$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/5986a15c-31f2-3481-a490-90f8833a40b9.roa File: 5986a15c-31f2-3481-a490-90f8833a40b9.roa (raw, json) Hash identifier: NzMaHoCEsS6IFJPoW+wV4eTkhxLigTZBID8VyknaI8U= Subject key identifier: 1B:71:78:14:88:ED:2F:55:DD:18:3C:72:1A:DC:4C:C4:99:BB:56:5F Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F43285849F87A8EFBA27427CB33FC38A0 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/5986a15c-31f2-3481-a490-90f8833a40b9.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 22765 IP address blocks: 72.20.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:8e:fb:a2:74:27:cb:33:fc:38:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=a6afb118-0e4f-46cd-ba50-9fbbdf804744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:69:06:93:66:d3:43:38:06:f5:f4:3b:80:20: 7d:46:c3:3b:63:7b:35:a6:d5:5a:44:47:84:e3:3d: 21:b7:ec:98:b9:4a:13:b1:28:8d:2e:25:e1:66:98: 0a:93:02:66:e7:0d:20:82:c6:23:e3:c3:3d:3f:94: 69:77:a7:ac:4d:30:fc:06:5f:ca:f8:d4:2e:bd:d9: 85:4e:c0:ec:54:ae:d6:11:fb:b4:1f:2a:18:62:df: 8c:99:a9:56:b8:c1:08:fd:11:53:cd:c2:3a:e9:bd: 04:45:34:1c:f5:f8:e8:f5:db:b1:a0:f3:37:c8:53: 30:5f:7e:9c:69:75:69:15:9b:bc:23:de:92:a4:25: 3e:d3:84:ea:97:97:70:73:3d:a7:0c:cc:c2:d8:47: 4d:c5:9d:a6:2f:75:f3:f0:c1:ca:99:3a:24:cc:e8: 16:8b:98:80:fe:5c:28:05:f5:d3:40:0b:44:b7:64: b9:4d:8d:57:ac:d5:e7:49:52:ed:92:ac:63:29:d5: 35:d5:f9:0f:84:26:57:17:31:ab:20:c7:73:70:0f: f9:a7:af:7a:bb:a1:e4:67:41:6c:87:d4:b6:a5:b7: 53:3c:ef:12:0a:2e:61:de:d6:a8:b2:fb:85:06:52: 5e:82:14:b0:60:ef:b0:6a:f5:61:31:d2:a4:04:55: 0e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:71:78:14:88:ED:2F:55:DD:18:3C:72:1A:DC:4C:C4:99:BB:56:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/5986a15c-31f2-3481-a490-90f8833a40b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d8:4f:1f:ed:48:d1:55:b1:d9:16:29:93:ee:d5:ff:aa:6b: 9e:0b:ac:79:c5:20:8a:f0:89:ff:ff:0c:12:a4:85:8c:4b:0f: d3:b7:3c:5f:19:2e:17:bd:c1:26:4d:93:66:65:5b:95:36:bd: 93:16:d4:1d:92:bf:26:22:13:cd:ce:70:96:36:2c:a8:31:9d: f7:5f:48:0a:fc:cf:cd:37:08:10:f6:ed:5d:53:18:79:53:f5: e0:a4:74:9c:f8:bf:28:1e:5d:22:a8:69:ec:5d:d4:f7:8d:9b: 30:c3:62:48:8f:7f:4e:ba:0a:42:2d:4e:b8:2b:7b:bf:8d:47: 49:4c:e5:a2:81:cd:2c:47:9a:ad:98:64:0f:f8:57:e2:4b:87: 91:5f:fd:74:b4:d6:c8:c3:90:6c:ff:5c:e4:98:55:a8:66:5a: 9c:b0:cb:97:cc:80:7c:ee:c6:56:3d:38:8c:92:95:9b:bd:a8: 41:d5:41:19:b6:3d:a5:87:1e:ff:a8:7c:2b:97:a1:4b:aa:d3: c3:2b:30:9a:1d:67:bf:c9:76:71:92:81:4a:be:07:6b:db:9b: df:eb:53:c7:7d:1d:43:c6:1d:f8:97:28:31:f6:79:43:4d:59: 33:df:71:42:d2:2f:72:58:15:c0:fb:cb:66:a7:b2:75:41:a5: 3b:95:e5:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eo77onQnyzP8OKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk YTZhZmIxMTgtMGU0Zi00NmNkLWJhNTAtOWZiYmRmODA0NzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmkGk2bTQzgG9fQ7gCB9RsM7Y3s1ptVaREeE 4z0ht+yYuUoTsSiNLiXhZpgKkwJm5w0ggsYj48M9P5Rpd6esTTD8Bl/K+NQuvdmF TsDsVK7WEfu0HyoYYt+MmalWuMEI/RFTzcI66b0ERTQc9fjo9duxoPM3yFMwX36c aXVpFZu8I96SpCU+04Tql5dwcz2nDMzC2EdNxZ2mL3Xz8MHKmTokzOgWi5iA/lwo BfXTQAtEt2S5TY1XrNXnSVLtkqxjKdU11fkPhCZXFzGrIMdzcA/5p696u6HkZ0Fs h9S2pbdTPO8SCi5h3taosvuFBlJeghSwYO+wavVhMdKkBFUOPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtxeBSI7S9V3Rg8chrcTMSZu1ZfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvNTk4NmExNWMtMzFmMi0z NDgxLWE0OTAtOTBmODgzM2E0MGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBTJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHYTx/tSNFVsdkWKZPu1f+qa54LrHnFIIrwif//DBKkhYxLD9O3PF8Z Lhe9wSZNk2ZlW5U2vZMW1B2SvyYiE83OcJY2LKgxnfdfSAr8z803CBD27V1TGHlT 9eCkdJz4vygeXSKoaexd1PeNmzDDYkiPf066CkItTrgre7+NR0lM5aKBzSxHmq2Y ZA/4V+JLh5Ff/XS01sjDkGz/XOSYVahmWpywy5fMgHzuxlY9OIySlZu9qEHVQRm2 PaWHHv+ofCuXoUuq08MrMJodZ7/JdnGSgUq+B2vbm9/rU8d9HUPGHfiXKDH2eUNN WTPfcULSL3JYFcD7y2ansnVBpTuV5T4= -----END CERTIFICATE-----Generated at Mon Jun 16 15:29:10 2025 by rpki-client