$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a4897d9e-22e5-3ec8-a89d-6240aaeea7f2.roa File: a4897d9e-22e5-3ec8-a89d-6240aaeea7f2.roa (raw, json) Hash identifier: dHa9c1CKshxOz7UfDW5uKwN1pSOQFaa4ZE6quEvvi+w= Subject key identifier: 7A:DF:F9:AE:C8:1C:11:C5:96:43:D0:4D:FC:65:80:DF:C9:EA:37:14 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584AD93660D340BBE24AE2B30600 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a4897d9e-22e5-3ec8-a89d-6240aaeea7f2.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 22765 IP address blocks: 72.20.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:60:d3:40:bb:e2:4a:e2:b3:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=dd02379f-5e80-40c2-972c-2b8d3d0d67bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:86:84:22:84:62:38:8b:71:96:79:4e:ac:60: dc:a7:ca:11:b6:5e:ee:da:34:e5:db:89:1a:c9:1c: bc:63:9c:aa:8a:ca:55:b7:7c:91:39:9a:ca:62:f1: 1b:53:f9:67:75:54:da:50:80:24:42:fd:14:be:11: cc:23:58:e3:7e:f8:4c:96:66:8d:d0:fd:43:66:9f: a7:a7:23:35:8b:38:bb:ee:c9:e2:49:dd:2a:5f:a6: 35:3e:93:ad:15:87:00:09:62:3a:03:57:13:c0:d0: 5d:67:9a:1a:c6:d4:c7:a2:89:aa:d1:75:37:64:c7: 0b:67:b3:f3:97:67:cf:b5:19:d1:46:4a:55:08:52: a0:77:ba:4b:1c:46:43:84:db:3b:fa:93:d4:20:a8: fe:db:a6:e5:2f:fb:a6:b4:8f:49:48:ef:81:45:43: 97:b0:91:3c:6a:c0:38:75:cb:b9:de:1a:51:c6:a5: 98:40:ab:1e:7f:bb:01:03:c5:bd:25:67:45:ca:8a: 63:b3:2a:36:52:05:25:2e:1a:74:f5:46:8b:e4:c7: f6:37:d1:88:0f:29:d1:50:99:d6:35:82:aa:e1:68: 94:16:ec:4e:d6:56:93:67:b2:c5:c0:c9:eb:7d:a8: 3e:74:2d:6d:1c:67:7d:06:38:e5:bf:06:fd:4a:06: c1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DF:F9:AE:C8:1C:11:C5:96:43:D0:4D:FC:65:80:DF:C9:EA:37:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a4897d9e-22e5-3ec8-a89d-6240aaeea7f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:01:8b:ad:5d:0d:a7:38:bd:a3:a5:88:eb:81:2f:69:b1:c7: f9:76:3d:5b:7d:d6:ba:4c:bd:3a:07:76:93:78:4c:bd:7a:a5: 1c:58:97:7e:65:f7:f3:9b:ab:e0:f1:91:8a:46:56:92:dc:17: 3f:48:c1:73:70:e8:7e:65:ce:ec:5d:5e:cb:13:53:1f:7e:bb: ec:59:9a:ee:eb:00:f9:15:52:c2:ac:d6:f3:5f:bb:d0:87:60: e3:8f:72:b6:69:9e:d6:25:77:fe:20:04:65:c4:bc:a2:57:b3: 31:72:84:37:33:77:e1:de:1d:35:31:95:e4:30:5f:b6:14:80: 3b:44:88:93:89:b8:1a:ed:61:8c:c8:aa:1b:43:0d:7e:f2:ff: 6b:e4:7e:45:b0:ca:f8:da:f9:27:72:31:d7:38:eb:cc:9c:27: 46:e7:74:6d:46:da:cb:a0:1a:c9:8e:96:6b:07:f3:93:a7:4c: 6c:92:2f:97:73:f5:43:39:10:a3:2d:b1:ff:49:9a:48:12:92: 8d:96:3a:0f:88:26:83:1e:79:17:af:e1:da:ae:27:13:41:c7: e3:6c:b5:ef:2c:78:92:83:c8:0d:4a:12:af:51:ff:81:ae:4a: e4:55:d5:9f:67:d5:62:92:37:70:61:fc:98:dd:01:c7:ad:a6: b7:e0:72:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNmDTQLviSuKzBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk ZGQwMjM3OWYtNWU4MC00MGMyLTk3MmMtMmI4ZDNkMGQ2N2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oaEIoRiOItxlnlOrGDcp8oRtl7u2jTl24ka yRy8Y5yqispVt3yROZrKYvEbU/lndVTaUIAkQv0UvhHMI1jjfvhMlmaN0P1DZp+n pyM1izi77sniSd0qX6Y1PpOtFYcACWI6A1cTwNBdZ5oaxtTHoomq0XU3ZMcLZ7Pz l2fPtRnRRkpVCFKgd7pLHEZDhNs7+pPUIKj+26blL/umtI9JSO+BRUOXsJE8asA4 dcu53hpRxqWYQKsef7sBA8W9JWdFyopjsyo2UgUlLhp09UaL5Mf2N9GIDynRUJnW NYKq4WiUFuxO1laTZ7LFwMnrfag+dC1tHGd9Bjjlvwb9SgbBtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrf+a7IHBHFlkPQTfxlgN/J6jcUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvYTQ4OTdkOWUtMjJlNS0z ZWM4LWE4OWQtNjI0MGFhZWVhN2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4Bi61dDac4vaOliOuBL2mxx/l2PVt91rpMvToHdpN4TL16pRxYl35l 9/Obq+DxkYpGVpLcFz9IwXNw6H5lzuxdXssTUx9+u+xZmu7rAPkVUsKs1vNfu9CH YOOPcrZpntYld/4gBGXEvKJXszFyhDczd+HeHTUxleQwX7YUgDtEiJOJuBrtYYzI qhtDDX7y/2vkfkWwyvja+SdyMdc468ycJ0bndG1G2sugGsmOlmsH85OnTGySL5dz 9UM5EKMtsf9JmkgSko2WOg+IJoMeeRev4dquJxNBx+Nste8seJKDyA1KEq9R/4Gu SuRV1Z9n1WKSN3Bh/JjdAcetprfgcvw= -----END CERTIFICATE-----Generated at Sun Aug 24 04:20:59 2025 by rpki-client