$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/d2c8abf1-e363-3f9f-8808-bf687bc5982e.roa File: d2c8abf1-e363-3f9f-8808-bf687bc5982e.roa (raw, json) Hash identifier: j9LdVE/5Z4qL4GMLFaZdY7pyWV2fYXy+BQkVp8Rqk4c= Subject key identifier: B6:EE:65:55:29:9A:40:07:99:65:F8:92:FE:4D:1D:9B:BF:1B:61:0D Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584EEA8749D89C6197BD282769C0 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/d2c8abf1-e363-3f9f-8808-bf687bc5982e.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 14618 IP address blocks: 157.239.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:49:d8:9c:61:97:bd:28:27:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=22e5c298-5e8b-4464-8abf-247f31d635d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:34:26:4b:25:56:a0:30:1d:cc:bd:ee:0b:f6: 85:ee:a2:50:48:49:fc:8a:08:aa:9a:07:bc:da:35: a3:fa:07:c1:94:24:14:19:ea:ee:fb:f5:db:2f:1c: 7c:12:30:24:04:db:11:9b:1f:a5:15:94:07:31:e6: 26:ea:d7:44:16:e4:8a:78:02:d6:a3:fd:68:a0:5e: c8:d0:d5:da:2c:3c:e0:84:7a:55:a1:d3:be:a5:d2: f1:9a:b5:c7:3c:d8:9f:08:47:e9:31:12:00:79:b5: c0:d0:42:fc:df:90:62:2d:dc:5b:64:47:e9:ad:ed: ec:a8:78:78:e5:4a:2b:c8:f6:4e:68:c6:8a:cf:eb: 11:e2:02:ef:d6:03:84:99:fe:df:69:7d:ea:bd:e7: 2c:2c:2a:ec:b7:29:d9:61:cb:90:34:e0:4e:eb:99: 61:5a:dd:08:df:a1:3c:84:9a:da:07:b8:fc:6a:64: a6:3f:c8:09:32:fc:96:6c:86:75:2e:6b:e4:f7:34: cc:96:bc:e9:75:39:b7:92:d8:c7:b9:45:7c:1b:22: 1a:f8:d4:40:89:95:56:de:b0:49:24:41:de:e7:fc: 5c:b9:ee:47:5b:c9:5e:3d:b3:c8:be:2c:b9:bc:62: 48:7a:0a:c0:5b:24:1e:1b:c6:4b:b0:7c:20:68:5c: a9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EE:65:55:29:9A:40:07:99:65:F8:92:FE:4D:1D:9B:BF:1B:61:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/d2c8abf1-e363-3f9f-8808-bf687bc5982e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:63:82:a6:8a:af:d4:96:9f:d9:1b:01:da:80:de:79:96:86: 47:ac:ac:88:6c:9b:5f:6a:0e:73:03:3e:4e:24:59:88:4b:2d: 01:c9:7a:51:8e:ed:04:98:50:ee:a1:0e:74:4f:37:14:5d:6b: d3:73:d3:d6:87:5a:63:03:22:bf:81:5d:9f:be:52:cf:66:63: 48:0d:13:05:e6:e9:29:19:c7:2b:00:56:f4:77:ab:46:f3:ce: ab:5e:dd:c6:fa:34:09:b2:d5:5e:e3:f6:d6:d3:1a:a1:33:c7: c0:7c:5c:eb:ac:8c:b2:50:d4:dc:7f:d0:f7:1e:9e:bf:15:9d: a6:e6:57:bf:f0:a8:78:1b:8b:c9:76:a9:77:9a:d1:2e:27:56: 4c:f8:1d:1e:f3:f4:b1:8b:78:fd:93:d8:bc:96:8f:48:6f:e6: f8:d6:e4:a8:0c:cc:46:97:ba:cd:33:d7:06:fa:1d:64:8f:f0: 33:f5:95:c1:8d:e4:ec:90:ed:81:40:75:a8:5b:f4:6b:dc:55: 4e:1f:66:12:ac:1a:fe:b8:08:3c:0c:e3:57:09:08:69:55:72: 5a:60:eb:be:fb:fe:34:1b:df:0e:11:d5:a2:6a:d4:24:5e:41: 47:0a:4a:e5:5f:8d:a2:ce:a2:0e:eb:49:e5:91:4a:ea:36:02: 44:59:0c:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7qh0nYnGGXvSgnacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MjJlNWMyOTgtNWU4Yi00NDY0LThhYmYtMjQ3ZjMxZDYzNWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTQmSyVWoDAdzL3uC/aF7qJQSEn8igiqmge8 2jWj+gfBlCQUGeru+/XbLxx8EjAkBNsRmx+lFZQHMeYm6tdEFuSKeALWo/1ooF7I 0NXaLDzghHpVodO+pdLxmrXHPNifCEfpMRIAebXA0EL835BiLdxbZEfpre3sqHh4 5UoryPZOaMaKz+sR4gLv1gOEmf7faX3qvecsLCrstynZYcuQNOBO65lhWt0I36E8 hJraB7j8amSmP8gJMvyWbIZ1Lmvk9zTMlrzpdTm3ktjHuUV8GyIa+NRAiZVW3rBJ JEHe5/xcue5HW8lePbPIviy5vGJIegrAWyQeG8ZLsHwgaFypuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbuZVUpmkAHmWX4kv5NHZu/G2ENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvZDJjOGFiZjEtZTM2My0z ZjlmLTg4MDgtYmY2ODdiYzU5ODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCne8IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBjgqaKr9SWn9kbAdqA3nmWhkesrIhsm19qDnMDPk4kWYhLLQHJelGO 7QSYUO6hDnRPNxRda9Nz09aHWmMDIr+BXZ++Us9mY0gNEwXm6SkZxysAVvR3q0bz zqte3cb6NAmy1V7j9tbTGqEzx8B8XOusjLJQ1Nx/0Pcenr8VnabmV7/wqHgbi8l2 qXea0S4nVkz4HR7z9LGLeP2T2LyWj0hv5vjW5KgMzEaXus0z1wb6HWSP8DP1lcGN 5OyQ7YFAdahb9GvcVU4fZhKsGv64CDwM41cJCGlVclpg6777/jQb3w4R1aJq1CRe QUcKSuVfjaLOog7rSeWRSuo2AkRZDPE= -----END CERTIFICATE-----Generated at Mon Sep 21 23:43:42 2026 by rpki-client