$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/2fc3495e-75b2-3b97-b024-1f091237d2a4.roa File: 2fc3495e-75b2-3b97-b024-1f091237d2a4.roa (raw, json) Hash identifier: Ud9LsDFfX0AuLko/Or7Ds8vEW/YPzxy50neLaOGovO0= Subject key identifier: C0:10:4F:7E:D0:A7:6C:DE:86:BF:38:56:AB:E3:44:49:04:DE:05:CE Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584D67DFFA2CC74E13CD57C2A680 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/2fc3495e-75b2-3b97-b024-1f091237d2a4.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 16509 IP address blocks: 157.239.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:fa:2c:c7:4e:13:cd:57:c2:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=7a7b1245-cfcb-454c-918d-bfe298841f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d5:01:21:1c:c3:98:d6:39:e3:20:b6:00:3f: ad:e8:89:22:f8:9c:45:d9:dc:df:64:a3:d0:fd:c7: 68:9a:32:8b:79:f2:db:7f:1f:aa:d4:ba:af:bb:06: a2:24:e0:f6:81:d4:a4:86:e3:46:29:ff:1c:17:92: d9:a6:1c:33:f5:e7:ea:cc:ac:24:ab:7f:28:fb:e7: 9f:5b:8b:ec:18:91:74:a7:3b:8a:18:79:1e:ae:42: 79:a6:06:15:6e:c1:f3:9a:6d:4a:46:1d:c4:44:8e: f3:3e:2a:4d:48:ca:68:72:22:3d:45:d4:ce:e2:f5: 16:43:63:1d:83:ab:1e:d2:a1:41:ab:2f:64:79:ed: 17:c3:da:6e:cb:5f:0c:aa:ec:ca:be:cd:0c:2e:02: 0b:3f:9f:a2:56:2a:2d:b1:de:a7:04:32:1a:93:04: b6:99:02:90:ec:c5:80:f4:dc:29:78:28:5a:37:c8: 90:88:48:7f:3d:80:ca:c2:c8:53:da:ae:f8:0b:f3: 16:1f:ea:50:6c:90:5d:98:d6:74:b9:84:66:d3:5d: b2:b7:c9:93:07:ad:37:f9:89:b4:01:04:d1:bb:fc: c2:02:13:ff:b7:a1:32:66:76:22:ba:b5:7b:56:ff: 59:d3:b6:71:18:2b:60:14:4f:4b:c0:08:aa:fb:76: 3b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:10:4F:7E:D0:A7:6C:DE:86:BF:38:56:AB:E3:44:49:04:DE:05:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/2fc3495e-75b2-3b97-b024-1f091237d2a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:8a:cb:6f:78:dd:73:d8:de:eb:de:6a:a2:81:22:7a:2c:31: 87:87:9c:34:61:b9:ce:8e:95:a7:3c:f9:39:1f:26:9d:5e:54: 9e:21:64:c0:f1:05:35:95:4d:a8:c8:28:62:40:5c:cd:f9:37: f7:0b:a7:fa:43:f1:0e:f9:2a:2c:30:53:88:0d:3a:59:f0:ce: 3d:b8:ea:bd:ab:07:69:3b:6a:44:08:69:28:78:65:36:c3:5f: c5:bf:b7:2e:00:57:30:8f:a4:f6:7e:b4:1a:79:43:7e:40:6a: b0:ba:82:f2:07:a4:15:36:6c:fa:a4:39:9b:23:39:26:3a:21: 37:41:11:a4:69:ef:34:79:c4:7f:3c:c1:4f:20:29:7d:10:7f: e6:1c:fe:84:d0:f4:79:80:69:31:7b:66:8b:ee:19:d5:2f:4d: 9c:a7:14:b7:a6:dc:aa:53:3e:3e:a9:a3:4e:a2:e1:e0:14:6c: 4d:be:d9:4b:87:a4:8c:43:87:cd:72:df:3d:0b:42:19:95:9f: 19:cd:91:d7:56:b9:d1:5e:34:36:e4:b1:f2:0e:42:7e:0c:dd: d7:41:fc:70:d7:8b:d4:4c:bf:54:36:e6:e1:99:7f:99:2f:73: 0b:3e:86:e8:b5:8a:ed:99:07:42:82:00:fa:dc:45:c7:6e:6c: 13:b4:64:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n3/osx04TzVfCpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk N2E3YjEyNDUtY2ZjYi00NTRjLTkxOGQtYmZlMjk4ODQxZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNUBIRzDmNY54yC2AD+t6Iki+JxF2dzfZKPQ /cdomjKLefLbfx+q1LqvuwaiJOD2gdSkhuNGKf8cF5LZphwz9efqzKwkq38o++ef W4vsGJF0pzuKGHkerkJ5pgYVbsHzmm1KRh3ERI7zPipNSMpociI9RdTO4vUWQ2Md g6se0qFBqy9kee0Xw9puy18MquzKvs0MLgILP5+iViotsd6nBDIakwS2mQKQ7MWA 9NwpeChaN8iQiEh/PYDKwshT2q74C/MWH+pQbJBdmNZ0uYRm012yt8mTB603+Ym0 AQTRu/zCAhP/t6EyZnYiurV7Vv9Z07ZxGCtgFE9LwAiq+3Y7TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAQT37Qp2zehr84VqvjREkE3gXOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvMmZjMzQ5NWUtNzViMi0z Yjk3LWIwMjQtMWYwOTEyMzdkMmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBne8MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOKy2943XPY3uveaqKBInosMYeHnDRhuc6Olac8+TkfJp1eVJ4hZMDx BTWVTajIKGJAXM35N/cLp/pD8Q75KiwwU4gNOlnwzj246r2rB2k7akQIaSh4ZTbD X8W/ty4AVzCPpPZ+tBp5Q35AarC6gvIHpBU2bPqkOZsjOSY6ITdBEaRp7zR5xH88 wU8gKX0Qf+Yc/oTQ9HmAaTF7ZovuGdUvTZynFLem3KpTPj6po06i4eAUbE2+2UuH pIxDh81y3z0LQhmVnxnNkddWudFeNDbksfIOQn4M3ddB/HDXi9RMv1Q25uGZf5kv cws+hui1iu2ZB0KCAPrcRcdubBO0ZIg= -----END CERTIFICATE-----Generated at Tue Apr 7 13:26:38 2026 by rpki-client