$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa File: 1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa (raw, json) Hash identifier: hYBf5mOOyNuu8MrriPJF17ByDY01XzYM1LM3a4WUPw8= Subject key identifier: 4F:D6:7A:5A:1D:32:2B:07:8C:39:5D:3D:69:C6:F8:C9:F0:48:16:16 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584AD93661226924959DF39D4700 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 22765 IP address blocks: 72.20.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:61:22:69:24:95:9d:f3:9d:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=33eae748-99a9-4418-bc00-f0163d202ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c2:9c:ff:8e:94:ac:2d:4a:59:87:2f:8d:25: ea:f1:bc:ef:d5:fe:16:47:6e:4a:81:9a:6c:bf:20: 4a:a5:e2:30:f7:e6:d7:2a:26:a8:81:c9:a8:f2:c1: 2f:fb:53:5a:04:b2:34:8c:b7:53:32:c2:a6:e3:35: e6:d2:d9:1e:62:02:f4:9e:4e:30:a4:87:c0:26:66: 9e:13:24:ab:14:5b:a8:ea:68:2d:05:de:5f:37:28: 2c:ee:b6:29:26:08:95:84:82:74:dc:2f:ef:ff:51: 31:44:94:99:19:df:89:09:a1:07:ab:03:69:fe:11: 15:2a:1b:a8:ff:70:90:92:d0:8d:e8:52:9e:76:7e: 4b:53:93:f9:1a:dc:c9:9d:1a:29:aa:33:67:ef:90: 47:2c:e2:90:b0:19:5d:26:96:41:b1:cf:db:c9:57: af:19:14:b7:bc:9a:d1:c7:a2:6c:25:8d:79:18:8f: f4:76:de:0b:a5:6f:01:2d:e4:cd:de:8b:90:03:c5: a8:50:2d:19:21:7a:55:60:34:3f:c9:5c:9c:eb:92: dd:e0:13:18:a1:44:50:88:57:47:94:7d:d5:8d:25: 4c:e9:a9:f9:1b:3d:02:af:2b:6e:b0:77:34:74:06: 19:ba:38:7d:55:b6:e0:4c:bb:e3:6b:32:de:b6:e2: 4e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D6:7A:5A:1D:32:2B:07:8C:39:5D:3D:69:C6:F8:C9:F0:48:16:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ed:f6:4e:3f:90:10:bc:08:6b:4e:8f:6a:7f:ba:8f:67:b5: 71:9b:37:14:2e:e9:08:17:fa:0f:a2:af:eb:cd:67:ef:b7:dc: 62:2c:f1:97:d5:49:a1:ea:9c:b3:2c:09:7c:0c:c8:9f:d7:00: 39:9b:50:f5:28:cf:5b:b8:38:3c:4a:1e:c0:0a:b1:6a:39:96: 57:38:18:9e:43:85:b4:f6:7d:b1:5b:d3:b4:6f:3e:6e:95:ec: 8f:35:eb:b7:c7:24:3e:4a:59:a6:66:3f:01:e8:fb:4e:99:e0: 28:c5:d4:93:10:c7:e5:ad:1f:31:7d:bd:87:34:59:90:01:1b: c3:c1:87:d6:2c:6d:fe:33:88:4d:ca:d2:e6:8a:07:8a:5a:b5: 95:c9:4d:19:ec:24:2d:6f:b5:90:0f:2f:94:29:50:ec:85:6b: f6:ff:99:65:48:bf:ba:4b:ae:47:9c:39:f1:75:b1:9d:be:7d: 15:01:94:13:fd:70:1d:04:20:91:84:9f:6c:20:96:59:b0:2b: 40:b0:1e:8f:4b:56:07:3b:be:b4:38:40:31:7c:0b:78:e6:a9: cc:06:b9:8c:3f:11:64:d3:46:79:72:a7:e3:4d:85:4c:43:79: 42:dc:e4:10:cd:6c:1f:0a:b8:d8:8d:f1:55:9a:ac:45:92:74: 5a:00:51:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNmEiaSSVnfOdRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk MzNlYWU3NDgtOTlhOS00NDE4LWJjMDAtZjAxNjNkMjAyY2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMKc/46UrC1KWYcvjSXq8bzv1f4WR25KgZps vyBKpeIw9+bXKiaogcmo8sEv+1NaBLI0jLdTMsKm4zXm0tkeYgL0nk4wpIfAJmae EySrFFuo6mgtBd5fNygs7rYpJgiVhIJ03C/v/1ExRJSZGd+JCaEHqwNp/hEVKhuo /3CQktCN6FKedn5LU5P5GtzJnRopqjNn75BHLOKQsBldJpZBsc/byVevGRS3vJrR x6JsJY15GI/0dt4LpW8BLeTN3ouQA8WoUC0ZIXpVYDQ/yVyc65Ld4BMYoURQiFdH lH3VjSVM6an5Gz0CrytusHc0dAYZujh9VbbgTLvjazLetuJOVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/WelodMisHjDldPWnG+MnwSBYWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvMWIzNTY0Y2YtZGI5Zi0z Y2Y1LWFiMTYtOTMzNDVkZjg5YjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnt9k4/kBC8CGtOj2p/uo9ntXGbNxQu6QgX+g+ir+vNZ++33GIs8ZfV SaHqnLMsCXwMyJ/XADmbUPUoz1u4ODxKHsAKsWo5llc4GJ5DhbT2fbFb07RvPm6V 7I8167fHJD5KWaZmPwHo+06Z4CjF1JMQx+WtHzF9vYc0WZABG8PBh9Ysbf4ziE3K 0uaKB4patZXJTRnsJC1vtZAPL5QpUOyFa/b/mWVIv7pLrkecOfF1sZ2+fRUBlBP9 cB0EIJGEn2wgllmwK0CwHo9LVgc7vrQ4QDF8C3jmqcwGuYw/EWTTRnlyp+NNhUxD eULc5BDNbB8KuNiN8VWarEWSdFoAURk= -----END CERTIFICATE-----Generated at Sun Aug 24 03:45:02 2025 by rpki-client