$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/5986a15c-31f2-3481-a490-90f8833a40b9.roa File: 5986a15c-31f2-3481-a490-90f8833a40b9.roa (raw, json) Hash identifier: 2VpdixSE7Ow1x5M9TK3RZBFxXgUueEpABl9hARqzLVc= Subject key identifier: D2:57:25:9B:28:D7:11:DA:FF:FB:B1:48:B8:F7:56:1A:84:93:29:4C Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584BBA1046B9677CA20E408C6B00 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/5986a15c-31f2-3481-a490-90f8833a40b9.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 22765 IP address blocks: 72.20.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:46:b9:67:7c:a2:0e:40:8c:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=4cf2157f-8189-4621-9291-f0c9a7234f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:06:72:d8:78:34:fb:2a:1b:96:f8:54:12:08: a3:0d:90:7e:1b:b0:fb:06:24:89:0f:ed:29:4b:58: bb:e4:99:ab:a5:fa:ff:41:38:ba:df:24:a8:1d:e6: fe:53:f7:06:7d:2f:aa:2e:6c:45:8a:42:f5:f6:81: 7c:94:f7:4f:13:37:35:39:22:0a:98:ff:78:6b:4a: 30:bd:5a:0e:56:50:97:8d:55:3f:1d:fd:c1:1e:7d: 7e:ad:85:db:19:3f:1e:bc:3f:84:0e:d8:3b:5b:25: 5e:c9:1b:94:be:66:79:de:f5:6f:67:ce:3d:f2:f9: 0f:f1:8b:6b:92:f0:9a:f7:96:e1:67:2e:ab:ab:54: 65:b6:27:a1:fe:7b:75:13:a7:8d:99:a5:73:70:35: bf:bd:7d:6c:c4:fb:03:12:a6:e4:6e:71:24:a8:2e: 60:4e:59:b9:1e:b7:44:e0:17:d4:32:cd:50:ed:af: 01:40:8b:67:0b:34:5c:70:bc:83:3b:8c:26:32:57: 3f:21:55:24:b5:6a:c2:8a:f0:56:cf:b8:4a:8e:e1: a8:86:ec:a3:c3:d8:bd:48:26:b9:dd:27:b1:e5:03: b2:42:c7:81:56:fc:13:76:0e:43:d8:5a:a5:72:ae: 27:23:2e:d5:24:ad:51:ce:ab:68:61:ae:35:8e:d9: e6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:57:25:9B:28:D7:11:DA:FF:FB:B1:48:B8:F7:56:1A:84:93:29:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/5986a15c-31f2-3481-a490-90f8833a40b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:d9:8e:f1:16:f8:a1:b2:33:1b:ec:ca:0c:ef:ab:67:1a:42: 38:60:a9:90:57:86:b0:40:d3:5a:fa:64:c8:5b:11:6b:99:7f: 56:43:5b:46:38:2e:05:83:e6:f0:93:5b:8b:02:ec:b8:46:5c: 4a:9d:e5:8a:e8:58:d7:e7:0d:40:8c:b9:28:ed:71:81:36:c9: c6:ed:dc:a3:55:cc:59:d8:ff:9b:54:9c:de:43:fc:c2:ca:af: 67:d6:3f:37:8d:b0:ed:12:30:99:f4:85:52:58:ce:1a:88:8b: 59:7d:7e:92:65:dc:d0:8f:fd:a0:e8:c0:0a:85:5d:81:02:cf: ed:0a:4c:8f:be:7d:e4:36:11:08:f0:ed:7d:57:02:24:92:7b: 3c:d2:15:a2:d7:38:94:e7:4b:f8:c0:3a:7f:98:4d:47:30:42: 6f:fd:c5:f1:ee:9f:84:bc:12:2a:9f:94:d9:8c:f3:e7:fa:52: dc:37:9d:a6:06:35:31:e1:a4:2e:3c:f6:73:ab:36:03:ec:ff: 19:c5:a4:81:86:ba:f2:9d:d8:85:87:6f:6c:44:ce:ac:e7:52: bb:52:ab:51:cf:f4:2e:ec:85:24:c5:dd:dd:0d:29:ab:f5:97: 46:28:98:11:0d:d6:7b:99:7a:3f:0d:47:35:c9:11:53:8c:78: 2d:1d:de:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEa5Z3yiDkCMawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk NGNmMjE1N2YtODE4OS00NjIxLTkyOTEtZjBjOWE3MjM0ZjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgZy2Hg0+yoblvhUEgijDZB+G7D7BiSJD+0p S1i75Jmrpfr/QTi63ySoHeb+U/cGfS+qLmxFikL19oF8lPdPEzc1OSIKmP94a0ow vVoOVlCXjVU/Hf3BHn1+rYXbGT8evD+EDtg7WyVeyRuUvmZ53vVvZ8498vkP8Ytr kvCa95bhZy6rq1Rltieh/nt1E6eNmaVzcDW/vX1sxPsDEqbkbnEkqC5gTlm5HrdE 4BfUMs1Q7a8BQItnCzRccLyDO4wmMlc/IVUktWrCivBWz7hKjuGohuyjw9i9SCa5 3Sex5QOyQseBVvwTdg5D2Fqlcq4nIy7VJK1RzqtoYa41jtnm1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJXJZso1xHa//uxSLj3VhqEkylMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvNTk4NmExNWMtMzFmMi0z NDgxLWE0OTAtOTBmODgzM2E0MGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBTJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjZjvEW+KGyMxvsygzvq2caQjhgqZBXhrBA01r6ZMhbEWuZf1ZDW0Y4 LgWD5vCTW4sC7LhGXEqd5YroWNfnDUCMuSjtcYE2ycbt3KNVzFnY/5tUnN5D/MLK r2fWPzeNsO0SMJn0hVJYzhqIi1l9fpJl3NCP/aDowAqFXYECz+0KTI++feQ2EQjw 7X1XAiSSezzSFaLXOJTnS/jAOn+YTUcwQm/9xfHun4S8EiqflNmM8+f6Utw3naYG NTHhpC489nOrNgPs/xnFpIGGuvKd2IWHb2xEzqznUrtSq1HP9C7shSTF3d0NKav1 l0YomBEN1nuZej8NRzXJEVOMeC0d3t8= -----END CERTIFICATE-----Generated at Mon Nov 3 14:38:47 2025 by rpki-client