$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a1a3ab19-5cb5-350e-85bc-242757f97592.roa File: a1a3ab19-5cb5-350e-85bc-242757f97592.roa (raw, json) Hash identifier: Q6u7kn0u9q8yU0AC+/E05K9CpA3Foy3dCitBwJ9Dfow= Subject key identifier: 2E:D5:C6:A9:50:3E:6B:02:D7:5B:B3:0F:A6:08:DC:23:BC:13:B1:1B Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584D7B6A8DD465599848C515EB00 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a1a3ab19-5cb5-350e-85bc-242757f97592.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 22765 IP address blocks: 72.20.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:8d:d4:65:59:98:48:c5:15:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=59f1f970-5968-4482-ade1-5ab52184b42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:86:03:c3:3f:89:1c:0e:c1:94:cf:33:3b:43: 86:e2:03:da:26:ec:80:0d:54:88:fc:ec:60:d0:c8: 0d:84:1d:17:5c:4f:3a:62:8e:64:2c:c8:e3:39:94: 86:b7:49:37:21:8e:c3:99:6f:a2:4e:81:91:67:00: c1:3d:28:60:18:7e:4b:28:84:63:f5:14:4d:d5:d2: ce:1b:d4:62:ba:67:49:88:15:64:cf:75:0e:a0:6c: 52:25:77:ab:a8:9a:27:3e:60:27:0d:d4:00:8f:4c: 5d:73:c4:f9:0f:6f:cb:05:a0:bc:bc:14:59:4b:ab: 90:93:15:9a:82:3f:77:26:21:de:81:1e:90:7c:ad: ca:6d:35:78:db:a4:ed:ca:42:49:d7:d1:ae:1d:fd: f3:db:74:1d:88:2d:17:81:20:5c:75:25:1a:e2:ba: dd:a3:a6:1b:09:e1:38:34:2a:ac:48:24:e8:8f:24: 92:65:a7:c2:0d:f8:bb:51:bc:80:90:68:f8:05:c7: fc:dd:47:6f:ec:41:7f:2a:95:dc:51:93:27:e1:13: 47:00:cb:cd:27:ff:4a:3e:1c:4d:d2:1a:30:d9:07: 6d:64:75:36:90:be:43:b7:bd:b0:f5:c6:50:bc:be: 23:2f:e2:bb:93:49:25:b9:d5:db:3d:fa:6c:8f:f7: 5b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:D5:C6:A9:50:3E:6B:02:D7:5B:B3:0F:A6:08:DC:23:BC:13:B1:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/a1a3ab19-5cb5-350e-85bc-242757f97592.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e0:cb:b1:eb:b3:9c:62:ac:f4:a2:13:e3:fa:96:fa:ca:de: 88:7a:a7:8e:80:ca:1d:cb:b9:fd:c5:8a:9b:3d:ed:49:ae:81: 4b:34:52:3d:b3:50:da:2e:8e:21:76:1c:d8:bc:41:b5:f1:b8: 71:2b:96:04:e5:3f:24:86:ee:6b:15:2b:ed:00:3d:b9:62:50: 19:00:f8:46:b9:4e:ac:04:e6:39:fc:ef:b3:4e:aa:0f:f2:6d: 86:d5:f3:82:b3:11:48:3b:51:18:d7:9f:5b:f8:4c:14:26:e9: 2a:e5:6e:11:6a:6d:39:85:88:d6:df:55:39:c5:35:7f:04:47: ad:ed:c5:ac:42:9b:57:4b:29:66:a8:96:00:75:30:1d:ad:1e: 2c:dc:7b:ea:b8:41:7a:96:8d:f1:cc:52:1f:4a:98:47:d6:cd: c9:d6:29:91:bf:8d:de:24:73:c2:87:05:26:89:f1:39:82:58: 07:18:8c:f7:1b:55:6c:48:88:6d:9d:4e:9d:67:01:2e:a9:28: 6e:8b:10:d8:fc:29:91:09:61:d2:64:ca:44:dd:46:35:34:a2: 6e:5b:95:aa:c7:9d:3f:dd:de:2f:1b:92:62:2b:7c:e6:d7:35: b7:63:9a:ac:99:78:c6:0a:ef:61:09:bd:1d:0f:92:a7:b0:4d: e9:cc:a7:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17ao3UZVmYSMUV6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk NTlmMWY5NzAtNTk2OC00NDgyLWFkZTEtNWFiNTIxODRiNDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYYDwz+JHA7BlM8zO0OG4gPaJuyADVSI/Oxg 0MgNhB0XXE86Yo5kLMjjOZSGt0k3IY7DmW+iToGRZwDBPShgGH5LKIRj9RRN1dLO G9RiumdJiBVkz3UOoGxSJXerqJonPmAnDdQAj0xdc8T5D2/LBaC8vBRZS6uQkxWa gj93JiHegR6QfK3KbTV426TtykJJ19GuHf3z23QdiC0XgSBcdSUa4rrdo6YbCeE4 NCqsSCTojySSZafCDfi7UbyAkGj4Bcf83Udv7EF/KpXcUZMn4RNHAMvNJ/9KPhxN 0how2QdtZHU2kL5Dt72w9cZQvL4jL+K7k0kludXbPfpsj/dbfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7VxqlQPmsC11uzD6YI3CO8E7EbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvYTFhM2FiMTktNWNiNS0z NTBlLTg1YmMtMjQyNzU3Zjk3NTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSBTCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrgy7Hrs5xirPSiE+P6lvrK3oh6p46Ayh3Luf3Fips97UmugUs0Uj2z UNoujiF2HNi8QbXxuHErlgTlPySG7msVK+0APbliUBkA+Ea5TqwE5jn877NOqg/y bYbV84KzEUg7URjXn1v4TBQm6SrlbhFqbTmFiNbfVTnFNX8ER63txaxCm1dLKWao lgB1MB2tHizce+q4QXqWjfHMUh9KmEfWzcnWKZG/jd4kc8KHBSaJ8TmCWAcYjPcb VWxIiG2dTp1nAS6pKG6LENj8KZEJYdJkykTdRjU0om5blarHnT/d3i8bkmIrfObX NbdjmqyZeMYK72EJvR0PkqewTenMp14= -----END CERTIFICATE-----Generated at Sun Apr 19 10:20:58 2026 by rpki-client