$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/da977b0c-13e8-3e4d-82b5-c12d5d9e1ed4.roa File: da977b0c-13e8-3e4d-82b5-c12d5d9e1ed4.roa (raw, json) Hash identifier: kgfgD905vNadPo4AHXb6dWKEj9DA1T17pTLq4qeGPbw= Subject key identifier: 9E:FB:7C:E4:6D:A4:D6:4B:60:CD:5B:3E:C8:91:51:51:1D:6A:AF:26 Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584EAFE6F1ACA53CC351C7871C40 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/da977b0c-13e8-3e4d-82b5-c12d5d9e1ed4.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 16509 IP address blocks: 157.239.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:f1:ac:a5:3c:c3:51:c7:87:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=14dfdaf9-e2c3-496d-ac07-b068f21bd049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:64:b6:26:5f:9c:5e:f9:20:90:b8:4c:5a:42: d0:86:0c:39:28:6c:df:39:a4:4a:61:76:c8:a4:17: 04:d9:f3:5a:4b:9b:0e:47:de:df:02:98:e3:af:02: 08:4f:7b:da:c8:00:cf:68:a2:db:84:ca:d1:7a:b5: 25:f6:03:12:4f:44:20:67:95:f6:d0:f6:43:dc:ff: 8c:01:cb:e7:32:3e:e4:6f:e2:6c:d5:68:70:6a:f2: c4:bc:49:23:20:c8:59:d3:c2:84:00:31:5e:4c:66: fe:d8:0b:c4:3e:30:45:30:48:b6:de:e8:4e:64:64: f9:65:aa:7b:31:6c:a6:7d:06:33:d7:6e:be:77:4d: 09:0c:0b:9c:75:10:d6:28:2d:55:88:3b:b8:94:c1: 21:93:1c:07:3d:5f:95:90:94:71:09:e9:ea:e5:43: 23:77:5b:44:72:38:d0:b7:e5:2f:c9:50:8a:8f:d8: ea:82:cb:a8:79:1d:fe:3b:43:2f:ec:31:69:d4:e7: cd:bd:b3:ce:7c:bb:38:63:df:7d:f5:85:64:96:88: f9:15:05:4c:a8:e8:1b:08:4c:fb:4a:50:ae:2f:ba: a2:a3:52:52:77:89:5b:08:58:b4:07:fc:17:44:45: 07:65:64:02:38:59:a7:9d:b9:8f:d3:b8:51:58:d9: a7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:FB:7C:E4:6D:A4:D6:4B:60:CD:5B:3E:C8:91:51:51:1D:6A:AF:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/da977b0c-13e8-3e4d-82b5-c12d5d9e1ed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:12:d0:50:df:4a:1e:08:20:12:b8:17:b4:59:ee:53:06:f1: 55:e6:7e:fa:69:c8:da:2e:99:ba:b1:ec:83:41:6c:d7:4c:90: 25:72:38:32:eb:68:e8:a7:62:36:54:d9:76:c7:87:a3:d7:ca: 03:f3:8c:8e:6d:5f:43:29:f9:ec:5f:bb:f3:82:b9:cd:d0:ac: 04:e7:3a:01:93:bb:3e:59:68:52:e1:65:63:e9:7f:bc:51:28: 3e:c1:a5:17:a0:2e:43:96:ec:23:b6:5b:1c:97:26:45:27:ad: 29:8e:ce:2d:6b:61:9b:8f:ab:06:9b:01:f9:4c:dc:2a:9b:cb: b1:a9:29:d9:ff:53:15:2a:f1:06:19:3e:a0:4a:2d:8f:a2:94: 09:45:8b:2d:66:da:a3:32:c1:ab:a9:aa:c4:bb:81:a1:65:d1: e8:15:88:c8:f7:ec:60:54:45:c8:9a:33:dc:c4:8e:a8:77:43: 4e:d7:2d:43:19:40:7c:cb:ec:19:26:dd:77:b9:48:29:49:5c: 22:2d:f3:c6:f1:4e:29:74:e4:19:e4:20:57:cc:e7:12:11:64: f9:03:5b:a1:92:c6:49:08:24:69:75:95:65:97:5d:77:41:ea: d8:57:fd:fc:e7:ad:d7:2d:b2:43:7a:9b:fb:3b:c3:5d:52:bb: 7c:c7:69:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5vGspTzDUceHHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk MTRkZmRhZjktZTJjMy00OTZkLWFjMDctYjA2OGYyMWJkMDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2S2Jl+cXvkgkLhMWkLQhgw5KGzfOaRKYXbI pBcE2fNaS5sOR97fApjjrwIIT3vayADPaKLbhMrRerUl9gMST0QgZ5X20PZD3P+M AcvnMj7kb+Js1WhwavLEvEkjIMhZ08KEADFeTGb+2AvEPjBFMEi23uhOZGT5Zap7 MWymfQYz126+d00JDAucdRDWKC1ViDu4lMEhkxwHPV+VkJRxCenq5UMjd1tEcjjQ t+UvyVCKj9jqgsuoeR3+O0Mv7DFp1OfNvbPOfLs4Y9999YVkloj5FQVMqOgbCEz7 SlCuL7qio1JSd4lbCFi0B/wXREUHZWQCOFmnnbmP07hRWNmnXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ77fORtpNZLYM1bPsiRUVEdaq8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvZGE5NzdiMGMtMTNlOC0z ZTRkLTgyYjUtYzEyZDVkOWUxZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAne8OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwS0FDfSh4IIBK4F7RZ7lMG8VXmfvppyNoumbqx7INBbNdMkCVyODLr aOinYjZU2XbHh6PXygPzjI5tX0Mp+exfu/OCuc3QrATnOgGTuz5ZaFLhZWPpf7xR KD7BpRegLkOW7CO2WxyXJkUnrSmOzi1rYZuPqwabAflM3Cqby7GpKdn/UxUq8QYZ PqBKLY+ilAlFiy1m2qMywaupqsS7gaFl0egViMj37GBURciaM9zEjqh3Q07XLUMZ QHzL7Bkm3Xe5SClJXCIt88bxTil05BnkIFfM5xIRZPkDW6GSxkkIJGl1lWWXXXdB 6thX/fznrdctskN6m/s7w11Su3zHaVg= -----END CERTIFICATE-----Generated at Fri Aug 21 00:18:31 2026 by rpki-client