$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/38872579-4e14-3eb9-a23c-45f4e7ee93d1.roa File: 38872579-4e14-3eb9-a23c-45f4e7ee93d1.roa (raw, json) Hash identifier: /FyN+SA9BMQd1jAbX752G/7TbJKsUV87OGxwNJBoz7w= Subject key identifier: C5:61:22:2C:15:ED:18:89:BA:C3:6D:D1:F6:56:39:56:F7:48:C4:DB Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584AC710F2EE76C333CFCF4DD870 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/38872579-4e14-3eb9-a23c-45f4e7ee93d1.roa Signing time: Thu 07 Aug 2025 13:00:40 +0000 ROA not before: Thu 07 Aug 2025 13:00:40 +0000 ROA not after: Wed 05 Nov 2025 14:00:40 +0000 asID: 399501 IP address blocks: 72.20.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c7:10:f2:ee:76:c3:33:cf:cf:4d:d8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Aug 7 13:00:40 2025 GMT Not After : Nov 5 14:00:40 2025 GMT Subject: CN=e4ce2e98-3d67-44ca-91ee-3db5210a8ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:80:de:bb:9f:60:76:98:11:ca:93:f1:f7: 15:51:aa:a9:a6:a9:a1:b9:6c:dd:9a:9e:3a:e9:79: 13:31:af:17:6e:f6:dd:f5:75:8b:0d:f3:57:49:c0: 86:dd:88:eb:f4:93:b0:e4:cc:b8:ce:34:23:e7:8d: 5d:ae:05:c3:4c:2f:1b:8f:3b:08:65:c5:c5:db:6e: 6b:32:b6:c6:9f:48:b2:dd:e9:0a:a6:a1:f4:3d:be: e8:01:bf:28:0e:5c:a1:47:e1:12:17:cc:d3:93:13: 68:9c:2d:ca:f4:64:b7:ad:13:22:fb:07:a2:51:99: f2:cc:d6:a8:d3:b8:87:cc:82:1d:a4:d3:bd:da:33: f1:f0:9e:90:0d:54:86:7e:8b:7c:0e:ef:9c:e1:cd: 8e:80:3a:03:1f:71:34:34:04:25:43:85:ae:ab:11: 49:8b:56:ce:75:c3:9c:70:69:a4:69:d9:fd:4e:94: a4:58:49:14:cc:dc:56:13:16:07:77:a2:89:d9:82: 56:c8:be:2b:30:96:67:01:fd:27:b8:d7:f7:3c:c1: db:04:4e:dc:4c:f5:c0:83:6a:56:1b:49:e0:37:d1: f3:8e:be:24:cb:0b:d2:a0:f2:95:da:70:4a:fd:e7: 66:8d:7d:1d:03:29:50:15:b5:41:88:3d:c9:56:04: de:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:61:22:2C:15:ED:18:89:BA:C3:6D:D1:F6:56:39:56:F7:48:C4:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/38872579-4e14-3eb9-a23c-45f4e7ee93d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:80:49:0e:2f:03:7c:e5:34:d8:71:8a:fb:f1:33:0f:a0:fc: 58:fa:dc:05:3e:12:cd:09:22:d1:ab:ec:44:cc:10:79:4d:e6: 65:db:cb:af:fb:68:82:6d:fe:d8:dd:b3:28:09:7e:66:22:ec: 4f:f7:e6:6c:00:4c:f4:cb:00:4f:23:6c:31:ec:72:07:1f:f9: 90:5f:b9:12:c4:92:aa:4e:7c:9b:d2:d0:cf:bd:c5:6a:96:d0: 0a:f4:2c:7d:52:f4:fa:2d:12:9f:d2:dc:55:a2:46:71:3d:32: 14:78:1f:58:ef:f7:5d:e7:eb:a4:58:97:f1:2d:4e:6f:0d:63: cc:f6:55:a4:dc:d8:9d:25:86:12:9a:d4:a6:b5:04:ca:c6:77: 39:32:c7:f9:7b:30:7e:f6:11:50:22:13:83:ca:8f:72:90:55: 32:d3:71:33:00:6d:72:ac:ad:fe:d2:59:02:7e:66:8c:93:fa: 7b:d7:78:c6:21:a5:7b:ab:79:3a:5e:9c:41:4b:b6:a1:1b:9d: bc:4e:20:a3:74:d6:54:9f:20:25:f0:77:21:f3:dc:89:2d:fc: c7:da:29:78:d4:24:1b:51:78:0a:78:26:1f:06:86:de:2c:54: c9:91:4f:99:56:21:23:5c:92:3c:ff:68:45:fe:7b:08:42:eb: 95:de:e2:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErHEPLudsMzz89N2HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk ZTRjZTJlOTgtM2Q2Ny00NGNhLTkxZWUtM2RiNTIxMGE4ZWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/yA3rufYHaYEcqT8fcVUaqppqmhuWzdmp46 6XkTMa8Xbvbd9XWLDfNXScCG3Yjr9JOw5My4zjQj541drgXDTC8bjzsIZcXF225r MrbGn0iy3ekKpqH0Pb7oAb8oDlyhR+ESF8zTkxNonC3K9GS3rRMi+weiUZnyzNao 07iHzIIdpNO92jPx8J6QDVSGfot8Du+c4c2OgDoDH3E0NAQlQ4WuqxFJi1bOdcOc cGmkadn9TpSkWEkUzNxWExYHd6KJ2YJWyL4rMJZnAf0nuNf3PMHbBE7cTPXAg2pW G0ngN9Hzjr4kywvSoPKV2nBK/edmjX0dAylQFbVBiD3JVgTe0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVhIiwV7RiJusNt0fZWOVb3SMTbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvMzg4NzI1NzktNGUxNC0z ZWI5LWEyM2MtNDVmNGU3ZWU5M2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBTUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmASQ4vA3zlNNhxivvxMw+g/Fj63AU+Es0JItGr7ETMEHlN5mXby6/7 aIJt/tjdsygJfmYi7E/35mwATPTLAE8jbDHscgcf+ZBfuRLEkqpOfJvS0M+9xWqW 0Ar0LH1S9PotEp/S3FWiRnE9MhR4H1jv913n66RYl/EtTm8NY8z2VaTc2J0lhhKa 1Ka1BMrGdzkyx/l7MH72EVAiE4PKj3KQVTLTcTMAbXKsrf7SWQJ+ZoyT+nvXeMYh pXureTpenEFLtqEbnbxOIKN01lSfICXwdyHz3Ikt/MfaKXjUJBtReAp4Jh8Ght4s VMmRT5lWISNckjz/aEX+ewhC65Xe4ko= -----END CERTIFICATE-----Generated at Sun Aug 24 06:00:40 2025 by rpki-client