$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa File: 1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa (raw, json) Hash identifier: qowcmSQ7cCXe47S+sXFg8YxPG5x3od3j1RskeimKmDw= Subject key identifier: E9:90:FC:29:45:CE:62:DE:56:08:61:E3:F6:5B:42:24:8C:E1:2A:00 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584BBA1046C915D6AE81080E7E20 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 22765 IP address blocks: 72.20.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:46:c9:15:d6:ae:81:08:0e:7e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=492a0e30-f3ca-4676-949b-327df80e8db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bc:2a:a8:87:72:5f:11:9f:44:67:5a:b4:d6: c8:30:c8:86:75:b0:aa:76:cc:ea:7e:84:33:78:dd: 70:4d:cd:9c:b6:2d:d6:6d:c1:24:4d:57:7d:d2:47: b9:5a:c3:5f:18:46:5e:0e:d4:24:3d:95:e3:54:41: 44:03:b3:f0:ae:ae:94:6a:3c:49:4f:65:2d:b9:7f: 51:2c:d6:c6:65:bc:46:d9:57:18:0a:b9:cd:59:eb: db:52:61:51:4c:89:c5:2d:98:8d:21:05:d5:bd:e0: f1:5d:db:35:52:12:71:a5:b5:1d:6e:c8:e0:ea:6b: 8f:f6:56:1f:15:f8:5b:22:48:52:ea:7a:4b:11:29: 36:61:a9:91:e0:38:9f:f8:76:5f:2d:0d:b3:54:51: aa:a1:1e:6f:f4:a4:33:16:bd:6d:61:4f:0a:a7:4e: b1:ea:23:7b:5f:bc:0b:4c:80:e8:0f:37:bb:a9:f7: 4f:7c:ee:ca:bf:2b:ed:ef:18:8f:83:8c:85:e0:ff: 1f:12:bf:12:00:57:7a:75:29:4e:03:9b:a8:fc:d6: 68:52:78:46:9a:9b:9d:13:3d:7a:d4:0d:11:40:18: dd:80:2f:2e:33:f1:a9:63:72:79:c6:a4:f8:dd:b6: 0f:95:48:15:55:65:90:2d:b3:55:26:70:cd:46:e7: 40:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:90:FC:29:45:CE:62:DE:56:08:61:E3:F6:5B:42:24:8C:E1:2A:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:35:d6:56:eb:f0:e7:43:4d:5a:61:e6:be:81:aa:a0:4e:8a: 30:7a:72:9a:0f:8d:ca:64:30:94:86:cc:02:86:62:09:79:6e: 43:10:3f:da:40:0c:e9:98:14:ff:0d:00:87:a4:6d:f6:f4:10: 20:9b:21:89:ff:a1:fb:61:0b:4b:c9:ec:94:73:68:79:24:82: bc:e2:89:f7:a7:f0:04:9a:08:43:3e:2b:85:ea:9f:d0:0d:45: d7:36:d5:58:21:79:b0:33:8c:2c:1b:6a:4a:0c:45:e8:7b:9d: ea:27:a7:42:7b:50:b2:c3:58:5f:de:1c:25:a9:75:1a:66:4f: 52:64:d4:c8:22:d1:39:d5:3a:42:ca:64:5d:be:e4:3d:02:bc: 18:a0:ed:98:fd:45:23:59:94:85:1d:43:e0:e2:3a:7f:f6:f2: a1:38:43:0c:25:8f:dd:43:2b:bb:29:01:d3:e4:03:4c:77:ac: e2:2d:6a:92:14:c4:e1:50:df:2b:75:9d:a3:fd:81:de:45:8a: 4d:a8:6d:fc:2a:e3:fa:20:ec:3d:c4:16:0a:ab:33:56:f6:bb: 08:92:80:fe:53:a2:2d:d8:6d:63:6a:de:fe:f7:6c:97:08:5c: ed:35:b2:2e:2b:c4:fd:bf:a0:a2:19:52:34:e3:78:2e:e8:3c: f6:50:f8:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEbJFdaugQgOfiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk NDkyYTBlMzAtZjNjYS00Njc2LTk0OWItMzI3ZGY4MGU4ZGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbwqqIdyXxGfRGdatNbIMMiGdbCqdszqfoQz eN1wTc2cti3WbcEkTVd90ke5WsNfGEZeDtQkPZXjVEFEA7Pwrq6UajxJT2UtuX9R LNbGZbxG2VcYCrnNWevbUmFRTInFLZiNIQXVveDxXds1UhJxpbUdbsjg6muP9lYf FfhbIkhS6npLESk2YamR4Dif+HZfLQ2zVFGqoR5v9KQzFr1tYU8Kp06x6iN7X7wL TIDoDze7qfdPfO7Kvyvt7xiPg4yF4P8fEr8SAFd6dSlOA5uo/NZoUnhGmpudEz16 1A0RQBjdgC8uM/GpY3J5xqT43bYPlUgVVWWQLbNVJnDNRudAqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmQ/ClFzmLeVghh4/ZbQiSM4SoAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvMWIzNTY0Y2YtZGI5Zi0z Y2Y1LWFiMTYtOTMzNDVkZjg5YjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIo11lbr8OdDTVph5r6BqqBOijB6cpoPjcpkMJSGzAKGYgl5bkMQP9pA DOmYFP8NAIekbfb0ECCbIYn/ofthC0vJ7JRzaHkkgrziifen8ASaCEM+K4Xqn9AN Rdc21VghebAzjCwbakoMReh7neonp0J7ULLDWF/eHCWpdRpmT1Jk1Mgi0TnVOkLK ZF2+5D0CvBig7Zj9RSNZlIUdQ+DiOn/28qE4Qwwlj91DK7spAdPkA0x3rOItapIU xOFQ3yt1naP9gd5Fik2obfwq4/og7D3EFgqrM1b2uwiSgP5Toi3YbWNq3v73bJcI XO01si4rxP2/oKIZUjTjeC7oPPZQ+Kk= -----END CERTIFICATE-----Generated at Mon Nov 3 14:38:51 2025 by rpki-client