$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/986a4304-e703-3a3c-a845-7d9c923fe3ef.roa File: 986a4304-e703-3a3c-a845-7d9c923fe3ef.roa (raw, json) Hash identifier: LW5Q5bUQn4YzFJ3ByzwI90BY1j9IN8Dvkz6fc+1oueA= Subject key identifier: D6:97:71:4C:F4:2D:0E:08:56:E3:6D:F6:47:E3:E5:8D:76:BB:F7:15 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584EBB11CCC5082D87AF8C019B00 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/986a4304-e703-3a3c-a845-7d9c923fe3ef.roa Signing time: Wed 05 Aug 2026 01:00:12 +0000 ROA not before: Wed 05 Aug 2026 01:00:12 +0000 ROA not after: Tue 03 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 159.172.192.0/19 maxlen: 24 159.172.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bb:11:cc:c5:08:2d:87:af:8c:01:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Aug 5 01:00:12 2026 GMT Not After : Nov 3 02:00:12 2026 GMT Subject: CN=a8e62f87-1879-41bf-9182-b283ab728db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:76:a8:81:64:15:20:8c:42:0c:83:5d:18:e8: 9b:5d:28:98:2b:6d:fa:75:a7:65:21:e7:2d:21:5a: bf:42:97:e5:00:89:d0:5f:61:60:c3:48:70:0c:ac: 70:d1:49:40:36:31:a7:59:7a:3e:08:9d:a9:50:fd: 7b:2a:55:cd:7f:96:a4:55:d5:5f:dc:52:63:e3:86: c8:ab:3e:5b:5e:73:81:64:86:b4:7b:aa:38:7c:3d: ca:2f:2b:7b:ae:53:e0:d7:15:b2:32:02:85:44:49: c9:d1:b8:94:05:6e:55:1e:36:4b:72:b1:af:e8:bb: 97:a6:d1:4a:7d:57:d3:4c:1d:bf:a7:62:57:61:13: ff:b4:8e:05:6e:63:0a:24:6e:b3:e0:96:c3:a1:46: ef:7d:e5:42:8e:ea:b9:79:48:1d:3d:a3:e5:ea:4e: 72:fe:15:eb:f5:bc:67:ed:64:33:cf:1c:cd:eb:f6: 80:55:0a:2b:17:15:db:ab:bf:cb:6c:e9:e9:8d:40: 37:41:ae:cb:26:a9:4c:d9:1e:aa:39:f7:9a:2d:94: 47:08:5f:5e:f1:c0:59:09:35:e4:c1:d8:40:87:ba: 5a:6a:31:19:f7:ec:50:63:2e:68:f6:4e:4e:17:56: 84:99:1d:bf:e0:27:ae:f0:2d:c7:c2:42:77:f7:d8: a4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:97:71:4C:F4:2D:0E:08:56:E3:6D:F6:47:E3:E5:8D:76:BB:F7:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/986a4304-e703-3a3c-a845-7d9c923fe3ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.192.0-159.172.239.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:53:b8:75:b6:74:1f:d6:26:96:2a:2d:1a:24:23:55:55:76: aa:fa:dc:78:78:db:f5:ca:47:9a:ca:42:f1:8b:6c:40:22:0a: f2:5f:5f:72:00:da:a6:42:f8:4b:a2:2e:1c:48:42:32:c0:40: a4:67:76:84:15:1f:97:de:17:85:48:45:9c:fd:7a:ad:96:de: 31:7c:ec:a8:b0:f1:13:0a:34:be:ee:1a:cc:46:3b:0a:4d:86: d2:b3:f7:9b:d3:c4:90:f0:d3:a4:f4:17:bb:a7:ac:79:48:c5: 19:03:d2:2f:53:20:0b:a7:94:bb:ef:de:8f:81:cb:28:8d:8e: fa:d9:8c:0d:04:4d:ae:32:a3:2c:34:e9:67:3f:4f:81:67:aa: 35:bd:b4:88:58:75:81:9e:89:ad:ba:aa:74:12:19:af:97:cc: ab:da:c0:ea:93:d4:09:9d:b0:46:9a:16:8f:7d:a6:83:6b:fd: 7a:35:78:4f:b9:35:02:a0:c1:9d:57:79:58:24:61:a1:e4:74: 24:13:56:53:4c:f1:0d:74:5d:a0:e5:47:ff:54:3d:64:cf:12: 85:81:68:3d:86:d2:ad:5a:b8:62:80:aa:2f:c2:a8:ab:fa:e4: 52:52:c2:e7:44:d3:a7:92:a4:ad:56:8f:67:a3:4c:0d:6f:55: 44:ff:f9:f6 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE67EczFCC2Hr4wBmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI2MDgwNTAxMDAxMloXDTI2MTEwMzAyMDAxMlowLzEtMCsGA1UEAxMk YThlNjJmODctMTg3OS00MWJmLTkxODItYjI4M2FiNzI4ZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3aogWQVIIxCDINdGOibXSiYK236dadlIect IVq/QpflAInQX2Fgw0hwDKxw0UlANjGnWXo+CJ2pUP17KlXNf5akVdVf3FJj44bI qz5bXnOBZIa0e6o4fD3KLyt7rlPg1xWyMgKFREnJ0biUBW5VHjZLcrGv6LuXptFK fVfTTB2/p2JXYRP/tI4FbmMKJG6z4JbDoUbvfeVCjuq5eUgdPaPl6k5y/hXr9bxn 7WQzzxzN6/aAVQorFxXbq7/LbOnpjUA3Qa7LJqlM2R6qOfeaLZRHCF9e8cBZCTXk wdhAh7paajEZ9+xQYy5o9k5OF1aEmR2/4Ceu8C3HwkJ399ikJQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFNaXcUz0LQ4IVuNt9kfj5Y12u/cVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvOTg2YTQzMDQtZTcwMy0z YTNjLWE4NDUtN2Q5YzkyM2ZlM2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAafrMAD BASfrOAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAD1O4dbZ0H9YmliotGiQjVVV2qvrceHjb9cpHmspC8Yts QCIK8l9fcgDapkL4S6IuHEhCMsBApGd2hBUfl94XhUhFnP16rZbeMXzsqLDxEwo0 vu4azEY7Ck2G0rP3m9PEkPDTpPQXu6eseUjFGQPSL1MgC6eUu+/ej4HLKI2O+tmM DQRNrjKjLDTpZz9PgWeqNb20iFh1gZ6JrbqqdBIZr5fMq9rA6pPUCZ2wRpoWj32m g2v9ejV4T7k1AqDBnVd5WCRhoeR0JBNWU0zxDXRdoOVH/1Q9ZM8ShYFoPYbSrVq4 YoCqL8Koq/rkUlLC50TTp5KkrVaPZ6NMDW9VRP/59g== -----END CERTIFICATE-----Generated at Wed Aug 19 06:43:07 2026 by rpki-client