$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/56626dda-23f2-32f5-b134-775c438da07a.roa File: 56626dda-23f2-32f5-b134-775c438da07a.roa (raw, json) Hash identifier: 0SnQjAp53W1+NET3X3IEEVBxSe3XRC4KG6MR+JuyyFQ= Subject key identifier: 44:F9:CE:AD:28:CC:F3:A8:D9:F4:BD:70:BE:F0:98:29:87:23:C4:05 Certificate issuer: /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Certificate serial: 010D0C9F4328584D037D551E48D9EE1B5CAA0C40 Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/56626dda-23f2-32f5-b134-775c438da07a.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 10794 IP address blocks: 171.159.20.0/22 maxlen: 22 171.159.20.0/24 maxlen: 24 171.159.21.0/24 maxlen: 24 171.159.22.0/24 maxlen: 24 171.159.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:55:1e:48:d9:ee:1b:5c:aa:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=84c662e4-e08b-41a9-9b1e-e4edf6a778c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:43:32:76:64:e9:67:56:76:4e:23:df:f4:c3: 8f:97:9e:21:da:ed:dd:92:74:58:c2:2b:f9:ce:03: 9b:7c:40:71:fe:75:df:b6:e2:ba:3d:2e:3d:0a:24: 40:cd:32:a3:e8:44:fd:0d:ee:a2:9c:c0:73:77:38: b0:63:b6:db:58:0a:47:7f:a7:3c:e1:0d:97:76:14: ec:66:de:88:6f:e7:29:ca:93:06:1c:b8:9a:37:4c: 76:7e:e3:a4:01:a5:d7:e5:6a:d1:0a:9b:e1:bc:6c: 84:21:4c:8d:59:04:f1:d5:e1:25:32:a1:c7:79:55: e8:8b:ee:e4:41:2e:d9:38:e4:4f:19:78:62:5e:37: 13:c2:5c:7b:c3:52:a9:bf:a6:7a:50:5c:4b:e9:ad: 44:bf:a1:89:05:a7:34:33:c0:8d:33:d7:10:c0:a0: 44:fd:85:de:10:42:80:22:72:b8:71:8d:fb:ef:e7: 3a:f8:34:2b:29:26:f5:cf:cf:e8:ee:d0:04:d0:36: 79:d4:fe:42:33:44:3a:c8:85:01:d0:ad:04:a5:2c: bb:38:b0:77:26:73:de:a8:17:73:16:10:2d:e8:84: 6e:ca:23:5a:ed:af:bd:28:1e:f5:be:88:18:a7:0b: cd:3f:a8:c7:31:6d:ee:30:29:2e:2e:ba:c5:cf:47: f5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F9:CE:AD:28:CC:F3:A8:D9:F4:BD:70:BE:F0:98:29:87:23:C4:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/56626dda-23f2-32f5-b134-775c438da07a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl X509v3 Authority Key Identifier: keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer sbgp-ipAddrBlock: critical IPv4: 171.159.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:f6:3e:a2:26:f5:f4:f8:1a:fb:5a:bc:65:67:9f:ae:54:9b: 5b:bd:9b:ec:5b:73:3a:97:9e:89:92:83:c8:aa:5b:16:7b:f3: fd:c1:68:55:2e:c3:7a:c1:77:64:93:14:c9:68:d7:97:59:b7: 46:75:06:11:0c:d5:81:40:39:33:af:7f:b6:42:28:22:4a:fc: cd:29:7c:b0:f1:bf:2b:17:40:16:a1:71:f4:d6:b7:e9:ca:de: c4:0b:74:63:1f:72:af:5a:b2:6c:ef:10:ab:8e:8c:d3:28:ae: 32:6a:49:35:d6:d0:c7:d1:87:5f:96:72:f2:cc:7c:95:c6:2b: 5a:c0:c3:bf:00:cc:72:40:5e:cf:64:d5:1f:09:20:99:f6:fc: e0:29:e1:3b:3d:2f:ae:c5:01:bb:90:c2:84:22:ba:10:65:d5: 91:6b:80:39:10:2d:cd:45:e7:9a:41:31:1c:1b:39:b2:db:7c: 6e:1e:7d:27:30:77:b8:f8:5b:16:21:bd:f9:d0:59:60:d3:c5: be:d9:ef:30:53:a3:1f:35:dd:2b:85:05:bf:52:21:4f:7a:1b: 0f:fd:68:b7:1f:b6:83:d7:ec:12:35:2a:f9:5b:42:74:98:f8: 1a:a5:4c:a8:38:2e:5a:2f:77:8d:00:67:2e:de:f0:07:c9:83: 0e:d3:32:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfVUeSNnuG1yqDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBlOWMyZWYtNDU3OS00YTdkLWJmMjAtOGNkZmFkNGJh MWEwMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk ODRjNjYyZTQtZTA4Yi00MWE5LTliMWUtZTRlZGY2YTc3OGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUMydmTpZ1Z2TiPf9MOPl54h2u3dknRYwiv5 zgObfEBx/nXftuK6PS49CiRAzTKj6ET9De6inMBzdziwY7bbWApHf6c84Q2XdhTs Zt6Ib+cpypMGHLiaN0x2fuOkAaXX5WrRCpvhvGyEIUyNWQTx1eElMqHHeVXoi+7k QS7ZOORPGXhiXjcTwlx7w1Kpv6Z6UFxL6a1Ev6GJBac0M8CNM9cQwKBE/YXeEEKA InK4cY377+c6+DQrKSb1z8/o7tAE0DZ51P5CM0Q6yIUB0K0EpSy7OLB3JnPeqBdz FhAt6IRuyiNa7a+9KB71vogYpwvNP6jHMW3uMCkuLrrFz0f13QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFET5zq0ozPOo2fS9cL7wmCmHI8QFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5 YzJlZi00NTc5LTRhN2QtYmYyMC04Y2RmYWQ0YmExYTAvNTY2MjZkZGEtMjNmMi0z MmY1LWIxMzQtNzc1YzQzOGRhMDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBlOWMyZWYtNDU3OS00YTdkLWJm MjAtOGNkZmFkNGJhMWEwL2QwZTljMmVmLTQ1NzktNGE3ZC1iZjIwLThjZGZhZDRi YTFhMC5jcmwwHwYDVR0jBBgwFoAUnhhlE8NCMv2vpGB5irF0b3qw4LUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGU5YzJlZi00NTc5LTRhN2QtYmYyMC04Y2Rm YWQ0YmExYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCq58UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn2PqIm9fT4GvtavGVnn65Um1u9m+xbczqXnomSg8iqWxZ78/3BaFUu w3rBd2STFMlo15dZt0Z1BhEM1YFAOTOvf7ZCKCJK/M0pfLDxvysXQBahcfTWt+nK 3sQLdGMfcq9asmzvEKuOjNMorjJqSTXW0MfRh1+WcvLMfJXGK1rAw78AzHJAXs9k 1R8JIJn2/OAp4Ts9L67FAbuQwoQiuhBl1ZFrgDkQLc1F55pBMRwbObLbfG4efScw d7j4WxYhvfnQWWDTxb7Z7zBTox813SuFBb9SIU96Gw/9aLcftoPX7BI1KvlbQnSY +BqlTKg4Llovd40AZy7e8AfJgw7TMvk= -----END CERTIFICATE-----Generated at Sun Mar 1 22:37:07 2026 by rpki-client