$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/555c0bc8-ee66-3fdb-ba71-d7f6c6458be9.roa File: 555c0bc8-ee66-3fdb-ba71-d7f6c6458be9.roa (raw, json) Hash identifier: 0nFiG60+SyMzYwmoQiMXSNZWb/jeWd+U9JY2E2ZndAY= Subject key identifier: 1B:57:0F:57:12:B1:B1:8A:84:03:C0:27:04:17:66:29:70:DB:77:E9 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584C9C31AF489E7D8C1F0AD3DA00 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/555c0bc8-ee66-3fdb-ba71-d7f6c6458be9.roa Signing time: Thu 22 Jan 2026 14:00:37 +0000 ROA not before: Thu 22 Jan 2026 14:00:37 +0000 ROA not after: Wed 22 Apr 2026 13:00:37 +0000 asID: 6461 IP address blocks: 68.170.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9c:31:af:48:9e:7d:8c:1f:0a:d3:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Jan 22 14:00:37 2026 GMT Not After : Apr 22 13:00:37 2026 GMT Subject: CN=907f4d45-2388-46b2-bbf1-f5e25bdb5ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a2:bf:dc:a3:1a:83:34:10:db:94:05:10:21: e6:a9:da:c0:07:5e:a3:51:ac:a7:0f:56:93:f0:5b: 96:ed:3d:ef:87:62:f7:01:d5:45:77:07:f7:1d:a4: f5:14:60:c4:fd:1e:15:b3:d6:3a:aa:2c:15:02:9a: d5:ed:d2:62:b0:c4:09:24:ec:24:d2:4e:cd:d7:0f: 1b:db:ee:23:2c:e8:75:13:a5:33:80:e2:1e:f5:fb: 4a:35:90:dc:08:66:47:bf:f8:5c:75:8e:37:36:8a: ea:45:7b:42:dc:a1:4e:43:ad:ac:2f:32:67:0b:38: 32:c7:32:e2:c4:ed:ab:e3:05:ce:0b:38:bc:f6:8a: 41:8b:f0:82:25:54:9e:f5:19:06:be:15:21:78:de: ac:d9:d1:9d:c9:d8:e3:95:31:ba:c6:e1:8f:fb:4d: a6:54:d9:93:c7:78:b8:0d:d8:7f:31:a7:63:35:67: bb:f7:7d:c1:e5:3d:ef:33:5f:76:d9:66:8b:8e:75: 4c:0f:ab:3c:02:20:21:01:27:fd:96:31:0f:8e:0f: 2d:b9:68:28:a9:eb:2c:7e:1f:ff:bc:fc:40:cf:36: 9d:dd:15:18:35:5e:ed:c6:8d:4b:41:87:6a:e5:d0: 3e:f8:ec:cb:73:fe:c8:70:7c:e4:19:55:ce:db:9a: dc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:57:0F:57:12:B1:B1:8A:84:03:C0:27:04:17:66:29:70:DB:77:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/555c0bc8-ee66-3fdb-ba71-d7f6c6458be9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 68.170.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:a3:e0:0e:41:8f:fc:a2:cf:95:e5:0a:53:b6:c5:9c:a5:2f: 3a:3b:82:58:bb:09:b0:58:a6:8d:7e:c1:25:17:02:7f:e0:97: 59:1e:b6:0a:fb:1f:8a:bf:92:d7:5a:cd:c0:e3:4a:e1:18:1f: 46:eb:6b:ac:11:cc:f2:f4:08:7b:27:ee:bf:cf:87:7e:3e:a5: 98:e8:77:18:4c:e8:ed:ae:c1:4e:c8:52:25:61:af:79:b8:38: 7c:9a:d9:7f:c1:62:7b:59:a7:a2:d1:b5:20:f9:91:89:85:3c: f8:93:1e:47:68:c3:15:41:f9:a2:2b:87:59:dc:f0:ab:28:20: e3:bc:7a:87:11:8e:79:b6:09:e8:3e:ea:5b:81:07:c5:ed:16: 35:0b:e8:5b:47:16:e4:47:aa:71:ab:d3:c5:30:20:08:01:ac: 60:8b:08:72:ed:8b:a3:21:a4:04:a1:a4:d2:d8:ea:8d:d6:c9: 80:39:e9:63:66:f3:5a:26:9f:46:78:cb:1a:8d:65:93:51:94: 77:1f:d6:64:a9:0b:6a:13:02:30:d3:7c:33:8e:43:a9:c9:62: c8:f7:8a:fa:4d:bb:1f:56:9e:84:28:85:63:60:5b:87:4d:31: bf:bb:bc:62:cb:7a:4c:6e:5a:37:1a:ba:93:9e:d8:c7:9b:f7: 57:16:00:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEycMa9Inn2MHwrT2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI2MDEyMjE0MDAzN1oXDTI2MDQyMjEzMDAzN1owLzEtMCsGA1UEAxMk OTA3ZjRkNDUtMjM4OC00NmIyLWJiZjEtZjVlMjViZGI1ZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqK/3KMagzQQ25QFECHmqdrAB16jUaynD1aT 8FuW7T3vh2L3AdVFdwf3HaT1FGDE/R4Vs9Y6qiwVAprV7dJisMQJJOwk0k7N1w8b 2+4jLOh1E6UzgOIe9ftKNZDcCGZHv/hcdY43NorqRXtC3KFOQ62sLzJnCzgyxzLi xO2r4wXOCzi89opBi/CCJVSe9RkGvhUheN6s2dGdydjjlTG6xuGP+02mVNmTx3i4 Ddh/MadjNWe7933B5T3vM1922WaLjnVMD6s8AiAhASf9ljEPjg8tuWgoqessfh// vPxAzzad3RUYNV7txo1LQYdq5dA++OzLc/7IcHzkGVXO25rcawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtXD1cSsbGKhAPAJwQXZilw23fpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvNTU1YzBiYzgtZWU2Ni0z ZmRiLWJhNzEtZDdmNmM2NDU4YmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERKrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWj4A5Bj/yiz5XlClO2xZylLzo7gli7CbBYpo1+wSUXAn/gl1ketgr7 H4q/ktdazcDjSuEYH0bra6wRzPL0CHsn7r/Ph34+pZjodxhM6O2uwU7IUiVhr3m4 OHya2X/BYntZp6LRtSD5kYmFPPiTHkdowxVB+aIrh1nc8KsoIOO8eocRjnm2Ceg+ 6luBB8XtFjUL6FtHFuRHqnGr08UwIAgBrGCLCHLti6MhpAShpNLY6o3WyYA56WNm 81omn0Z4yxqNZZNRlHcf1mSpC2oTAjDTfDOOQ6nJYsj3ivpNux9WnoQohWNgW4dN Mb+7vGLLekxuWjcaupOe2Meb91cWAC4= -----END CERTIFICATE-----Generated at Sun Mar 1 22:39:02 2026 by rpki-client