$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/7fd5bf91-228e-3672-967b-c25d825ce3ff.roa File: 7fd5bf91-228e-3672-967b-c25d825ce3ff.roa (raw, json) Hash identifier: 3wRvP8VJy0c9YmqeGSIqmeDg+UMZzX6Ky24mKNottpI= Subject key identifier: F2:74:DC:EF:B9:7E:25:83:85:6C:B2:C8:42:FC:AD:0D:2F:6D:42:F3 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584D67DFC61A78C9D5F1B9219304 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/7fd5bf91-228e-3672-967b-c25d825ce3ff.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 55015 IP address blocks: 209.183.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:c6:1a:78:c9:d5:f1:b9:21:93:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=3c86b258-dc45-491d-b40b-51a1a9a50bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:23:78:2b:5d:96:4d:64:cd:42:29:fd:bc:c8: 23:0d:42:91:4d:db:74:0b:d7:63:bc:c3:2e:7a:3f: 6b:4d:a5:9a:4f:56:63:95:3a:01:a9:28:4d:a8:30: cc:49:2b:9f:08:66:f8:10:2a:3a:c1:31:d8:29:bc: c1:43:f5:b8:39:4d:24:58:50:f2:38:81:cc:ca:aa: 50:19:ba:64:80:81:a5:d0:60:e6:65:22:e0:e0:d2: 24:0e:91:a1:00:fc:b8:77:e3:73:e4:8a:15:09:57: cc:89:9d:e7:2c:99:ba:71:e9:92:b9:52:1c:58:ae: 0c:54:19:3c:4b:fc:86:4b:55:42:ba:dc:a1:49:b0: cd:78:86:9c:a0:31:d0:6d:88:05:e3:2e:4b:b5:3d: bc:7f:71:38:31:ac:a9:9f:6e:d0:88:7b:16:90:e6: cb:9f:e0:aa:85:71:37:ba:b7:f5:5e:2d:df:1c:73: 49:a0:27:6e:ae:55:13:d2:05:ea:12:c5:99:15:b6: 1b:cf:6f:bd:e1:16:05:80:6e:30:a9:b8:6c:9e:a1: 14:f6:61:f8:c7:a1:b5:c1:2a:b9:69:b7:63:0c:3e: 45:fb:36:75:f0:83:5c:98:1c:b7:a0:14:05:ad:4a: 4c:29:20:f3:2d:63:3b:a9:30:13:fc:35:e5:de:d9: 4b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:74:DC:EF:B9:7E:25:83:85:6C:B2:C8:42:FC:AD:0D:2F:6D:42:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/7fd5bf91-228e-3672-967b-c25d825ce3ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 209.183.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:48:02:0b:9c:f8:73:b9:4c:e3:65:79:1b:eb:5e:2b:fa:7b: 4a:66:85:61:26:15:1b:3d:42:96:b9:f5:b7:df:1e:b1:0f:38: 66:76:6b:a8:55:b0:5f:00:31:50:66:e1:2a:d8:c4:90:f6:68: 9a:fa:80:ba:3c:41:f6:62:82:d6:bb:b3:1d:9d:dd:e2:a3:d7: 18:ec:27:15:29:f1:1b:0d:90:b4:75:b6:d4:25:9e:0d:9a:11: 76:c1:fc:b3:eb:b1:6f:20:da:07:9c:08:01:3e:ba:39:ec:0f: 32:06:c6:e4:54:f1:aa:58:c2:11:1f:4b:d2:47:15:8f:fc:98: 88:e5:e1:ed:d1:e5:e4:cc:8f:5f:5a:fc:16:18:ea:08:40:d7: b6:67:c2:3e:54:d3:44:ee:f0:41:73:81:1c:58:23:71:2a:7d: d3:01:1e:66:13:b8:09:ad:cf:b5:f0:ec:4d:9b:dd:70:42:ce: b0:11:65:f1:55:89:87:88:a2:2b:d5:1d:ec:de:9d:4c:74:57: 29:26:12:19:1c:51:8d:df:79:6d:5b:60:30:09:d9:07:c6:06: d4:81:26:22:fd:34:63:ef:97:ab:89:f2:c5:1c:5e:76:be:ca: 20:6a:3e:e7:18:86:41:d2:47:4a:de:56:62:b2:fa:51:06:71: e9:bc:d0:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n38YaeMnV8bkhkwQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk M2M4NmIyNTgtZGM0NS00OTFkLWI0MGItNTFhMWE5YTUwYmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyN4K12WTWTNQin9vMgjDUKRTdt0C9djvMMu ej9rTaWaT1ZjlToBqShNqDDMSSufCGb4ECo6wTHYKbzBQ/W4OU0kWFDyOIHMyqpQ GbpkgIGl0GDmZSLg4NIkDpGhAPy4d+Nz5IoVCVfMiZ3nLJm6cemSuVIcWK4MVBk8 S/yGS1VCutyhSbDNeIacoDHQbYgF4y5LtT28f3E4Maypn27QiHsWkObLn+CqhXE3 urf1Xi3fHHNJoCdurlUT0gXqEsWZFbYbz2+94RYFgG4wqbhsnqEU9mH4x6G1wSq5 abdjDD5F+zZ18INcmBy3oBQFrUpMKSDzLWM7qTAT/DXl3tlLbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJ03O+5fiWDhWyyyEL8rQ0vbULzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvN2ZkNWJmOTEtMjI4ZS0z NjcyLTk2N2ItYzI1ZDgyNWNlM2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0be9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxIAguc+HO5TONleRvrXiv6e0pmhWEmFRs9Qpa59bffHrEPOGZ2a6hV sF8AMVBm4SrYxJD2aJr6gLo8QfZigta7sx2d3eKj1xjsJxUp8RsNkLR1ttQlng2a EXbB/LPrsW8g2gecCAE+ujnsDzIGxuRU8apYwhEfS9JHFY/8mIjl4e3R5eTMj19a /BYY6ghA17Znwj5U00Tu8EFzgRxYI3EqfdMBHmYTuAmtz7Xw7E2b3XBCzrARZfFV iYeIoivVHezenUx0VykmEhkcUY3feW1bYDAJ2QfGBtSBJiL9NGPvl6uJ8sUcXna+ yiBqPucYhkHSR0reVmKy+lEGcem80Ns= -----END CERTIFICATE-----Generated at Sun Apr 19 11:37:18 2026 by rpki-client