$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/fb2191d8-74a2-30cb-bfff-c794a6dcab24.roa File: fb2191d8-74a2-30cb-bfff-c794a6dcab24.roa (raw, json) Hash identifier: jvUlslrxYB+T1G4sQohZ/yB6IeXy1tlVk5bQ3yfYC08= Subject key identifier: 5E:63:40:79:5E:7E:D1:C6:B4:8C:0A:14:04:09:35:72:60:74:D5:8A Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584D2A74F95381212B7B76069700 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/fb2191d8-74a2-30cb-bfff-c794a6dcab24.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 14618 IP address blocks: 159.172.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:f9:53:81:21:2b:7b:76:06:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=eb776c6b-eb78-4204-89b3-bb16045766b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1f:cb:8e:06:32:fe:be:79:59:09:bf:c9:b2: 75:47:90:de:22:0f:41:ff:67:ff:42:39:45:01:98: bf:8e:3d:26:18:4b:25:51:c1:fa:6d:e8:8c:bc:90: 59:cf:4d:a4:a9:a6:65:a3:0d:fe:31:b9:40:eb:97: 36:5a:7c:07:3f:e1:aa:d7:50:dd:95:47:23:01:1a: 43:fb:b8:d3:c6:57:d0:37:bf:67:58:d3:ab:5e:45: e3:9f:68:62:df:53:f6:ef:46:87:85:bc:41:a8:87: 08:80:6a:e8:3f:b1:a6:85:e7:c3:34:b0:96:83:35: 8f:b4:ee:ac:cc:90:48:33:06:dd:de:67:f0:e1:6c: 1c:83:20:c2:c5:cc:a5:a5:3e:33:d5:7b:ac:08:75: 85:73:27:b4:ea:55:ed:aa:74:76:d4:e4:eb:72:20: e8:5a:5b:da:2b:f1:e3:6d:05:7c:53:ea:3e:7c:2c: a3:e5:63:66:05:75:c4:fc:a8:b4:01:d3:36:3b:9a: f0:20:c4:29:df:4f:dc:be:90:65:46:73:cb:88:fa: ac:da:b1:25:a4:a1:05:92:d0:75:46:8c:e9:45:8f: 52:f3:71:b1:52:54:86:15:14:3e:27:ea:ce:18:8f: d8:b4:c5:0c:9b:f4:e9:5f:89:fe:bf:96:1c:dd:5c: 9f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:63:40:79:5E:7E:D1:C6:B4:8C:0A:14:04:09:35:72:60:74:D5:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/fb2191d8-74a2-30cb-bfff-c794a6dcab24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:37:39:3e:07:d7:59:cf:38:92:43:d6:4e:ec:cb:b1:40:7f: ad:6d:b7:f7:29:ff:1c:a6:9a:fa:da:dd:36:6a:4c:f2:a9:79: 36:84:48:2b:1b:52:b7:89:b8:ed:33:d7:ae:e3:6d:4b:2f:99: a5:cb:f3:03:76:60:dc:bf:3f:95:a9:cd:9a:92:69:6c:56:0f: a3:b0:49:cc:ef:cd:64:da:2c:99:e0:e8:df:95:28:b4:60:fb: 1b:52:3d:e5:b2:48:7f:0e:f9:16:f8:15:61:47:02:fc:9c:5d: 09:40:a1:2b:d8:47:ce:56:d8:33:38:96:90:e9:7e:cd:98:82: 52:8d:35:dd:b6:b6:b1:aa:e4:84:89:b8:14:e8:fd:30:a4:18: a5:58:1c:28:e0:ef:68:0e:21:e3:a8:b9:1e:c6:96:58:6e:a0: 5c:a1:5b:28:6f:27:43:cb:cc:9d:7e:3b:7d:64:1c:b6:38:fd: 6e:7b:4b:9f:1f:dd:c1:2e:a9:a6:49:30:34:f5:8f:1d:1f:d7: 28:c0:16:17:af:7d:59:51:e9:20:45:37:7a:42:69:24:d6:41: 1f:e0:b1:2a:2e:40:e8:5d:5b:1b:5d:64:0c:50:2d:cb:6c:fb: 36:da:99:7e:a4:f9:e5:fc:db:26:15:c4:c0:be:e2:10:ad:a8: b1:f9:40:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdPlTgSEre3YGlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZWI3NzZjNmItZWI3OC00MjA0LTg5YjMtYmIxNjA0NTc2NmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR/LjgYy/r55WQm/ybJ1R5DeIg9B/2f/QjlF AZi/jj0mGEslUcH6beiMvJBZz02kqaZlow3+MblA65c2WnwHP+Gq11DdlUcjARpD +7jTxlfQN79nWNOrXkXjn2hi31P270aHhbxBqIcIgGroP7GmhefDNLCWgzWPtO6s zJBIMwbd3mfw4WwcgyDCxcylpT4z1XusCHWFcye06lXtqnR21OTrciDoWlvaK/Hj bQV8U+o+fCyj5WNmBXXE/Ki0AdM2O5rwIMQp30/cvpBlRnPLiPqs2rElpKEFktB1 RozpRY9S83GxUlSGFRQ+J+rOGI/YtMUMm/TpX4n+v5Yc3VyfYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5jQHleftHGtIwKFAQJNXJgdNWKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvZmIyMTkxZDgtNzRhMi0z MGNiLWJmZmYtYzc5NGE2ZGNhYjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn6xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc3OT4H11nPOJJD1k7sy7FAf61tt/cp/xymmvra3TZqTPKpeTaESCsb UreJuO0z167jbUsvmaXL8wN2YNy/P5WpzZqSaWxWD6OwSczvzWTaLJng6N+VKLRg +xtSPeWySH8O+Rb4FWFHAvycXQlAoSvYR85W2DM4lpDpfs2YglKNNd22trGq5ISJ uBTo/TCkGKVYHCjg72gOIeOouR7GllhuoFyhWyhvJ0PLzJ1+O31kHLY4/W57S58f 3cEuqaZJMDT1jx0f1yjAFhevfVlR6SBFN3pCaSTWQR/gsSouQOhdWxtdZAxQLcts +zbamX6k+eX82yYVxMC+4hCtqLH5QHA= -----END CERTIFICATE-----Generated at Thu Mar 19 15:33:46 2026 by rpki-client