$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/76128ce9-79ee-3f1a-9953-cad3bfe282d8.roa File: 76128ce9-79ee-3f1a-9953-cad3bfe282d8.roa (raw, json) Hash identifier: B4tT5V/3OvNZQ2LgNOAamQJiVH70L0mgTVfNkreV1WQ= Subject key identifier: 5D:C2:51:04:5F:D7:8D:28:0C:F0:5E:3A:3A:93:63:BC:AB:B6:8F:90 Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584D67DFC0224A75E1D9872E4C28 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/76128ce9-79ee-3f1a-9953-cad3bfe282d8.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 14618 IP address blocks: 157.239.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:c0:22:4a:75:e1:d9:87:2e:4c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=f9cd2968-b6cf-4051-84d4-30888a8bd0c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fc:ed:8c:82:75:6f:f7:94:f4:7d:ca:ea:dc: 99:22:d4:d1:ae:86:d5:d0:d0:4e:e2:df:ad:99:25: 3f:83:57:6f:0f:b4:22:c9:af:17:11:27:fa:37:bb: fd:2f:5e:1e:b2:ef:51:04:95:5f:37:2c:31:9d:7e: 0b:78:cd:96:b0:b3:a6:44:ec:28:ae:fe:24:96:ff: 26:39:05:ab:56:ea:0f:18:dc:36:2d:d0:13:87:c4: a4:a4:42:e3:b7:2d:37:9c:36:c9:e3:0b:c8:cc:99: f8:f6:65:bc:4e:8b:60:da:d7:f0:e3:dc:a6:4b:b1: 74:dd:76:d9:90:3d:e8:9a:99:82:c1:0a:f6:65:91: e3:f6:3b:27:39:46:14:82:fd:1d:e5:63:a3:c6:fd: 31:9c:bd:4d:7a:48:c4:db:28:d8:a7:7f:70:32:b1: 06:14:8e:00:b7:15:d8:1f:82:52:f6:74:ef:28:a5: fc:d4:30:20:e5:1d:80:b1:c9:03:5e:a4:8b:85:03: 43:1d:0b:62:b0:b6:32:cd:c7:1b:e3:54:c0:10:dd: 95:09:ef:68:20:e0:79:19:5b:94:2a:84:ab:9e:b1: 04:e8:0e:1f:f6:35:f0:d5:ae:6e:a3:87:82:35:91: d4:42:19:e0:a2:87:a4:52:de:b4:45:49:87:20:a6: 0c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C2:51:04:5F:D7:8D:28:0C:F0:5E:3A:3A:93:63:BC:AB:B6:8F:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/76128ce9-79ee-3f1a-9953-cad3bfe282d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:20:4a:8e:6d:25:d2:aa:6a:42:e9:3d:25:83:6b:05:f2:2b: d6:7f:ee:a9:73:cc:f2:eb:78:c5:94:73:09:13:93:79:71:5c: 42:e1:77:a7:c5:ab:be:3d:cb:0d:d0:3b:fa:d8:b9:fc:02:2b: f7:91:c5:fb:06:a6:14:fb:eb:23:1b:e5:9b:dd:cb:81:a0:93: 7a:70:7f:07:29:22:b3:98:f8:de:58:2f:5b:a0:84:24:89:cb: 83:5f:a4:b1:57:c9:1f:f2:af:13:31:fe:31:68:d9:57:cb:4a: d3:fd:27:08:34:32:54:a2:69:00:01:64:dd:05:58:a1:79:7d: 40:da:05:ff:6a:59:b4:5b:d5:a8:52:c5:d4:b3:41:9d:d5:f6: 0b:6b:93:6a:a9:68:6f:4e:d0:76:21:2e:04:d3:df:26:bc:eb: cb:36:80:81:2e:1b:b7:91:4a:15:21:7c:40:c3:e7:ca:7f:71: d0:da:6a:5a:b8:89:9a:ed:fd:41:9d:3d:7e:ff:5b:f2:3d:0c: cd:d9:4b:ff:a3:95:f3:13:5b:e3:aa:15:f3:48:4e:05:9c:97: 8e:d2:0e:93:0d:6a:c6:9a:bd:64:81:9f:51:3c:65:ea:59:a2: ef:95:c0:22:39:ce:64:3b:65:33:c7:05:4c:dc:e3:3f:93:73: df:e4:26:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n38AiSnXh2YcuTCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ZjljZDI5NjgtYjZjZi00MDUxLTg0ZDQtMzA4ODhhOGJkMGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvztjIJ1b/eU9H3K6tyZItTRrobV0NBO4t+t mSU/g1dvD7Qiya8XESf6N7v9L14esu9RBJVfNywxnX4LeM2WsLOmROworv4klv8m OQWrVuoPGNw2LdATh8SkpELjty03nDbJ4wvIzJn49mW8Totg2tfw49ymS7F03XbZ kD3ompmCwQr2ZZHj9jsnOUYUgv0d5WOjxv0xnL1NekjE2yjYp39wMrEGFI4AtxXY H4JS9nTvKKX81DAg5R2AsckDXqSLhQNDHQtisLYyzccb41TAEN2VCe9oIOB5GVuU KoSrnrEE6A4f9jXw1a5uo4eCNZHUQhngooekUt60RUmHIKYMhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3CUQRf140oDPBeOjqTY7yrto+QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvNzYxMjhjZTktNzllZS0z ZjFhLTk5NTMtY2FkM2JmZTI4MmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAne8MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYgSo5tJdKqakLpPSWDawXyK9Z/7qlzzPLreMWUcwkTk3lxXELhd6fF q749yw3QO/rYufwCK/eRxfsGphT76yMb5Zvdy4Ggk3pwfwcpIrOY+N5YL1ughCSJ y4NfpLFXyR/yrxMx/jFo2VfLStP9Jwg0MlSiaQABZN0FWKF5fUDaBf9qWbRb1ahS xdSzQZ3V9gtrk2qpaG9O0HYhLgTT3ya868s2gIEuG7eRShUhfEDD58p/cdDaalq4 iZrt/UGdPX7/W/I9DM3ZS/+jlfMTW+OqFfNITgWcl47SDpMNasaavWSBn1E8ZepZ ou+VwCI5zmQ7ZTPHBUzc4z+Tc9/kJpM= -----END CERTIFICATE-----Generated at Tue Apr 7 10:34:19 2026 by rpki-client