$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/38872579-4e14-3eb9-a23c-45f4e7ee93d1.roa File: 38872579-4e14-3eb9-a23c-45f4e7ee93d1.roa (raw, json) Hash identifier: vCmaRkXeUghKB+IrdGQtbljDDMt16iDgZCRvpDms5zw= Subject key identifier: 80:9C:61:2A:E8:72:85:D4:B2:1A:D2:F4:8B:75:38:25:25:BB:B9:85 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F43285849E654F2447CE2101C3E7E8C40 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/38872579-4e14-3eb9-a23c-45f4e7ee93d1.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 399501 IP address blocks: 72.20.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:54:f2:44:7c:e2:10:1c:3e:7e:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=ffe91118-fd1f-48a3-9c84-747fc23b02d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:60:a3:c0:67:cf:6e:c2:8d:1b:8f:a7:2b:04: 94:ce:e7:18:a7:31:bc:29:9b:da:03:86:29:90:ca: ba:d0:75:28:71:10:a0:91:07:22:48:ce:09:92:21: b0:db:75:ab:ed:2d:75:29:49:0a:6e:6e:b8:16:a2: 69:9e:09:9c:af:d2:04:4c:5c:56:c5:85:8c:2f:34: f2:57:e1:71:38:a2:6e:31:c8:d4:11:74:bb:cf:fb: 99:b4:21:22:6d:75:86:bf:b8:a4:7d:39:e7:9d:f5: 7c:e4:b3:2f:5a:ce:e6:75:75:33:6e:19:fe:0c:93: db:41:e0:29:21:ab:2f:94:55:e2:db:d8:34:7a:4a: 64:47:7b:06:c6:a7:c9:66:27:b0:89:a3:68:58:3c: 3b:9a:57:c0:59:6a:77:ee:87:15:4c:09:91:2c:13: ce:e1:0a:54:ab:44:4b:d8:d2:b0:8d:66:42:a8:40: 3b:e1:fb:8d:1a:fe:9c:4d:9a:66:6d:8e:12:b6:1b: 9c:cc:35:bd:8d:96:4b:4a:55:8e:2b:11:29:3a:f6: e5:e7:1b:69:96:4d:a5:88:b2:3d:b0:5d:23:6d:bb: c4:b0:b2:40:1f:74:72:25:9e:7d:f1:8a:7a:5a:2d: f9:c3:ca:2d:5d:eb:b5:f1:b5:94:3e:04:6d:44:07: 57:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9C:61:2A:E8:72:85:D4:B2:1A:D2:F4:8B:75:38:25:25:BB:B9:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/38872579-4e14-3eb9-a23c-45f4e7ee93d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:28:03:a2:02:d4:b8:67:52:41:7b:fb:b1:47:22:18:ab:ca: 66:a9:bf:e0:e5:65:20:29:64:c0:6a:4e:d8:9e:40:80:d8:dd: 3d:51:50:2e:5b:52:88:2b:c4:1c:70:a3:3a:e6:09:0d:10:a1: 46:86:73:e5:83:cb:5b:80:99:aa:ef:6e:96:19:14:3b:0f:78: b8:64:90:b7:ed:af:7c:8d:bb:0a:c0:f6:3c:6a:a6:67:7e:22: 82:4d:a0:0b:24:a9:9c:04:b0:53:96:22:62:1c:57:21:ee:05: 5b:31:8b:97:ff:b0:b6:02:4c:6d:b3:73:51:6f:ff:d3:1f:72: 4b:9c:08:69:2c:dd:35:6b:32:c2:cc:30:9d:c4:20:46:77:88: 93:cb:ac:f9:d2:22:86:37:68:d5:df:7d:7b:22:9e:83:95:06: a0:c9:98:dc:09:e9:06:c9:38:b4:1a:a3:48:95:4c:28:1e:97: 22:2c:bb:cc:29:90:a9:7e:c2:76:4c:e0:f3:e6:bf:6a:be:a7: 7c:9a:21:30:24:1a:7d:3f:64:6a:f3:be:e1:cb:0f:db:95:bb: 5b:e0:6a:e8:cc:44:a2:35:2c:7f:43:99:28:e1:af:2e:0c:69: 82:45:54:9d:84:5a:c6:ce:b1:1d:16:3b:0a:df:f5:e4:a2:ac: 26:c5:7b:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVPJEfOIQHD5+jEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk ZmZlOTExMTgtZmQxZi00OGEzLTljODQtNzQ3ZmMyM2IwMmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWCjwGfPbsKNG4+nKwSUzucYpzG8KZvaA4Yp kMq60HUocRCgkQciSM4JkiGw23Wr7S11KUkKbm64FqJpngmcr9IETFxWxYWMLzTy V+FxOKJuMcjUEXS7z/uZtCEibXWGv7ikfTnnnfV85LMvWs7mdXUzbhn+DJPbQeAp IasvlFXi29g0ekpkR3sGxqfJZiewiaNoWDw7mlfAWWp37ocVTAmRLBPO4QpUq0RL 2NKwjWZCqEA74fuNGv6cTZpmbY4SthuczDW9jZZLSlWOKxEpOvbl5xtplk2liLI9 sF0jbbvEsLJAH3RyJZ598Yp6Wi35w8otXeu18bWUPgRtRAdX9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICcYSrocoXUshrS9It1OCUlu7mFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvMzg4NzI1NzktNGUxNC0z ZWI5LWEyM2MtNDVmNGU3ZWU5M2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBTUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIoA6IC1LhnUkF7+7FHIhirymapv+DlZSApZMBqTtieQIDY3T1RUC5b UogrxBxwozrmCQ0QoUaGc+WDy1uAmarvbpYZFDsPeLhkkLftr3yNuwrA9jxqpmd+ IoJNoAskqZwEsFOWImIcVyHuBVsxi5f/sLYCTG2zc1Fv/9MfckucCGks3TVrMsLM MJ3EIEZ3iJPLrPnSIoY3aNXffXsinoOVBqDJmNwJ6QbJOLQao0iVTCgelyIsu8wp kKl+wnZM4PPmv2q+p3yaITAkGn0/ZGrzvuHLD9uVu1vgaujMRKI1LH9DmSjhry4M aYJFVJ2EWsbOsR0WOwrf9eSirCbFe3Q= -----END CERTIFICATE-----Generated at Mon Jun 16 04:37:28 2025 by rpki-client