$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/2de33dc8-1d34-3bc2-85f2-695cccabe49e.roa File: 2de33dc8-1d34-3bc2-85f2-695cccabe49e.roa (raw, json) Hash identifier: FA3xrcK4lBHvB3EnltwQYg57ZmMS/V+8Iwr3KMfu5GI= Subject key identifier: 8E:C1:A6:00:11:1A:3C:45:53:38:E2:F3:D2:AA:54:60:70:2F:FA:7D Certificate issuer: /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Certificate serial: 010D0C9F4328584D492A79137D0BC1B462B26000 Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/2de33dc8-1d34-3bc2-85f2-695cccabe49e.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 14618 IP address blocks: 157.239.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:79:13:7d:0b:c1:b4:62:b2:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=595b9936-e237-4c1f-b9f7-3ade0790d98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:60:7e:63:a0:e3:de:5f:50:04:31:88:78:b0: 0d:06:a6:2f:a7:43:ed:89:e7:46:3b:83:eb:2b:9d: 89:d2:5b:29:a2:dc:b8:14:ff:48:0e:2f:55:7d:38: 1c:04:5b:7c:11:72:c2:96:fb:36:17:6e:4e:dd:14: 4b:e7:5d:20:0c:e2:8f:ab:0e:87:de:21:a1:d3:f7: 54:96:5b:1f:1f:37:2a:6a:48:d5:9e:d8:00:fe:e5: de:41:6f:36:31:4b:e9:27:0f:66:30:be:72:2c:07: a0:01:c0:ed:1a:c1:dc:32:5a:06:20:78:c4:1b:29: b5:69:c1:ff:a4:fd:a5:52:82:5e:03:05:4b:9c:62: 5f:fa:69:4a:67:33:b3:70:70:ad:c7:1e:40:be:1d: 87:63:18:51:ef:ed:40:12:24:23:fe:ee:6c:71:5d: 15:a6:d2:7c:8e:04:10:7b:47:8a:0a:a9:78:91:4a: 84:34:99:c4:e2:61:92:cc:ec:99:21:de:d6:8d:5f: e3:59:0e:11:9c:74:c7:96:62:ae:d3:39:ed:19:22: a5:43:ac:67:ac:50:b4:67:28:27:37:71:aa:4c:a0: 65:24:b4:f4:9a:90:55:7b:f8:62:24:c4:c2:03:85: 55:a6:77:a2:62:a4:8e:01:66:18:a8:f3:62:83:e5: 46:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C1:A6:00:11:1A:3C:45:53:38:E2:F3:D2:AA:54:60:70:2F:FA:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/2de33dc8-1d34-3bc2-85f2-695cccabe49e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl X509v3 Authority Key Identifier: keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer sbgp-ipAddrBlock: critical IPv4: 157.239.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:de:48:59:e2:a2:4f:52:6b:2d:9b:28:0e:e2:84:c7:18:0a: b6:a3:d8:49:dd:cd:a4:bc:98:e9:91:ea:35:ff:82:33:cf:65: 52:ae:11:e8:99:1a:32:a6:f1:ae:98:e0:e2:5b:68:72:a2:20: f7:a1:15:1d:4b:2a:99:98:86:f6:45:43:28:d3:84:3d:6d:7d: 1d:60:56:b4:36:5e:89:30:07:9f:54:44:3f:65:5a:28:7e:2e: 6d:2a:06:c1:e4:2c:9d:bb:f0:a6:d9:cf:ef:a4:20:64:f2:8a: 7d:38:de:18:c7:30:d3:7a:91:c4:b2:88:17:32:02:b8:5c:ad: 1d:59:d9:b6:1c:27:af:6c:ab:d4:a4:d8:d3:e3:41:8d:8e:77: dc:72:7f:f2:f1:33:77:b9:16:d7:60:16:4c:7a:e6:f6:06:9d: 4e:53:b3:45:c8:07:4a:e1:c6:84:ee:9a:67:88:2d:af:e6:cb: 2a:7e:1e:d0:ba:52:78:80:84:aa:25:cf:f9:1a:7f:eb:61:d8: 46:9e:8c:15:02:ad:8d:d5:ae:9c:d7:89:cc:8f:01:12:b1:12: d6:6d:f4:11:59:f3:43:79:f9:94:b6:02:5e:c1:a5:23:70:ed: e8:4f:84:e9:1a:9b:e7:dc:7f:a3:38:fe:1c:62:ac:ab:83:91: 79:35:a5:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKnkTfQvBtGKyYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex ZDQ3MB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk NTk1Yjk5MzYtZTIzNy00YzFmLWI5ZjctM2FkZTA3OTBkOThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWB+Y6Dj3l9QBDGIeLANBqYvp0PtiedGO4Pr K52J0lspoty4FP9IDi9VfTgcBFt8EXLClvs2F25O3RRL510gDOKPqw6H3iGh0/dU llsfHzcqakjVntgA/uXeQW82MUvpJw9mML5yLAegAcDtGsHcMloGIHjEGym1acH/ pP2lUoJeAwVLnGJf+mlKZzOzcHCtxx5Avh2HYxhR7+1AEiQj/u5scV0VptJ8jgQQ e0eKCql4kUqENJnE4mGSzOyZId7WjV/jWQ4RnHTHlmKu0zntGSKlQ6xnrFC0Zygn N3GqTKBlJLT0mpBVe/hiJMTCA4VVpneiYqSOAWYYqPNig+VGcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7BpgARGjxFUzji89KqVGBwL/p9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0 YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvMmRlMzNkYzgtMWQzNC0z YmMyLTg1ZjItNjk1Y2NjYWJlNDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1 YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAne8fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7eSFniok9Say2bKA7ihMcYCraj2EndzaS8mOmR6jX/gjPPZVKuEeiZ GjKm8a6Y4OJbaHKiIPehFR1LKpmYhvZFQyjThD1tfR1gVrQ2XokwB59URD9lWih+ Lm0qBsHkLJ278KbZz++kIGTyin043hjHMNN6kcSyiBcyArhcrR1Z2bYcJ69sq9Sk 2NPjQY2Od9xyf/LxM3e5FtdgFkx65vYGnU5Ts0XIB0rhxoTummeILa/myyp+HtC6 UniAhKolz/kaf+th2EaejBUCrY3VrpzXicyPARKxEtZt9BFZ80N5+ZS2Al7BpSNw 7ehPhOkam+fcf6M4/hxirKuDkXk1pXg= -----END CERTIFICATE-----Generated at Thu Mar 26 05:04:46 2026 by rpki-client