$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/5986a15c-31f2-3481-a490-90f8833a40b9.roa File: 5986a15c-31f2-3481-a490-90f8833a40b9.roa (raw, json) Hash identifier: lweUZQ9MCeEhG1QHhMVPyLFDny+kQMhoozPKCc0bsAc= Subject key identifier: 89:16:BF:DB:B3:F3:6A:07:D3:84:04:BB:0C:D9:FC:09:92:43:41:86 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584D7B6A8E05B9E529296EAD0300 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/5986a15c-31f2-3481-a490-90f8833a40b9.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 22765 IP address blocks: 72.20.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:8e:05:b9:e5:29:29:6e:ad:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=5ed8960d-6c7c-45b8-80f2-6c24932bd1ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:86:dc:e4:da:c5:7a:db:72:d5:65:94:a2:05: fe:6d:af:4f:c2:8c:00:5a:ce:5f:e8:16:81:81:d1: 62:04:18:ef:0d:15:af:44:cb:e6:e6:e7:c8:3d:0e: f5:f6:2d:99:6e:ef:91:e4:ea:e8:51:5f:1f:17:ff: 7f:7a:f3:f0:48:ec:f7:d9:ba:4b:0a:e9:fb:1c:72: 1a:a1:b8:3a:c7:3f:39:b9:7e:70:a3:cd:7b:ea:a2: 7f:1d:c3:a7:ee:2a:40:b2:63:7a:af:15:55:b2:f2: 92:40:62:9f:29:87:a6:6a:9e:f5:af:7b:cc:cd:07: 91:9a:5f:23:a0:b5:ed:cc:39:98:63:2d:01:04:63: 51:eb:1d:d3:6b:4c:a1:32:e3:43:a5:13:79:59:eb: 83:a5:6a:16:b7:a6:dc:17:89:a3:60:01:d9:e8:3f: 49:d1:fc:9d:06:17:5b:e5:9a:76:05:8a:8e:a7:07: 3b:bd:ac:be:96:27:cf:13:8a:46:6c:6c:dc:8c:6b: 64:63:c5:87:51:c4:d8:08:e2:b8:89:e0:ce:56:32: c7:c9:4f:86:a1:2d:51:2a:32:15:cf:58:a4:f0:70: 85:45:99:93:4d:6c:0c:b4:1e:9b:a5:dc:09:9a:93: c5:cf:de:a6:ed:bd:8d:c4:9d:b7:96:8c:ae:91:5b: e0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:16:BF:DB:B3:F3:6A:07:D3:84:04:BB:0C:D9:FC:09:92:43:41:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/5986a15c-31f2-3481-a490-90f8833a40b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:d6:c3:a2:ce:49:2d:1d:a9:5a:0b:82:17:c1:85:e0:1d:cf: 32:73:70:c2:f8:70:98:83:c4:02:8e:24:e8:d9:ca:24:eb:45: b6:17:18:ad:d8:54:96:67:07:65:09:2c:6e:e7:e5:60:9c:f8: 02:e1:ac:4d:00:ce:11:28:76:01:96:dd:f7:0a:34:71:a1:0a: 23:a0:32:bd:f5:3c:17:63:80:9b:46:f7:9d:bd:89:68:56:be: bc:04:43:2c:6c:50:6a:b1:de:b0:64:37:ce:2d:dd:34:3d:bf: 6e:72:19:a6:1e:02:42:85:da:49:62:a9:8a:bf:18:42:ee:1b: 60:50:34:8c:3a:2d:02:ff:44:d3:73:cb:e8:26:eb:d3:3f:bc: 1b:5a:4f:e9:9b:2a:42:4a:02:39:94:32:2e:53:96:75:c6:2c: 28:74:2e:e5:49:ba:bb:d8:01:6b:95:ff:bc:31:74:e4:05:02: 99:01:32:8c:53:56:3f:db:2a:2c:5b:a3:e5:69:a5:0e:87:81: 19:5c:9d:10:a2:f3:ab:a3:61:6b:d1:d2:ef:03:1d:78:d2:a7: 75:6c:b6:92:bc:3f:cc:18:7b:9e:d2:68:b7:b4:a1:b3:29:70: a3:bc:06:59:90:02:e7:c4:dc:ac:5f:a9:a3:e5:cb:f5:85:76: 4b:ce:50:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17ao4FueUpKW6tAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk NWVkODk2MGQtNmM3Yy00NWI4LTgwZjItNmMyNDkzMmJkMWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYbc5NrFetty1WWUogX+ba9PwowAWs5f6BaB gdFiBBjvDRWvRMvm5ufIPQ719i2Zbu+R5OroUV8fF/9/evPwSOz32bpLCun7HHIa obg6xz85uX5wo8176qJ/HcOn7ipAsmN6rxVVsvKSQGKfKYemap71r3vMzQeRml8j oLXtzDmYYy0BBGNR6x3Ta0yhMuNDpRN5WeuDpWoWt6bcF4mjYAHZ6D9J0fydBhdb 5Zp2BYqOpwc7vay+lifPE4pGbGzcjGtkY8WHUcTYCOK4ieDOVjLHyU+GoS1RKjIV z1ik8HCFRZmTTWwMtB6bpdwJmpPFz96m7b2NxJ23loyukVvgQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkWv9uz82oH04QEuwzZ/AmSQ0GGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvNTk4NmExNWMtMzFmMi0z NDgxLWE0OTAtOTBmODgzM2E0MGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBTJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXWw6LOSS0dqVoLghfBheAdzzJzcML4cJiDxAKOJOjZyiTrRbYXGK3Y VJZnB2UJLG7n5WCc+ALhrE0AzhEodgGW3fcKNHGhCiOgMr31PBdjgJtG9529iWhW vrwEQyxsUGqx3rBkN84t3TQ9v25yGaYeAkKF2kliqYq/GELuG2BQNIw6LQL/RNNz y+gm69M/vBtaT+mbKkJKAjmUMi5TlnXGLCh0LuVJurvYAWuV/7wxdOQFApkBMoxT Vj/bKixbo+VppQ6HgRlcnRCi86ujYWvR0u8DHXjSp3VstpK8P8wYe57SaLe0obMp cKO8BlmQAufE3KxfqaPly/WFdkvOUOE= -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:56 2026 by rpki-client