$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/eae85ad0-1277-36ff-9059-3ed1f569e35e.roa File: eae85ad0-1277-36ff-9059-3ed1f569e35e.roa (raw, json) Hash identifier: lYEiZDYomNiEUlxV93FHaWWfccHHyBo8OPScJ6lFS6Y= Subject key identifier: 75:35:DE:04:E2:1F:C0:91:62:E6:2C:FD:59:00:B4:6D:52:94:88:12 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584AD936613701280C82CD9ADF00 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/eae85ad0-1277-36ff-9059-3ed1f569e35e.roa Signing time: Thu 14 Aug 2025 01:00:33 +0000 ROA not before: Thu 14 Aug 2025 01:00:33 +0000 ROA not after: Wed 12 Nov 2025 02:00:33 +0000 asID: 22765 IP address blocks: 72.20.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:36:61:37:01:28:0c:82:cd:9a:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Aug 14 01:00:33 2025 GMT Not After : Nov 12 02:00:33 2025 GMT Subject: CN=2cdad174-34b2-405c-a0e6-d432ce273bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b3:ee:33:8a:02:88:0f:6f:11:bb:b2:cc:da: 53:03:6d:d1:1f:3b:a0:1a:c2:3f:45:f6:75:78:d8: af:a6:de:76:ce:3f:f7:22:30:5a:ff:f4:f4:52:28: b0:ba:30:d2:ca:fc:50:8a:c0:d2:95:77:48:07:94: 11:10:89:5c:66:7b:e0:f5:df:50:a7:ae:5a:79:31: a4:6a:48:79:de:24:a7:a1:f3:f3:e2:d6:bf:51:c5: a6:14:3e:de:b5:05:9a:8c:8f:db:65:9c:c6:1f:26: aa:d1:13:2f:bb:7c:29:37:32:cb:97:47:8a:65:9d: b3:d6:fd:56:8a:76:c8:a1:54:b6:64:1f:25:ca:fb: 22:bc:19:65:c6:ad:32:7d:37:b5:af:b9:cf:d8:dc: e2:dd:4c:d3:76:5e:73:86:0d:f5:84:80:04:51:c2: fe:6c:c4:d3:51:b2:c6:78:85:85:e0:02:44:a2:1c: de:3d:fc:aa:11:aa:cd:47:d0:3f:03:5f:b9:65:ce: 2b:71:bb:72:d2:c8:0e:ff:07:2f:cd:cf:c2:9c:7a: aa:01:19:2d:de:94:d7:cc:35:fe:f1:1f:9c:05:8e: 21:8f:15:6d:7b:e6:3f:89:2d:4a:3f:e1:13:56:96: 42:24:9b:64:a5:fc:28:72:f3:1a:58:d1:da:b9:cf: e8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:35:DE:04:E2:1F:C0:91:62:E6:2C:FD:59:00:B4:6D:52:94:88:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/eae85ad0-1277-36ff-9059-3ed1f569e35e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:72:aa:48:31:d7:c5:67:f4:cd:ae:2e:12:9b:37:29:34:76: dc:d6:ef:17:43:b1:65:06:2e:d0:fb:d8:6f:27:e0:b6:74:23: 70:b7:b1:af:c0:5a:fd:84:44:23:68:2d:e8:fa:38:24:95:0a: b2:94:c6:8b:9f:7b:6b:3c:5b:f6:c3:e4:f6:f7:bf:af:93:b3: a8:b2:1f:2a:a2:a5:74:9b:e6:ab:cb:52:3e:d6:8d:92:a8:53: 13:78:fe:a9:69:83:9d:d7:f8:da:e2:f9:c1:9d:aa:b8:79:71: 4c:77:e4:28:bf:a5:fe:94:c6:8e:56:26:f4:16:9f:d3:45:f2: 32:06:7e:b8:cd:6e:19:6e:27:bf:13:86:e1:e3:24:1e:ad:b2: 26:bf:18:1e:c9:26:0b:63:d7:9e:ac:32:bd:5a:dd:00:36:12: ca:c4:e0:14:4b:f7:28:22:d2:88:f6:0e:04:95:99:b2:71:eb: a7:33:ce:63:07:d1:ff:17:12:98:43:e6:77:83:cb:51:e9:9f: 57:7f:1c:c1:90:58:51:62:6f:b3:86:11:a7:86:f5:fe:f2:92: ca:4d:03:61:81:1f:98:42:87:e6:f4:d5:bc:b0:3c:cb:91:16: 07:8d:b2:2d:f1:75:e4:5a:7f:a2:d3:71:f5:fb:0b:f5:29:b0: 93:04:10:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErZNmE3ASgMgs2a3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk MmNkYWQxNzQtMzRiMi00MDVjLWEwZTYtZDQzMmNlMjczYmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7PuM4oCiA9vEbuyzNpTA23RHzugGsI/RfZ1 eNivpt52zj/3IjBa//T0UiiwujDSyvxQisDSlXdIB5QREIlcZnvg9d9Qp65aeTGk akh53iSnofPz4ta/UcWmFD7etQWajI/bZZzGHyaq0RMvu3wpNzLLl0eKZZ2z1v1W inbIoVS2ZB8lyvsivBllxq0yfTe1r7nP2Nzi3UzTdl5zhg31hIAEUcL+bMTTUbLG eIWF4AJEohzePfyqEarNR9A/A1+5Zc4rcbty0sgO/wcvzc/CnHqqARkt3pTXzDX+ 8R+cBY4hjxVte+Y/iS1KP+ETVpZCJJtkpfwocvMaWNHauc/o5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHU13gTiH8CRYuYs/VkAtG1SlIgSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvZWFlODVhZDAtMTI3Ny0z NmZmLTkwNTktM2VkMWY1NjllMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKVyqkgx18Vn9M2uLhKbNyk0dtzW7xdDsWUGLtD72G8n4LZ0I3C3sa/A Wv2ERCNoLej6OCSVCrKUxoufe2s8W/bD5Pb3v6+Ts6iyHyqipXSb5qvLUj7WjZKo UxN4/qlpg53X+Nri+cGdqrh5cUx35Ci/pf6Uxo5WJvQWn9NF8jIGfrjNbhluJ78T huHjJB6tsia/GB7JJgtj156sMr1a3QA2EsrE4BRL9ygi0oj2DgSVmbJx66czzmMH 0f8XEphD5neDy1Hpn1d/HMGQWFFib7OGEaeG9f7ykspNA2GBH5hCh+b01bywPMuR FgeNsi3xdeRaf6LTcfX7C/UpsJMEEI0= -----END CERTIFICATE-----Generated at Sun Aug 24 04:21:33 2025 by rpki-client