$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa File: 6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa (raw, json) Hash identifier: F2weaflq1izBDgRg4/g6muuIqUMtMO8Tb4DZUEUxuEk= Subject key identifier: 52:E9:BB:C2:0E:F8:6E:6C:6B:31:E4:64:06:91:25:D6:E8:AB:B8:B1 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584BBA1046A550B61B4FD5CC41C0 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 22765 IP address blocks: 72.20.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:46:a5:50:b6:1b:4f:d5:cc:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=9639683c-d956-4a46-a4ee-3f5b0dd638e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:34:9d:b5:fb:36:86:78:e4:af:99:d8:12:32: fb:83:ee:da:e4:dc:c0:4b:d8:37:15:d6:22:2b:54: 2e:18:9a:50:6a:b9:96:db:71:39:18:fd:43:b8:09: 33:fb:11:03:52:5d:9d:2f:1f:21:af:f7:15:41:1f: 07:2c:8b:45:11:e9:b0:cb:95:65:1b:54:18:ea:19: 18:ad:7d:b7:70:1e:6f:26:85:96:5e:59:ca:80:2b: 6d:b2:2a:45:47:18:fe:34:e5:9d:d3:a3:67:90:3f: c1:10:c8:b3:fc:27:83:63:4e:1b:b2:6d:53:59:8c: e4:fd:dd:db:8d:1c:cf:61:41:3f:15:b2:a5:93:12: 64:8e:75:de:cf:ea:59:e8:53:6c:3f:f6:c4:6d:00: db:d3:54:bd:b8:be:90:b1:a9:3c:89:1d:1e:a5:f7: ff:23:aa:3c:2a:85:d2:90:aa:ea:b0:8b:f0:0b:a1: 07:e6:c9:ba:12:ec:39:7b:ed:19:99:bb:50:ef:c5: 39:27:ff:3f:f8:74:03:46:b1:d6:00:09:93:06:ba: b8:a2:52:fe:49:84:1d:1a:18:70:3b:80:2a:0f:05: 73:92:af:e4:59:87:9d:f9:9c:88:4f:58:3a:9c:af: c9:2c:f6:90:71:88:4d:9a:ee:c6:a5:95:86:7e:6c: 48:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E9:BB:C2:0E:F8:6E:6C:6B:31:E4:64:06:91:25:D6:E8:AB:B8:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/6c372e93-c67b-3e1e-a6f5-a68504c4f532.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:94:6e:a2:40:37:20:ec:e3:f8:c1:c7:61:e2:a1:34:44:c7: 61:48:89:33:66:50:ed:22:bc:87:78:e8:50:c6:e4:a7:b6:62: d7:f2:2f:17:04:8c:12:76:67:ed:0e:1c:fa:ec:46:f6:19:e9: b1:a0:05:f4:23:15:b1:3c:1a:f3:bf:e2:43:5f:b3:98:9d:4f: 2a:f8:63:2d:c5:39:8e:f0:5d:69:0a:b6:10:c0:3a:b3:56:ef: df:f9:77:11:1b:14:09:9b:2e:a6:5d:7e:a0:75:da:4b:34:4a: f9:b3:7a:0e:d9:ec:95:25:1f:62:20:8f:5b:d9:c1:91:0a:dc: 88:69:e5:fd:1d:e5:24:2b:15:b7:41:91:00:de:ae:a7:03:ac: f3:61:05:07:09:30:bc:65:9b:07:24:75:0c:3a:86:19:82:ab: 7c:d5:89:6e:f4:88:1b:c4:cb:1a:61:40:63:df:ca:f1:1d:e0: 1b:67:b7:64:81:a3:c0:46:a6:6f:21:b5:1b:aa:2a:79:8e:ca: ba:60:c5:6f:0c:72:6e:d8:50:04:4c:f5:62:28:79:36:5d:de: 52:27:24:2d:55:2a:f4:a0:d0:9a:08:bc:ae:1c:23:fe:df:8e: 83:cc:40:88:bd:7e:cc:b2:0a:da:62:7f:78:c1:c1:27:c7:e7: 9b:f5:7e:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEalULYbT9XMQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk OTYzOTY4M2MtZDk1Ni00YTQ2LWE0ZWUtM2Y1YjBkZDYzOGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozSdtfs2hnjkr5nYEjL7g+7a5NzAS9g3FdYi K1QuGJpQarmW23E5GP1DuAkz+xEDUl2dLx8hr/cVQR8HLItFEemwy5VlG1QY6hkY rX23cB5vJoWWXlnKgCttsipFRxj+NOWd06NnkD/BEMiz/CeDY04bsm1TWYzk/d3b jRzPYUE/FbKlkxJkjnXez+pZ6FNsP/bEbQDb01S9uL6Qsak8iR0epff/I6o8KoXS kKrqsIvwC6EH5sm6Euw5e+0ZmbtQ78U5J/8/+HQDRrHWAAmTBrq4olL+SYQdGhhw O4AqDwVzkq/kWYed+ZyIT1g6nK/JLPaQcYhNmu7GpZWGfmxIrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLpu8IO+G5sazHkZAaRJdboq7ixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvNmMzNzJlOTMtYzY3Yi0z ZTFlLWE2ZjUtYTY4NTA0YzRmNTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBTKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKUbqJANyDs4/jBx2HioTREx2FIiTNmUO0ivId46FDG5Ke2YtfyLxcE jBJ2Z+0OHPrsRvYZ6bGgBfQjFbE8GvO/4kNfs5idTyr4Yy3FOY7wXWkKthDAOrNW 79/5dxEbFAmbLqZdfqB12ks0Svmzeg7Z7JUlH2Igj1vZwZEK3Ihp5f0d5SQrFbdB kQDerqcDrPNhBQcJMLxlmwckdQw6hhmCq3zViW70iBvEyxphQGPfyvEd4Btnt2SB o8BGpm8htRuqKnmOyrpgxW8Mcm7YUARM9WIoeTZd3lInJC1VKvSg0JoIvK4cI/7f joPMQIi9fsyyCtpif3jBwSfH55v1fgs= -----END CERTIFICATE-----Generated at Mon Nov 3 14:38:50 2025 by rpki-client