$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/e667c5dd-d722-3d40-ba59-95b2adb19266.roa File: e667c5dd-d722-3d40-ba59-95b2adb19266.roa (raw, json) Hash identifier: TwvZfap+zDvKhP4XwHkwW1/e7sLGiuFpDgEr0PxMmzE= Subject key identifier: 27:41:BC:6A:AB:1E:08:12:53:7B:F8:7A:6E:A3:74:03:73:11:83:56 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584D7B6A8DECC8E3AEE9740A35E0 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/e667c5dd-d722-3d40-ba59-95b2adb19266.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 22765 IP address blocks: 72.20.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:8d:ec:c8:e3:ae:e9:74:0a:35:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=4ea176a0-027c-41b6-9a4c-fd60bec25ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a6:eb:13:9e:26:28:4d:69:3c:e7:ca:50:d1: 87:2e:4f:51:56:39:01:b9:3d:9e:f7:8f:1a:b9:27: 9f:dd:30:a6:bc:0c:cc:bb:be:0e:d0:b5:84:cf:44: 01:49:56:02:87:d4:c6:76:ed:ac:d3:99:ac:22:55: 39:aa:e9:30:02:25:38:71:f5:23:69:35:9c:72:55: 46:b0:bc:b9:e1:fc:64:ca:cf:d2:7f:27:96:38:b6: 96:01:da:6c:0f:6a:be:f1:6b:45:c3:0d:65:62:08: bb:72:2d:d6:ba:df:ec:61:91:41:6b:31:15:db:ba: eb:8b:1a:0d:8b:db:ce:68:a2:8f:a9:75:87:b3:88: 97:fc:6a:cb:a7:8c:2d:c8:88:67:b6:51:5b:41:1c: da:47:93:a4:2a:57:c3:c3:ef:7c:1a:80:de:ff:3a: d7:2e:17:25:d7:03:1f:87:d8:fd:86:1a:35:5d:02: da:f0:55:c8:ca:ff:46:a2:41:80:18:fe:5a:9c:54: d1:6c:96:57:8f:17:ed:e3:fb:7b:30:0a:5d:fb:0e: 95:ac:44:a3:46:c9:f8:8c:9f:ee:3f:5c:75:80:2a: ff:f0:e6:0f:51:ed:9c:e5:de:18:a3:8e:92:66:6c: af:6d:82:a0:17:38:f3:72:81:62:ab:aa:16:44:d4: 60:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:41:BC:6A:AB:1E:08:12:53:7B:F8:7A:6E:A3:74:03:73:11:83:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/e667c5dd-d722-3d40-ba59-95b2adb19266.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 72.20.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a3:4a:88:d5:d7:01:3e:50:a4:c0:81:bc:96:cd:37:3a:0d: 7e:a3:04:78:7d:81:d1:b0:8c:1d:2d:a0:c2:88:12:67:7f:37: a1:57:90:45:dc:c3:dc:ec:32:a5:a9:38:06:0b:10:46:e2:60: 83:ea:22:73:9c:58:cb:97:42:44:8f:08:13:be:f4:a8:76:8c: 9f:84:5c:69:7b:d0:4f:66:17:1f:d7:36:7b:ed:f3:78:73:38: 2c:63:90:77:b8:31:8e:8c:84:d7:d2:82:34:05:66:04:6c:19: d1:3d:9e:e5:5b:0a:77:18:9e:dc:72:49:a4:84:be:00:14:70: 4e:00:c9:78:3f:78:90:6d:4e:4a:14:89:4b:21:6b:a2:ca:3c: 3f:39:0c:9d:a6:82:ce:8c:b9:e5:78:0e:11:08:32:52:fb:a3: ec:d5:06:c6:59:a0:a2:e7:b6:55:f8:00:8d:32:10:cb:f9:03: ba:b3:1d:e6:82:cd:87:1e:9c:86:a7:7f:31:36:6d:19:d3:58: 21:9a:d3:de:5d:ac:7e:03:b2:2f:9a:e8:d6:4a:0a:25:b5:6d: 7f:99:0e:38:5f:6a:94:32:33:be:f9:70:a7:1a:1f:98:2c:bd: 82:c9:6c:a1:ea:7b:9a:e1:49:82:92:a1:b1:f3:26:66:03:1a: ea:07:fb:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17ao3syOOu6XQKNeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk NGVhMTc2YTAtMDI3Yy00MWI2LTlhNGMtZmQ2MGJlYzI1ZGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqbrE54mKE1pPOfKUNGHLk9RVjkBuT2e948a uSef3TCmvAzMu74O0LWEz0QBSVYCh9TGdu2s05msIlU5qukwAiU4cfUjaTWcclVG sLy54fxkys/SfyeWOLaWAdpsD2q+8WtFww1lYgi7ci3Wut/sYZFBazEV27rrixoN i9vOaKKPqXWHs4iX/GrLp4wtyIhntlFbQRzaR5OkKlfDw+98GoDe/zrXLhcl1wMf h9j9hho1XQLa8FXIyv9GokGAGP5anFTRbJZXjxft4/t7MApd+w6VrESjRsn4jJ/u P1x1gCr/8OYPUe2c5d4Yo46SZmyvbYKgFzjzcoFiq6oWRNRgXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdBvGqrHggSU3v4em6jdANzEYNWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvZTY2N2M1ZGQtZDcyMi0z ZDQwLWJhNTktOTViMmFkYjE5MjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+jSojV1wE+UKTAgbyWzTc6DX6jBHh9gdGwjB0toMKIEmd/N6FXkEXc w9zsMqWpOAYLEEbiYIPqInOcWMuXQkSPCBO+9Kh2jJ+EXGl70E9mFx/XNnvt83hz OCxjkHe4MY6MhNfSgjQFZgRsGdE9nuVbCncYntxySaSEvgAUcE4AyXg/eJBtTkoU iUsha6LKPD85DJ2mgs6MueV4DhEIMlL7o+zVBsZZoKLntlX4AI0yEMv5A7qzHeaC zYcenIanfzE2bRnTWCGa095drH4Dsi+a6NZKCiW1bX+ZDjhfapQyM775cKcaH5gs vYLJbKHqe5rhSYKSobHzJmYDGuoH+00= -----END CERTIFICATE-----Generated at Sun Apr 19 10:15:59 2026 by rpki-client