$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cc642cc8-e962-3e0e-9fd3-b811e41de541.roa File: cc642cc8-e962-3e0e-9fd3-b811e41de541.roa (raw, json) Hash identifier: kbb1JlHXW4dZT+uJFsgB1GuJQK63F9h6FXFMypmdqgg= Subject key identifier: 60:F5:D1:8A:8D:D9:11:BB:DA:56:54:21:E4:98:9D:0F:89:8D:91:38 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584E0A6FE8F9E2E16B04DAD44F00 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cc642cc8-e962-3e0e-9fd3-b811e41de541.roa Signing time: Tue 02 Jun 2026 18:32:03 +0000 ROA not before: Tue 02 Jun 2026 18:32:03 +0000 ROA not after: Mon 31 Aug 2026 18:32:03 +0000 asID: 16509 IP address blocks: 159.172.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0a:6f:e8:f9:e2:e1:6b:04:da:d4:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Jun 2 18:32:03 2026 GMT Not After : Aug 31 18:32:03 2026 GMT Subject: CN=e48895de-b1d1-40a6-b41e-04f7a004eae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:82:99:bf:88:ed:ed:6e:ff:5e:5b:d0:8a:6f: 8f:c7:3b:c8:3c:c4:5f:b5:25:61:9f:cf:50:e4:5a: b1:d1:54:57:44:f2:28:5e:6e:a2:e5:14:30:b2:71: 8e:c6:ed:f6:a5:41:24:25:22:89:7a:81:7d:a2:a2: cb:3c:fa:f4:26:91:1d:0c:9c:32:35:d9:3a:d2:ef: d1:f9:d0:81:90:ef:67:3d:3a:23:3e:0b:2d:0e:89: c8:aa:02:d5:85:6a:45:1a:11:03:9f:d1:5f:97:22: 67:28:c4:13:5b:76:4b:fd:b0:df:e2:1d:1c:22:ac: a8:a1:45:61:d4:71:58:ec:1f:04:36:52:b8:ec:2a: fa:b8:bc:64:3c:3c:28:74:1e:6b:93:30:5e:0d:89: ca:85:7d:76:8d:09:69:df:aa:91:59:d6:70:54:01: 40:89:49:08:0b:36:62:e0:a5:76:52:82:cc:67:d9: 64:a8:78:58:a7:2e:c9:4e:d9:26:f1:d2:98:92:53: 04:6e:49:d0:bb:da:e2:f2:5a:16:1a:b4:1a:d7:6e: dd:b4:92:25:27:e1:56:75:81:a6:a7:dd:65:9c:d3: 23:97:c1:8f:35:d6:c7:63:ed:7a:c7:88:26:a1:88: f1:50:a6:6f:ec:fb:76:2e:9c:8e:d3:63:ad:65:b4: 37:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F5:D1:8A:8D:D9:11:BB:DA:56:54:21:E4:98:9D:0F:89:8D:91:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cc642cc8-e962-3e0e-9fd3-b811e41de541.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:82:ba:0f:51:19:55:0a:6c:6d:22:1b:44:a5:10:33:3f:2a: 32:3e:1d:7a:e6:2d:4f:da:90:0b:63:bd:7f:6e:ba:eb:4d:be: 3b:31:fd:9c:9c:d1:c0:f0:c6:3e:20:4d:28:96:3d:31:d4:86: cf:43:80:48:e4:00:46:76:2d:9d:97:a5:25:ae:69:cc:43:73: f7:b6:dc:b5:cc:c4:71:ad:34:f3:4a:58:27:1f:b9:82:58:17: 99:ae:b7:5a:69:44:3f:f0:03:36:77:25:38:c3:e5:33:23:7b: 86:43:94:b0:f7:e2:8a:9c:8c:85:e2:40:6d:9e:40:05:d7:7f: df:ea:c8:cd:5e:0d:2d:b1:a3:a5:dc:f2:48:7e:a6:1a:81:5a: 19:fb:4f:f6:4b:b1:21:2c:eb:04:1e:73:d8:63:d1:37:5f:8f: 6b:cf:37:09:02:20:96:e7:6d:b0:04:14:71:2e:42:53:2a:58: 95:23:77:2b:1c:09:29:22:89:be:97:5e:3b:11:26:2a:ab:a6: fd:08:e8:9f:b9:0e:61:58:d6:d4:4c:c9:cc:e7:b1:3b:45:0b: e9:5a:3f:d9:e6:3c:af:1c:10:7c:5a:ac:da:59:b2:b2:e6:79: 9e:49:ba:f4:86:29:4f:fe:01:d7:ff:90:a1:9d:0e:2d:48:df: ac:23:92:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4Kb+j54uFrBNrUTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk ZTQ4ODk1ZGUtYjFkMS00MGE2LWI0MWUtMDRmN2EwMDRlYWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoKZv4jt7W7/XlvQim+PxzvIPMRftSVhn89Q 5Fqx0VRXRPIoXm6i5RQwsnGOxu32pUEkJSKJeoF9oqLLPPr0JpEdDJwyNdk60u/R +dCBkO9nPTojPgstDonIqgLVhWpFGhEDn9FflyJnKMQTW3ZL/bDf4h0cIqyooUVh 1HFY7B8ENlK47Cr6uLxkPDwodB5rkzBeDYnKhX12jQlp36qRWdZwVAFAiUkICzZi 4KV2UoLMZ9lkqHhYpy7JTtkm8dKYklMEbknQu9ri8loWGrQa127dtJIlJ+FWdYGm p91lnNMjl8GPNdbHY+16x4gmoYjxUKZv7Pt2LpyO02OtZbQ3lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGD10YqN2RG72lZUIeSYnQ+JjZE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvY2M2NDJjYzgtZTk2Mi0z ZTBlLTlmZDMtYjgxMWU0MWRlNTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEn6xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGCug9RGVUKbG0iG0SlEDM/KjI+HXrmLU/akAtjvX9uuutNvjsx/Zyc 0cDwxj4gTSiWPTHUhs9DgEjkAEZ2LZ2XpSWuacxDc/e23LXMxHGtNPNKWCcfuYJY F5mut1ppRD/wAzZ3JTjD5TMje4ZDlLD34oqcjIXiQG2eQAXXf9/qyM1eDS2xo6Xc 8kh+phqBWhn7T/ZLsSEs6wQec9hj0Tdfj2vPNwkCIJbnbbAEFHEuQlMqWJUjdysc CSkiib6XXjsRJiqrpv0I6J+5DmFY1tRMycznsTtFC+laP9nmPK8cEHxarNpZsrLm eZ5JuvSGKU/+Adf/kKGdDi1I36wjkt0= -----END CERTIFICATE-----Generated at Sat Jun 13 08:46:41 2026 by rpki-client