$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/b965c3d1-66ff-3eee-9301-c4150abc9620.roa File: b965c3d1-66ff-3eee-9301-c4150abc9620.roa (raw, json) Hash identifier: AR/NGDSA+GUnjiGXZFFG0wRcn7mMT5NCUc3ATV2ttUg= Subject key identifier: C0:3F:11:38:79:17:85:10:0C:32:22:B5:DD:5A:48:CB:B0:9E:A1:38 Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584EEA8755101A78E8E0EF45D038 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/b965c3d1-66ff-3eee-9301-c4150abc9620.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 157.239.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:55:10:1a:78:e8:e0:ef:45:d0:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=b713ab50-4856-4e44-8fab-f3abb12b8a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:84:54:de:b7:0b:6f:8c:13:7d:4d:e8:85:c3: d7:94:a7:53:df:14:2b:dd:ff:6a:fa:80:c3:f7:1f: 96:39:f7:91:f3:a0:c5:c4:d5:f4:8c:af:2c:72:24: b0:d2:6f:87:03:59:7a:09:ea:85:a2:80:20:e4:3b: ee:ec:0d:a4:a3:c1:24:5f:c6:af:c0:cd:fc:25:c1: 72:08:79:3d:fd:53:76:a4:83:a1:a7:81:b3:11:b8: 56:8c:4f:ae:de:73:2c:fb:8f:75:da:3f:d9:1c:cf: 7e:b6:f3:f5:b5:e6:f5:5e:81:55:e1:07:1a:e2:03: 75:7d:02:41:80:4f:9a:ec:1a:69:c1:c3:38:a7:c7: 41:05:f3:08:72:d8:3e:a4:be:3a:f3:73:70:e4:c4: 37:c8:cb:d7:ca:69:b2:be:10:f5:ae:86:b9:6f:88: f7:71:07:90:40:8f:37:ac:c3:91:ec:52:c4:ad:f5: aa:7e:93:66:70:df:4c:98:b6:c8:c9:e4:7c:93:81: 66:0f:1d:79:11:f2:89:e4:f6:12:dd:35:10:1e:2f: 03:1b:b6:59:f3:ff:43:6e:16:9b:4c:84:e6:7a:fe: c9:d9:88:21:49:84:d1:f4:a9:40:86:50:e1:8e:59: 95:e5:a0:14:c2:aa:04:cd:3f:07:f3:f3:a8:81:52: a1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3F:11:38:79:17:85:10:0C:32:22:B5:DD:5A:48:CB:B0:9E:A1:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/b965c3d1-66ff-3eee-9301-c4150abc9620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:4c:be:6d:51:b5:75:c2:37:fa:46:9c:54:23:64:87:1e:e4: 26:cf:c3:23:38:42:f3:c9:79:73:b0:6a:54:00:0d:fb:18:8a: a9:9b:78:78:32:c2:d5:6d:dd:3f:ee:19:5c:52:8f:33:c0:ac: af:99:dd:a8:60:38:2f:4b:f0:21:37:37:6c:ee:ed:83:bb:5f: 48:36:ba:53:ee:6a:f2:82:15:88:b8:e5:d1:28:9d:e6:64:fc: 10:10:1a:d1:9e:66:e8:7e:4d:73:97:24:75:6d:9d:2b:dd:9a: 2d:82:23:a0:c7:a0:70:8e:f5:c8:86:9f:96:cc:06:12:59:e2: 46:c0:f3:38:19:25:6d:37:1d:c9:fb:5f:8b:26:e6:6e:2c:2f: 6b:7c:cf:aa:f3:a5:ac:ed:bb:60:88:4b:c7:93:83:08:10:c7: 88:e8:49:aa:17:21:8c:5a:4a:fb:a1:7e:f9:e8:d1:65:a3:1e: c2:61:4a:ac:c7:fd:c3:61:36:55:35:9b:b9:12:00:94:52:e4: 22:5d:29:c2:2e:b4:a6:78:68:62:76:4a:ad:b9:fb:c4:d8:57: b2:bf:67:92:7e:72:15:af:84:2d:1e:27:bf:a6:9f:da:a7:cb: a7:a5:2e:5e:ce:16:23:e5:e2:41:17:09:33:73:e7:22:8d:51: b5:fc:97:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh1UQGnjo4O9F0DgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk YjcxM2FiNTAtNDg1Ni00ZTQ0LThmYWItZjNhYmIxMmI4YTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIRU3rcLb4wTfU3ohcPXlKdT3xQr3f9q+oDD 9x+WOfeR86DFxNX0jK8sciSw0m+HA1l6CeqFooAg5Dvu7A2ko8EkX8avwM38JcFy CHk9/VN2pIOhp4GzEbhWjE+u3nMs+4912j/ZHM9+tvP1teb1XoFV4Qca4gN1fQJB gE+a7BppwcM4p8dBBfMIctg+pL4683Nw5MQ3yMvXymmyvhD1roa5b4j3cQeQQI83 rMOR7FLErfWqfpNmcN9MmLbIyeR8k4FmDx15EfKJ5PYS3TUQHi8DG7ZZ8/9Dbhab TITmev7J2YghSYTR9KlAhlDhjlmV5aAUwqoEzT8H8/OogVKh7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMA/ETh5F4UQDDIitd1aSMuwnqE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvYjk2NWMzZDEtNjZmZi0z ZWVlLTkzMDEtYzQxNTBhYmM5NjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDne8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNMvm1RtXXCN/pGnFQjZIce5CbPwyM4QvPJeXOwalQADfsYiqmbeHgy wtVt3T/uGVxSjzPArK+Z3ahgOC9L8CE3N2zu7YO7X0g2ulPuavKCFYi45dEoneZk /BAQGtGeZuh+TXOXJHVtnSvdmi2CI6DHoHCO9ciGn5bMBhJZ4kbA8zgZJW03Hcn7 X4sm5m4sL2t8z6rzpaztu2CIS8eTgwgQx4joSaoXIYxaSvuhfvno0WWjHsJhSqzH /cNhNlU1m7kSAJRS5CJdKcIutKZ4aGJ2Sq25+8TYV7K/Z5J+chWvhC0eJ7+mn9qn y6elLl7OFiPl4kEXCTNz5yKNUbX8lwI= -----END CERTIFICATE-----Generated at Tue Sep 22 02:49:47 2026 by rpki-client