$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cf09a183-7514-346f-a223-607c0b53d3ec.roa File: cf09a183-7514-346f-a223-607c0b53d3ec.roa (raw, json) Hash identifier: 5QTm/blZHiIh1/mN/N+KpOrhqRzB51LMf4aGWvojQYw= Subject key identifier: E9:D3:E4:0C:E9:9C:11:CE:ED:00:4A:1B:69:A6:19:4D:EB:84:F0:D0 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584E5A4A20E5FE04C11943648C00 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cf09a183-7514-346f-a223-607c0b53d3ec.roa Signing time: Wed 01 Jul 2026 09:00:12 +0000 ROA not before: Wed 01 Jul 2026 09:00:12 +0000 ROA not after: Tue 29 Sep 2026 09:00:12 +0000 asID: 16509 IP address blocks: 159.172.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:4a:20:e5:fe:04:c1:19:43:64:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Jul 1 09:00:12 2026 GMT Not After : Sep 29 09:00:12 2026 GMT Subject: CN=2841e9ef-a710-447e-9f24-05b884c3cedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f7:56:9a:ed:b9:ba:b4:b8:3c:2b:23:08:c3: 47:2d:a2:41:b2:16:00:fa:83:77:50:28:04:d8:d2: 8b:b6:17:3d:4b:8b:33:a7:3b:24:96:f7:db:fd:00: 25:b5:4c:2f:0e:aa:67:d5:f4:f7:1b:f3:49:f1:a6: 22:44:96:1b:ee:4a:7f:42:5a:d1:2f:98:69:5b:5e: 13:d4:f3:45:1d:2f:ce:dd:54:a0:45:0d:c8:7f:96: 3e:ae:41:01:0f:ec:27:8b:0c:cc:26:a7:10:db:02: 45:4d:4a:a7:6e:d0:ea:59:83:1e:20:f2:b1:2d:9b: 27:84:c8:54:33:40:1e:ff:eb:00:b0:02:bf:b7:77: 95:4c:eb:95:b5:6b:08:28:70:b9:60:f0:25:23:a2: 4b:24:fe:fa:27:15:f2:ee:93:c8:b8:5f:96:ab:fa: 1a:8a:ec:7f:3f:59:96:21:a6:4e:02:3c:b1:03:0d: 69:c0:a9:67:e3:43:1a:d4:e9:87:9e:c2:af:10:72: 7a:db:80:b6:06:61:d3:00:bb:2e:05:31:7f:11:b7: 7d:85:61:4e:0c:c9:8d:7a:c3:26:8a:9d:13:b7:79: a9:c1:ac:da:1d:c0:c7:94:e4:64:5d:fb:f9:dc:46: 66:a5:44:09:74:78:08:34:2a:67:2f:b1:3a:9a:0d: d3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D3:E4:0C:E9:9C:11:CE:ED:00:4A:1B:69:A6:19:4D:EB:84:F0:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cf09a183-7514-346f-a223-607c0b53d3ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:f6:5b:b2:80:9a:f9:ca:00:04:03:4f:e6:6a:47:c7:dc:53: 31:fd:fd:34:a7:f7:82:1f:c9:4b:98:61:5a:a1:ea:68:78:c0: 61:5e:13:c4:06:37:a3:7b:67:90:ce:21:d0:b4:d0:32:24:da: ec:58:b1:ad:7b:d9:42:56:2c:f7:71:65:ad:1d:c2:27:d6:4f: f9:a8:51:83:ac:37:68:6f:6f:b2:29:74:a7:b6:a9:29:4f:46: 1d:24:97:ab:ee:44:f8:89:43:27:01:b3:c1:5a:a2:96:4a:53: a0:e7:44:c6:7c:f3:b5:37:8b:31:cd:37:ca:42:9f:c2:2e:4a: 4c:da:53:62:69:68:4a:7e:4f:4a:d5:e7:3f:2c:d4:e9:bf:2d: 60:3a:69:fe:21:b6:ed:d7:e3:3f:35:84:dd:c8:77:28:35:08: 6c:9b:92:25:79:f0:5b:e6:09:10:37:0b:b3:47:60:b2:ec:eb: 4c:dd:86:07:b1:e3:77:17:36:43:b3:85:8c:1c:dd:80:81:8c: 34:82:6f:a1:8f:f7:b9:b3:51:55:51:da:86:9c:fd:15:2f:74: 98:eb:c3:07:17:3d:ae:79:95:5b:e4:6c:f0:de:ef:6e:38:2d: 1e:39:96:33:ff:94:1b:0a:64:f1:d9:58:90:5c:53:cf:60:45: 98:7e:1a:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5aSiDl/gTBGUNkjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI2MDcwMTA5MDAxMloXDTI2MDkyOTA5MDAxMlowLzEtMCsGA1UEAxMk Mjg0MWU5ZWYtYTcxMC00NDdlLTlmMjQtMDViODg0YzNjZWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfdWmu25urS4PCsjCMNHLaJBshYA+oN3UCgE 2NKLthc9S4szpzsklvfb/QAltUwvDqpn1fT3G/NJ8aYiRJYb7kp/QlrRL5hpW14T 1PNFHS/O3VSgRQ3If5Y+rkEBD+wniwzMJqcQ2wJFTUqnbtDqWYMeIPKxLZsnhMhU M0Ae/+sAsAK/t3eVTOuVtWsIKHC5YPAlI6JLJP76JxXy7pPIuF+Wq/oaiux/P1mW IaZOAjyxAw1pwKln40Ma1OmHnsKvEHJ624C2BmHTALsuBTF/Ebd9hWFODMmNesMm ip0Tt3mpwazaHcDHlORkXfv53EZmpUQJdHgINCpnL7E6mg3ToQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnT5AzpnBHO7QBKG2mmGU3rhPDQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvY2YwOWExODMtNzUxNC0z NDZmLWEyMjMtNjA3YzBiNTNkM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGn6yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGb2W7KAmvnKAAQDT+ZqR8fcUzH9/TSn94IfyUuYYVqh6mh4wGFeE8QG N6N7Z5DOIdC00DIk2uxYsa172UJWLPdxZa0dwifWT/moUYOsN2hvb7IpdKe2qSlP Rh0kl6vuRPiJQycBs8FaopZKU6DnRMZ887U3izHNN8pCn8IuSkzaU2JpaEp+T0rV 5z8s1Om/LWA6af4htu3X4z81hN3Idyg1CGybkiV58FvmCRA3C7NHYLLs60zdhgex 43cXNkOzhYwc3YCBjDSCb6GP97mzUVVR2oac/RUvdJjrwwcXPa55lVvkbPDe7244 LR45ljP/lBsKZPHZWJBcU89gRZh+GrI= -----END CERTIFICATE-----Generated at Fri Jul 24 16:21:42 2026 by rpki-client