$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/fdf9a597-afe1-36f9-a296-6071d0bd9fe1.roa File: fdf9a597-afe1-36f9-a296-6071d0bd9fe1.roa (raw, json) Hash identifier: ipjVEgzG7xaRi+duatecwBqPP44BW1JtpC9US5Kcp9c= Subject key identifier: 81:0C:A7:B3:A1:15:55:2A:E5:C1:00:22:96:B7:29:9F:9F:10:78:A2 Certificate issuer: /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Certificate serial: 010D0C9F4328584CEFF22262EDC27EE9113959C0 Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/fdf9a597-afe1-36f9-a296-6071d0bd9fe1.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 16509 IP address blocks: 159.172.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:22:62:ed:c2:7e:e9:11:39:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72 Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=2f176304-1c47-4c5c-8907-668c517387df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7d:5d:42:6c:44:dd:c4:8f:7c:94:cd:a5:ca: 4b:9c:f0:92:c9:85:0f:68:77:82:13:88:0b:49:de: cd:23:7a:17:11:b2:6d:ba:56:20:f1:ba:d6:04:29: cd:01:6a:a0:fd:c8:72:ec:b2:d6:3f:a4:b7:4e:ef: 57:45:28:bf:8f:d2:df:be:57:df:24:95:ce:0c:d1: ba:c8:62:bf:83:b2:bb:1c:cb:5b:ee:98:31:c2:d5: 29:28:14:b4:96:ed:99:5c:07:4f:2f:44:01:06:64: 16:59:5f:16:5c:4f:c7:2c:85:0a:a4:8a:d5:6d:f4: 47:05:29:f1:78:3e:3b:eb:61:bd:d7:cc:2b:1d:78: 9a:51:22:8c:f2:75:2b:fd:75:0a:5d:9a:8e:0d:b0: 35:51:ea:52:b6:a9:b2:5d:cc:4b:18:e2:fc:dc:94: 6e:48:04:69:d0:3b:7f:b4:8b:2d:86:bf:a0:14:5c: 5e:76:af:8e:08:d0:89:84:19:c4:09:7c:d8:35:09: fb:67:d9:cc:8c:f6:7b:0f:da:68:9c:ab:59:a6:6d: a0:89:2d:16:ae:39:cc:40:1d:c9:0a:ee:be:f9:52: 7d:8c:12:a3:06:d0:70:f0:c1:c6:87:a5:ee:d9:e5: f7:d5:21:00:69:6c:b8:ca:84:d7:62:64:53:a1:1d: 8f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0C:A7:B3:A1:15:55:2A:E5:C1:00:22:96:B7:29:9F:9F:10:78:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/fdf9a597-afe1-36f9-a296-6071d0bd9fe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl X509v3 Authority Key Identifier: keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer sbgp-ipAddrBlock: critical IPv4: 159.172.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:64:5f:47:71:1b:fa:d2:50:d6:ac:1c:79:9c:fd:e3:9b:a2: 8f:85:b3:bf:5f:ff:02:15:dd:67:8c:66:14:2a:bd:b0:65:b3: 1e:92:51:83:b3:92:aa:36:b2:38:bb:db:fc:ad:e5:22:0d:b9: 74:e0:ac:b5:8f:6c:41:f9:69:c1:9c:70:ef:d2:fd:1b:c5:7e: a8:9c:95:8c:ed:7b:f1:3e:a2:f6:3e:d7:3b:ba:68:ab:8a:a9: 28:ad:df:15:aa:a0:73:a4:e5:ab:82:a4:2c:19:c7:3a:78:f8: a7:be:a3:e0:e2:b4:a9:04:43:d1:72:89:ed:40:24:d2:23:01: c2:76:a8:41:58:f5:8f:79:c5:20:60:34:ca:5c:a5:8c:8b:bd: bd:1a:6f:7e:1f:a5:45:21:95:ce:6a:cc:b9:2f:35:42:f1:a0: 4f:4d:4d:73:08:36:e8:c0:78:ca:ef:be:8a:55:0c:8a:fd:9f: 9a:5a:f7:6c:d4:5b:e0:90:1b:e7:1b:c8:8e:e1:7f:e9:ff:78: cf:a2:93:43:c5:71:ed:ef:3a:25:12:1f:04:96:dd:a3:00:4b: 7e:e0:c4:28:7b:8f:21:52:f8:75:d7:9b:5d:47:f4:82:26:a2: db:b8:d2:34:d2:6c:83:46:48:a4:50:2f:45:94:e8:cb:73:96: 06:3b:f9:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8iJi7cJ+6RE5WcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNiOTBmN2QtMmJjNi00OTQyLWEzMDQtOThhOTFhNTA2 ZDcyMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk MmYxNzYzMDQtMWM0Ny00YzVjLTg5MDctNjY4YzUxNzM4N2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn1dQmxE3cSPfJTNpcpLnPCSyYUPaHeCE4gL Sd7NI3oXEbJtulYg8brWBCnNAWqg/chy7LLWP6S3Tu9XRSi/j9LfvlffJJXODNG6 yGK/g7K7HMtb7pgxwtUpKBS0lu2ZXAdPL0QBBmQWWV8WXE/HLIUKpIrVbfRHBSnx eD4762G918wrHXiaUSKM8nUr/XUKXZqODbA1UepStqmyXcxLGOL83JRuSARp0Dt/ tIsthr+gFFxedq+OCNCJhBnECXzYNQn7Z9nMjPZ7D9ponKtZpm2giS0WrjnMQB3J Cu6++VJ9jBKjBtBw8MHGh6Xu2eX31SEAaWy4yoTXYmRToR2PUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEMp7OhFVUq5cEAIpa3KZ+fEHiiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5 MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5MWE1MDZkNzIvZmRmOWE1OTctYWZlMS0z NmY5LWEyOTYtNjA3MWQwYmQ5ZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNiOTBmN2QtMmJjNi00OTQyLWEz MDQtOThhOTFhNTA2ZDcyL2MzYjkwZjdkLTJiYzYtNDk0Mi1hMzA0LTk4YTkxYTUw NmQ3Mi5jcmwwHwYDVR0jBBgwFoAUdKOHlu0trJGJyCKPFOPXADc12NIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2I5MGY3ZC0yYmM2LTQ5NDItYTMwNC05OGE5 MWE1MDZkNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn6w6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRkX0dxG/rSUNasHHmc/eOboo+Fs79f/wIV3WeMZhQqvbBlsx6SUYOz kqo2sji72/yt5SINuXTgrLWPbEH5acGccO/S/RvFfqiclYzte/E+ovY+1zu6aKuK qSit3xWqoHOk5auCpCwZxzp4+Ke+o+DitKkEQ9Fyie1AJNIjAcJ2qEFY9Y95xSBg NMpcpYyLvb0ab34fpUUhlc5qzLkvNULxoE9NTXMINujAeMrvvopVDIr9n5pa92zU W+CQG+cbyI7hf+n/eM+ik0PFce3vOiUSHwSW3aMAS37gxCh7jyFS+HXXm11H9IIm otu40jTSbINGSKRQL0WU6MtzlgY7+T4= -----END CERTIFICATE-----Generated at Mon Mar 2 13:05:40 2026 by rpki-client