$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/ae3aa0d8-647a-3eb6-babc-7d844880454b.roa File: ae3aa0d8-647a-3eb6-babc-7d844880454b.roa (raw, json) Hash identifier: gS8RNaJuQcpMRp+7MGiCmolZqmXqs0HFkFan9fFRHL8= Subject key identifier: 72:F9:86:6D:A8:E5:E3:4F:27:3E:E6:71:A2:2B:47:83:F0:15:32:D7 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584EA787CC9D6FC13F9B1CEC5980 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/ae3aa0d8-647a-3eb6-babc-7d844880454b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14618 IP address blocks: 159.172.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Aug 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:cc:9d:6f:c1:3f:9b:1c:ec:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=223b6c91-ae4f-4221-b321-e6f715ba19b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cd:04:11:8e:35:63:55:e1:19:db:0e:02:2a: 79:c0:05:00:69:83:f4:cf:64:e7:85:b4:67:a2:cc: 9f:b4:80:c6:61:4c:ab:b9:46:26:20:92:b1:5c:aa: c1:bc:2c:94:35:1d:5f:bd:57:26:23:ef:dd:98:28: 0e:c4:a9:c2:6b:e5:d0:80:2b:76:27:78:74:75:09: cb:25:1e:f0:2d:25:f3:59:a4:cd:f9:17:f1:09:53: b1:4d:5e:c1:4d:3f:60:f5:86:bc:d7:98:7a:39:0e: 64:91:b5:43:31:16:0c:cf:55:10:03:ce:ca:9e:15: 5c:6b:ac:86:67:b2:6b:f6:c6:e7:98:e4:af:c8:6e: 58:b8:3f:b1:ff:b2:b2:14:f6:7a:f2:ff:73:4f:62: 63:cb:37:f0:69:74:9c:7d:61:d6:75:b2:16:b6:22: 3f:1a:b6:b5:74:00:f5:01:04:70:5c:dd:8a:fa:0e: 16:5d:4c:a6:f3:56:b2:40:2f:e5:fb:07:46:2f:d9: 04:c9:6a:0f:08:0c:93:8b:f3:a4:8c:d8:c4:00:d7: 2c:81:7b:04:f1:0b:06:3d:05:18:93:10:4e:33:5d: 6d:1a:1f:13:73:ab:0b:5e:05:fa:26:7e:6e:7e:b6: 0b:71:f5:35:f7:f8:d5:d2:82:e1:ec:7e:70:ff:54: 67:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:F9:86:6D:A8:E5:E3:4F:27:3E:E6:71:A2:2B:47:83:F0:15:32:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/ae3aa0d8-647a-3eb6-babc-7d844880454b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:05:68:80:5b:2a:24:66:6a:a9:66:fe:2b:af:86:6f:df:60: ec:46:72:8a:f7:1f:50:b2:fe:2b:76:a0:a2:77:11:ef:68:bf: 9c:2e:63:e2:0c:0f:e8:4d:da:00:9a:36:c4:de:41:80:b1:2e: b3:0f:88:63:57:ef:93:c5:c9:0e:17:9a:0d:05:71:25:6b:61: 4b:9a:ff:aa:1f:17:64:78:09:37:e3:9f:b4:61:2c:8f:a5:be: 5c:c4:b0:9f:7b:ef:d8:a7:03:d5:be:a2:0a:e6:6d:77:6b:e2: a0:8b:43:51:bf:87:5f:75:04:03:15:3c:aa:44:0b:a4:48:7a: e0:42:5a:18:79:f9:f8:cc:19:14:96:96:ca:fa:55:22:7c:fa: 9f:59:90:5f:7f:05:c5:71:78:3b:77:e7:7c:76:9b:49:d6:88: 4d:1a:3d:ca:56:1b:c2:c1:a7:d7:69:26:e0:4f:01:a8:9e:e5: 7f:b9:05:fe:dd:0f:3c:7e:1f:ef:60:65:d7:d9:72:04:c5:c4: b8:4f:51:73:e6:c6:5e:7d:4b:c7:da:e5:7d:23:09:50:d8:55: e0:07:75:e7:1c:b7:14:6d:88:2d:4f:78:f9:93:8c:d2:3f:03: f2:27:43:71:70:35:72:57:8a:8a:3b:6d:c9:36:6a:00:79:69: 9a:63:7d:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh8ydb8E/mxzsWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjIzYjZjOTEtYWU0Zi00MjIxLWIzMjEtZTZmNzE1YmExOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs0EEY41Y1XhGdsOAip5wAUAaYP0z2TnhbRn osyftIDGYUyruUYmIJKxXKrBvCyUNR1fvVcmI+/dmCgOxKnCa+XQgCt2J3h0dQnL JR7wLSXzWaTN+RfxCVOxTV7BTT9g9Ya815h6OQ5kkbVDMRYMz1UQA87KnhVca6yG Z7Jr9sbnmOSvyG5YuD+x/7KyFPZ68v9zT2JjyzfwaXScfWHWdbIWtiI/Gra1dAD1 AQRwXN2K+g4WXUym81ayQC/l+wdGL9kEyWoPCAyTi/OkjNjEANcsgXsE8QsGPQUY kxBOM11tGh8Tc6sLXgX6Jn5ufrYLcfU19/jV0oLh7H5w/1RnDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHL5hm2o5eNPJz7mcaIrR4PwFTLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvYWUzYWEwZDgtNjQ3YS0z ZWI2LWJhYmMtN2Q4NDQ4ODA0NTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn6w4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4FaIBbKiRmaqlm/iuvhm/fYOxGcor3H1Cy/it2oKJ3Ee9ov5wuY+IM D+hN2gCaNsTeQYCxLrMPiGNX75PFyQ4Xmg0FcSVrYUua/6ofF2R4CTfjn7RhLI+l vlzEsJ9779inA9W+ogrmbXdr4qCLQ1G/h191BAMVPKpEC6RIeuBCWhh5+fjMGRSW lsr6VSJ8+p9ZkF9/BcVxeDt353x2m0nWiE0aPcpWG8LBp9dpJuBPAaie5X+5Bf7d Dzx+H+9gZdfZcgTFxLhPUXPmxl59S8fa5X0jCVDYVeAHdecctxRtiC1PePmTjNI/ A/InQ3FwNXJXioo7bck2agB5aZpjfSI= -----END CERTIFICATE-----Generated at Wed Aug 19 06:44:24 2026 by rpki-client