$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/bd45bdd8-9952-35e1-9d9c-061421883004.roa File: bd45bdd8-9952-35e1-9d9c-061421883004.roa (raw, json) Hash identifier: NouUktItIKe/oLqTS1EOEY3+ZYeB/4mUSLEXYLmjcao= Subject key identifier: 88:1F:44:70:05:E7:BD:B5:1C:BB:6D:22:C2:56:81:91:A6:63:DB:91 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584F4112A9285F7CACC0DC86C8D0 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/bd45bdd8-9952-35e1-9d9c-061421883004.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 159.172.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:a9:28:5f:7c:ac:c0:dc:86:c8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=7d077928-2add-4e1e-8b53-1892f5650e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:92:32:02:3c:b9:21:9b:19:d0:6b:a2:81: f7:86:40:20:80:c6:a4:a5:eb:f7:59:86:b8:e4:15: 34:d1:ff:63:dc:fa:8c:9d:6e:67:13:4c:14:2c:02: 68:d8:e7:ef:3d:42:42:34:ea:f7:83:90:23:c3:23: e2:65:cf:2a:6d:70:15:50:24:a8:3c:49:29:01:4e: 7c:82:23:e2:9a:88:00:da:57:90:ee:d2:86:96:85: dd:4e:30:2e:66:73:39:08:a8:2d:40:e3:ee:fd:5f: c4:0b:ef:55:da:de:09:e5:68:9b:10:6d:44:bf:b9: c7:d5:64:93:a2:23:ae:bf:b9:88:4a:30:99:13:7c: 6c:58:da:ce:41:9f:da:d6:38:d0:f5:8b:9d:af:1d: 92:6a:cf:49:de:c6:b7:f5:81:4f:9e:04:d7:01:95: 36:1b:04:6c:70:22:66:0b:66:1b:17:d7:c4:3d:d5: d5:e8:33:3c:10:a7:5a:6d:36:55:54:83:fc:13:91: 44:6d:1d:27:76:d4:fc:ff:61:ea:c2:12:c2:10:a7: 9a:5f:93:d3:ce:33:08:4e:16:63:76:f0:6c:58:22: 5d:21:51:e4:68:5e:b1:70:d6:f4:a8:2e:72:c0:16: f7:77:af:3b:45:09:54:49:f9:46:d1:f8:6e:ef:34: 5c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1F:44:70:05:E7:BD:B5:1C:BB:6D:22:C2:56:81:91:A6:63:DB:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/bd45bdd8-9952-35e1-9d9c-061421883004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:8d:e2:71:bb:43:6b:66:de:ac:ed:5f:c2:ae:e0:1a:40:9c: 60:55:51:d9:07:aa:bb:a1:f8:66:c0:11:be:83:30:e4:12:47: 1a:55:d7:25:be:cf:f9:04:50:9b:1a:ea:5b:d5:9b:c0:dd:80: 89:2f:8a:f9:16:73:31:f2:6f:ea:f1:87:83:46:4b:bc:78:36: 61:e0:39:b9:bd:ba:ce:63:2b:ae:eb:d7:45:20:e1:7e:a9:e9: d4:89:2a:99:bd:d6:f7:d1:f0:f4:96:cf:86:25:0b:fc:86:02: 0a:17:00:28:2b:6c:c2:64:08:88:36:ca:a5:7d:01:e6:99:8f: 25:80:e9:63:ca:6b:80:d6:a3:c1:b0:3d:3e:84:fb:88:44:83: 65:36:a0:87:21:47:df:97:41:25:a8:1d:d2:d0:0a:d7:0a:5e: d8:17:50:d6:3d:54:15:c5:3d:0c:1b:7c:c5:4a:1c:81:e0:6c: 04:0d:73:67:47:d3:60:b5:4a:c5:29:15:92:f9:dc:20:f3:e2: 24:aa:cc:84:18:ef:64:ec:b2:a5:a6:4c:cd:87:1b:85:72:22: 42:1c:e5:f9:c9:d7:d1:cb:31:e2:4f:4c:d2:0d:40:8e:d2:d5: a2:68:32:4f:a8:0f:4c:5f:89:96:9b:34:48:be:e0:49:61:fe: b6:7a:d0:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEqkoX3yswNyGyNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk N2QwNzc5MjgtMmFkZC00ZTFlLThiNTMtMTg5MmY1NjUwZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwymSMgI8uSGbGdBrooH3hkAggMakpev3WYa4 5BU00f9j3PqMnW5nE0wULAJo2OfvPUJCNOr3g5AjwyPiZc8qbXAVUCSoPEkpAU58 giPimogA2leQ7tKGloXdTjAuZnM5CKgtQOPu/V/EC+9V2t4J5WibEG1Ev7nH1WST oiOuv7mISjCZE3xsWNrOQZ/a1jjQ9Yudrx2Sas9J3sa39YFPngTXAZU2GwRscCJm C2YbF9fEPdXV6DM8EKdabTZVVIP8E5FEbR0ndtT8/2HqwhLCEKeaX5PTzjMIThZj dvBsWCJdIVHkaF6xcNb0qC5ywBb3d687RQlUSflG0fhu7zRc0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIgfRHAF5721HLttIsJWgZGmY9uRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvYmQ0NWJkZDgtOTk1Mi0z NWUxLTlkOWMtMDYxNDIxODgzMDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn6whMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaN4nG7Q2tm3qztX8Ku4BpAnGBVUdkHqruh+GbAEb6DMOQSRxpV1yW+ z/kEUJsa6lvVm8DdgIkvivkWczHyb+rxh4NGS7x4NmHgObm9us5jK67r10Ug4X6p 6dSJKpm91vfR8PSWz4YlC/yGAgoXACgrbMJkCIg2yqV9AeaZjyWA6WPKa4DWo8Gw PT6E+4hEg2U2oIchR9+XQSWoHdLQCtcKXtgXUNY9VBXFPQwbfMVKHIHgbAQNc2dH 02C1SsUpFZL53CDz4iSqzIQY72TssqWmTM2HG4VyIkIc5fnJ19HLMeJPTNINQI7S 1aJoMk+oD0xfiZabNEi+4Elh/rZ60Gw= -----END CERTIFICATE-----Generated at Sat Sep 26 22:57:49 2026 by rpki-client