$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/2fc3495e-75b2-3b97-b024-1f091237d2a4.roa File: 2fc3495e-75b2-3b97-b024-1f091237d2a4.roa (raw, json) Hash identifier: 4yx8+QRWJMTuQJsTZ4BF4M3fzwDIBd/PqVcDBC5rO7A= Subject key identifier: 3E:05:82:54:D6:F8:33:CA:85:D6:90:58:0E:0B:F6:25:24:F8:34:40 Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584EEA878C169D0FD1F4093C37C0 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/2fc3495e-75b2-3b97-b024-1f091237d2a4.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 157.239.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:8c:16:9d:0f:d1:f4:09:3c:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=7a1b0488-aedd-48bb-a342-3b5aa8b2e221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d6:ab:da:c8:68:80:fc:b0:44:93:2c:e3:b7: f2:e6:26:79:86:63:3e:09:0b:93:57:1a:b0:9e:a8: 0c:fb:c8:5b:c0:47:87:e4:5d:5e:f5:96:c4:0a:aa: 06:b2:7d:09:f2:f3:9d:05:4a:51:b0:b6:b2:cb:94: 96:ac:3c:74:44:d0:8b:53:02:e7:4d:f3:49:ec:aa: d8:9e:e0:51:d0:2d:20:16:20:5f:62:13:d6:62:83: b5:39:2b:fd:4e:06:f5:41:01:d9:4a:7e:e5:fa:07: 89:4a:b8:b1:97:05:50:39:0c:10:62:5c:8f:10:ca: e8:85:a5:60:9a:c2:be:c3:bc:3f:33:e7:1c:df:8e: d2:1a:ac:44:12:2d:50:7b:2e:73:8b:e1:68:56:56: 9b:74:33:77:d2:2c:31:c7:f7:00:d3:78:1f:6b:ad: e0:bf:08:6c:3f:b0:33:4f:e2:4a:13:53:ef:8c:9b: 39:ba:e5:9b:89:01:41:42:e4:21:88:a8:8d:a9:6d: e3:2c:b0:5f:63:75:1f:0c:d4:25:e0:6c:33:58:89: 3b:55:45:2e:7c:d6:00:70:93:4a:f6:8d:52:1a:7d: 5e:4a:83:95:fa:59:ca:8c:aa:db:db:b1:ec:68:6c: 13:fd:3c:6d:42:d9:31:d5:37:90:b8:30:6a:55:13: 23:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:05:82:54:D6:F8:33:CA:85:D6:90:58:0E:0B:F6:25:24:F8:34:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/2fc3495e-75b2-3b97-b024-1f091237d2a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:4e:1e:78:cf:83:0e:49:81:49:c0:2b:46:3b:a5:79:fd:69: b8:9a:f7:b1:54:84:d6:76:00:0f:f7:3e:ea:22:dc:3e:c9:c2: 56:a2:fe:90:c5:0d:ad:08:f8:87:ee:78:b5:6e:90:c3:c7:e8: ec:31:95:27:5a:de:da:6a:bd:f5:a4:f5:95:7d:8f:0a:5c:0b: ec:09:5a:09:bf:cf:4c:14:ee:a7:6e:4a:a5:4a:ae:ef:24:5d: 74:7a:2d:21:03:9e:93:06:53:98:d8:7a:b4:3b:cb:4f:ab:17: 8c:45:b7:dd:19:2e:a6:89:49:96:05:35:53:a5:41:15:f4:10: f8:2d:97:74:48:f9:6f:ef:6e:a3:bf:c7:f7:47:8b:43:0d:c4: 66:48:2c:57:86:bf:78:6a:cb:ad:62:3f:ba:b8:56:30:b2:b3: f0:d7:c4:a9:e2:93:d7:3d:1f:78:d0:c9:ee:cb:95:ba:81:86: 1a:b5:41:c8:24:da:7e:2e:72:8f:59:40:cc:7b:38:c2:59:23: ce:79:b0:e3:8e:1c:0b:35:65:57:75:c6:d9:1c:61:2e:ee:c2: 8a:bc:61:7c:10:5e:7b:dd:a4:52:35:13:ea:b5:d2:ff:cf:2f: 9b:af:ea:f0:9d:ee:6e:e3:ef:fa:75:2b:2e:b0:b4:4c:2f:f3: 8e:a3:12:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh4wWnQ/R9Ak8N8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk N2ExYjA0ODgtYWVkZC00OGJiLWEzNDItM2I1YWE4YjJlMjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdar2shogPywRJMs47fy5iZ5hmM+CQuTVxqw nqgM+8hbwEeH5F1e9ZbECqoGsn0J8vOdBUpRsLayy5SWrDx0RNCLUwLnTfNJ7KrY nuBR0C0gFiBfYhPWYoO1OSv9Tgb1QQHZSn7l+geJSrixlwVQOQwQYlyPEMrohaVg msK+w7w/M+cc347SGqxEEi1Qey5zi+FoVlabdDN30iwxx/cA03gfa63gvwhsP7Az T+JKE1PvjJs5uuWbiQFBQuQhiKiNqW3jLLBfY3UfDNQl4GwzWIk7VUUufNYAcJNK 9o1SGn1eSoOV+lnKjKrb27HsaGwT/TxtQtkx1TeQuDBqVRMjEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4FglTW+DPKhdaQWA4L9iUk+DRAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvMmZjMzQ5NWUtNzViMi0z Yjk3LWIwMjQtMWYwOTEyMzdkMmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBne8MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFOHnjPgw5JgUnAK0Y7pXn9abia97FUhNZ2AA/3Puoi3D7Jwlai/pDF Da0I+IfueLVukMPH6OwxlSda3tpqvfWk9ZV9jwpcC+wJWgm/z0wU7qduSqVKru8k XXR6LSEDnpMGU5jYerQ7y0+rF4xFt90ZLqaJSZYFNVOlQRX0EPgtl3RI+W/vbqO/ x/dHi0MNxGZILFeGv3hqy61iP7q4VjCys/DXxKnik9c9H3jQye7LlbqBhhq1Qcgk 2n4uco9ZQMx7OMJZI855sOOOHAs1ZVd1xtkcYS7uwoq8YXwQXnvdpFI1E+q10v/P L5uv6vCd7m7j7/p1Ky6wtEwv846jEo0= -----END CERTIFICATE-----Generated at Mon Sep 21 22:24:39 2026 by rpki-client