$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/9dbe0597-903d-34a9-8315-3dd91ef42978.roa File: 9dbe0597-903d-34a9-8315-3dd91ef42978.roa (raw, json) Hash identifier: vVZxJ8Y5voeUPsLIv31d0v/OqdDPPeBFnh6zyqoFD9U= Subject key identifier: 65:1C:2F:4E:DC:48:22:A1:A6:B3:23:7C:58:49:B9:6A:17:95:CA:53 Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Certificate serial: 010D0C9F4328584F5E62BF4DAB63AEB7081CCC40 Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/9dbe0597-903d-34a9-8315-3dd91ef42978.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 22765 IP address blocks: 68.170.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:bf:4d:ab:63:ae:b7:08:1c:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=8b2c6c5e-e52d-48e0-9153-167d4d32d32a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ce:70:86:58:7d:0a:96:3e:2a:e6:ff:89:b0: ea:6f:7e:12:78:84:3c:37:80:f1:59:28:a7:81:2f: 32:c5:69:85:2d:14:79:17:73:ca:89:3c:eb:8e:4c: 85:f3:6b:f8:71:62:94:e3:f5:90:0c:89:7f:ac:6c: ab:8c:d0:ed:5c:8f:7f:70:b1:66:c8:64:fd:60:d9: 54:ee:28:48:88:fc:c2:fe:8a:05:cc:5c:9e:a6:04: 95:2b:ff:fd:08:0b:06:80:9a:28:5a:ad:1d:ac:30: 79:d4:a6:94:31:76:45:05:ac:f0:cf:c4:cd:a0:70: 90:7e:54:44:b3:33:3e:2b:57:9f:7b:3d:e3:44:54: 97:f5:8c:1f:7b:a6:de:78:49:b2:0a:11:26:d8:07: af:a3:b7:16:c7:48:8e:80:f9:73:11:cf:1d:63:c8: e2:83:6f:69:5e:dc:6e:10:be:20:b6:77:0f:f2:5d: 79:ac:11:9f:f0:23:e7:db:59:97:8c:93:32:8b:f7: 9a:5f:2e:2b:28:8e:08:4a:9f:eb:23:90:f5:4b:09: b1:51:96:a9:30:22:ac:e9:37:0f:59:24:49:b2:59: 5c:fc:44:9b:e4:c9:df:56:73:a2:ce:67:a7:a5:b4: 62:ae:e6:e5:b8:2c:cc:ba:59:0b:a1:69:b8:8b:c4: 47:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:1C:2F:4E:DC:48:22:A1:A6:B3:23:7C:58:49:B9:6A:17:95:CA:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/9dbe0597-903d-34a9-8315-3dd91ef42978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl X509v3 Authority Key Identifier: keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer sbgp-ipAddrBlock: critical IPv4: 68.170.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:10:30:78:76:44:4d:43:c7:99:f9:cd:8d:ae:86:f3:0c:d4: 4b:ae:cb:cc:0b:55:ef:b3:f1:48:a0:5d:e3:61:82:cc:39:32: 1b:39:2c:cf:13:ed:c2:d7:00:5c:ec:cc:89:96:ef:06:4e:84: bf:0d:ba:34:a4:97:e5:1c:b7:00:db:d7:db:0c:d7:fa:2b:41: d8:01:5f:ca:df:23:9e:fb:e6:72:3d:ac:14:43:56:53:58:03: 8e:99:bd:dd:68:4e:8d:11:7d:74:87:9e:28:8e:1f:d2:e8:fb: 45:67:58:da:f5:37:18:0a:a8:d1:fb:03:61:dc:0a:4b:64:0f: 62:99:ec:c6:ff:a2:34:06:06:65:23:62:12:9b:47:9d:2f:8f: 5d:95:4b:35:97:45:90:6c:65:ff:bd:bd:49:46:e4:bc:e9:20: cd:37:1f:47:83:1d:14:c5:58:c6:22:42:6b:2d:7f:7d:d2:ee: 56:f1:40:43:f2:98:d5:ad:bf:81:cf:45:8e:0f:5e:93:4b:bb: e4:a0:a3:cf:e1:b8:12:23:5a:8c:6c:27:99:40:29:44:bc:a3: 90:82:4a:c4:6c:5f:4b:7c:84:4a:4b:8c:17:07:20:f5:e8:b9: c5:07:9b:e6:7e:25:cb:28:ac:ec:35:ac:df:bb:35:05:eb:3b: 13:8b:34:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYr9Nq2OutwgczEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBj ZmEzMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk OGIyYzZjNWUtZTUyZC00OGUwLTkxNTMtMTY3ZDRkMzJkMzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc5whlh9CpY+Kub/ibDqb34SeIQ8N4DxWSin gS8yxWmFLRR5F3PKiTzrjkyF82v4cWKU4/WQDIl/rGyrjNDtXI9/cLFmyGT9YNlU 7ihIiPzC/ooFzFyepgSVK//9CAsGgJooWq0drDB51KaUMXZFBazwz8TNoHCQflRE szM+K1efez3jRFSX9Ywfe6beeEmyChEm2Aevo7cWx0iOgPlzEc8dY8jig29pXtxu EL4gtncP8l15rBGf8CPn21mXjJMyi/eaXy4rKI4ISp/rI5D1SwmxUZapMCKs6TcP WSRJsllc/ESb5MnfVnOizmenpbRirubluCzMulkLoWm4i8RHMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUcL07cSCKhprMjfFhJuWoXlcpTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81NmEy MzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvOWRiZTA1OTctOTAzZC0z NGE5LTgzMTUtM2RkOTFlZjQyOTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTZhMjMzNDYtNWEwZS00OTc2LTli MzMtM2I0ZDFkOTBjZmEzLzU2YTIzMzQ2LTVhMGUtNDk3Ni05YjMzLTNiNGQxZDkw Y2ZhMy5jcmwwHwYDVR0jBBgwFoAUvyAy5XvXgcfAsCmYszNV0WIz6JkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRk MWQ5MGNmYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARKrJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEQMHh2RE1Dx5n5zY2uhvMM1Euuy8wLVe+z8UigXeNhgsw5Mhs5LM8T 7cLXAFzszImW7wZOhL8NujSkl+UctwDb19sM1/orQdgBX8rfI5775nI9rBRDVlNY A46Zvd1oTo0RfXSHniiOH9Lo+0VnWNr1NxgKqNH7A2HcCktkD2KZ7Mb/ojQGBmUj YhKbR50vj12VSzWXRZBsZf+9vUlG5LzpIM03H0eDHRTFWMYiQmstf33S7lbxQEPy mNWtv4HPRY4PXpNLu+Sgo8/huBIjWoxsJ5lAKUS8o5CCSsRsX0t8hEpLjBcHIPXo ucUHm+Z+JcsorOw1rN+7NQXrOxOLNEg= -----END CERTIFICATE-----Generated at Thu Oct 22 12:01:08 2026 by rpki-client