$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/4a280d42-9952-396f-973b-069b335479ec.roa File: 4a280d42-9952-396f-973b-069b335479ec.roa (raw, json) Hash identifier: DkqxIV8r90pP2x7t4S1gTC2R7Y2d5Z2R7B5sQpeL+rE= Subject key identifier: F4:75:39:84:F8:C9:4A:C7:1E:14:3B:24:70:F2:20:77:AF:AC:BE:1D Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584DD0904E25786B670CB4DA5C80 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/4a280d42-9952-396f-973b-069b335479ec.roa Signing time: Wed 13 May 2026 01:00:24 +0000 ROA not before: Wed 13 May 2026 01:00:24 +0000 ROA not after: Tue 11 Aug 2026 01:00:24 +0000 asID: 16509 IP address blocks: 159.172.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:90:4e:25:78:6b:67:0c:b4:da:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: May 13 01:00:24 2026 GMT Not After : Aug 11 01:00:24 2026 GMT Subject: CN=1b23b9e1-068e-484e-b201-89cf03be84e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:23:91:be:6a:0f:f1:8a:52:0c:e8:26:a3:95: 7b:e1:e4:af:a5:5f:31:e6:ae:6d:2c:e2:c5:2d:56: c3:c6:56:f1:c9:cc:0b:a0:51:df:c6:a7:52:a7:77: 7a:8b:46:e1:2f:12:0c:86:b1:fe:35:a0:b3:2b:e1: b7:e0:79:c9:71:af:70:27:ae:ed:e8:0d:d5:de:44: 03:b0:ca:2d:34:ea:61:54:56:8a:89:c4:3d:10:d6: 07:b3:ff:5c:c8:d1:33:fb:8b:34:de:72:1c:60:5e: 72:31:e6:1b:de:63:f7:a6:d1:7c:35:a7:db:cb:7d: 0f:a9:39:1d:92:b2:42:3b:ae:a2:4c:b4:8c:85:f9: db:0a:c9:2a:19:99:75:39:10:a7:9a:f1:9f:98:2a: 3b:f4:70:5a:3d:91:38:bd:b3:75:dd:33:96:35:a4: d3:f9:94:85:b8:39:73:af:26:39:80:dd:fe:6b:32: 43:6f:c9:85:f9:0b:e2:ac:18:d0:af:cb:d7:7b:4f: 74:97:cb:83:ae:68:10:60:1d:9b:02:9e:e6:a3:5a: 79:fc:dc:96:6e:02:7a:4b:ef:48:32:63:cc:27:77: 13:d6:d4:47:a9:97:ec:d2:ad:9c:e3:b9:a0:4b:fc: 8f:02:a6:9d:27:f0:8c:be:35:53:71:2c:01:93:79: 68:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:75:39:84:F8:C9:4A:C7:1E:14:3B:24:70:F2:20:77:AF:AC:BE:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/4a280d42-9952-396f-973b-069b335479ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:38:1a:08:fe:8b:f0:0f:0f:70:4b:db:26:11:2e:9a:64:9c: 1e:7e:4e:61:0a:c0:9f:9e:48:2f:13:65:7b:da:d3:35:b9:31: 42:5f:7f:7c:2c:91:db:03:af:10:95:cb:03:ff:18:6b:75:e7: b9:c3:ee:11:5b:1a:38:f5:c0:9a:b9:fa:d1:a9:cd:97:24:0c: 8c:b3:f1:78:08:0b:ba:1a:01:7c:16:27:d3:6d:e3:c1:64:54: 7d:d3:99:93:94:da:fc:be:52:e0:f9:3c:58:81:cd:7c:d2:31: 4e:6c:ec:1c:42:dc:39:24:78:8f:bc:ce:a1:37:26:80:ae:a7: ff:46:96:ba:e1:94:92:de:56:a4:37:e0:8f:40:11:31:c8:07: 92:1d:b1:b8:3a:d7:b1:fc:5a:b4:46:1b:49:bf:9c:bf:15:5b: 43:ab:34:2a:32:b1:f7:54:1e:ce:ad:29:c8:ea:95:e5:f5:7e: aa:d7:c8:7f:43:0f:b3:44:f0:08:6a:ec:ec:16:3d:16:81:43: de:e5:26:19:2f:04:34:a9:72:16:97:66:5e:d9:76:6e:f3:a9: e4:cd:b7:f1:ac:b7:1a:46:62:ae:3a:44:a2:b3:e9:cc:81:bf: e3:4d:74:b6:7c:93:a2:b5:6e:11:d1:fc:42:75:75:b7:08:76: b8:f1:05:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3QkE4leGtnDLTaXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk MWIyM2I5ZTEtMDY4ZS00ODRlLWIyMDEtODljZjAzYmU4NGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yORvmoP8YpSDOgmo5V74eSvpV8x5q5tLOLF LVbDxlbxycwLoFHfxqdSp3d6i0bhLxIMhrH+NaCzK+G34HnJca9wJ67t6A3V3kQD sMotNOphVFaKicQ9ENYHs/9cyNEz+4s03nIcYF5yMeYb3mP3ptF8Nafby30PqTkd krJCO66iTLSMhfnbCskqGZl1ORCnmvGfmCo79HBaPZE4vbN13TOWNaTT+ZSFuDlz ryY5gN3+azJDb8mF+QvirBjQr8vXe090l8uDrmgQYB2bAp7mo1p5/NyWbgJ6S+9I MmPMJ3cT1tRHqZfs0q2c47mgS/yPAqadJ/CMvjVTcSwBk3loLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPR1OYT4yUrHHhQ7JHDyIHevrL4dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvNGEyODBkNDItOTk1Mi0z OTZmLTk3M2ItMDY5YjMzNTQ3OWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn6w8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFg4Ggj+i/APD3BL2yYRLppknB5+TmEKwJ+eSC8TZXva0zW5MUJff3ws kdsDrxCVywP/GGt157nD7hFbGjj1wJq5+tGpzZckDIyz8XgIC7oaAXwWJ9Nt48Fk VH3TmZOU2vy+UuD5PFiBzXzSMU5s7BxC3DkkeI+8zqE3JoCup/9GlrrhlJLeVqQ3 4I9AETHIB5Idsbg617H8WrRGG0m/nL8VW0OrNCoysfdUHs6tKcjqleX1fqrXyH9D D7NE8Ahq7OwWPRaBQ97lJhkvBDSpchaXZl7Zdm7zqeTNt/GstxpGYq46RKKz6cyB v+NNdLZ8k6K1bhHR/EJ1dbcIdrjxBds= -----END CERTIFICATE-----Generated at Wed May 13 16:00:40 2026 by rpki-client