$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/38872579-4e14-3eb9-a23c-45f4e7ee93d1.roa File: 38872579-4e14-3eb9-a23c-45f4e7ee93d1.roa (raw, json) Hash identifier: i3pE9ypoHPbEh8OK9JwIVAMNEKatqKrZOQGbPjmxFJA= Subject key identifier: F7:0C:A2:CD:9D:3D:AF:90:AC:84:93:15:81:FC:BD:79:44:90:20:69 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584BA7CCEE1ACF78293A8DDBEA40 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/38872579-4e14-3eb9-a23c-45f4e7ee93d1.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 399501 IP address blocks: 72.20.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cc:ee:1a:cf:78:29:3a:8d:db:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=68cc8c43-9a13-4768-94b8-041e517f3f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a0:b5:6d:7c:6f:dd:53:1b:30:83:50:19:37: 97:4a:e0:22:ca:6d:d9:a4:66:4b:ac:5b:35:9e:ee: 41:8d:ea:12:aa:5c:47:e4:4c:84:e3:e2:cb:7f:3e: 15:c5:fc:0d:c7:1b:80:44:06:bf:8b:d8:52:fd:db: 95:29:ab:ac:c8:71:de:9b:c5:d4:dd:d7:61:50:1e: 3a:ad:91:4d:b7:cd:0d:91:cc:d7:f4:ff:46:37:40: 00:57:14:96:2b:07:4d:18:00:bb:61:a4:7f:de:5d: 9b:c0:6e:c0:20:59:c0:e0:51:19:37:10:42:b5:b2: f8:22:19:89:b4:d1:bd:35:20:3a:b4:f7:5e:87:e5: 96:18:e2:49:44:f2:25:f1:49:d7:05:97:a5:a6:c0: 25:94:0a:5d:e4:9d:1d:e5:7a:9e:bf:d4:a5:61:38: 2e:66:6f:a4:f5:89:59:0c:0e:54:07:bd:16:72:9e: 7b:49:ea:de:67:b7:51:f9:e9:ad:55:7d:9d:f6:ba: e9:f1:ab:8e:e4:43:6b:6a:61:f3:51:e5:41:9d:e6: d5:94:f1:84:4a:f6:37:5a:b9:e8:68:9f:6b:97:7c: 6e:a9:bb:fc:f4:62:23:63:04:b0:b2:07:a4:7c:86: 1c:a7:31:e3:e3:ad:1a:7d:a4:d0:56:9d:17:14:71: 43:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0C:A2:CD:9D:3D:AF:90:AC:84:93:15:81:FC:BD:79:44:90:20:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/38872579-4e14-3eb9-a23c-45f4e7ee93d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:a8:22:f5:ad:40:32:06:72:7d:3d:38:64:bc:b7:48:5d:d1: 57:23:5d:4e:6b:c8:64:01:a7:dc:6f:c1:73:85:26:24:85:91: 4a:26:d5:cb:ba:fc:2f:5e:72:a4:3d:4c:82:e9:77:92:5c:08: 25:58:de:1d:cc:58:eb:a0:bc:8a:9d:3f:bc:13:bd:4b:10:98: dc:9e:52:43:3e:79:5d:3e:9e:a3:41:eb:1a:53:f9:7a:7e:7c: cf:4f:fd:d3:01:75:01:c5:be:61:44:fb:d0:00:4a:be:57:ec: 58:a3:21:93:ec:80:cc:c7:3b:75:2c:e1:c9:b9:c5:90:46:18: ce:f9:cd:4b:08:43:1d:50:b1:72:e2:8c:f6:d3:44:b8:52:39: bd:8d:73:7d:70:59:f8:43:39:6f:d1:23:13:90:cc:25:3f:2a: b6:48:33:c9:4a:3e:eb:8b:2f:f6:6f:47:f3:63:5b:24:78:1d: 49:c3:18:8a:e7:dc:21:89:0d:ec:8b:43:1c:b6:a4:1d:e4:bb: 48:49:f0:5c:92:79:fe:ae:37:3a:f4:14:97:41:3d:50:3e:bd: 98:7e:c2:e1:21:7d:79:55:64:0f:7a:3a:bb:be:72:a0:6e:c3: 03:0b:da:ab:3c:cb:23:d9:77:ce:f4:33:d4:42:b9:b0:80:91: eb:b3:6b:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzO4az3gpOo3b6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NjhjYzhjNDMtOWExMy00NzY4LTk0YjgtMDQxZTUxN2YzZjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6C1bXxv3VMbMINQGTeXSuAiym3ZpGZLrFs1 nu5BjeoSqlxH5EyE4+LLfz4VxfwNxxuARAa/i9hS/duVKausyHHem8XU3ddhUB46 rZFNt80NkczX9P9GN0AAVxSWKwdNGAC7YaR/3l2bwG7AIFnA4FEZNxBCtbL4IhmJ tNG9NSA6tPdeh+WWGOJJRPIl8UnXBZelpsAllApd5J0d5Xqev9SlYTguZm+k9YlZ DA5UB70Wcp57SereZ7dR+emtVX2d9rrp8auO5ENramHzUeVBnebVlPGESvY3Wrno aJ9rl3xuqbv89GIjYwSwsgekfIYcpzHj460afaTQVp0XFHFDdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcMos2dPa+QrISTFYH8vXlEkCBpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvMzg4NzI1NzktNGUxNC0z ZWI5LWEyM2MtNDVmNGU3ZWU5M2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBTUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2oIvWtQDIGcn09OGS8t0hd0VcjXU5ryGQBp9xvwXOFJiSFkUom1cu6 /C9ecqQ9TILpd5JcCCVY3h3MWOugvIqdP7wTvUsQmNyeUkM+eV0+nqNB6xpT+Xp+ fM9P/dMBdQHFvmFE+9AASr5X7FijIZPsgMzHO3Us4cm5xZBGGM75zUsIQx1QsXLi jPbTRLhSOb2Nc31wWfhDOW/RIxOQzCU/KrZIM8lKPuuLL/ZvR/NjWyR4HUnDGIrn 3CGJDeyLQxy2pB3ku0hJ8FySef6uNzr0FJdBPVA+vZh+wuEhfXlVZA96Oru+cqBu wwML2qs8yyPZd870M9RCubCAkeuzazI= -----END CERTIFICATE-----Generated at Mon Nov 3 14:38:49 2025 by rpki-client