$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/da977b0c-13e8-3e4d-82b5-c12d5d9e1ed4.roa File: da977b0c-13e8-3e4d-82b5-c12d5d9e1ed4.roa (raw, json) Hash identifier: BHLK1B7Y3xCkpeHh+ZK5XFZGVEPG4drevLsj2tFbqQc= Subject key identifier: 62:8A:AD:84:13:2F:B1:CF:9C:F7:68:81:D4:64:B1:2B:C4:C9:A8:0E Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584F51D2A99FF77FDF845D85C500 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/da977b0c-13e8-3e4d-82b5-c12d5d9e1ed4.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 157.239.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:a9:9f:f7:7f:df:84:5d:85:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=50394498-1f74-4b08-ac2e-b0422037dcea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:11:ef:fd:4f:fe:08:a0:d7:8a:9d:ad:c1:a7: 54:8a:79:d1:1b:fc:07:01:97:b0:3b:b6:1b:05:7f: 99:04:07:83:d7:c1:f7:6c:3a:ca:5a:d8:bd:b8:a3: 71:ce:6c:0b:a9:9e:45:55:a2:06:4a:cc:7f:bd:6d: 0c:1d:8f:9c:44:33:9e:25:c7:c4:5e:27:b3:59:68: 92:85:41:d1:43:ac:15:45:a4:16:76:a0:f4:b7:33: 7e:7d:d7:4f:5d:04:1b:46:05:e4:e3:bc:85:7e:cc: 82:2b:a2:85:a0:00:b8:99:98:05:4a:64:a0:0c:e1: dd:40:a1:ce:12:e6:e1:04:56:a6:62:65:a2:b2:96: 06:64:28:d0:27:3f:cf:d3:58:e7:f5:82:c1:96:92: 79:fd:51:a2:ad:34:b9:c0:55:04:ed:de:fb:e8:73: 2d:5b:b4:b1:81:a1:1c:3e:b5:8a:15:26:d1:cb:bf: c8:eb:e3:84:e4:1f:2c:50:84:bd:f2:34:b0:23:c2: 23:53:bb:e4:71:17:4d:4c:30:94:aa:cc:02:2c:59: fd:6a:58:32:a3:08:72:75:97:c3:2c:1b:1f:75:29: 29:ba:d5:22:91:96:c0:f0:dd:23:0a:0f:87:7e:41: 05:ef:b1:f4:0e:6d:cb:b9:3b:d1:5e:f6:d5:79:fa: 03:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8A:AD:84:13:2F:B1:CF:9C:F7:68:81:D4:64:B1:2B:C4:C9:A8:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/da977b0c-13e8-3e4d-82b5-c12d5d9e1ed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:98:e1:d0:13:02:c8:4e:79:25:4a:bf:fb:67:70:dc:ac:7d: fd:d3:d6:02:ff:ce:0e:a8:8c:2b:8f:d1:82:7f:82:e2:42:3c: c9:71:9e:49:15:10:22:17:0d:e5:2e:2e:4e:19:89:2b:94:a5: 47:8a:c8:1d:53:18:3c:01:10:2c:f1:93:55:78:bb:23:08:a7: f7:37:31:b9:cd:e2:9f:59:4a:ee:8e:1b:dc:6f:a8:de:fa:a9: e7:c8:ad:48:8b:53:07:e4:f3:fc:f1:11:b4:d6:48:85:d5:c2: bc:56:04:a0:ea:93:57:ce:24:c1:ca:0e:8f:0b:fb:2c:0a:37: 50:f2:b1:c6:be:92:7a:05:7d:9c:5f:fa:31:8a:f6:05:51:d2: f2:46:cb:0c:7b:ca:c9:b2:79:b2:0e:71:7d:22:32:22:4b:e2: 3a:39:c0:7a:7c:f6:4b:60:eb:e5:d1:b0:07:99:37:69:74:50: fc:dd:73:d8:41:e4:c6:de:93:d8:64:f1:30:79:cf:d1:4f:08: ba:db:77:2c:b1:8f:c4:a9:86:65:a3:c4:9f:ec:be:f7:c3:97: db:ef:14:e3:a4:61:b0:23:39:38:62:fd:14:87:fb:0b:38:64: 5f:eb:67:76:e9:36:d2:53:83:7b:ca:e8:39:ff:4d:7a:45:b5: 5a:8b:c4:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0qmf93/fhF2FxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk NTAzOTQ0OTgtMWY3NC00YjA4LWFjMmUtYjA0MjIwMzdkY2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBHv/U/+CKDXip2twadUinnRG/wHAZewO7Yb BX+ZBAeD18H3bDrKWti9uKNxzmwLqZ5FVaIGSsx/vW0MHY+cRDOeJcfEXiezWWiS hUHRQ6wVRaQWdqD0tzN+fddPXQQbRgXk47yFfsyCK6KFoAC4mZgFSmSgDOHdQKHO EubhBFamYmWispYGZCjQJz/P01jn9YLBlpJ5/VGirTS5wFUE7d776HMtW7SxgaEc PrWKFSbRy7/I6+OE5B8sUIS98jSwI8IjU7vkcRdNTDCUqswCLFn9algyowhydZfD LBsfdSkputUikZbA8N0jCg+HfkEF77H0Dm3LuTvRXvbVefoDFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKKrYQTL7HPnPdogdRksSvEyagOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvZGE5NzdiMGMtMTNlOC0z ZTRkLTgyYjUtYzEyZDVkOWUxZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAne8OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSY4dATAshOeSVKv/tncNysff3T1gL/zg6ojCuP0YJ/guJCPMlxnkkV ECIXDeUuLk4ZiSuUpUeKyB1TGDwBECzxk1V4uyMIp/c3MbnN4p9ZSu6OG9xvqN76 qefIrUiLUwfk8/zxEbTWSIXVwrxWBKDqk1fOJMHKDo8L+ywKN1Dysca+knoFfZxf +jGK9gVR0vJGywx7ysmyebIOcX0iMiJL4jo5wHp89ktg6+XRsAeZN2l0UPzdc9hB 5Mbek9hk8TB5z9FPCLrbdyyxj8SphmWjxJ/svvfDl9vvFOOkYbAjOThi/RSH+ws4 ZF/rZ3bpNtJTg3vK6Dn/TXpFtVqLxFE= -----END CERTIFICATE-----Generated at Tue Oct 6 19:57:03 2026 by rpki-client