$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a4897d9e-22e5-3ec8-a89d-6240aaeea7f2.roa File: a4897d9e-22e5-3ec8-a89d-6240aaeea7f2.roa (raw, json) Hash identifier: ZHFzdvx38PqeNE2e1DDVkC4Od3ih9I7YuFaXveRCyWg= Subject key identifier: 21:F5:73:1B:46:25:6A:B7:CC:2D:6D:05:93:52:79:78:95:FB:8A:36 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F43285849F87A8ECE1BD615F2FA6F7900 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a4897d9e-22e5-3ec8-a89d-6240aaeea7f2.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 22765 IP address blocks: 72.20.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:8e:ce:1b:d6:15:f2:fa:6f:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=78693cea-2e31-4040-9d6d-4e6631f5d043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:c5:e5:23:a7:ed:75:37:c2:a2:4b:b2:da: 39:78:54:99:7e:25:26:30:7c:5b:5a:e3:8d:41:72: f0:23:48:a4:65:9f:83:c6:ed:d8:e6:8f:c8:4f:3c: 3e:aa:84:0b:0c:5e:52:33:04:6d:cc:50:ac:28:1b: df:30:00:91:4c:08:e7:c8:58:b7:12:12:f2:48:40: f4:fc:cf:30:0e:57:d2:e4:54:b7:61:ba:8a:ca:7c: 55:d1:3d:7c:b2:01:f8:ce:35:00:5a:7d:52:28:2c: 3c:40:4c:7c:20:7a:9a:91:55:ab:50:8f:1f:ff:2e: 92:39:2f:a2:a7:6f:58:db:9a:97:80:61:4a:da:d0: 95:cf:b4:35:ec:cb:6f:1a:b5:b0:d7:04:89:0d:f3: e3:7b:45:da:86:fb:ae:c4:60:72:22:dd:2a:dc:c5: 8f:c6:30:64:79:4f:1b:77:6e:90:c7:c7:1d:f2:35: a9:bb:b6:f0:97:db:70:78:ba:af:8c:69:84:2a:c8: 74:66:44:61:a1:2f:d9:bd:d1:b0:38:6c:80:a6:e0: 89:12:29:88:1e:d9:4b:9d:3a:b4:20:e5:03:54:24: a7:44:05:38:07:c0:d6:06:fd:f0:e6:0e:b4:cb:a2: b2:e0:e2:e2:a6:e2:13:78:4c:58:9a:df:43:17:0c: 14:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F5:73:1B:46:25:6A:B7:CC:2D:6D:05:93:52:79:78:95:FB:8A:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a4897d9e-22e5-3ec8-a89d-6240aaeea7f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:56:43:6c:ba:8b:07:c4:63:0b:b9:bb:5a:86:9a:d9:02:7e: b8:60:dd:ad:3b:2f:f5:ec:d9:43:60:38:1d:a4:47:a0:eb:7e: d6:b9:1a:83:d0:55:a5:bd:5a:6f:a2:b7:9e:3f:c3:9c:bd:f0: 8e:80:09:d6:e7:cc:b5:9c:97:ca:eb:49:a9:9b:48:cb:59:ce: 5b:e6:b6:47:b2:7e:f9:90:c8:cb:33:77:1d:6e:a8:3c:0b:d5: dd:55:d9:15:e8:03:e2:8e:63:ee:08:56:a9:1d:a8:59:42:1b: 41:a4:82:1f:97:1f:3a:e8:69:63:b6:db:a3:fd:69:0c:27:cc: 57:16:55:44:23:cc:45:f0:a9:b3:40:b2:9f:1e:70:cd:97:f9: e5:2e:cc:9c:11:b3:13:ce:df:ff:90:77:ff:03:2c:fe:46:55: 98:db:b1:e7:5a:ff:ef:3a:8c:ee:b6:a5:6e:48:9b:20:c3:3a: 89:b1:aa:50:22:47:db:68:36:f8:fa:d6:f7:1a:de:1f:44:4f: 5a:98:9a:80:d0:04:d6:a6:9c:1b:75:c4:20:7a:2c:5e:59:9a: fc:88:e4:37:4e:68:b6:d2:8a:64:ff:68:ba:4b:c2:2e:00:eb: a8:ad:ce:ae:bc:c0:19:84:32:46:96:8c:97:e2:22:55:6c:aa: fc:b9:b9:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4eo7OG9YV8vpveQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk Nzg2OTNjZWEtMmUzMS00MDQwLTlkNmQtNGU2NjMxZjVkMDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRPF5SOn7XU3wqJLsto5eFSZfiUmMHxbWuON QXLwI0ikZZ+Dxu3Y5o/ITzw+qoQLDF5SMwRtzFCsKBvfMACRTAjnyFi3EhLySED0 /M8wDlfS5FS3YbqKynxV0T18sgH4zjUAWn1SKCw8QEx8IHqakVWrUI8f/y6SOS+i p29Y25qXgGFK2tCVz7Q17MtvGrWw1wSJDfPje0XahvuuxGByIt0q3MWPxjBkeU8b d26Qx8cd8jWpu7bwl9tweLqvjGmEKsh0ZkRhoS/ZvdGwOGyApuCJEimIHtlLnTq0 IOUDVCSnRAU4B8DWBv3w5g60y6Ky4OLipuITeExYmt9DFwwUewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCH1cxtGJWq3zC1tBZNSeXiV+4o2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvYTQ4OTdkOWUtMjJlNS0z ZWM4LWE4OWQtNjI0MGFhZWVhN2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNWQ2y6iwfEYwu5u1qGmtkCfrhg3a07L/Xs2UNgOB2kR6Drfta5GoPQ VaW9Wm+it54/w5y98I6ACdbnzLWcl8rrSambSMtZzlvmtkeyfvmQyMszdx1uqDwL 1d1V2RXoA+KOY+4IVqkdqFlCG0Gkgh+XHzroaWO226P9aQwnzFcWVUQjzEXwqbNA sp8ecM2X+eUuzJwRsxPO3/+Qd/8DLP5GVZjbseda/+86jO62pW5ImyDDOomxqlAi R9toNvj61vca3h9ET1qYmoDQBNamnBt1xCB6LF5ZmvyI5DdOaLbSimT/aLpLwi4A 66itzq68wBmEMkaWjJfiIlVsqvy5uYM= -----END CERTIFICATE-----Generated at Mon Jun 16 04:38:32 2025 by rpki-client