$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cc642cc8-e962-3e0e-9fd3-b811e41de541.roa File: cc642cc8-e962-3e0e-9fd3-b811e41de541.roa (raw, json) Hash identifier: DgYKktguhz0Evlzj0kV9GeiGJJIfiNA6/tJrK/wH4KU= Subject key identifier: 0F:D7:D4:AF:C8:76:66:44:47:5C:FB:C0:31:5F:AA:2F:AD:DE:7B:6A Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584F4F08042E6E18DDED399EBC80 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cc642cc8-e962-3e0e-9fd3-b811e41de541.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 159.172.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:04:2e:6e:18:dd:ed:39:9e:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=699d0214-4938-42d4-bd71-aba952f53c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:33:eb:cb:a7:ad:b7:30:7c:c0:ab:b7:9b: da:e3:9f:10:c5:a7:fe:7c:4b:3e:0e:24:f9:c6:b2: 70:ee:f6:7c:8f:8f:ef:f4:b3:08:2e:8e:c2:04:cc: c2:14:48:01:5f:0c:3d:73:40:20:d2:88:8d:57:d6: 29:a0:50:0a:bd:d0:11:20:59:31:94:0e:d3:5a:46: 35:47:cd:8d:f8:83:a5:a3:1d:1a:28:7b:e6:7b:c8: c0:78:50:18:6e:98:92:af:ef:09:2d:e1:ac:a0:80: 9b:03:ca:d1:b0:ba:36:74:74:22:4c:e8:53:e0:11: 53:65:a1:87:11:bd:67:a6:a9:da:81:17:87:60:86: eb:88:07:e1:78:7f:ee:ab:09:8f:b5:fe:c8:ff:c5: a8:b8:ca:81:c3:0b:22:68:98:39:18:a1:84:9e:cc: c2:95:da:f2:dd:4b:f5:75:47:86:25:a3:09:c0:1f: eb:8a:c9:63:d2:c8:7c:92:b7:de:d0:12:08:4d:00: 9b:95:1f:ad:44:19:d1:32:ee:f4:e2:e5:a5:48:c3: 92:f7:7c:56:eb:6e:6a:c2:b5:5e:c4:d1:36:69:9a: 6c:31:4f:7f:41:89:95:6c:e1:37:ba:0c:8d:02:fc: b8:25:79:9c:0d:bd:fc:6b:89:fb:65:6d:64:ef:5a: 58:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D7:D4:AF:C8:76:66:44:47:5C:FB:C0:31:5F:AA:2F:AD:DE:7B:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cc642cc8-e962-3e0e-9fd3-b811e41de541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:54:ae:20:e3:81:15:33:3f:9f:8b:d5:c7:5c:5c:ac:c4:62: a1:5e:33:87:41:06:51:24:45:71:d7:ad:3a:52:c5:66:2a:26: eb:74:6c:0a:54:30:fd:b1:72:d2:d0:b7:b2:67:14:74:b3:14: 69:66:a1:fb:7e:d0:5b:91:9f:c5:8a:ed:d6:0f:18:49:3f:c7: f2:8e:ef:db:9b:3c:09:25:ef:96:f5:94:2b:d2:c6:e2:fd:89: b5:d0:8b:55:7e:be:ab:4e:e0:7a:ed:88:53:53:2d:ef:20:57: d0:9b:89:0c:27:0a:60:7b:e6:9a:06:ae:04:75:7c:f5:12:df: 1e:26:02:70:a5:6a:47:6c:a7:5d:72:07:c8:99:fe:52:a8:85: d1:07:ff:08:2d:3c:43:27:16:47:77:c6:3a:a7:ce:f8:99:3f: ed:00:3c:b6:60:c7:7b:9d:22:41:00:7d:ff:43:b5:f6:d7:f6: 4a:6b:8d:42:b3:03:07:51:ec:f0:6e:70:63:57:ed:2c:14:61: 10:aa:fb:69:88:cd:89:6c:e7:89:9e:88:ab:37:8c:c8:10:72: 71:9d:17:41:9e:02:d9:49:29:36:eb:fa:2f:79:97:60:45:62: 1d:c3:d8:7d:0d:5c:e4:ed:be:02:6d:e5:12:1c:8d:bb:47:c1: 5b:57:b6:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCAQubhjd7TmevIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk Njk5ZDAyMTQtNDkzOC00MmQ0LWJkNzEtYWJhOTUyZjUzYzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsQz68unrbcwfMCrt5va458Qxaf+fEs+DiT5 xrJw7vZ8j4/v9LMILo7CBMzCFEgBXww9c0Ag0oiNV9YpoFAKvdARIFkxlA7TWkY1 R82N+IOlox0aKHvme8jAeFAYbpiSr+8JLeGsoICbA8rRsLo2dHQiTOhT4BFTZaGH Eb1npqnagReHYIbriAfheH/uqwmPtf7I/8WouMqBwwsiaJg5GKGEnszCldry3Uv1 dUeGJaMJwB/rislj0sh8krfe0BIITQCblR+tRBnRMu704uWlSMOS93xW625qwrVe xNE2aZpsMU9/QYmVbOE3ugyNAvy4JXmcDb38a4n7ZW1k71pYHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/X1K/IdmZER1z7wDFfqi+t3ntqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvY2M2NDJjYzgtZTk2Mi0z ZTBlLTlmZDMtYjgxMWU0MWRlNTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn6xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRUriDjgRUzP5+L1cdcXKzEYqFeM4dBBlEkRXHXrTpSxWYqJut0bApU MP2xctLQt7JnFHSzFGlmoft+0FuRn8WK7dYPGEk/x/KO79ubPAkl75b1lCvSxuL9 ibXQi1V+vqtO4HrtiFNTLe8gV9CbiQwnCmB75poGrgR1fPUS3x4mAnClakdsp11y B8iZ/lKohdEH/wgtPEMnFkd3xjqnzviZP+0APLZgx3udIkEAff9DtfbX9kprjUKz AwdR7PBucGNX7SwUYRCq+2mIzYls54meiKs3jMgQcnGdF0GeAtlJKTbr+i95l2BF Yh3D2H0NXOTtvgJt5RIcjbtHwVtXtsA= -----END CERTIFICATE-----Generated at Sun Sep 27 09:51:56 2026 by rpki-client