$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/a0ab8981-9b66-3f41-baf6-bf4026116466.roa File: a0ab8981-9b66-3f41-baf6-bf4026116466.roa (raw, json) Hash identifier: ax/4sPDwvihqVN93oJvyLAgYjRkA6fQruvNpl8tedOs= Subject key identifier: 92:3F:76:A2:C8:EC:2B:30:B2:A6:12:9D:28:70:EC:5D:F4:4F:93:58 Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584D5B4F9E3A8189413F99246A40 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/a0ab8981-9b66-3f41-baf6-bf4026116466.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 16509 IP address blocks: 157.239.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:9e:3a:81:89:41:3f:99:24:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=1f1a5057-689b-4d3c-a1cd-37d408130e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ad:e9:eb:2e:af:02:5d:f2:3b:ef:02:6d:01: e5:7d:f8:72:6f:2d:43:a1:8a:99:c4:48:29:d9:ce: a4:d4:19:23:87:fd:61:a8:06:5c:c8:0d:e4:75:ec: cf:95:21:db:d1:63:d2:89:11:e8:ab:dc:84:00:25: 63:43:cc:18:56:fd:1f:50:9f:ec:f9:86:58:79:03: c8:59:e4:fe:9a:2a:a4:2a:b2:02:6e:53:96:f2:25: 02:a2:23:7c:5c:45:3b:8a:11:55:74:53:bd:3b:41: 10:6a:05:b5:ac:6b:8d:c6:5f:bb:3e:47:46:a4:43: 75:55:c7:b8:b7:b4:09:e4:54:1c:ea:d8:7c:3c:ed: 38:aa:c7:08:0b:30:18:77:36:f5:3c:5a:12:ef:f3: e7:bd:13:03:e8:55:ea:a6:c8:42:17:4d:9b:d8:16: cc:1a:93:26:7b:1a:27:71:97:b0:e6:9e:b3:f8:68: f1:37:cd:3d:a1:0c:b5:2e:03:7a:35:f3:9c:33:5c: b2:14:22:98:77:ba:25:52:aa:1d:92:e0:cb:27:ff: 6c:71:07:51:62:07:12:36:01:40:45:03:bd:03:a1: da:17:5a:2b:65:8e:c0:0d:e8:4d:b9:e9:9a:5a:cd: 78:2b:e9:e7:e1:7a:30:8a:7c:7c:bf:47:22:f9:83: 08:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3F:76:A2:C8:EC:2B:30:B2:A6:12:9D:28:70:EC:5D:F4:4F:93:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/a0ab8981-9b66-3f41-baf6-bf4026116466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:fb:a6:f4:bf:17:9f:9f:b3:22:94:9f:d9:3d:f1:3d:1d:ad: 0f:de:e8:73:98:d7:a8:55:c8:74:a4:90:ac:09:25:9b:9d:98: 63:02:06:e8:0e:c1:3e:13:9a:67:45:45:cb:f4:0d:ca:8a:cc: 67:31:89:1a:9f:7d:97:c7:4a:31:f6:d5:a7:d4:bb:c3:f7:f1: fc:f0:48:9c:33:ab:56:26:81:ee:01:f1:ac:13:58:e1:5f:75: 14:d9:b9:2d:15:8e:5f:63:9a:bd:b5:80:60:05:e1:6d:b1:a0: 25:a1:38:50:0a:df:6d:b8:18:da:c3:3b:b3:86:ad:57:a8:3d: f2:07:0f:bc:e7:dc:ff:d5:5f:1c:87:f7:4f:a0:5b:75:f7:4b: ee:ef:5f:2c:4c:f9:21:d9:cc:d2:09:72:4a:76:2d:cb:9e:bc: fe:28:2d:cf:8c:bf:85:4c:f2:58:7d:22:21:fe:75:2b:22:7f: 96:e1:f6:a7:fe:3b:71:d3:26:72:c4:6a:de:d1:9b:8e:db:be: 1a:87:5f:22:03:6e:76:e3:d9:ba:f2:61:fa:6b:46:2c:23:80: 7f:74:39:01:57:45:40:ca:88:5b:e7:d3:6a:48:1d:7d:b6:a1: 5a:59:66:ca:5e:fb:e6:02:be:11:63:f1:11:c5:6d:95:2d:42: 27:8d:10:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT546gYlBP5kkakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk MWYxYTUwNTctNjg5Yi00ZDNjLWExY2QtMzdkNDA4MTMwZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm63p6y6vAl3yO+8CbQHlffhyby1DoYqZxEgp 2c6k1Bkjh/1hqAZcyA3kdezPlSHb0WPSiRHoq9yEACVjQ8wYVv0fUJ/s+YZYeQPI WeT+miqkKrICblOW8iUCoiN8XEU7ihFVdFO9O0EQagW1rGuNxl+7PkdGpEN1Vce4 t7QJ5FQc6th8PO04qscICzAYdzb1PFoS7/PnvRMD6FXqpshCF02b2BbMGpMmexon cZew5p6z+GjxN809oQy1LgN6NfOcM1yyFCKYd7olUqodkuDLJ/9scQdRYgcSNgFA RQO9A6HaF1orZY7ADehNuemaWs14K+nn4Xowinx8v0ci+YMIyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJI/dqLI7CswsqYSnShw7F30T5NYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvYTBhYjg5ODEtOWI2Ni0z ZjQxLWJhZjYtYmY0MDI2MTE2NDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDne8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJv7pvS/F5+fsyKUn9k98T0drQ/e6HOY16hVyHSkkKwJJZudmGMCBugO wT4TmmdFRcv0DcqKzGcxiRqffZfHSjH21afUu8P38fzwSJwzq1Ymge4B8awTWOFf dRTZuS0Vjl9jmr21gGAF4W2xoCWhOFAK3224GNrDO7OGrVeoPfIHD7zn3P/VXxyH 90+gW3X3S+7vXyxM+SHZzNIJckp2LcuevP4oLc+Mv4VM8lh9IiH+dSsif5bh9qf+ O3HTJnLEat7Rm47bvhqHXyIDbnbj2bryYfprRiwjgH90OQFXRUDKiFvn02pIHX22 oVpZZspe++YCvhFj8RHFbZUtQieNECc= -----END CERTIFICATE-----Generated at Tue Apr 7 13:29:42 2026 by rpki-client