$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/a4734617-44c5-3289-bf66-4cbaa145cc8b.roa File: a4734617-44c5-3289-bf66-4cbaa145cc8b.roa (raw, json) Hash identifier: 1vedEE+2SnPRLM9hVVZa5RuvZL/VVw4wR/R8YeXaALc= Subject key identifier: 86:56:1E:F9:79:D7:06:74:B1:81:CB:8E:A7:99:CB:DB:50:0C:00:78 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584D386A6808531A3536B1969FC0 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/a4734617-44c5-3289-bf66-4cbaa145cc8b.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 159.172.192.0/19 maxlen: 24 159.172.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:68:08:53:1a:35:36:b1:96:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=d29fa485-b780-4475-8cf5-583ba6e4cfd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a2:93:00:64:c2:8f:10:64:81:f2:5b:4a:09: 49:d1:d8:33:d4:4d:fb:0e:00:b2:c1:32:23:99:fc: 3b:04:c3:e1:66:ae:e2:f7:74:df:ce:e9:df:d7:3e: c1:b0:b8:47:3d:a3:09:11:14:ce:35:d3:98:8e:58: 6b:d7:91:7c:4f:07:2b:c7:0b:8d:a1:86:cd:2e:e9: c0:6c:74:76:62:0d:15:26:01:a2:01:be:0c:a7:4c: 6d:50:a3:f8:f2:1e:d5:fc:07:01:74:ed:9e:7e:80: 2b:79:a5:b2:c8:7e:74:be:1e:ea:5d:be:87:50:61: a3:46:bb:3c:ce:8b:ed:ad:cf:c5:a8:1b:59:0d:fc: dc:3e:d3:1c:07:f3:69:c6:e2:5e:af:16:93:04:66: 48:6b:01:90:38:62:e4:c5:29:ab:4f:9e:8a:5c:97: 15:90:aa:86:5f:3b:26:25:60:28:cb:0f:31:c3:73: 7b:d9:f4:6d:97:a9:6f:48:dc:47:eb:c6:35:3b:46: 68:1b:09:a9:e9:dd:38:b4:4f:13:8c:ff:b9:a1:cc: 88:fe:0f:bc:51:cc:a4:f0:c8:cb:d2:33:82:21:ff: 9f:cc:17:14:c0:b7:53:3c:10:df:f6:d1:e7:05:07: 78:0c:ec:ee:67:80:8d:ca:5b:0d:cd:6f:bc:a0:a3: e1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:56:1E:F9:79:D7:06:74:B1:81:CB:8E:A7:99:CB:DB:50:0C:00:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/a4734617-44c5-3289-bf66-4cbaa145cc8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.192.0-159.172.239.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:8f:f4:89:f0:88:10:f7:0a:2b:d6:cf:95:b7:36:a3:2d:ac: b5:ff:c3:a9:1f:6b:5f:2a:fc:7f:0a:0c:2d:c9:2d:e9:58:c6: 32:9d:d1:a9:5f:a8:e0:ea:25:33:ad:a0:2a:e4:3f:db:0c:10: 54:89:c2:7c:2b:9c:2d:1d:f1:36:46:72:5b:9a:bb:57:10:9d: e8:ce:bd:7a:88:d0:78:fe:4e:cd:2a:62:ef:79:b0:bb:33:cf: 24:bf:2b:62:31:92:12:f7:f7:39:b9:44:06:c1:62:df:fd:53: 44:40:ab:2f:14:fd:a6:aa:e5:9d:d4:cc:5c:c2:a2:92:cd:d9: c2:09:4a:d0:f6:7d:70:09:9a:a4:2c:0f:e1:f3:87:43:32:3d: 96:99:6c:9b:73:a0:20:9f:56:f8:52:d2:21:c7:fd:45:a6:3e: 13:95:d6:c7:b5:cb:d7:62:69:cf:fd:76:ec:bc:7c:07:7a:25: 3f:49:77:cf:fd:2a:14:5e:e1:af:12:aa:c4:d3:bf:e3:d8:5a: 86:3d:6c:ca:68:53:c1:1e:52:7f:d5:b4:34:94:71:15:d0:bd: 21:4b:09:fc:ff:87:38:24:fc:2f:3a:4e:93:b9:0a:c7:47:40: 3c:6a:73:21:73:2d:c5:30:0e:73:8d:53:94:72:a7:34:32:c4: e7:46:28:8d -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE04amgIUxo1NrGWn8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk ZDI5ZmE0ODUtYjc4MC00NDc1LThjZjUtNTgzYmE2ZTRjZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6KTAGTCjxBkgfJbSglJ0dgz1E37DgCywTIj mfw7BMPhZq7i93Tfzunf1z7BsLhHPaMJERTONdOYjlhr15F8TwcrxwuNoYbNLunA bHR2Yg0VJgGiAb4Mp0xtUKP48h7V/AcBdO2efoAreaWyyH50vh7qXb6HUGGjRrs8 zovtrc/FqBtZDfzcPtMcB/NpxuJerxaTBGZIawGQOGLkxSmrT56KXJcVkKqGXzsm JWAoyw8xw3N72fRtl6lvSNxH68Y1O0ZoGwmp6d04tE8TjP+5ocyI/g+8Ucyk8MjL 0jOCIf+fzBcUwLdTPBDf9tHnBQd4DOzuZ4CNylsNzW+8oKPhfwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFIZWHvl51wZ0sYHLjqeZy9tQDAB4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvYTQ3MzQ2MTctNDRjNS0z Mjg5LWJmNjYtNGNiYWExNDVjYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAafrMAD BASfrOAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEARo/0ifCIEPcKK9bPlbc2oy2stf/DqR9rXyr8fwoMLckt 6VjGMp3RqV+o4OolM62gKuQ/2wwQVInCfCucLR3xNkZyW5q7VxCd6M69eojQeP5O zSpi73mwuzPPJL8rYjGSEvf3OblEBsFi3/1TRECrLxT9pqrlndTMXMKiks3ZwglK 0PZ9cAmapCwP4fOHQzI9lplsm3OgIJ9W+FLSIcf9RaY+E5XWx7XL12Jpz/127Lx8 B3olP0l3z/0qFF7hrxKqxNO/49hahj1symhTwR5Sf9W0NJRxFdC9IUsJ/P+HOCT8 LzpOk7kKx0dAPGpzIXMtxTAOc41TlHKnNDLE50YojQ== -----END CERTIFICATE-----Generated at Thu Mar 19 15:36:10 2026 by rpki-client