$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/986a4304-e703-3a3c-a845-7d9c923fe3ef.roa File: 986a4304-e703-3a3c-a845-7d9c923fe3ef.roa (raw, json) Hash identifier: VebZyMhL3y4rqFoK+BDKdD74lBmi5NridePht4Ld3Fo= Subject key identifier: 3C:DD:88:22:AF:A1:99:50:8A:AB:05:F9:A2:2F:C6:EB:EF:42:79:83 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584F5E62D45F952DF54C03484580 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/986a4304-e703-3a3c-a845-7d9c923fe3ef.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 16509 IP address blocks: 159.172.192.0/19 maxlen: 24 159.172.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:d4:5f:95:2d:f5:4c:03:48:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=d580f8a4-e70f-4fd4-82e3-d971b5c351be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:51:e3:14:b3:4f:dc:f1:71:77:a8:42:84:de: 24:5b:4a:1c:0a:25:b0:34:a1:45:0c:ab:e1:13:84: 5f:08:6a:5b:d0:8a:fb:68:f5:fd:7a:fd:94:35:ae: b0:96:15:94:4f:10:40:ea:fb:22:e3:3f:be:2a:24: eb:8a:13:1e:46:c8:02:3b:8c:e4:e8:aa:e7:21:f7: e5:09:d2:ee:3f:b8:0a:dc:45:cc:b8:4c:28:2e:7d: 63:b5:d3:02:1d:27:17:51:a8:fe:d7:75:30:b5:79: 69:e4:53:46:2d:30:78:03:2c:d7:32:cd:99:97:22: b8:a3:0f:62:c1:bc:ef:c3:02:3a:af:01:8f:fa:43: e3:6f:ce:94:a2:86:5c:ec:a6:ee:7f:fb:e0:84:6f: 18:33:8e:7c:e0:5c:85:ff:71:45:30:ac:69:ee:a1: d0:2b:80:37:42:0d:9f:cb:b4:46:db:23:61:fb:a1: d5:33:7e:8e:6c:9a:a3:97:e3:23:73:15:58:1f:3a: c3:c6:be:2f:25:bb:f1:f1:1b:8e:0a:90:bb:a9:79: 5e:44:c4:c6:76:c9:28:c3:58:3c:d3:a0:e0:72:98: c0:00:e0:48:cf:89:4f:8d:7a:de:5a:51:c5:31:d7: 12:a0:6f:27:81:e8:97:8b:0b:b8:a0:ae:da:1c:9a: ff:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:DD:88:22:AF:A1:99:50:8A:AB:05:F9:A2:2F:C6:EB:EF:42:79:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/986a4304-e703-3a3c-a845-7d9c923fe3ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.192.0-159.172.239.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:26:33:cd:3d:9f:9b:77:69:51:95:e0:6c:31:bc:5f:df:4b: 1e:05:61:e0:c1:1a:a6:a3:f3:25:9c:c2:15:a9:b8:7b:99:86: 36:13:f4:00:d7:57:c3:61:31:3c:68:7a:4c:db:cd:ab:f1:0d: 8b:52:39:1c:8a:b9:c3:95:96:4a:9e:30:f6:00:88:b8:40:fd: 5b:da:31:c3:e8:12:49:40:01:64:51:61:b9:93:9c:ee:78:aa: e0:7c:2c:a4:b4:44:58:c4:58:96:12:0b:51:8e:4e:a6:cd:5a: aa:9b:27:f8:30:b0:2e:0e:8e:43:f2:33:21:25:09:30:bf:d7: 6b:4c:12:d7:19:4f:8d:dd:2e:26:5f:67:6b:6c:4f:03:4f:79: 5f:3f:ca:b8:96:fd:aa:8c:90:69:9a:19:e1:79:27:53:de:92: c0:e1:87:4b:bb:55:e1:11:cf:f4:21:a6:a5:0d:da:6c:a1:7a: 47:8c:3d:36:d6:47:f1:5d:3a:fc:f1:bc:58:22:0f:1d:3e:91: 2b:c3:5a:90:7e:86:1d:36:8d:f2:bf:9b:1b:1f:cf:d2:4d:9f: 67:43:01:8f:46:82:4d:a0:8d:98:ab:7f:62:f2:4a:1e:77:a5: 12:34:55:a6:19:79:b0:a5:26:10:df:53:ee:e5:c1:2a:13:9d: 7b:de:7c:4e -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9eYtRflS31TANIRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk ZDU4MGY4YTQtZTcwZi00ZmQ0LTgyZTMtZDk3MWI1YzM1MWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlHjFLNP3PFxd6hChN4kW0ocCiWwNKFFDKvh E4RfCGpb0Ir7aPX9ev2UNa6wlhWUTxBA6vsi4z++KiTrihMeRsgCO4zk6KrnIffl CdLuP7gK3EXMuEwoLn1jtdMCHScXUaj+13UwtXlp5FNGLTB4AyzXMs2ZlyK4ow9i wbzvwwI6rwGP+kPjb86UooZc7Kbuf/vghG8YM4584FyF/3FFMKxp7qHQK4A3Qg2f y7RG2yNh+6HVM36ObJqjl+MjcxVYHzrDxr4vJbvx8RuOCpC7qXleRMTGdskow1g8 06DgcpjAAOBIz4lPjXreWlHFMdcSoG8ngeiXiwu4oK7aHJr/9wIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFDzdiCKvoZlQiqsF+aIvxuvvQnmDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvOTg2YTQzMDQtZTcwMy0z YTNjLWE4NDUtN2Q5YzkyM2ZlM2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAafrMAD BASfrOAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAGSYzzT2fm3dpUZXgbDG8X99LHgVh4MEapqPzJZzCFam4 e5mGNhP0ANdXw2ExPGh6TNvNq/ENi1I5HIq5w5WWSp4w9gCIuED9W9oxw+gSSUAB ZFFhuZOc7niq4HwspLREWMRYlhILUY5Ops1aqpsn+DCwLg6OQ/IzISUJML/Xa0wS 1xlPjd0uJl9na2xPA095Xz/KuJb9qoyQaZoZ4XknU96SwOGHS7tV4RHP9CGmpQ3a bKF6R4w9NtZH8V06/PG8WCIPHT6RK8NakH6GHTaN8r+bGx/P0k2fZ0MBj0aCTaCN mKt/YvJKHnelEjRVphl5sKUmEN9T7uXBKhOde958Tg== -----END CERTIFICATE-----Generated at Sat Oct 10 21:26:58 2026 by rpki-client