$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/f6d68dba-d848-3dd8-a54d-613d3de5cd57.roa File: f6d68dba-d848-3dd8-a54d-613d3de5cd57.roa (raw, json) Hash identifier: p9YBmeCgupv+8/Yxev9W/NNZ9YLwAMmgR+5r+qEtgWI= Subject key identifier: 5A:63:FD:E3:DB:74:90:A6:4A:04:6E:2D:E1:B2:C6:5C:8F:CA:BE:16 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584E9EAFF90FE3A6841F9FAA2AC0 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/f6d68dba-d848-3dd8-a54d-613d3de5cd57.roa Signing time: Sat 25 Jul 2026 21:00:12 +0000 ROA not before: Sat 25 Jul 2026 21:00:12 +0000 ROA not after: Fri 23 Oct 2026 21:00:12 +0000 asID: 16509 IP address blocks: 159.172.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9e:af:f9:0f:e3:a6:84:1f:9f:aa:2a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Jul 25 21:00:12 2026 GMT Not After : Oct 23 21:00:12 2026 GMT Subject: CN=077ab020-076e-4b2f-8479-66846470fd7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:c8:09:98:d9:c3:3c:8b:be:2a:5d:cc:3a: c4:d1:57:29:95:80:21:aa:a1:3b:d4:4d:af:41:23: 22:4a:96:9d:ca:93:fb:18:22:14:9f:3c:ac:71:34: 99:8e:a2:21:98:8e:fe:39:62:1e:85:81:d2:9f:8a: 93:f6:b1:9e:32:5d:e6:13:61:b2:7a:02:86:e7:33: bc:5b:39:15:6f:f3:bc:07:8d:d9:29:29:cf:4f:0e: 3e:53:53:35:a7:ac:9a:75:15:3b:f8:de:49:34:16: 43:bb:3f:0f:28:2d:60:0a:ec:42:e9:ea:01:ad:6f: 75:4d:9b:04:d7:70:13:83:6c:c5:43:9f:1b:d3:e6: 27:40:47:aa:f9:4d:a1:99:8e:e3:0a:68:34:d5:8b: 3f:f1:08:15:b6:9c:1a:62:34:a8:c7:05:ea:9b:c8: 3d:6c:09:04:9c:39:53:ec:61:3d:54:c3:97:9a:7e: 03:e8:ea:a0:9e:38:f5:e4:58:fe:15:b2:d6:3a:a1: cf:e1:9b:ee:3d:0b:a6:0f:2f:73:eb:38:bb:84:a3: c7:0e:d7:89:f7:43:77:79:5f:d7:6e:e9:8a:6f:a6: 8e:cc:bb:df:13:58:16:66:ba:fe:d4:4c:18:bf:13: 08:29:b0:38:92:bc:40:06:98:e4:ad:8b:c0:ef:92: 30:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:63:FD:E3:DB:74:90:A6:4A:04:6E:2D:E1:B2:C6:5C:8F:CA:BE:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/f6d68dba-d848-3dd8-a54d-613d3de5cd57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:40:ce:fc:84:9e:cc:bf:75:9c:98:6b:9d:56:12:38:2b:7e: de:44:b5:64:35:ba:84:f9:d9:7b:c1:9d:11:61:bb:c2:14:75: b0:fe:5f:c9:16:db:42:88:cd:6a:4a:08:f3:8b:52:8f:97:6b: 20:98:ff:44:43:93:ea:7b:c6:8e:7b:57:fb:67:bb:5b:ae:aa: 4b:95:5d:4a:59:2f:d8:4c:13:2b:0a:3e:7f:58:2f:3c:ee:2d: 17:19:87:74:a9:7a:01:a4:d3:31:a2:89:63:ea:ff:3e:2f:9d: 58:05:26:ac:7c:e7:0c:f9:16:4b:76:06:82:eb:6c:4d:ba:2b: 50:1a:ef:1a:f4:71:2d:9d:7a:99:75:79:50:b0:1c:d5:47:80: f3:27:c0:16:bd:88:b4:a1:02:68:4b:ab:09:3d:e0:ed:c3:e3: 63:55:87:25:23:c1:31:d6:ad:d1:d6:83:8a:6f:4c:d1:41:5d: 9f:2b:ae:09:4a:83:f7:bc:9f:ac:49:6a:f5:08:98:29:f4:a9: 83:73:2d:34:22:66:c7:12:1f:07:83:4e:c7:58:7f:e6:61:bd: d1:8b:67:34:b0:aa:60:ba:89:49:33:74:63:5d:86:6d:bf:30: 57:3f:be:66:8d:cc:83:47:90:8e:54:0e:e7:3f:4c:09:33:db: 93:36:0b:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6er/kP46aEH5+qKsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI2MDcyNTIxMDAxMloXDTI2MTAyMzIxMDAxMlowLzEtMCsGA1UEAxMk MDc3YWIwMjAtMDc2ZS00YjJmLTg0NzktNjY4NDY0NzBmZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKHICZjZwzyLvipdzDrE0VcplYAhqqE71E2v QSMiSpadypP7GCIUnzyscTSZjqIhmI7+OWIehYHSn4qT9rGeMl3mE2GyegKG5zO8 WzkVb/O8B43ZKSnPTw4+U1M1p6yadRU7+N5JNBZDuz8PKC1gCuxC6eoBrW91TZsE 13ATg2zFQ58b0+YnQEeq+U2hmY7jCmg01Ys/8QgVtpwaYjSoxwXqm8g9bAkEnDlT 7GE9VMOXmn4D6Oqgnjj15Fj+FbLWOqHP4ZvuPQumDy9z6zi7hKPHDteJ90N3eV/X bumKb6aOzLvfE1gWZrr+1EwYvxMIKbA4krxABpjkrYvA75Iw0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpj/ePbdJCmSgRuLeGyxlyPyr4WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvZjZkNjhkYmEtZDg0OC0z ZGQ4LWE1NGQtNjEzZDNkZTVjZDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn6whMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJAzvyEnsy/dZyYa51WEjgrft5EtWQ1uoT52XvBnRFhu8IUdbD+X8kW 20KIzWpKCPOLUo+XayCY/0RDk+p7xo57V/tnu1uuqkuVXUpZL9hMEysKPn9YLzzu LRcZh3SpegGk0zGiiWPq/z4vnVgFJqx85wz5Fkt2BoLrbE26K1Aa7xr0cS2depl1 eVCwHNVHgPMnwBa9iLShAmhLqwk94O3D42NVhyUjwTHWrdHWg4pvTNFBXZ8rrglK g/e8n6xJavUImCn0qYNzLTQiZscSHweDTsdYf+ZhvdGLZzSwqmC6iUkzdGNdhm2/ MFc/vmaNzINHkI5UDuc/TAkz25M2CyE= -----END CERTIFICATE-----Generated at Wed Jul 29 04:53:59 2026 by rpki-client