$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/2a107519-0ec5-30d7-9c54-2f762d58dd15.roa File: 2a107519-0ec5-30d7-9c54-2f762d58dd15.roa (raw, json) Hash identifier: qncxDnsAda/+S8YNuwxBbTaFz/tdbgiHPNTnko9jTsI= Subject key identifier: E6:EA:0C:70:CB:64:D0:2A:42:FE:D6:50:4F:5A:5C:3B:11:5A:82:4F Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584F8DD85C36B1282A9E5103F700 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/2a107519-0ec5-30d7-9c54-2f762d58dd15.roa Signing time: Mon 19 Oct 2026 13:00:12 +0000 ROA not before: Mon 19 Oct 2026 13:00:12 +0000 ROA not after: Sun 17 Jan 2027 14:00:12 +0000 asID: 22765 IP address blocks: 68.170.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:d8:5c:36:b1:28:2a:9e:51:03:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Oct 19 13:00:12 2026 GMT Not After : Jan 17 14:00:12 2027 GMT Subject: CN=0e64bd81-2916-422e-b4ff-c255750c96a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a9:8f:90:5d:83:6f:51:ef:7e:07:9f:01:5a: 69:28:c2:82:0a:83:95:7c:9b:49:18:12:58:7b:65: 70:63:fb:b6:04:23:35:db:64:b5:9e:b4:b3:53:55: c9:be:a4:cf:70:c2:b4:c9:2f:fd:1d:40:c4:ef:db: 00:7d:bd:1a:78:14:17:47:8d:31:d9:13:21:e5:01: 42:bd:e2:10:2a:3c:27:be:ce:4f:83:3a:c8:3c:15: ec:6f:d9:e1:0d:4d:e6:b9:38:2c:fc:e3:c3:c3:c6: 1d:5d:00:25:63:4c:cc:c6:79:c5:dd:b5:8e:ef:02: 62:2a:49:00:f0:41:bd:dc:d1:a4:d0:22:d7:da:db: 8a:21:23:5a:27:19:38:02:c7:0b:6b:bc:8e:69:96: 3a:e1:98:15:a8:33:eb:bf:98:39:d9:4e:06:ce:94: 0c:b5:57:d2:b9:8b:17:03:7c:ad:c7:34:90:db:8f: a7:66:ec:02:0e:28:bc:50:e1:b4:ec:d4:fc:0d:6a: a4:7d:6f:9f:e5:4f:31:82:80:8f:62:b3:f6:47:73: 58:04:01:c5:35:53:3c:27:e5:b3:49:0b:88:18:73: 6f:bb:02:ed:52:66:1d:66:cf:20:71:46:b7:b5:22: 56:63:87:39:dc:65:47:84:ad:1d:63:4e:0e:5a:fa: 54:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:EA:0C:70:CB:64:D0:2A:42:FE:D6:50:4F:5A:5C:3B:11:5A:82:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/2a107519-0ec5-30d7-9c54-2f762d58dd15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 68.170.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:21:8e:7e:4d:33:cb:b1:6a:9d:76:65:d1:63:f6:6b:8a:35: 00:5b:86:22:7e:50:80:49:42:93:48:3c:e7:69:e6:b5:84:fc: 84:0a:8c:ed:ca:c0:c6:ad:b0:fe:f9:5d:9c:95:56:5e:55:c4: 6e:9d:1e:6c:cd:86:4a:57:c3:24:54:56:b5:0b:1f:e3:cc:7f: 9b:7a:65:1d:9c:09:2d:64:84:63:b9:55:98:83:0a:b3:e8:79: 77:c7:9e:49:26:00:e3:87:92:79:a2:f7:05:d7:71:e7:70:fc: 5b:6b:52:65:d5:8f:ab:64:77:5b:19:e7:b0:3b:5e:cd:6e:77: 05:ae:d4:a1:c2:c4:6c:08:f1:ba:82:5b:b8:66:94:61:d8:0a: c4:00:0a:83:82:68:f0:72:69:21:53:44:ba:e1:4a:3c:38:f6: 79:39:a5:1e:41:69:3a:63:df:38:e3:35:7b:a6:b2:dd:2e:07: 63:13:1d:f6:cb:95:72:86:f2:f8:e3:d2:02:6c:e6:e6:bc:c3: 9a:5c:26:23:d4:d6:2d:d4:7e:71:99:53:4d:83:14:ee:b4:6d: 29:ad:58:e6:66:56:88:b8:7a:14:43:a0:87:f4:96:52:2e:7c: 08:f4:0b:dd:72:73:32:10:02:89:16:df:ff:15:40:bc:28:ed: 80:03:28:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+N2Fw2sSgqnlED9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI2MTAxOTEzMDAxMloXDTI3MDExNzE0MDAxMlowLzEtMCsGA1UEAxMk MGU2NGJkODEtMjkxNi00MjJlLWI0ZmYtYzI1NTc1MGM5NmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyamPkF2Db1HvfgefAVppKMKCCoOVfJtJGBJY e2VwY/u2BCM122S1nrSzU1XJvqTPcMK0yS/9HUDE79sAfb0aeBQXR40x2RMh5QFC veIQKjwnvs5PgzrIPBXsb9nhDU3muTgs/OPDw8YdXQAlY0zMxnnF3bWO7wJiKkkA 8EG93NGk0CLX2tuKISNaJxk4AscLa7yOaZY64ZgVqDPrv5g52U4GzpQMtVfSuYsX A3ytxzSQ24+nZuwCDii8UOG07NT8DWqkfW+f5U8xgoCPYrP2R3NYBAHFNVM8J+Wz SQuIGHNvuwLtUmYdZs8gcUa3tSJWY4c53GVHhK0dY04OWvpUhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObqDHDLZNAqQv7WUE9aXDsRWoJPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvMmExMDc1MTktMGVjNS0z MGQ3LTljNTQtMmY3NjJkNThkZDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKrKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIhjn5NM8uxap12ZdFj9muKNQBbhiJ+UIBJQpNIPOdp5rWE/IQKjO3K wMatsP75XZyVVl5VxG6dHmzNhkpXwyRUVrULH+PMf5t6ZR2cCS1khGO5VZiDCrPo eXfHnkkmAOOHknmi9wXXcedw/FtrUmXVj6tkd1sZ57A7Xs1udwWu1KHCxGwI8bqC W7hmlGHYCsQACoOCaPByaSFTRLrhSjw49nk5pR5BaTpj3zjjNXumst0uB2MTHfbL lXKG8vjj0gJs5ua8w5pcJiPU1i3UfnGZU02DFO60bSmtWOZmVoi4ehRDoIf0llIu fAj0C91yczIQAokW3/8VQLwo7YADKMQ= -----END CERTIFICATE-----Generated at Sat Oct 24 10:19:32 2026 by rpki-client