$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/13ab8837-7399-34cf-9991-a8cf72dc3218.roa File: 13ab8837-7399-34cf-9991-a8cf72dc3218.roa (raw, json) Hash identifier: TV3pskzLO+h37gK9V5yKQgP9Oq2Qc6/AbLli/K2dpn4= Subject key identifier: CE:B2:45:F5:DE:B4:30:FF:3D:2A:42:BE:BD:28:2D:19:40:F5:92:8A Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584C996739EB7C18113EF7F6A840 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/13ab8837-7399-34cf-9991-a8cf72dc3218.roa Signing time: Wed 21 Jan 2026 14:00:38 +0000 ROA not before: Wed 21 Jan 2026 14:00:38 +0000 ROA not after: Tue 21 Apr 2026 13:00:38 +0000 asID: 14618 IP address blocks: 159.172.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:99:67:39:eb:7c:18:11:3e:f7:f6:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Jan 21 14:00:38 2026 GMT Not After : Apr 21 13:00:38 2026 GMT Subject: CN=a329b7f8-526d-4924-a0f3-1857beecd722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1e:15:37:23:d2:92:ba:06:61:b7:7e:7e:75: 81:9c:ce:39:c6:75:ed:e5:4a:d0:77:86:77:7d:78: 30:7d:97:5b:35:3e:1f:c1:3e:c9:5e:62:47:1f:c0: 4f:96:9a:a5:92:66:d4:a4:a3:f4:f5:23:ea:95:79: 20:a3:2a:c7:bb:d1:ea:34:12:23:1c:50:44:58:fb: 13:0c:2b:08:be:4c:9a:30:52:88:04:37:21:cd:1c: 55:42:33:a6:ce:55:04:17:5a:32:f7:b9:bb:c4:dc: e2:32:a8:f5:5f:b9:2e:38:3b:57:5f:06:46:bb:af: d9:ac:64:33:e6:36:60:84:34:0c:21:31:99:eb:31: 0e:a5:92:ba:10:e5:6b:27:76:76:ee:5b:14:fd:cf: ca:95:37:6d:ce:d2:fd:56:b1:bb:d0:0d:1b:d8:ce: 2a:f3:13:e9:81:c7:08:5e:02:85:ab:62:08:e1:62: ff:0c:b1:94:33:ae:78:bb:a9:7c:a0:0f:84:76:b7: b8:e1:ba:f6:53:0a:67:7e:84:ec:4c:e0:eb:84:35: fa:dd:14:f7:14:ac:c8:98:3c:89:06:99:35:fa:81: dd:1b:f9:8f:9e:f0:24:13:8c:12:22:93:a1:28:04: c2:37:a1:25:54:77:4d:c5:d1:a0:50:11:60:41:0e: d1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B2:45:F5:DE:B4:30:FF:3D:2A:42:BE:BD:28:2D:19:40:F5:92:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/13ab8837-7399-34cf-9991-a8cf72dc3218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:17:f3:a6:35:73:d5:5e:7f:00:76:a1:b7:49:4d:67:2c:6f: dc:e8:a1:99:ab:7a:e4:20:49:ca:f3:44:8f:b4:b3:92:02:94: 8f:cd:91:93:a8:d7:24:91:37:ab:85:6c:17:d9:51:f1:02:9d: e2:a2:25:4e:74:70:88:95:26:3e:3a:13:ed:d0:ed:20:b3:a9: 8e:c4:54:19:2a:d0:9f:c9:e7:7e:47:f5:fc:7d:67:05:81:4f: e1:bd:20:31:95:bf:a8:ca:b6:41:df:8e:5b:37:55:e9:25:f9: 70:17:41:96:93:7e:35:f5:82:af:65:66:95:17:02:65:07:0f: a4:a0:fc:7b:9c:2f:ab:e3:aa:7c:3e:13:25:85:22:41:e7:00: 55:44:c3:61:3e:f0:de:54:2a:65:5b:19:52:0c:33:74:db:86: 83:81:83:a3:2d:73:a6:dd:0b:7e:9b:97:60:c8:59:70:91:a7: 8d:91:88:a1:6c:cc:98:53:e3:cb:d7:e4:a4:40:f8:84:79:a7: f8:f8:07:4e:45:4d:c7:dd:b6:29:65:4e:1f:61:91:4d:28:20: ef:49:dd:ae:79:17:79:c9:51:66:7d:a0:63:ff:15:de:53:21: d7:e5:22:94:ed:9e:f8:26:2f:d2:3d:12:f8:87:1e:3f:2d:70: af:69:71:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyZZznrfBgRPvf2qEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI2MDEyMTE0MDAzOFoXDTI2MDQyMTEzMDAzOFowLzEtMCsGA1UEAxMk YTMyOWI3ZjgtNTI2ZC00OTI0LWEwZjMtMTg1N2JlZWNkNzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h4VNyPSkroGYbd+fnWBnM45xnXt5UrQd4Z3 fXgwfZdbNT4fwT7JXmJHH8BPlpqlkmbUpKP09SPqlXkgoyrHu9HqNBIjHFBEWPsT DCsIvkyaMFKIBDchzRxVQjOmzlUEF1oy97m7xNziMqj1X7kuODtXXwZGu6/ZrGQz 5jZghDQMITGZ6zEOpZK6EOVrJ3Z27lsU/c/KlTdtztL9VrG70A0b2M4q8xPpgccI XgKFq2II4WL/DLGUM654u6l8oA+Edre44br2UwpnfoTsTODrhDX63RT3FKzImDyJ Bpk1+oHdG/mPnvAkE4wSIpOhKATCN6ElVHdNxdGgUBFgQQ7RRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6yRfXetDD/PSpCvr0oLRlA9ZKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvMTNhYjg4MzctNzM5OS0z NGNmLTk5OTEtYThjZjcyZGMzMjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGn6yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwX86Y1c9VefwB2obdJTWcsb9zooZmreuQgScrzRI+0s5IClI/NkZOo 1ySRN6uFbBfZUfECneKiJU50cIiVJj46E+3Q7SCzqY7EVBkq0J/J535H9fx9ZwWB T+G9IDGVv6jKtkHfjls3Vekl+XAXQZaTfjX1gq9lZpUXAmUHD6Sg/HucL6vjqnw+ EyWFIkHnAFVEw2E+8N5UKmVbGVIMM3TbhoOBg6Mtc6bdC36bl2DIWXCRp42RiKFs zJhT48vX5KRA+IR5p/j4B05FTcfdtillTh9hkU0oIO9J3a55F3nJUWZ9oGP/Fd5T IdflIpTtnvgmL9I9EviHHj8tcK9pcYo= -----END CERTIFICATE-----Generated at Mon Mar 2 14:42:26 2026 by rpki-client