$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/2de33dc8-1d34-3bc2-85f2-695cccabe49e.roa File: 2de33dc8-1d34-3bc2-85f2-695cccabe49e.roa (raw, json) Hash identifier: vAJ7vGdI7pS5H4GlL4/E4Z0SJw+oVC+7Lh4a4ukUhXU= Subject key identifier: 08:5B:09:A5:88:C1:05:23:9A:64:58:00:EA:12:DB:8A:5F:F4:D8:5A Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584ECBD1E4A2C92F29C3A3B37BC0 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/2de33dc8-1d34-3bc2-85f2-695cccabe49e.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 14618 IP address blocks: 157.239.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:e4:a2:c9:2f:29:c3:a3:b3:7b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=a3424ab2-3df2-4b66-abce-8df739e3e9eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:45:e5:29:a0:ad:cc:74:2d:41:7a:7a:c3:65: ea:88:ed:c0:62:dc:af:05:57:c3:20:5b:ba:3d:46: b5:26:fc:e7:08:d7:ba:9f:17:7a:75:30:91:32:00: 04:dd:ee:ff:23:2c:19:cb:11:f4:81:d0:30:e0:55: 99:61:c1:a9:f5:18:94:d3:8b:c3:de:4c:b8:9d:fc: d5:32:53:55:82:ed:52:69:a9:40:78:e2:8e:9f:d4: f7:64:ab:e3:90:fb:48:a1:5c:d7:09:60:1c:46:ed: e8:ca:6a:e2:10:95:58:69:1a:1a:00:00:cf:d4:5a: 7e:21:52:f7:a6:d5:30:82:06:4d:c8:45:d4:a1:4a: 7d:fc:c6:2a:e7:19:28:db:f4:32:6d:b3:05:76:4e: 29:3e:9e:d2:58:46:0f:0d:f0:60:be:70:b1:be:34: ad:b3:a3:9b:cc:30:03:55:d0:ca:49:92:2a:1d:a8: 0c:0c:af:25:ed:c2:9a:3e:25:d5:50:39:44:a2:3c: cf:9a:95:6d:e6:39:ac:08:ad:0c:ea:94:0b:91:0b: 43:e8:ea:d1:df:52:d3:74:51:f1:f8:53:22:24:e4: 9b:7e:0c:cd:7c:df:97:ae:a4:2b:ee:72:31:a2:67: 74:ed:9e:43:67:9b:87:c8:86:9a:b5:32:b2:aa:4f: 4d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5B:09:A5:88:C1:05:23:9A:64:58:00:EA:12:DB:8A:5F:F4:D8:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/2de33dc8-1d34-3bc2-85f2-695cccabe49e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:32:6a:55:9b:e1:89:af:ad:fc:72:a7:e5:61:67:57:38:7b: cb:11:d7:ed:7f:95:bd:a6:df:43:1e:4d:25:67:35:03:0f:3f: 8f:98:53:1e:af:f4:82:23:8a:98:a0:81:ba:dc:6d:24:49:3b: ef:96:42:b9:98:9a:48:c0:06:c8:02:80:c9:a2:92:2e:c1:1a: 4a:c5:c3:18:f1:98:3c:01:29:10:68:c8:96:7b:cc:ff:6a:a3: e1:ca:f1:76:9e:f3:16:7a:92:d2:cf:3a:d9:81:02:81:a9:de: e2:36:fe:26:ea:df:20:71:e8:0b:ad:4b:b1:65:02:6f:ba:96: 17:5c:9f:86:62:1c:ea:de:23:f7:44:ac:ae:cd:69:83:14:2d: b6:24:57:50:24:60:2f:5c:33:3d:27:b8:4e:60:79:b2:34:81: 7b:e6:9e:75:d9:9f:03:92:7e:56:32:26:ad:e5:9d:73:38:9f: 78:26:6e:c5:2a:ca:e3:1e:cb:c4:a2:27:eb:13:24:7a:ab:06: e9:ed:f5:02:b3:62:00:fe:2a:36:51:11:07:6e:db:22:86:5c: 46:d1:12:e7:88:f2:14:e0:af:66:a9:b5:fa:16:c8:53:c7:a5: b8:c7:10:a6:3a:6f:69:d0:f4:ee:c8:c3:f9:8b:c9:a7:dc:d0: 2a:3e:fa:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0eSiyS8pw6Oze8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk YTM0MjRhYjItM2RmMi00YjY2LWFiY2UtOGRmNzM5ZTNlOWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUXlKaCtzHQtQXp6w2XqiO3AYtyvBVfDIFu6 PUa1JvznCNe6nxd6dTCRMgAE3e7/IywZyxH0gdAw4FWZYcGp9RiU04vD3ky4nfzV MlNVgu1SaalAeOKOn9T3ZKvjkPtIoVzXCWAcRu3oymriEJVYaRoaAADP1Fp+IVL3 ptUwggZNyEXUoUp9/MYq5xko2/QybbMFdk4pPp7SWEYPDfBgvnCxvjSts6ObzDAD VdDKSZIqHagMDK8l7cKaPiXVUDlEojzPmpVt5jmsCK0M6pQLkQtD6OrR31LTdFHx +FMiJOSbfgzNfN+XrqQr7nIxomd07Z5DZ5uHyIaatTKyqk9NYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhbCaWIwQUjmmRYAOoS24pf9NhaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvMmRlMzNkYzgtMWQzNC0z YmMyLTg1ZjItNjk1Y2NjYWJlNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAne8fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAyalWb4Ymvrfxyp+VhZ1c4e8sR1+1/lb2m30MeTSVnNQMPP4+YUx6v 9IIjipiggbrcbSRJO++WQrmYmkjABsgCgMmiki7BGkrFwxjxmDwBKRBoyJZ7zP9q o+HK8Xae8xZ6ktLPOtmBAoGp3uI2/ibq3yBx6AutS7FlAm+6lhdcn4ZiHOreI/dE rK7NaYMULbYkV1AkYC9cMz0nuE5gebI0gXvmnnXZnwOSflYyJq3lnXM4n3gmbsUq yuMey8SiJ+sTJHqrBunt9QKzYgD+KjZREQdu2yKGXEbREueI8hTgr2aptfoWyFPH pbjHEKY6b2nQ9O7Iw/mLyafc0Co++sE= -----END CERTIFICATE-----Generated at Thu Aug 20 21:56:20 2026 by rpki-client