$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/d88d9f5d-6500-325a-a956-6f65e86a676f.roa File: d88d9f5d-6500-325a-a956-6f65e86a676f.roa (raw, json) Hash identifier: F/G6wMxE2FRDV+Ig9Dg3pRP8v0xfeUp7oL4Iipl8dHQ= Subject key identifier: 5C:E8:7E:7E:C6:28:40:EF:C8:84:AB:7D:0A:A9:88:5E:BB:BD:E8:8D Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584CEFF221CDD4DA7F351296BBA0 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/d88d9f5d-6500-325a-a956-6f65e86a676f.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 14618 IP address blocks: 159.172.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:21:cd:d4:da:7f:35:12:96:bb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=50c8ed49-31d3-4146-b177-aa1836cb1881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c1:63:94:ee:90:b0:c1:94:fe:19:dd:62:07: c2:a6:de:56:0e:97:c0:50:4a:ad:c4:9a:f7:61:a1: 90:30:1b:52:02:f5:77:fe:66:64:79:17:d8:3b:02: 6e:78:b3:ef:e4:85:79:1d:93:2f:ef:06:9d:b1:b4: 68:82:64:e9:b4:c8:69:79:cd:2e:d6:8b:eb:90:a8: 5b:12:3e:5b:b2:4e:76:54:fb:e6:90:e0:6a:e4:84: d9:46:49:12:e9:b1:77:c1:79:37:29:40:c8:ae:1b: bc:72:16:24:67:44:5f:d0:ff:88:f3:2c:6d:dc:4f: 97:f2:f2:a5:d7:14:74:12:54:56:a6:ae:06:61:e5: 67:37:61:2f:92:65:cb:60:0b:f7:d9:47:fe:53:5a: 43:78:68:ad:f3:58:a8:56:c3:94:03:c8:2b:d0:a0: 6c:dc:1b:8c:93:f4:04:3c:54:8e:87:da:eb:dd:7d: bf:86:2b:74:c6:bd:c5:ae:2d:dd:6a:ef:d5:90:65: 91:35:f6:ae:b8:67:19:c6:e2:b0:08:ff:53:08:b1: 0d:7e:d0:71:29:65:be:1f:e2:9d:30:85:a1:6f:14: e0:0a:1c:9f:30:ae:89:da:55:04:52:c7:ab:94:67: 3b:7a:ae:72:53:77:89:18:11:16:84:e2:3f:a6:a4: 8f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E8:7E:7E:C6:28:40:EF:C8:84:AB:7D:0A:A9:88:5E:BB:BD:E8:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/d88d9f5d-6500-325a-a956-6f65e86a676f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:18:42:df:ab:2c:cc:3c:98:08:28:10:ff:8f:76:da:48:f4: 67:c1:cb:be:b2:53:b8:00:83:95:00:59:66:e7:c9:1f:29:55: ff:f2:1d:b3:44:0a:60:d7:16:31:0b:41:9e:34:8e:86:63:de: f0:1c:da:fc:ef:5d:b3:66:86:42:dd:af:f9:b9:3e:59:a2:4b: de:7e:ac:28:be:b5:b3:ef:aa:ef:10:e8:2b:e6:a9:6a:22:4a: a8:74:15:38:a8:9b:f2:80:4e:ae:3c:71:ab:c5:94:c0:43:09: a2:8f:a7:47:7b:d7:f8:79:a5:5c:f8:8b:a9:a5:28:de:80:e8: 26:97:73:f1:e0:c7:32:d2:24:e1:9f:e2:10:10:45:23:f8:7a: e7:fb:cc:cb:61:0b:cc:ff:b4:b7:5a:db:b6:b7:e7:af:d0:16: 77:71:30:05:18:3a:34:c8:ec:b6:bd:1a:bc:83:f9:4e:b6:30: 19:e0:be:ab:df:6b:4a:aa:43:df:59:e0:28:9c:c7:ae:fa:33: e8:ab:1b:f3:63:06:4c:ca:e1:f1:d4:75:5f:4e:1e:c5:cf:18: fe:60:13:09:4c:cf:49:ea:ff:22:aa:5d:8b:e4:6e:88:b3:1b: 9d:31:08:6f:66:71:2e:51:8e:de:9d:28:3f:33:7e:e9:08:3b: 8c:bc:d8:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8iHN1Np/NRKWu6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk NTBjOGVkNDktMzFkMy00MTQ2LWIxNzctYWExODM2Y2IxODgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8FjlO6QsMGU/hndYgfCpt5WDpfAUEqtxJr3 YaGQMBtSAvV3/mZkeRfYOwJueLPv5IV5HZMv7wadsbRogmTptMhpec0u1ovrkKhb Ej5bsk52VPvmkOBq5ITZRkkS6bF3wXk3KUDIrhu8chYkZ0Rf0P+I8yxt3E+X8vKl 1xR0ElRWpq4GYeVnN2EvkmXLYAv32Uf+U1pDeGit81ioVsOUA8gr0KBs3BuMk/QE PFSOh9rr3X2/hit0xr3Fri3dau/VkGWRNfauuGcZxuKwCP9TCLENftBxKWW+H+Kd MIWhbxTgChyfMK6J2lUEUserlGc7eq5yU3eJGBEWhOI/pqSPIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFzofn7GKEDvyISrfQqpiF67veiNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvZDg4ZDlmNWQtNjUwMC0z MjVhLWE5NTYtNmY2NWU4NmE2NzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn6w6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8YQt+rLMw8mAgoEP+PdtpI9GfBy76yU7gAg5UAWWbnyR8pVf/yHbNE CmDXFjELQZ40joZj3vAc2vzvXbNmhkLdr/m5PlmiS95+rCi+tbPvqu8Q6CvmqWoi Sqh0FTiom/KATq48cavFlMBDCaKPp0d71/h5pVz4i6mlKN6A6CaXc/HgxzLSJOGf 4hAQRSP4euf7zMthC8z/tLda27a356/QFndxMAUYOjTI7La9GryD+U62MBngvqvf a0qqQ99Z4Cicx676M+irG/NjBkzK4fHUdV9OHsXPGP5gEwlMz0nq/yKqXYvkboiz G50xCG9mcS5Rjt6dKD8zfukIO4y82Ao= -----END CERTIFICATE-----Generated at Mon Mar 2 13:03:19 2026 by rpki-client