$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/714ca7b2-f876-35db-9239-9283a111da5a.roa File: 714ca7b2-f876-35db-9239-9283a111da5a.roa (raw, json) Hash identifier: /o+XNL5FNqJMP97JH32hVaVxURQSKtdRTG0IiEvz9yM= Subject key identifier: 53:B0:99:D1:44:6B:0A:A0:6E:30:29:A6:44:47:73:2F:5D:E0:CA:E8 Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584D67DFB4FF6CF5060B4BA87200 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/714ca7b2-f876-35db-9239-9283a111da5a.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 14618 IP address blocks: 157.239.0.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:b4:ff:6c:f5:06:0b:4b:a8:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=8fee3455-2ee7-46b5-ae7b-800a542d7472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5a:9d:22:d1:34:47:f9:68:73:48:f3:80:38: f9:56:7a:1f:f8:f4:bf:d8:8c:45:40:c9:0b:39:5e: e8:f4:fb:bc:7c:40:32:0f:ca:9f:4c:21:f2:e4:63: e0:ea:89:4c:3c:f7:2e:d1:41:c1:a4:1b:07:d1:0d: 7c:d9:20:a8:c7:86:b1:52:6a:c1:5a:a5:db:b1:b9: f5:06:6f:ad:fb:e0:f0:b7:80:3e:14:c4:ae:55:4d: dc:37:bf:64:9a:64:48:22:4d:82:0d:a0:6e:ea:a5: 7e:94:eb:03:54:df:bf:6c:62:da:99:ac:be:1d:e6: 74:33:0e:0c:17:84:57:1e:18:8a:a3:e5:7e:31:f0: 21:11:27:99:5d:32:7e:91:c2:8f:8f:5d:3a:d1:d2: f5:a8:1a:e0:0a:54:80:44:88:4a:22:94:e9:99:35: 72:2f:f4:b1:1b:01:59:4e:21:37:20:c2:25:0b:c7: c3:62:23:65:30:a1:02:50:26:66:9c:1d:05:3f:aa: ec:31:b0:3d:3b:eb:7d:d3:4e:41:95:4b:db:bc:c8: d8:42:c6:65:3a:e0:93:c5:e5:06:b9:99:f7:37:f1: a2:04:5a:c5:5d:1f:57:fc:98:d9:ff:63:87:95:81: bd:52:60:36:7e:b1:51:b4:b3:3b:a6:30:99:b7:32: 57:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B0:99:D1:44:6B:0A:A0:6E:30:29:A6:44:47:73:2F:5D:E0:CA:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/714ca7b2-f876-35db-9239-9283a111da5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:5d:d0:71:7e:08:66:9c:e6:16:a7:30:36:8e:0f:ee:b7:38: 60:3a:e5:58:ff:88:83:67:a6:38:5c:df:e3:5a:f2:7f:7e:14: 69:b8:f7:6e:83:1c:cf:9d:e9:c6:ae:0a:7d:78:47:83:17:8f: 3e:e0:a7:80:99:60:a6:e5:6d:8b:ee:69:1c:06:f7:8c:5f:ad: 18:83:45:dc:28:2f:9c:b3:c6:0a:85:9c:fd:34:7a:76:c0:86: fc:1f:06:46:2a:44:ae:23:51:ac:f6:94:c1:79:47:de:fb:2d: 58:a8:0d:a7:eb:d3:fb:48:ec:1b:b5:bb:eb:44:2f:50:d5:bc: 7b:d6:61:27:02:54:fb:8f:3a:f1:2d:ad:8e:69:3b:8a:9b:08: 0e:e7:82:91:85:b3:42:5d:5f:da:23:52:bf:ea:0a:18:0f:79: f8:e8:2e:56:3c:90:3c:95:c0:02:6e:73:5b:51:7b:7c:22:0d: e8:b8:4d:1e:ba:c8:b7:e8:ef:4a:d1:4c:e7:67:bc:e9:6c:5e: 11:73:03:d4:d9:51:d6:e7:63:78:60:1e:63:69:3c:25:cc:03: e7:ca:cd:0b:46:50:37:b4:bf:e8:83:9c:62:4e:f7:8c:1f:20: 9a:d4:41:3f:f4:dd:84:5f:dc:0c:ff:a0:97:5c:d8:81:e7:38: 5b:07:43:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n37T/bPUGC0uocgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk OGZlZTM0NTUtMmVlNy00NmI1LWFlN2ItODAwYTU0MmQ3NDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlqdItE0R/loc0jzgDj5Vnof+PS/2IxFQMkL OV7o9Pu8fEAyD8qfTCHy5GPg6olMPPcu0UHBpBsH0Q182SCox4axUmrBWqXbsbn1 Bm+t++Dwt4A+FMSuVU3cN79kmmRIIk2CDaBu6qV+lOsDVN+/bGLamay+HeZ0Mw4M F4RXHhiKo+V+MfAhESeZXTJ+kcKPj1060dL1qBrgClSARIhKIpTpmTVyL/SxGwFZ TiE3IMIlC8fDYiNlMKECUCZmnB0FP6rsMbA9O+t9005BlUvbvMjYQsZlOuCTxeUG uZn3N/GiBFrFXR9X/JjZ/2OHlYG9UmA2frFRtLM7pjCZtzJXpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOwmdFEawqgbjAppkRHcy9d4MroMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvNzE0Y2E3YjItZjg3Ni0z NWRiLTkyMzktOTI4M2ExMTFkYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDne8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJd0HF+CGac5hanMDaOD+63OGA65Vj/iINnpjhc3+Na8n9+FGm4926D HM+d6cauCn14R4MXjz7gp4CZYKblbYvuaRwG94xfrRiDRdwoL5yzxgqFnP00enbA hvwfBkYqRK4jUaz2lMF5R977LVioDafr0/tI7Bu1u+tEL1DVvHvWYScCVPuPOvEt rY5pO4qbCA7ngpGFs0JdX9ojUr/qChgPefjoLlY8kDyVwAJuc1tRe3wiDei4TR66 yLfo70rRTOdnvOlsXhFzA9TZUdbnY3hgHmNpPCXMA+fKzQtGUDe0v+iDnGJO94wf IJrUQT/03YRf3Az/oJdc2IHnOFsHQ7o= -----END CERTIFICATE-----Generated at Tue Apr 7 10:34:12 2026 by rpki-client