$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/ae3aa0d8-647a-3eb6-babc-7d844880454b.roa File: ae3aa0d8-647a-3eb6-babc-7d844880454b.roa (raw, json) Hash identifier: 4es8rrCwja7itx+nfQG+1HmXu4JteEHsrm7Fd4KvF30= Subject key identifier: 16:44:75:B7:17:9D:53:0D:CE:3E:F3:B8:BB:6D:C5:2D:B9:7B:D9:C6 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584DD09048EF62B1137FF5D0F000 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/ae3aa0d8-647a-3eb6-babc-7d844880454b.roa Signing time: Wed 13 May 2026 01:00:24 +0000 ROA not before: Wed 13 May 2026 01:00:24 +0000 ROA not after: Tue 11 Aug 2026 01:00:24 +0000 asID: 14618 IP address blocks: 159.172.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:90:48:ef:62:b1:13:7f:f5:d0:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: May 13 01:00:24 2026 GMT Not After : Aug 11 01:00:24 2026 GMT Subject: CN=0d57bec5-fe7e-4c0b-b74f-76c9ba6fafea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:6f:e7:2a:a0:a6:56:58:e9:3f:fa:73:96:cb: 0e:24:55:a5:28:76:89:c4:21:08:05:7d:95:e6:92: 52:c9:f2:8b:cf:e2:70:d6:dd:c0:4f:18:ea:29:08: fa:49:0c:46:fc:47:48:61:e1:0f:a7:c9:b3:9c:65: 39:ea:f9:d1:24:e3:17:38:3b:af:e5:81:32:25:4f: ff:a7:78:ab:b1:3d:db:e2:fc:ff:ca:27:ca:a4:27: 94:ed:f6:10:dc:83:38:6f:e0:1c:be:2f:4f:eb:01: ab:27:11:f5:b9:24:bb:ae:c7:fa:66:41:2a:7c:64: 1b:d6:69:cf:5b:46:08:61:9f:fa:47:d7:a9:cb:36: eb:6d:a6:3a:c9:7a:dc:db:3f:8f:22:bd:29:76:f3: 5a:5d:36:c3:42:af:b4:e5:9d:2f:49:b9:fa:fc:45: 49:2f:69:bf:3c:31:5f:59:7f:24:43:7d:2f:d4:40: e9:9c:95:09:84:f0:98:22:e5:0f:07:7c:47:cb:5d: 76:ff:b6:76:b4:2c:9e:12:65:c5:77:14:99:1b:d6: 65:8e:35:70:0f:42:07:6e:d5:d8:a4:91:6c:78:ff: 99:e5:b3:2a:f3:d7:49:0d:ac:98:14:2f:7e:04:52: 9d:fd:ae:bd:2e:70:30:5c:6f:0a:ec:76:57:87:ed: 9b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:44:75:B7:17:9D:53:0D:CE:3E:F3:B8:BB:6D:C5:2D:B9:7B:D9:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/ae3aa0d8-647a-3eb6-babc-7d844880454b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:85:cc:d8:47:a9:f6:f5:cf:d3:fd:68:6b:43:9c:41:92:97: bd:1b:0a:42:ad:84:ab:d7:62:c7:07:0a:f1:20:03:12:5f:12: ca:d3:b9:58:32:8a:54:5f:68:88:b8:ed:4d:32:43:c1:06:38: cb:0e:5d:24:75:d7:7e:20:85:6e:89:bc:a8:f5:17:2b:e9:cf: 7f:95:2b:c1:4c:61:2d:84:b5:60:87:f8:99:2d:b7:94:aa:6d: 7e:8a:ea:a7:c9:96:f2:bc:29:09:7e:a1:b8:0c:67:d9:d5:6d: 90:b7:f7:c1:06:c9:32:ce:65:40:99:bb:95:1a:23:d7:77:63: 9a:4c:98:2d:2e:47:d0:f0:e1:6d:4f:0a:db:6d:2f:24:83:e0: 9e:1e:96:32:42:71:f0:9b:ec:70:0f:1b:63:08:54:86:a6:2b: c3:d4:d0:cd:75:f1:e9:6a:68:3b:bf:c9:a7:68:4c:64:4a:9f: 0b:9b:33:85:e9:df:b6:e0:fb:3f:b6:55:b4:a5:ff:5b:3a:b4: f8:f1:fc:83:2e:e2:e0:1a:16:9c:c1:46:20:80:a2:49:3d:51: f5:42:1d:ac:aa:cc:04:b6:f2:43:52:07:7f:13:5b:2f:47:5c: cf:b2:d8:c9:35:cf:37:52:02:0b:59:57:3f:4f:d6:c2:1f:3b: bd:4e:1d:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3QkEjvYrETf/XQ8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk MGQ1N2JlYzUtZmU3ZS00YzBiLWI3NGYtNzZjOWJhNmZhZmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+m/nKqCmVljpP/pzlssOJFWlKHaJxCEIBX2V 5pJSyfKLz+Jw1t3ATxjqKQj6SQxG/EdIYeEPp8mznGU56vnRJOMXODuv5YEyJU// p3irsT3b4vz/yifKpCeU7fYQ3IM4b+Acvi9P6wGrJxH1uSS7rsf6ZkEqfGQb1mnP W0YIYZ/6R9epyzbrbaY6yXrc2z+PIr0pdvNaXTbDQq+05Z0vSbn6/EVJL2m/PDFf WX8kQ30v1EDpnJUJhPCYIuUPB3xHy112/7Z2tCyeEmXFdxSZG9ZljjVwD0IHbtXY pJFseP+Z5bMq89dJDayYFC9+BFKd/a69LnAwXG8K7HZXh+2b3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZEdbcXnVMNzj7zuLttxS25e9nGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvYWUzYWEwZDgtNjQ3YS0z ZWI2LWJhYmMtN2Q4NDQ4ODA0NTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn6w4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyFzNhHqfb1z9P9aGtDnEGSl70bCkKthKvXYscHCvEgAxJfEsrTuVgy ilRfaIi47U0yQ8EGOMsOXSR1134ghW6JvKj1Fyvpz3+VK8FMYS2EtWCH+Jktt5Sq bX6K6qfJlvK8KQl+obgMZ9nVbZC398EGyTLOZUCZu5UaI9d3Y5pMmC0uR9Dw4W1P CtttLySD4J4eljJCcfCb7HAPG2MIVIamK8PU0M118elqaDu/yadoTGRKnwubM4Xp 37bg+z+2VbSl/1s6tPjx/IMu4uAaFpzBRiCAokk9UfVCHayqzAS28kNSB38TWy9H XM+y2Mk1zzdSAgtZVz9P1sIfO71OHfI= -----END CERTIFICATE-----Generated at Wed May 13 10:51:20 2026 by rpki-client