$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cf09a183-7514-346f-a223-607c0b53d3ec.roa File: cf09a183-7514-346f-a223-607c0b53d3ec.roa (raw, json) Hash identifier: VcPQgS+S8zNGlYhdbZjD50Lb3rppHYgGZ1u2ygivKEg= Subject key identifier: 2E:7D:02:8A:B5:5C:E3:2B:4D:F3:74:24:4A:2B:1C:34:37:38:41:70 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584D7A054F120339F93C1BE2A2A0 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cf09a183-7514-346f-a223-607c0b53d3ec.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 159.172.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:4f:12:03:39:f9:3c:1b:e2:a2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=3e0d9f30-ebad-4439-9481-0e99c6a5ee9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5d:1d:c5:de:9b:cc:3a:88:bb:3a:1a:03:24: 69:15:bf:0a:45:c5:c6:1b:33:e3:06:ac:e9:ea:d4: be:db:0d:66:13:1e:55:0e:4e:0f:e0:2d:c3:ac:64: b1:5c:47:b3:03:d7:f1:43:f8:fa:e7:77:f1:68:30: 10:6d:47:55:bf:ed:89:56:81:23:36:24:27:c5:59: b4:45:fb:2b:28:35:0e:a8:e0:59:7b:fc:86:47:3a: fb:6c:9c:d6:bc:88:b4:6e:1c:18:2b:51:bc:aa:44: 77:73:5f:bf:4a:21:1f:3f:39:40:58:3e:84:96:d2: 0d:10:43:48:ac:fa:93:6d:45:cf:d8:98:a4:c5:3b: c4:90:4e:e7:6c:e6:f6:c1:87:6d:e5:21:76:5b:21: 6f:56:f4:78:48:5b:8d:dd:70:b5:0a:27:ce:93:f9: 78:c6:00:f1:96:9a:08:1e:b8:3d:d3:59:61:99:1c: b3:4a:1b:8e:76:3f:32:ce:c3:95:5c:62:b8:ae:33: 5d:06:e2:93:0d:69:3d:0b:b8:8e:c6:4a:6d:1f:a6: 8f:b1:e0:a9:a4:86:81:3b:24:dc:a3:3b:89:5e:77: dc:c9:f6:0f:c2:e8:8b:76:1c:54:65:dd:f0:55:07: f6:6e:e9:4a:de:86:48:5b:c8:e8:d9:a8:9f:80:fe: 2d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7D:02:8A:B5:5C:E3:2B:4D:F3:74:24:4A:2B:1C:34:37:38:41:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/cf09a183-7514-346f-a223-607c0b53d3ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c4:75:b5:33:b1:5e:4f:a4:07:ed:40:b0:63:75:8e:ab:44: b6:ef:31:91:62:3f:db:87:33:4c:7d:94:06:59:da:a5:37:df: 68:d2:be:7e:ce:72:8d:80:30:0d:7e:70:1a:28:24:f7:de:2f: 92:e0:11:b9:d1:03:76:e3:7a:6f:13:b9:81:ed:42:94:f4:40: 71:1f:f6:41:99:98:b9:f2:3c:f3:a6:b2:02:e6:5b:aa:24:51: ae:60:67:e5:58:19:e5:b6:02:4f:34:87:95:7d:3f:91:ee:c6: 93:08:0b:93:61:77:d9:ff:b2:42:84:c3:76:4c:45:c6:23:e4: ba:a2:1b:cb:4a:8b:0b:07:90:5e:7b:51:33:d7:f0:35:d5:e2: 41:68:86:97:92:d9:ec:41:ca:14:4b:22:88:be:15:c1:26:c3: 3c:f4:b7:0b:99:fe:2c:69:11:50:ce:56:0b:23:cf:52:83:57: 91:3f:66:66:54:7a:00:ad:37:2e:e6:51:ed:88:09:6f:33:35: 39:80:cb:d9:c4:b4:91:bb:1b:57:a9:dc:1f:d1:0f:f5:a3:5d: 2f:5c:d4:5b:b8:0a:b4:83:23:b8:06:f0:69:a6:78:d9:8c:f2: d9:d7:b8:79:a8:f0:26:42:6a:3a:ff:ac:2d:2e:2a:72:af:22: 8a:b7:d7:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BU8SAzn5PBvioqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk M2UwZDlmMzAtZWJhZC00NDM5LTk0ODEtMGU5OWM2YTVlZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l0dxd6bzDqIuzoaAyRpFb8KRcXGGzPjBqzp 6tS+2w1mEx5VDk4P4C3DrGSxXEezA9fxQ/j653fxaDAQbUdVv+2JVoEjNiQnxVm0 RfsrKDUOqOBZe/yGRzr7bJzWvIi0bhwYK1G8qkR3c1+/SiEfPzlAWD6EltINEENI rPqTbUXP2JikxTvEkE7nbOb2wYdt5SF2WyFvVvR4SFuN3XC1CifOk/l4xgDxlpoI Hrg901lhmRyzShuOdj8yzsOVXGK4rjNdBuKTDWk9C7iOxkptH6aPseCppIaBOyTc ozuJXnfcyfYPwuiLdhxUZd3wVQf2bulK3oZIW8jo2aifgP4t3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC59Aoq1XOMrTfN0JEorHDQ3OEFwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvY2YwOWExODMtNzUxNC0z NDZmLWEyMjMtNjA3YzBiNTNkM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGn6yAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLEdbUzsV5PpAftQLBjdY6rRLbvMZFiP9uHM0x9lAZZ2qU332jSvn7O co2AMA1+cBooJPfeL5LgEbnRA3bjem8TuYHtQpT0QHEf9kGZmLnyPPOmsgLmW6ok Ua5gZ+VYGeW2Ak80h5V9P5HuxpMIC5Nhd9n/skKEw3ZMRcYj5LqiG8tKiwsHkF57 UTPX8DXV4kFohpeS2exByhRLIoi+FcEmwzz0twuZ/ixpEVDOVgsjz1KDV5E/ZmZU egCtNy7mUe2ICW8zNTmAy9nEtJG7G1ep3B/RD/WjXS9c1Fu4CrSDI7gG8GmmeNmM 8tnXuHmo8CZCajr/rC0uKnKvIoq312s= -----END CERTIFICATE-----Generated at Fri Apr 17 17:17:48 2026 by rpki-client