$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa File: 1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa (raw, json) Hash identifier: QQRYPUZp9BaZe3dwMEMCO/tjCANuiXM6zbgivcda17s= Subject key identifier: 03:87:1F:64:38:A0:0A:F2:D7:E6:E8:67:1D:A7:39:B3:0D:E2:A5:AF Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584D7B6A8E134EFFE589F3F9FA80 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 22765 IP address blocks: 72.20.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:8e:13:4e:ff:e5:89:f3:f9:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=a599306d-b13b-4a59-acc5-10773121ce88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a8:18:28:72:69:12:53:70:f2:3f:42:4e:3f: 0e:81:73:e8:f7:25:46:29:2d:ef:b0:cb:9a:60:59: 49:bb:ff:b8:84:75:c2:f8:0e:ff:bb:65:92:c8:ce: 17:03:aa:33:40:fe:f8:ef:50:39:ea:ed:3e:c7:ab: 6b:37:8c:50:a7:a1:87:a8:0f:c0:0a:b0:5b:57:4e: d2:5b:b6:ca:e8:cb:70:0e:48:3d:ac:55:b6:7a:b4: e5:67:a5:7f:6e:bf:8d:95:89:92:79:12:5c:c3:dd: 12:73:48:42:af:79:9f:11:59:4a:2c:e2:d9:f3:69: ef:0b:7b:4b:1f:39:5f:e9:b5:53:95:f5:98:c1:54: 72:23:6b:f8:3d:26:21:33:0c:b5:d6:23:0b:66:02: ed:a1:68:55:d0:7f:43:0c:ee:8e:75:81:00:4b:cf: 8d:b3:e3:d1:94:66:e7:79:72:d9:27:71:05:1b:59: f6:46:f1:a0:7f:8a:c1:e1:bb:cd:a1:95:cb:be:3d: e5:49:36:b1:96:c1:d9:d7:48:3b:8b:8b:e0:7e:54: ce:4e:c1:23:0d:35:9a:0c:69:92:40:3c:2e:11:b1: ca:b0:da:5b:62:57:e3:4f:c5:cb:75:43:3d:b5:41: b7:a0:9f:a7:b6:cc:87:23:f9:23:9e:34:b7:54:df: 86:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:87:1F:64:38:A0:0A:F2:D7:E6:E8:67:1D:A7:39:B3:0D:E2:A5:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/1b3564cf-db9f-3cf5-ab16-93345df89b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b1:b8:86:13:2f:b9:75:cc:d4:46:7e:a2:1a:20:26:3e:ae: d1:af:92:a2:19:0b:77:f5:d8:a3:52:32:4a:6b:6d:33:2e:cb: e5:c9:38:79:05:63:d2:86:04:aa:95:1f:a5:44:a6:12:47:e5: 1b:1d:36:af:80:18:c0:73:0e:6d:f5:b2:16:53:f7:e3:92:d2: b7:97:75:ad:de:57:05:cb:4f:68:47:a8:a6:b4:2c:c6:56:f7: 2d:e7:0c:e6:60:90:1c:71:85:41:ed:01:f7:70:c3:6f:9d:1b: 4e:7c:24:2f:e5:cd:67:b3:fd:b6:64:c3:7a:50:29:c1:76:25: 77:a1:1e:5f:a8:48:bc:b6:8f:8b:b7:77:ab:2c:22:8a:c7:a9: f0:7c:cc:61:ee:26:8b:7f:68:d6:e4:70:d2:9f:0d:e9:94:dd: 8b:f0:b3:02:da:53:b2:79:fd:2f:0d:e2:98:30:c7:5c:eb:bc: 07:fc:e5:1c:0e:52:11:b7:a9:21:8d:58:ea:0c:8e:99:bb:44: 7b:c3:e2:f9:7f:ce:6d:c4:e1:66:47:07:45:f8:d1:f3:09:75: 2a:51:e5:87:c8:c4:2f:2e:ec:b3:c3:84:f4:53:18:be:c6:25: c4:dd:02:04:14:82:47:d1:b5:45:d6:2b:94:1f:14:de:4f:66: c0:ad:95:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17ao4TTv/lifP5+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk YTU5OTMwNmQtYjEzYi00YTU5LWFjYzUtMTA3NzMxMjFjZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoagYKHJpElNw8j9CTj8OgXPo9yVGKS3vsMua YFlJu/+4hHXC+A7/u2WSyM4XA6ozQP7471A56u0+x6trN4xQp6GHqA/ACrBbV07S W7bK6MtwDkg9rFW2erTlZ6V/br+NlYmSeRJcw90Sc0hCr3mfEVlKLOLZ82nvC3tL Hzlf6bVTlfWYwVRyI2v4PSYhMwy11iMLZgLtoWhV0H9DDO6OdYEAS8+Ns+PRlGbn eXLZJ3EFG1n2RvGgf4rB4bvNoZXLvj3lSTaxlsHZ10g7i4vgflTOTsEjDTWaDGmS QDwuEbHKsNpbYlfjT8XLdUM9tUG3oJ+ntsyHI/kjnjS3VN+GPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOHH2Q4oAry1+boZx2nObMN4qWvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvMWIzNTY0Y2YtZGI5Zi0z Y2Y1LWFiMTYtOTMzNDVkZjg5YjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKxuIYTL7l1zNRGfqIaICY+rtGvkqIZC3f12KNSMkprbTMuy+XJOHkF Y9KGBKqVH6VEphJH5RsdNq+AGMBzDm31shZT9+OS0reXda3eVwXLT2hHqKa0LMZW 9y3nDOZgkBxxhUHtAfdww2+dG058JC/lzWez/bZkw3pQKcF2JXehHl+oSLy2j4u3 d6ssIorHqfB8zGHuJot/aNbkcNKfDemU3YvwswLaU7J5/S8N4pgwx1zrvAf85RwO UhG3qSGNWOoMjpm7RHvD4vl/zm3E4WZHB0X40fMJdSpR5YfIxC8u7LPDhPRTGL7G JcTdAgQUgkfRtUXWK5QfFN5PZsCtla8= -----END CERTIFICATE-----Generated at Sun Apr 19 12:43:48 2026 by rpki-client