$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a1a3ab19-5cb5-350e-85bc-242757f97592.roa File: a1a3ab19-5cb5-350e-85bc-242757f97592.roa (raw, json) Hash identifier: opv+55ALlxmjB4cogtF89Z3uhCw/x5OyEex9L5UAMDo= Subject key identifier: 4E:A0:E5:83:2A:A0:36:5A:11:2E:F0:FB:E5:FB:33:47:32:55:0E:81 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F43285849F87A8EBBAFE7EF94BE5A7B00 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a1a3ab19-5cb5-350e-85bc-242757f97592.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 22765 IP address blocks: 72.20.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:8e:bb:af:e7:ef:94:be:5a:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=dde40d14-6f7f-45bf-846b-047227c89ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8c:98:85:ed:5d:f9:51:1a:50:65:c0:ac:81: e8:12:26:1d:f7:0f:61:3b:28:0f:d6:b7:7e:4d:52: 5f:f5:ec:64:0d:5c:b1:84:ec:92:89:8d:44:e3:24: 74:20:09:34:92:71:e0:50:8f:bf:c4:21:ed:b1:e1: 54:f8:e1:8e:d9:f2:95:f2:27:ab:6c:9e:e1:1a:b3: 36:38:68:47:9f:c0:48:35:ca:4d:e5:a9:2f:3f:98: 27:8a:8b:c4:1c:6c:66:66:f4:9f:5a:f8:51:e0:b4: 7e:53:d7:08:ef:6d:d8:3f:0d:0c:51:e4:4e:90:5b: e4:55:de:f2:1f:6e:41:5b:76:7e:67:80:7e:58:88: e1:d3:12:b7:66:66:0e:84:4e:e9:40:4e:4e:fa:96: 0c:d6:5d:50:3d:0b:7e:5e:60:2b:65:0e:95:a3:5f: c3:ad:c0:6c:7e:15:69:2d:ed:d8:9a:94:f1:3c:6c: eb:48:76:10:50:42:2c:97:60:6b:df:da:00:c7:68: fe:a9:74:4b:42:3e:31:43:4b:a6:1f:42:62:5c:fc: 09:18:3e:5b:e9:a6:13:3a:fa:fb:f7:6c:96:8a:73: a5:26:f2:e4:3f:63:b1:40:9d:b4:d9:c1:77:1f:ab: 7b:c7:46:2d:18:19:e0:77:53:88:54:92:ec:07:52: 47:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A0:E5:83:2A:A0:36:5A:11:2E:F0:FB:E5:FB:33:47:32:55:0E:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a1a3ab19-5cb5-350e-85bc-242757f97592.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:73:11:1f:4a:de:73:82:20:0f:37:2f:4e:0d:6c:6b:94:b6: 7a:1b:19:b4:54:01:d4:1f:97:f0:f9:aa:34:a7:0d:42:18:a2: ac:aa:ac:e1:48:01:2d:ea:1b:eb:6e:b7:ea:03:d3:3e:e0:35: f5:80:2e:bb:2f:94:c2:9d:28:50:9b:14:8a:9f:ab:8f:4b:18: 0c:1a:de:56:00:fe:3b:43:cb:51:94:72:9d:24:80:8f:67:e2: 35:16:cd:53:c5:d8:2d:87:fe:f9:19:2c:65:ae:5b:78:65:47: dc:e3:e0:5d:b8:81:1f:ff:ec:72:4c:d1:70:0b:83:25:6a:52: f4:59:6b:10:9c:ee:00:6d:4b:d6:04:23:11:29:59:7a:38:eb: ae:3c:2b:2b:9b:05:44:32:e6:97:5e:b1:9a:c4:a9:e5:d4:0f: ab:b0:41:78:34:4a:bd:12:79:83:1f:c5:a6:4f:65:ae:0a:03: 8a:d4:d0:74:64:ce:ff:32:0a:e4:f0:03:26:ca:be:15:5b:27: d2:c2:53:81:b6:4e:08:94:d2:a8:07:76:ff:ef:b8:a2:3e:7e: 8b:c0:d0:ab:05:cc:dc:7d:56:53:ff:c0:b1:ce:05:6c:f8:de: 24:e7:91:fe:29:31:91:99:ac:9d:e3:7b:3e:14:04:a5:6a:70: c8:2c:57:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eo67r+fvlL5aewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk ZGRlNDBkMTQtNmY3Zi00NWJmLTg0NmItMDQ3MjI3Yzg5ZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4yYhe1d+VEaUGXArIHoEiYd9w9hOygP1rd+ TVJf9exkDVyxhOySiY1E4yR0IAk0knHgUI+/xCHtseFU+OGO2fKV8ierbJ7hGrM2 OGhHn8BINcpN5akvP5gniovEHGxmZvSfWvhR4LR+U9cI723YPw0MUeROkFvkVd7y H25BW3Z+Z4B+WIjh0xK3ZmYOhE7pQE5O+pYM1l1QPQt+XmArZQ6Vo1/DrcBsfhVp Le3YmpTxPGzrSHYQUEIsl2Br39oAx2j+qXRLQj4xQ0umH0JiXPwJGD5b6aYTOvr7 92yWinOlJvLkP2OxQJ202cF3H6t7x0YtGBngd1OIVJLsB1JHCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6g5YMqoDZaES7w++X7M0cyVQ6BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvYTFhM2FiMTktNWNiNS0z NTBlLTg1YmMtMjQyNzU3Zjk3NTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBTCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFzER9K3nOCIA83L04NbGuUtnobGbRUAdQfl/D5qjSnDUIYoqyqrOFI AS3qG+tut+oD0z7gNfWALrsvlMKdKFCbFIqfq49LGAwa3lYA/jtDy1GUcp0kgI9n 4jUWzVPF2C2H/vkZLGWuW3hlR9zj4F24gR//7HJM0XALgyVqUvRZaxCc7gBtS9YE IxEpWXo46648KyubBUQy5pdesZrEqeXUD6uwQXg0Sr0SeYMfxaZPZa4KA4rU0HRk zv8yCuTwAybKvhVbJ9LCU4G2TgiU0qgHdv/vuKI+fovA0KsFzNx9VlP/wLHOBWz4 3iTnkf4pMZGZrJ3jez4UBKVqcMgsVww= -----END CERTIFICATE-----Generated at Mon Jun 16 04:55:58 2025 by rpki-client