$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/986a4304-e703-3a3c-a845-7d9c923fe3ef.roa File: 986a4304-e703-3a3c-a845-7d9c923fe3ef.roa (raw, json) Hash identifier: mGUihaAkFly0Mp6hFyvpu+Dm8C5mVhLXdrvAvJleAFw= Subject key identifier: 48:0B:16:42:2B:9C:AC:F5:ED:68:06:10:23:AB:D5:00:9A:CF:63:BE Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584D386A61B6240F1588B5C2E780 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/986a4304-e703-3a3c-a845-7d9c923fe3ef.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 16509 IP address blocks: 159.172.192.0/19 maxlen: 24 159.172.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:61:b6:24:0f:15:88:b5:c2:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=725f50b5-e974-421b-850c-d6991c110c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b6:fa:5a:35:31:72:79:28:c3:37:0b:f1:5d: 61:4b:11:9a:64:22:bd:23:39:e7:f2:72:4f:c6:bc: 13:7b:2c:c1:0f:29:16:5b:9f:78:1f:1c:23:83:a4: db:1d:00:8f:b3:0e:c2:1a:dc:5a:88:92:77:81:d8: d5:c9:ca:c6:b9:9a:03:da:84:d7:ed:19:a2:34:bc: 67:a3:35:e4:c1:cc:e2:cd:8a:75:cf:74:40:59:7f: 1a:01:a1:27:9c:e5:b7:46:ab:d1:b3:27:13:7c:e8: bf:a4:a0:19:0e:b8:4e:ea:1f:0c:6c:8d:ec:e4:24: 25:97:26:d5:e5:42:1c:8a:10:fd:5d:e9:00:8a:de: 1e:e7:0f:9d:93:3d:67:4b:05:5f:a1:e8:5e:02:36: 9e:34:df:02:82:ff:df:77:ec:dd:87:0e:24:82:bd: d0:d0:ab:10:f9:4f:85:97:61:36:b0:bf:28:78:4e: fc:bc:45:1a:e4:13:69:b2:a9:46:6d:a0:73:e2:7b: 33:0e:1e:8c:33:75:c0:a4:50:ad:e7:43:89:f6:06: dd:25:ee:e5:40:9e:a5:31:59:bb:cc:87:02:3e:5f: 73:35:4f:c7:aa:9f:1d:ee:45:04:70:4f:60:fa:79: dd:23:af:6a:66:c9:49:2d:68:03:32:61:72:b8:50: cd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0B:16:42:2B:9C:AC:F5:ED:68:06:10:23:AB:D5:00:9A:CF:63:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/986a4304-e703-3a3c-a845-7d9c923fe3ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.192.0-159.172.239.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:c5:b5:af:61:af:df:1f:4a:e6:f2:56:e2:00:29:6c:5b:3c: 4b:ec:46:f5:6d:f7:78:73:19:a2:95:63:92:fe:64:38:81:fa: 84:54:e6:01:22:e3:b4:30:bd:d1:80:01:e3:c4:54:89:5a:01: 8c:c2:83:ce:f2:00:38:e2:12:b7:eb:6f:04:43:5a:5d:ad:fd: 64:b5:da:9a:77:ff:30:89:9d:c9:6b:e3:7d:3f:c7:3f:a6:4b: 75:01:11:2e:52:67:f3:5d:00:59:13:a9:30:c4:b4:5b:18:db: 29:73:cc:30:17:09:b4:dc:e1:4c:9e:df:c9:5e:3f:d7:93:6e: b9:a4:0f:89:ca:b8:b7:2e:78:6d:a6:48:69:9a:8c:eb:99:a3: a1:6b:0f:25:59:12:08:12:e0:80:fc:b8:5a:39:6e:59:9b:e8: a5:c2:bb:fe:e1:f1:39:39:f2:a9:f0:c9:1f:80:e9:2d:d9:ce: 29:55:f8:2d:64:4e:0a:c0:88:a0:53:d6:ea:36:2d:38:9a:72: 09:9c:34:a9:6a:44:2e:1c:ae:76:c7:ca:08:0c:5c:a7:ae:59: be:35:fc:ae:e3:8b:a9:12:ad:d3:8e:5a:bd:43:72:65:a6:60: 21:f2:15:10:ed:a9:71:fd:4a:f4:fd:05:cf:d3:5d:f7:6e:be: e9:ec:f0:35 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE04amG2JA8ViLXC54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk NzI1ZjUwYjUtZTk3NC00MjFiLTg1MGMtZDY5OTFjMTEwYzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbb6WjUxcnkowzcL8V1hSxGaZCK9Iznn8nJP xrwTeyzBDykWW594Hxwjg6TbHQCPsw7CGtxaiJJ3gdjVycrGuZoD2oTX7RmiNLxn ozXkwczizYp1z3RAWX8aAaEnnOW3RqvRsycTfOi/pKAZDrhO6h8MbI3s5CQllybV 5UIcihD9XekAit4e5w+dkz1nSwVfoeheAjaeNN8Cgv/fd+zdhw4kgr3Q0KsQ+U+F l2E2sL8oeE78vEUa5BNpsqlGbaBz4nszDh6MM3XApFCt50OJ9gbdJe7lQJ6lMVm7 zIcCPl9zNU/Hqp8d7kUEcE9g+nndI69qZslJLWgDMmFyuFDNiQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFEgLFkIrnKz17WgGECOr1QCaz2O+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvOTg2YTQzMDQtZTcwMy0z YTNjLWE4NDUtN2Q5YzkyM2ZlM2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAafrMAD BASfrOAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAOcW1r2Gv3x9K5vJW4gApbFs8S+xG9W33eHMZopVjkv5k OIH6hFTmASLjtDC90YAB48RUiVoBjMKDzvIAOOISt+tvBENaXa39ZLXamnf/MImd yWvjfT/HP6ZLdQERLlJn810AWROpMMS0WxjbKXPMMBcJtNzhTJ7fyV4/15NuuaQP icq4ty54baZIaZqM65mjoWsPJVkSCBLggPy4WjluWZvopcK7/uHxOTnyqfDJH4Dp LdnOKVX4LWROCsCIoFPW6jYtOJpyCZw0qWpELhyudsfKCAxcp65ZvjX8ruOLqRKt 045avUNyZaZgIfIVEO2pcf1K9P0Fz9Nd926+6ezwNQ== -----END CERTIFICATE-----Generated at Thu Mar 26 12:42:16 2026 by rpki-client