$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/080c7add-272b-3dbb-b616-858c6e61e546.roa File: 080c7add-272b-3dbb-b616-858c6e61e546.roa (raw, json) Hash identifier: 4lVPYl2lr/iVn0txgllloD5d03Wxvxb3/n1oMAvqYnY= Subject key identifier: 4C:09:4B:5F:90:B3:73:1E:C6:35:3A:DE:90:F9:9F:3F:51:99:08:6D Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584C9C31AF5967C3BF3AE837B7C0 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/080c7add-272b-3dbb-b616-858c6e61e546.roa Signing time: Thu 22 Jan 2026 14:00:37 +0000 ROA not before: Thu 22 Jan 2026 14:00:37 +0000 ROA not after: Wed 22 Apr 2026 13:00:37 +0000 asID: 6461 IP address blocks: 72.20.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9c:31:af:59:67:c3:bf:3a:e8:37:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Jan 22 14:00:37 2026 GMT Not After : Apr 22 13:00:37 2026 GMT Subject: CN=aa07efe4-193b-4356-bed1-e1d5ec18d5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9c:ec:7d:d3:77:9a:57:22:ad:3a:8b:03:e2: 21:33:a5:38:78:92:6d:71:b4:d7:63:e0:76:00:56: 4b:44:44:dc:99:ef:c9:78:3c:b8:b5:51:64:15:96: 2b:13:ea:90:64:b3:6c:bf:7a:e6:d0:eb:ad:f6:8c: 89:6a:49:70:b7:9e:04:40:03:b6:cd:99:c2:03:45: 9b:fb:50:7c:2a:70:91:38:8b:f4:04:0c:86:13:42: 8c:30:57:67:3c:4e:08:42:21:d3:34:99:56:df:29: 94:5e:9c:65:46:d4:ef:fa:fc:e6:00:01:09:54:7e: 5c:04:24:51:bd:c0:dd:38:1f:77:ac:aa:86:22:27: ea:8f:66:3a:23:b3:2b:3d:db:2d:7d:ca:a2:24:c0: e7:aa:7b:41:17:54:82:f6:e3:23:19:b6:20:aa:4a: b4:0d:bb:9f:d5:08:7e:26:2b:b0:58:09:a5:1d:34: 60:fd:56:09:d3:e9:6f:5d:9e:a3:65:75:4f:57:f3: 32:5f:a4:21:da:1d:35:cf:0a:48:ec:0f:32:52:65: e6:1c:7b:6c:e9:5e:c5:a0:ac:de:5c:fa:b6:b8:7a: 34:e4:53:87:fd:74:27:40:0e:aa:fd:7a:07:dc:ac: 72:b8:5e:54:31:e6:bb:6b:8c:53:18:2f:ed:c0:d3: c3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:09:4B:5F:90:B3:73:1E:C6:35:3A:DE:90:F9:9F:3F:51:99:08:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/080c7add-272b-3dbb-b616-858c6e61e546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:fa:90:4d:40:0e:54:c1:fd:b3:98:0c:e1:56:46:bb:fd:e3: af:69:56:9f:28:55:b5:b0:ec:7e:93:4e:05:b8:12:5d:c6:d5: e0:a3:ff:80:a7:80:a5:cd:a3:7d:b2:2e:84:b6:40:43:02:98: 70:f8:6c:94:c1:75:da:83:1a:71:13:09:ad:ac:cc:3c:53:b5: b9:5e:44:8d:78:cf:45:1c:4b:8f:98:39:1f:b7:1d:49:ae:c0: c3:ac:70:23:87:38:b0:b0:fc:fe:84:aa:7d:b3:58:da:10:9c: 26:4b:ee:3a:8a:43:83:3a:13:eb:fd:6e:22:25:ab:46:25:8f: a2:4c:16:cc:7e:61:3e:30:58:20:ab:cd:8f:f4:f3:f6:89:36: 22:ed:ba:54:7b:bb:c3:b7:e3:db:90:35:c1:cb:fa:5c:79:4a: 8d:76:16:b5:28:f7:09:d5:2a:a8:0a:a2:1c:4e:98:5a:71:c1: 20:e2:a5:98:76:5a:6d:a5:bc:c2:7f:d4:d5:11:4f:5a:c8:c1: b8:00:f2:e9:8a:03:3c:04:34:4c:55:ab:06:e5:aa:8b:57:67: 6c:81:ac:95:14:f7:1c:1f:55:25:55:f9:4c:bb:88:a2:49:a9: 4a:62:e4:1b:88:50:cd:2c:a1:39:3e:f5:1a:f2:11:4d:e0:b2: 9b:73:9b:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEycMa9ZZ8O/Oug3t8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI2MDEyMjE0MDAzN1oXDTI2MDQyMjEzMDAzN1owLzEtMCsGA1UEAxMk YWEwN2VmZTQtMTkzYi00MzU2LWJlZDEtZTFkNWVjMThkNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypzsfdN3mlcirTqLA+IhM6U4eJJtcbTXY+B2 AFZLRETcme/JeDy4tVFkFZYrE+qQZLNsv3rm0Out9oyJaklwt54EQAO2zZnCA0Wb +1B8KnCROIv0BAyGE0KMMFdnPE4IQiHTNJlW3ymUXpxlRtTv+vzmAAEJVH5cBCRR vcDdOB93rKqGIifqj2Y6I7MrPdstfcqiJMDnqntBF1SC9uMjGbYgqkq0Dbuf1Qh+ JiuwWAmlHTRg/VYJ0+lvXZ6jZXVPV/MyX6Qh2h01zwpI7A8yUmXmHHts6V7FoKze XPq2uHo05FOH/XQnQA6q/XoH3KxyuF5UMea7a4xTGC/twNPD6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwJS1+Qs3MexjU63pD5nz9RmQhtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvMDgwYzdhZGQtMjcyYi0z ZGJiLWI2MTYtODU4YzZlNjFlNTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSBTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACX6kE1ADlTB/bOYDOFWRrv9469pVp8oVbWw7H6TTgW4El3G1eCj/4Cn gKXNo32yLoS2QEMCmHD4bJTBddqDGnETCa2szDxTtbleRI14z0UcS4+YOR+3HUmu wMOscCOHOLCw/P6Eqn2zWNoQnCZL7jqKQ4M6E+v9biIlq0Ylj6JMFsx+YT4wWCCr zY/08/aJNiLtulR7u8O349uQNcHL+lx5So12FrUo9wnVKqgKohxOmFpxwSDipZh2 Wm2lvMJ/1NURT1rIwbgA8umKAzwENExVqwblqotXZ2yBrJUU9xwfVSVV+Uy7iKJJ qUpi5BuIUM0soTk+9RryEU3gsptzmwM= -----END CERTIFICATE-----Generated at Mon Mar 2 05:55:03 2026 by rpki-client