$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/d88d9f5d-6500-325a-a956-6f65e86a676f.roa File: d88d9f5d-6500-325a-a956-6f65e86a676f.roa (raw, json) Hash identifier: WNmzDnAl5gAID4UvERl5bujw27wWOUCDDLMb7FMIzgk= Subject key identifier: F0:C3:6E:82:1C:DA:13:38:10:EB:8F:64:14:31:13:4D:F6:80:C6:D9 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584EA787D6855BE1B2E99B027580 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/d88d9f5d-6500-325a-a956-6f65e86a676f.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14618 IP address blocks: 159.172.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:d6:85:5b:e1:b2:e9:9b:02:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ff77c6ac-7316-451f-baa7-567318bee9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:03:4f:a6:d2:d0:93:29:d0:91:34:2a:b6:a3: 70:d4:4a:c8:20:91:c4:5f:fa:f4:0e:06:65:e7:69: 66:73:44:00:d1:85:ca:40:e7:26:9a:97:37:fa:12: 14:af:d6:0f:9c:2d:be:66:8f:f2:eb:97:cd:43:5e: a8:a7:e1:43:06:95:38:da:d7:9f:58:e2:a7:1f:b5: f9:f4:a3:39:3b:81:cb:9a:8d:76:48:bd:4f:4b:18: 58:c6:ca:a5:92:e1:40:44:3f:71:d3:5a:ce:e3:23: fb:c4:d5:b6:21:2c:9c:59:ae:e6:64:5f:f8:ae:68: b7:2a:4c:8c:a2:94:a2:72:fa:90:5f:5f:8b:90:7d: 20:de:3e:b9:d9:19:16:b2:63:bd:d0:d8:3b:2e:1e: 1c:ca:90:4c:2a:fa:36:92:ea:6f:42:72:b4:ab:e1: 80:3d:60:05:05:22:90:f7:72:4a:b7:cf:57:14:ba: 91:16:df:4a:42:a5:e7:d4:1c:23:2d:de:b5:d3:91: f1:fa:ec:4a:ee:f7:3b:b1:df:5c:c0:9d:76:1c:66: 85:dd:57:3d:d6:c4:ff:71:1e:7f:1e:58:11:a3:59: c2:d3:6a:21:68:20:94:ef:45:e5:a8:96:58:4f:16: d9:cb:bb:a3:ff:28:68:84:4b:02:b4:65:de:bf:5d: ed:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C3:6E:82:1C:DA:13:38:10:EB:8F:64:14:31:13:4D:F6:80:C6:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/d88d9f5d-6500-325a-a956-6f65e86a676f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:f6:3a:f9:fc:63:f6:67:9f:5e:4b:db:06:da:51:dc:c9:63: ed:e5:49:e3:b5:fc:a5:60:61:85:8e:3c:47:e4:25:0d:9b:b5: 26:9c:c7:6a:21:d8:9a:0a:af:c9:77:4c:e9:1f:fb:ab:c7:e1: 9b:6e:68:8c:59:11:b5:8e:f2:af:9c:d4:b2:45:92:cc:62:85: ea:2e:34:f5:fa:13:cd:3a:4a:2b:76:38:3b:7f:1c:80:8c:50: c9:1e:44:ef:d8:2f:fe:5a:f7:25:9d:0a:c8:3c:6c:da:7a:a4: b4:5a:d5:d0:d0:4a:9f:3a:62:7a:47:e7:b3:c4:89:03:c6:b3: 0c:bb:32:52:d2:30:65:db:0c:14:52:18:27:58:86:18:35:88: 49:22:50:b4:04:28:70:72:12:98:d3:49:25:b5:62:6d:a5:22: 51:71:0c:ef:74:67:c3:c5:36:b4:36:c1:7e:c9:a9:84:e1:36: ab:73:02:d7:39:7d:a3:7f:1a:45:8e:c0:24:d7:cd:60:1d:f3: 1a:d9:39:a8:c7:31:10:66:03:12:01:27:fe:63:18:e3:21:6e: 60:f4:cf:ef:45:80:a7:0f:19:8b:f1:de:ff:49:ea:2a:d6:82: 16:56:16:f6:a9:27:ef:f2:f7:13:39:a5:98:f4:6b:4a:16:c5: 37:17:f2:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh9aFW+Gy6ZsCdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZmY3N2M2YWMtNzMxNi00NTFmLWJhYTctNTY3MzE4YmVlOWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigNPptLQkynQkTQqtqNw1ErIIJHEX/r0DgZl 52lmc0QA0YXKQOcmmpc3+hIUr9YPnC2+Zo/y65fNQ16op+FDBpU42tefWOKnH7X5 9KM5O4HLmo12SL1PSxhYxsqlkuFARD9x01rO4yP7xNW2ISycWa7mZF/4rmi3KkyM opSicvqQX1+LkH0g3j652RkWsmO90Ng7Lh4cypBMKvo2kupvQnK0q+GAPWAFBSKQ 93JKt89XFLqRFt9KQqXn1BwjLd6105Hx+uxK7vc7sd9cwJ12HGaF3Vc91sT/cR5/ HlgRo1nC02ohaCCU70XlqJZYTxbZy7uj/yhohEsCtGXev13tswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDDboIc2hM4EOuPZBQxE032gMbZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvZDg4ZDlmNWQtNjUwMC0z MjVhLWE5NTYtNmY2NWU4NmE2NzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn6w6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADX2Ovn8Y/Znn15L2wbaUdzJY+3lSeO1/KVgYYWOPEfkJQ2btSacx2oh 2JoKr8l3TOkf+6vH4ZtuaIxZEbWO8q+c1LJFksxiheouNPX6E806Sit2ODt/HICM UMkeRO/YL/5a9yWdCsg8bNp6pLRa1dDQSp86YnpH57PEiQPGswy7MlLSMGXbDBRS GCdYhhg1iEkiULQEKHByEpjTSSW1Ym2lIlFxDO90Z8PFNrQ2wX7JqYThNqtzAtc5 faN/GkWOwCTXzWAd8xrZOajHMRBmAxIBJ/5jGOMhbmD0z+9FgKcPGYvx3v9J6irW ghZWFvapJ+/y9xM5pZj0a0oWxTcX8i8= -----END CERTIFICATE-----Generated at Wed Jul 29 03:40:39 2026 by rpki-client