$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a1a3ab19-5cb5-350e-85bc-242757f97592.roa File: a1a3ab19-5cb5-350e-85bc-242757f97592.roa (raw, json) Hash identifier: wMGtGEXutvubqJ+29CGWZyDbXAUnpPU72g+BaNMKVmI= Subject key identifier: FF:3E:F9:0D:E4:F1:81:62:79:FD:AC:96:0A:38:B9:D0:DC:46:66:AD Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584BBA10466BE1CC8DBD78E93480 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a1a3ab19-5cb5-350e-85bc-242757f97592.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 22765 IP address blocks: 72.20.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:46:6b:e1:cc:8d:bd:78:e9:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=c6ae539c-3080-480d-b34e-b44a15cd3bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:65:ab:ef:4c:76:32:6a:f9:70:f5:d6:b6:4b: a2:29:a7:10:9c:1b:f2:d5:0e:0d:ab:82:36:5a:54: 97:b8:f5:94:f0:09:a5:eb:d2:f8:07:aa:a5:88:60: 6c:2a:5e:63:0a:ff:7b:28:3b:73:84:54:59:92:0c: a4:54:1a:3a:a3:61:29:d0:b7:d0:88:e2:ee:e4:a3: 9b:eb:f8:6a:17:a9:79:76:d0:01:c3:dc:3e:e7:e0: 8d:22:c0:95:a9:2b:4d:7a:07:10:dd:86:b5:b1:7c: 39:cb:10:ca:24:25:2a:67:69:0a:2a:13:63:5e:c3: 03:6a:ba:cc:f6:0d:80:c9:38:99:99:1a:5d:56:58: 27:c5:01:25:94:23:9a:b2:c6:66:63:52:1c:8b:54: d5:6b:f9:82:c1:28:e2:9d:70:97:ae:81:d0:fe:5c: 7c:cd:70:9d:d3:bb:a9:1d:5b:4c:24:6a:ec:36:7e: ff:76:0c:22:0e:e2:b5:6e:f6:01:54:8a:e1:5f:79: 83:cf:80:fd:d5:e9:e1:7e:1b:6f:39:d3:6b:6e:94: 99:cd:36:15:05:6c:e7:d4:2e:b8:83:6e:be:df:9a: 04:39:e9:aa:17:75:e8:40:3c:79:9a:38:ab:7a:02: 35:bf:91:a4:5d:a8:9f:44:3c:18:f7:b6:06:45:a8: 7f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3E:F9:0D:E4:F1:81:62:79:FD:AC:96:0A:38:B9:D0:DC:46:66:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a1a3ab19-5cb5-350e-85bc-242757f97592.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:9b:dd:23:2b:15:2b:10:5f:35:5a:d6:34:75:e8:87:74:7c: b5:bc:1d:1b:57:41:d3:b8:b4:08:fb:bd:13:69:e6:25:d1:41: 64:6c:ff:5c:8a:98:50:54:2e:0a:56:ad:e9:b1:4a:38:3a:95: d8:37:8c:b3:03:18:c4:c4:2d:d3:32:7d:92:03:8a:e8:f3:f1: d3:44:b3:52:f5:1f:26:9c:9c:c6:be:6f:bd:69:a6:0c:e0:c4: b3:87:e0:fa:c3:d9:b0:da:32:12:4d:e4:5f:0a:cb:2a:80:8a: 79:b5:49:32:71:45:56:8a:2e:b4:7a:c4:3b:4f:74:5a:6b:74: dc:96:dd:6a:dc:00:10:5a:2c:dd:6c:3a:89:e6:9b:66:f2:09: 81:2d:f8:e5:7b:9d:29:3a:4b:a8:22:fd:77:c0:5f:a6:43:22: 76:1b:34:d0:10:01:ca:52:7f:46:dc:43:99:90:36:0c:95:e9: ed:77:a5:fb:5d:fb:c9:28:82:2a:a3:51:cb:c3:22:c6:c0:6b: 44:44:8c:b2:1c:50:9b:a0:f1:77:53:1a:ec:66:de:fc:af:df: a8:9e:41:c3:0d:46:b5:1b:cb:93:d6:52:2f:3b:35:46:da:2c: 80:64:b7:d1:40:02:35:65:fc:4b:17:0d:01:39:2e:6b:16:7b: 94:1a:5c:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEZr4cyNvXjpNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk YzZhZTUzOWMtMzA4MC00ODBkLWIzNGUtYjQ0YTE1Y2QzYmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmWr70x2Mmr5cPXWtkuiKacQnBvy1Q4Nq4I2 WlSXuPWU8Aml69L4B6qliGBsKl5jCv97KDtzhFRZkgykVBo6o2Ep0LfQiOLu5KOb 6/hqF6l5dtABw9w+5+CNIsCVqStNegcQ3Ya1sXw5yxDKJCUqZ2kKKhNjXsMDarrM 9g2AyTiZmRpdVlgnxQEllCOassZmY1Ici1TVa/mCwSjinXCXroHQ/lx8zXCd07up HVtMJGrsNn7/dgwiDuK1bvYBVIrhX3mDz4D91enhfhtvOdNrbpSZzTYVBWzn1C64 g26+35oEOemqF3XoQDx5mjiregI1v5GkXaifRDwY97YGRah/QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8++Q3k8YFief2slgo4udDcRmatMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvYTFhM2FiMTktNWNiNS0z NTBlLTg1YmMtMjQyNzU3Zjk3NTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBTCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGb3SMrFSsQXzVa1jR16Id0fLW8HRtXQdO4tAj7vRNp5iXRQWRs/1yK mFBULgpWremxSjg6ldg3jLMDGMTELdMyfZIDiujz8dNEs1L1HyacnMa+b71ppgzg xLOH4PrD2bDaMhJN5F8KyyqAinm1STJxRVaKLrR6xDtPdFprdNyW3WrcABBaLN1s Oonmm2byCYEt+OV7nSk6S6gi/XfAX6ZDInYbNNAQAcpSf0bcQ5mQNgyV6e13pftd +8kogiqjUcvDIsbAa0REjLIcUJug8XdTGuxm3vyv36ieQcMNRrUby5PWUi87NUba LIBkt9FAAjVl/EsXDQE5LmsWe5QaXME= -----END CERTIFICATE-----Generated at Mon Nov 3 14:35:03 2025 by rpki-client