be:4a:31:a0:35:51:ec:69:d2:1f: 8a:86:95:26:ab:4d:b7:18:21:6e:4c:ea:9d:5a:2f: 8b:00:66:49:a1:6e:cb:5d:aa:3a:a8:0c:ba:68:fd: f8:72:4b:48:e7:01:90:36:92:90:1c:50:96:d6:d4: 6a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B7:FF:41:E9:E6:69:DF:22:B1:57:B1:DA:44:4E:CA:7F:39:6F:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:5b:7b:c4:17:78:7f:8f:aa:8e:7c:77:c6:a5:66:93:21:f6: 4f:7f:bb:92:5b:30:dc:82:98:e0:96:be:85:f2:2d:fd:a6:53: 3c:53:0e:24:80:f8:9f:38:61:02:57:02:68:07:76:83:97:40: fe:9d:52:db:a5:f2:8d:2a:87:20:3f:8f:21:2e:e0:80:e1:e4: de:5b:86:75:31:b3:d0:cd:20:97:4d:62:3a:21:9f:f1:e0:94: 96:ae:75:a1:95:1a:e6:44:f0:cb:77:08:54:dd:e6:47:7d:b6: 09:a0:72:12:18:5c:fc:89:66:41:65:88:df:88:e2:93:21:7a: 48:2c:b8:51:82:bf:12:5d:02:0b:97:b5:3e:84:0e:9b:bd:4c: 3e:13:6c:d1:e6:ef:0e:9d:7f:95:fa:55:3b:d1:e9:25:37:38: 9f:b5:1a:42:d9:14:a9:78:06:57:8e:cc:2e:6e:e5:a8:a9:fb: dc:de:2f:8a:47:be:df:24:47:d9:79:1b:ac:c3:33:20:c9:83: e5:0d:30:df:8a:16:f8:57:55:9b:33:05:19:5a:bc:84:41:0e: 71:27:42:0c:b4:1b:55:32:34:53:76:23:36:43:3c:aa:c4:63: f5:2d:c2:df:11:de:4e:dc:fe:f4:4a:b2:55:15:a9:da:18:95: d1:1e:79:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eo8JNz7Ujdj0RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk NjgzNzJiZDMtMGU4YS00YjdiLTk3MzUtOGU3ZGM2OTExMzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaQwTiweQaFsk3M9FGmR1XTJfuoCBGovojeQ ySdI+3munrY4efL2+8Lbgq63N3ntoN28rhsAQtTTSCwXQkB7KA5FVUdMIkdzxu80 Zj1eqpBySBzWUmZ0Oy5yYHi1LiMiU+S/yx0Ums0HAcj25UdJHab/CoKn5tk+TF6S QjE8ejQHGuuhHcqiCg07rxVyhEpdYe0rHzlNgAx7s7LgKJvMgT25dQ00yefwgNw1 LpLTM2TisM7EGkT40WHSItwMWPgtyX7n+0XGqL5KMaA1Uexp0h+KhpUmq023GCFu TOqdWi+LAGZJoW7LXao6qAy6aP34cktI5wGQNpKQHFCW1tRqJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFy3/0Hp5mnfIrFXsdpETsp/OW8QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvMWIzNTY0Y2YtZGI5Zi0z Y2Y1LWFiMTYtOTMzNDVkZjg5YjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFbe8QXeH+Pqo58d8alZpMh9k9/u5JbMNyCmOCWvoXyLf2mUzxTDiSA +J84YQJXAmgHdoOXQP6dUtul8o0qhyA/jyEu4IDh5N5bhnUxs9DNIJdNYjohn/Hg lJaudaGVGuZE8Mt3CFTd5kd9tgmgchIYXPyJZkFliN+I4pMhekgsuFGCvxJdAguX tT6EDpu9TD4TbNHm7w6df5X6VTvR6SU3OJ+1GkLZFKl4BleOzC5u5aip+9zeL4pH vt8kR9l5G6zDMyDJg+UNMN+KFvhXVZszBRlavIRBDnEnQgy0G1UyNFN2IzZDPKrE Y/Utwt8R3k7c/vRKslUVqdoYldEeea4= -----END CERTIFICATE-----Generated at Sun Jun 29 15:06:39 2025 by rpki-client