$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/eae85ad0-1277-36ff-9059-3ed1f569e35e.roa File: eae85ad0-1277-36ff-9059-3ed1f569e35e.roa (raw, json) Hash identifier: lUY0lvZZDIHfjIlZWC6NF/xjb3HWFvv/r4c8wgSKToc= Subject key identifier: BA:D0:F0:93:4D:08:C2:8F:D5:FB:75:05:58:95:64:33:35:1E:A9:85 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584BBA1046D8463B9D6BD3F79D80 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/eae85ad0-1277-36ff-9059-3ed1f569e35e.roa Signing time: Sun 02 Nov 2025 14:00:38 +0000 ROA not before: Sun 02 Nov 2025 14:00:38 +0000 ROA not after: Sat 31 Jan 2026 14:00:38 +0000 asID: 22765 IP address blocks: 72.20.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ba:10:46:d8:46:3b:9d:6b:d3:f7:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Nov 2 14:00:38 2025 GMT Not After : Jan 31 14:00:38 2026 GMT Subject: CN=92bd7426-2947-4d1f-96e8-2e95594a6ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:57:06:36:36:48:e4:02:13:50:21:46:a1:2a: c5:a3:00:b0:7c:3a:1b:1a:d9:48:34:c5:0c:90:eb: ca:75:4c:a1:d3:71:3b:bf:a4:cf:fd:7b:87:ec:7b: 3b:5c:6b:d7:98:6c:de:77:94:bd:af:31:89:6a:37: 76:0f:6a:39:c7:56:50:29:26:36:76:44:01:9b:c0: 5e:ca:63:45:8e:21:70:08:71:e3:02:ff:b7:6b:fa: a6:a7:09:98:11:0f:7f:9a:25:83:b3:21:3f:a9:e3: 22:5f:04:3a:b0:ae:8a:a9:7a:96:60:a4:c8:92:38: 77:cb:6b:a6:75:f2:49:fc:9a:72:c4:2d:51:ef:8c: 16:f9:27:6f:9b:0a:65:2c:60:60:c0:6e:be:7f:5a: 90:86:b0:2a:f3:52:f4:38:0b:42:7f:86:f5:27:dc: 90:25:f6:38:37:eb:f7:83:08:62:4e:7c:61:c1:2c: f3:66:5a:dc:2d:7e:8f:a8:9e:b2:6f:31:c2:93:f4: 60:8f:a4:0d:65:fc:46:93:5c:6b:20:b1:f1:29:9f: 42:96:53:78:ba:f4:cb:ef:cb:1e:67:01:f5:1d:94: 31:0a:a4:72:eb:dc:fc:a0:f6:c7:03:84:4c:df:43: 7a:97:17:e7:2b:d1:07:3f:bd:a6:c8:09:e8:a5:39: ec:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D0:F0:93:4D:08:C2:8F:D5:FB:75:05:58:95:64:33:35:1E:A9:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/eae85ad0-1277-36ff-9059-3ed1f569e35e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:c2:cf:c4:75:bf:39:06:2b:ff:34:a2:54:f7:b2:3a:7f:f8: af:68:5a:bd:90:99:4c:a6:02:5b:dc:c4:a8:da:76:9e:58:a3: 9b:fb:71:15:48:9a:c5:e5:b3:31:93:86:67:fe:61:92:fb:9b: 02:6c:1d:ce:f5:a3:af:0a:a0:8b:90:94:d0:40:f1:96:a2:cc: 93:1e:cc:87:5a:26:4d:be:4d:c9:09:c0:6f:3b:a6:7a:44:16: 5e:f1:b1:e6:16:23:26:d2:62:6f:b8:cb:4e:48:b0:eb:7e:22: 94:42:90:b3:0a:fb:41:91:41:9e:da:4f:52:77:e3:5e:5d:26: e3:be:29:14:20:8d:e4:f7:79:71:48:f6:c2:79:cd:32:99:d9: e4:98:0c:5e:4e:69:7b:3f:4b:ea:4e:b7:c6:56:92:91:20:f0: 9c:8e:de:c4:85:d6:04:17:69:f1:a1:ef:61:49:39:04:7c:a6: f9:76:82:91:00:ec:12:25:0d:fd:ce:b7:e7:24:8d:ed:de:cf: 72:27:66:94:46:24:b4:78:cd:7d:6a:c9:57:b6:76:a9:c5:74: 27:02:a6:e2:94:6f:02:00:c4:2b:73:2a:b9:56:60:cd:97:7c: 3e:eb:78:a6:19:3f:8e:43:01:a5:96:2f:e3:b4:0e:00:f3:8c: b2:92:14:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu6EEbYRjuda9P3nYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI1MTEwMjE0MDAzOFoXDTI2MDEzMTE0MDAzOFowLzEtMCsGA1UEAxMk OTJiZDc0MjYtMjk0Ny00ZDFmLTk2ZTgtMmU5NTU5NGE2ZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFcGNjZI5AITUCFGoSrFowCwfDobGtlINMUM kOvKdUyh03E7v6TP/XuH7Hs7XGvXmGzed5S9rzGJajd2D2o5x1ZQKSY2dkQBm8Be ymNFjiFwCHHjAv+3a/qmpwmYEQ9/miWDsyE/qeMiXwQ6sK6KqXqWYKTIkjh3y2um dfJJ/JpyxC1R74wW+SdvmwplLGBgwG6+f1qQhrAq81L0OAtCf4b1J9yQJfY4N+v3 gwhiTnxhwSzzZlrcLX6PqJ6ybzHCk/Rgj6QNZfxGk1xrILHxKZ9CllN4uvTL78se ZwH1HZQxCqRy69z8oPbHA4RM30N6lxfnK9EHP72myAnopTnsNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrQ8JNNCMKP1ft1BViVZDM1HqmFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvZWFlODVhZDAtMTI3Ny0z NmZmLTkwNTktM2VkMWY1NjllMzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACPCz8R1vzkGK/80olT3sjp/+K9oWr2QmUymAlvcxKjadp5Yo5v7cRVI msXlszGThmf+YZL7mwJsHc71o68KoIuQlNBA8ZaizJMezIdaJk2+TckJwG87pnpE Fl7xseYWIybSYm+4y05IsOt+IpRCkLMK+0GRQZ7aT1J3415dJuO+KRQgjeT3eXFI 9sJ5zTKZ2eSYDF5OaXs/S+pOt8ZWkpEg8JyO3sSF1gQXafGh72FJOQR8pvl2gpEA 7BIlDf3Ot+ckje3ez3InZpRGJLR4zX1qyVe2dqnFdCcCpuKUbwIAxCtzKrlWYM2X fD7reKYZP45DAaWWL+O0DgDzjLKSFP4= -----END CERTIFICATE-----Generated at Mon Nov 3 14:39:02 2025 by rpki-client