$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/d2c8abf1-e363-3f9f-8808-bf687bc5982e.roa File: d2c8abf1-e363-3f9f-8808-bf687bc5982e.roa (raw, json) Hash identifier: nmbYWKI57GnCXXwow8Liq/XIPODxQ6MHolwZDdEpXB8= Subject key identifier: 7D:E9:0D:0C:1C:19:40:96:7E:3E:83:63:ED:79:E4:A2:ED:11:9D:7E Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584D67DFB0349F12AC190DF4EA40 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/d2c8abf1-e363-3f9f-8808-bf687bc5982e.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 14618 IP address blocks: 157.239.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:b0:34:9f:12:ac:19:0d:f4:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=8d7811d9-7648-4928-b2e7-fc9806608464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:33:14:44:d6:50:4f:7e:47:10:86:96:5b:30: bf:18:85:a8:a9:a9:a8:a4:90:4d:cb:66:05:16:3d: 76:ac:e6:74:bf:66:fb:c9:81:a1:fa:41:9c:10:df: a5:66:c1:3e:88:b3:63:38:22:af:46:17:c0:ff:82: 30:eb:a3:d2:f2:cd:93:a7:e4:9e:5d:d7:15:10:b4: e1:50:da:0e:fa:1c:4b:58:d3:13:b6:3f:cf:40:d7: 73:dc:d6:e4:14:24:ef:44:59:b5:9d:2a:aa:d2:6c: ea:0c:e8:13:75:c1:72:ba:c1:3d:83:c0:87:a4:25: 51:80:2e:9d:c4:48:f5:07:83:59:07:af:c8:68:86: b5:ed:fb:51:72:c2:70:65:bd:95:e4:c8:b1:35:e5: 5e:3f:75:b8:96:81:88:12:e0:86:ca:07:d0:fb:52: 05:b7:b9:5a:97:79:b3:cc:b2:e1:53:b3:62:d7:27: 64:7c:6f:12:e9:32:bc:3e:14:75:ff:f7:af:92:b8: d8:b0:ae:07:ac:6e:22:90:4a:0c:c8:0e:01:9c:fa: 22:2f:30:57:92:50:70:b9:ce:b5:7b:21:ee:0c:09: 4d:72:8e:16:f7:ca:53:d6:40:d3:74:64:8a:8c:0d: b2:33:69:6e:4f:34:a8:d3:f9:52:21:20:c8:69:51: fe:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E9:0D:0C:1C:19:40:96:7E:3E:83:63:ED:79:E4:A2:ED:11:9D:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/d2c8abf1-e363-3f9f-8808-bf687bc5982e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:b6:9b:86:47:c9:b4:95:34:01:cb:fa:1c:82:fe:bb:43:b7: 40:f7:2c:0a:ba:56:87:3c:b6:8a:87:41:c8:77:41:7d:1a:ed: cc:e7:3c:12:4f:29:46:d1:80:f9:65:e7:bd:28:a9:de:91:f3: c7:85:49:fe:1f:3c:76:68:64:5f:7f:fd:7d:7b:46:5d:5e:82: 1f:51:25:08:47:c8:e7:d2:f0:8b:93:fb:7e:19:07:3f:73:67: ac:3d:ca:dd:fd:00:67:56:3c:36:4d:c1:c6:e7:c8:12:c1:71: e0:e3:c3:a3:59:a4:c3:b4:ac:31:75:a5:9a:80:75:20:0a:dc: e5:89:3f:7e:29:da:1b:16:04:44:12:e7:d7:22:d5:c1:c7:4a: 3c:ed:2b:7e:55:cc:6a:c8:96:af:be:6b:bc:ab:f7:a1:60:35: 9e:c4:93:28:66:e5:65:ec:68:13:61:87:c5:ab:3d:db:38:ff: 34:1b:9f:90:9a:ea:9c:ab:51:26:95:14:20:31:92:87:aa:36: 9b:06:46:0e:96:be:b4:d1:85:29:97:74:c6:ee:9b:17:76:c8: 9e:fb:8b:10:8c:b9:20:3b:0d:05:83:23:34:7f:a5:be:e7:82: ed:84:9e:51:e4:2f:18:2b:01:0f:d9:92:45:af:f9:5d:2e:34: 1d:f2:b0:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n37A0nxKsGQ306kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk OGQ3ODExZDktNzY0OC00OTI4LWIyZTctZmM5ODA2NjA4NDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jMURNZQT35HEIaWWzC/GIWoqamopJBNy2YF Fj12rOZ0v2b7yYGh+kGcEN+lZsE+iLNjOCKvRhfA/4Iw66PS8s2Tp+SeXdcVELTh UNoO+hxLWNMTtj/PQNdz3NbkFCTvRFm1nSqq0mzqDOgTdcFyusE9g8CHpCVRgC6d xEj1B4NZB6/IaIa17ftRcsJwZb2V5MixNeVeP3W4loGIEuCGygfQ+1IFt7lal3mz zLLhU7Ni1ydkfG8S6TK8PhR1//evkrjYsK4HrG4ikEoMyA4BnPoiLzBXklBwuc61 eyHuDAlNco4W98pT1kDTdGSKjA2yM2luTzSo0/lSISDIaVH+dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3pDQwcGUCWfj6DY+155KLtEZ1+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvZDJjOGFiZjEtZTM2My0z ZjlmLTg4MDgtYmY2ODdiYzU5ODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCne8IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALu2m4ZHybSVNAHL+hyC/rtDt0D3LAq6Voc8toqHQch3QX0a7cznPBJP KUbRgPll570oqd6R88eFSf4fPHZoZF9//X17Rl1egh9RJQhHyOfS8IuT+34ZBz9z Z6w9yt39AGdWPDZNwcbnyBLBceDjw6NZpMO0rDF1pZqAdSAK3OWJP34p2hsWBEQS 59ci1cHHSjztK35VzGrIlq++a7yr96FgNZ7Ekyhm5WXsaBNhh8WrPds4/zQbn5Ca 6pyrUSaVFCAxkoeqNpsGRg6WvrTRhSmXdMbumxd2yJ77ixCMuSA7DQWDIzR/pb7n gu2EnlHkLxgrAQ/ZkkWv+V0uNB3ysFc= -----END CERTIFICATE-----Generated at Tue Apr 7 10:33:05 2026 by rpki-client