$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/f6d68dba-d848-3dd8-a54d-613d3de5cd57.roa File: f6d68dba-d848-3dd8-a54d-613d3de5cd57.roa (raw, json) Hash identifier: HHunnROpAag+s98r2ukqsUyWJENlzphx1u9qm7iB5jI= Subject key identifier: C0:C7:0E:06:0B:5A:58:55:9C:36:A5:6C:C7:F4:E9:8D:84:70:9A:1F Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584DBE6B35435DC0EE5BD1510F00 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/f6d68dba-d848-3dd8-a54d-613d3de5cd57.roa Signing time: Wed 06 May 2026 13:00:30 +0000 ROA not before: Wed 06 May 2026 13:00:30 +0000 ROA not after: Tue 04 Aug 2026 13:00:30 +0000 asID: 16509 IP address blocks: 159.172.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:be:6b:35:43:5d:c0:ee:5b:d1:51:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: May 6 13:00:30 2026 GMT Not After : Aug 4 13:00:30 2026 GMT Subject: CN=20010daa-e4de-45f5-b612-2e4684a89306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a2:d8:61:b5:f0:66:4b:5c:e5:30:dc:c2:20: c1:d2:03:21:0a:07:be:75:10:24:4a:63:20:75:be: b5:dd:74:88:ce:8f:35:89:26:a1:7f:c4:ce:49:fc: 01:77:f6:3e:4a:ed:ab:12:05:0f:5a:9c:69:c3:3e: de:32:ab:dd:ca:a3:52:a9:cf:8c:0f:3b:e2:70:d0: de:20:8a:bc:7d:e9:29:a3:82:5b:a6:1d:06:d4:aa: f9:4a:35:d4:c8:bd:f2:92:57:69:57:8f:74:5f:1d: 49:78:39:ed:15:76:cd:3d:06:d2:ee:84:01:05:61: 66:fe:15:e9:ef:9c:42:12:d2:cd:9d:d9:1e:64:a2: ec:2e:84:21:e5:87:eb:84:5a:ab:b1:bd:dc:e3:b1: 05:fa:bb:2f:3c:82:1a:78:ea:c9:92:e5:32:c4:43: 5d:4b:ce:bf:4a:a7:55:de:0d:8f:87:0d:ef:9c:4b: 0a:f5:45:67:4e:d8:e5:58:69:9d:8a:02:1b:a7:e2: 74:0a:99:af:21:ea:90:c8:84:5c:a3:78:f1:b3:3b: d2:13:80:47:01:3a:b2:84:5d:9d:33:26:bd:bb:51: de:1a:cc:1a:64:9f:c7:a7:36:22:e5:8f:a9:9a:03: 14:20:ce:09:cd:3a:02:f4:7b:96:14:0c:da:36:c4: 72:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C7:0E:06:0B:5A:58:55:9C:36:A5:6C:C7:F4:E9:8D:84:70:9A:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/f6d68dba-d848-3dd8-a54d-613d3de5cd57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:29:2d:0d:e2:27:a9:1b:75:4a:d2:75:2e:5e:e6:6d:9f:a2: 7d:7d:91:20:6e:d0:04:72:b1:74:9c:5d:af:04:c6:51:4c:6b: 1d:04:a8:95:d1:d1:45:79:df:24:d0:6b:71:fa:4a:12:05:18: e4:e5:d1:10:56:f7:aa:2e:65:3b:6e:87:a1:cc:da:6a:15:1c: c1:97:ff:82:bf:d3:a7:df:60:d9:70:c1:29:6c:1e:0d:4b:88: 13:8f:5f:19:d6:0f:cd:bb:60:14:9e:72:d9:9a:40:b6:2b:e8: d4:bf:03:c8:c0:b7:06:3d:d5:00:c6:d6:b5:76:7b:af:e4:67: 95:e5:e0:7f:19:09:86:49:e9:98:9c:90:02:a4:6e:50:a0:b0: 63:bf:29:87:ef:db:53:27:cb:46:cd:b0:8e:c7:0b:56:07:2e: 83:06:ef:79:06:e7:f5:f1:d5:ad:79:72:38:ea:b3:10:19:8e: cc:c1:a1:ba:41:2e:ac:ad:fd:0b:0e:2c:64:9d:b2:b5:17:22: 65:6a:2e:22:d6:65:79:5f:27:4e:88:93:15:74:78:07:1d:ea: 02:94:a0:0f:24:a3:ce:68:75:92:09:08:fe:d7:3b:62:d6:0e: 6c:7d:88:3c:4f:09:9d:c2:89:04:6e:f2:6d:d9:63:9a:53:b4: a2:d2:32:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2+azVDXcDuW9FRDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI2MDUwNjEzMDAzMFoXDTI2MDgwNDEzMDAzMFowLzEtMCsGA1UEAxMk MjAwMTBkYWEtZTRkZS00NWY1LWI2MTItMmU0Njg0YTg5MzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqLYYbXwZktc5TDcwiDB0gMhCge+dRAkSmMg db613XSIzo81iSahf8TOSfwBd/Y+Su2rEgUPWpxpwz7eMqvdyqNSqc+MDzvicNDe IIq8fekpo4Jbph0G1Kr5SjXUyL3ykldpV490Xx1JeDntFXbNPQbS7oQBBWFm/hXp 75xCEtLNndkeZKLsLoQh5YfrhFqrsb3c47EF+rsvPIIaeOrJkuUyxENdS86/SqdV 3g2Phw3vnEsK9UVnTtjlWGmdigIbp+J0CpmvIeqQyIRco3jxszvSE4BHATqyhF2d Mya9u1HeGswaZJ/HpzYi5Y+pmgMUIM4JzToC9HuWFAzaNsRyGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDHDgYLWlhVnDalbMf06Y2EcJofMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvZjZkNjhkYmEtZDg0OC0z ZGQ4LWE1NGQtNjEzZDNkZTVjZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn6whMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcpLQ3iJ6kbdUrSdS5e5m2fon19kSBu0ARysXScXa8ExlFMax0EqJXR 0UV53yTQa3H6ShIFGOTl0RBW96ouZTtuh6HM2moVHMGX/4K/06ffYNlwwSlsHg1L iBOPXxnWD827YBSectmaQLYr6NS/A8jAtwY91QDG1rV2e6/kZ5Xl4H8ZCYZJ6Zic kAKkblCgsGO/KYfv21Mny0bNsI7HC1YHLoMG73kG5/Xx1a15cjjqsxAZjszBobpB Lqyt/QsOLGSdsrUXImVqLiLWZXlfJ06IkxV0eAcd6gKUoA8ko85odZIJCP7XO2LW Dmx9iDxPCZ3CiQRu8m3ZY5pTtKLSMmQ= -----END CERTIFICATE-----Generated at Wed May 13 13:13:44 2026 by rpki-client