$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cc642cc8-e962-3e0e-9fd3-b811e41de541.roa File: cc642cc8-e962-3e0e-9fd3-b811e41de541.roa (raw, json) Hash identifier: KwagW5GDeJ4NlBH+PGfWsRE4ess0HdnZ7bMzUFvdbNE= Subject key identifier: 76:C2:0E:D0:AB:91:82:84:69:B8:16:1B:E8:23:9F:F0:7C:B3:0C:88 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584D2A74DE82D8B6CDD86C8311C0 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cc642cc8-e962-3e0e-9fd3-b811e41de541.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 16509 IP address blocks: 159.172.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:de:82:d8:b6:cd:d8:6c:83:11:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=9cc4da80-abac-46d5-aedb-eda7429e764a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:89:be:8f:8d:38:13:29:ec:d0:b7:30:b2:c5: 12:d4:2f:86:67:81:4c:27:6e:c6:41:52:1b:12:ea: a6:82:a4:5a:b9:9a:2b:d1:d7:f6:f8:cf:f7:65:b1: a3:64:c5:23:e1:70:d1:ef:39:8a:2a:2b:17:ad:f3: 1c:36:48:76:54:59:27:19:25:4e:93:50:27:49:d3: b4:ef:79:4e:28:e4:52:ed:37:03:5d:70:49:ce:92: 66:fe:90:6d:87:27:5a:73:5a:9d:0f:cf:36:bb:43: 84:57:f6:2b:e1:05:0c:83:5a:60:74:50:00:03:75: f7:6e:a5:bd:90:04:e6:a4:05:67:5d:d1:73:af:1b: e6:8d:00:e7:b0:0a:86:17:93:99:57:df:aa:af:ac: a4:70:7d:db:73:2f:1e:05:4f:60:0f:52:c8:77:da: a7:16:28:35:cf:5f:6c:84:21:09:16:b1:af:37:28: f1:d6:b3:24:7d:4c:70:44:14:c9:79:4d:ed:da:ac: 34:d4:af:34:f0:3a:c2:ea:f8:21:89:68:e8:cc:ef: b9:f4:33:85:66:1d:1a:d4:f7:d8:57:ac:f4:31:d7: e9:52:56:50:80:2f:e7:9e:5e:d9:ef:46:38:7d:13: 96:36:d6:b3:03:1c:c5:0b:e0:74:fb:25:ff:c6:a8: 51:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C2:0E:D0:AB:91:82:84:69:B8:16:1B:E8:23:9F:F0:7C:B3:0C:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cc642cc8-e962-3e0e-9fd3-b811e41de541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:1a:3a:26:92:3a:5c:cd:87:e7:58:dc:42:f7:2e:39:37:85: 9d:ba:d8:e3:96:40:a0:f0:31:67:70:be:71:9b:92:ca:8f:a0: 87:11:12:cf:b1:57:c3:a4:ac:93:a5:76:ff:04:e3:c0:76:40: cc:9f:fd:5d:2f:72:83:03:66:80:d2:81:a7:f1:b6:51:b6:d6: 18:ca:95:e5:7c:f5:db:16:16:86:0a:9a:a5:8d:8f:63:e8:2a: 0f:d0:e5:61:55:42:a7:63:cc:f8:22:ff:89:1c:7c:1b:cb:e6: a1:96:44:cc:00:72:a7:8b:14:c0:0c:1d:f1:1b:d4:46:ba:62: 8a:5f:ab:65:fd:d6:c8:1c:c3:64:4a:00:93:62:9f:f6:9b:1c: 07:7c:90:60:7c:8b:01:95:ae:00:e1:6c:eb:06:b3:65:5d:eb: 57:1d:21:64:f6:b4:5e:fa:48:b6:82:e5:bf:0f:3d:44:2a:55: a0:18:e8:39:1b:c2:52:a5:cd:01:13:02:7c:ed:9b:01:e6:40: 6c:d5:12:50:3a:86:78:a9:63:d4:3b:20:28:65:ff:6e:81:5f: 41:8b:86:ea:14:da:9b:b1:ba:bd:19:4a:97:c0:82:fe:29:10: 55:b2:43:fb:c2:94:b0:ce:a8:ae:71:69:06:48:52:35:48:58: 27:9e:4e:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdN6C2LbN2GyDEcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk OWNjNGRhODAtYWJhYy00NmQ1LWFlZGItZWRhNzQyOWU3NjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+4m+j404Eyns0LcwssUS1C+GZ4FMJ27GQVIb EuqmgqRauZor0df2+M/3ZbGjZMUj4XDR7zmKKisXrfMcNkh2VFknGSVOk1AnSdO0 73lOKORS7TcDXXBJzpJm/pBthydac1qdD882u0OEV/Yr4QUMg1pgdFAAA3X3bqW9 kATmpAVnXdFzrxvmjQDnsAqGF5OZV9+qr6ykcH3bcy8eBU9gD1LId9qnFig1z19s hCEJFrGvNyjx1rMkfUxwRBTJeU3t2qw01K808DrC6vghiWjozO+59DOFZh0a1PfY V6z0MdfpUlZQgC/nnl7Z70Y4fROWNtazAxzFC+B0+yX/xqhRSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbCDtCrkYKEabgWG+gjn/B8swyIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvY2M2NDJjYzgtZTk2Mi0z ZTBlLTlmZDMtYjgxMWU0MWRlNTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn6xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0aOiaSOlzNh+dY3EL3Ljk3hZ262OOWQKDwMWdwvnGbksqPoIcREs+x V8OkrJOldv8E48B2QMyf/V0vcoMDZoDSgafxtlG21hjKleV89dsWFoYKmqWNj2Po Kg/Q5WFVQqdjzPgi/4kcfBvL5qGWRMwAcqeLFMAMHfEb1Ea6Yopfq2X91sgcw2RK AJNin/abHAd8kGB8iwGVrgDhbOsGs2Vd61cdIWT2tF76SLaC5b8PPUQqVaAY6Dkb wlKlzQETAnztmwHmQGzVElA6hnipY9Q7IChl/26BX0GLhuoU2puxur0ZSpfAgv4p EFWyQ/vClLDOqK5xaQZIUjVIWCeeTs8= -----END CERTIFICATE-----Generated at Thu Mar 19 12:35:38 2026 by rpki-client