$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/3325e3fe-1ca5-341f-b639-388821219e7f.roa File: 3325e3fe-1ca5-341f-b639-388821219e7f.roa (raw, json) Hash identifier: Ms6RSh97frJ/0VJLRFWMe1GsFNlNzMzkxNuwzVGBVMc= Subject key identifier: A6:82:FC:7A:5B:E9:A3:B5:95:7C:2F:2E:99:70:C8:64:E6:06:8A:76 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F27F2511FB213E9BA481E6BBC Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/3325e3fe-1ca5-341f-b639-388821219e7f.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 152.44.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:51:1f:b2:13:e9:ba:48:1e:6b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=b8ae089b-e32d-4845-bdde-6e81d817abec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2a:21:12:af:42:d9:9f:0c:f3:cc:13:bb:fd: 51:a3:7a:9f:09:77:67:81:4e:1e:fc:47:61:85:0f: 25:c8:04:a2:30:06:e8:b4:b7:64:60:7e:e6:18:fd: 49:85:f6:4a:47:1b:fc:15:07:14:23:15:dc:76:d8: 5e:35:2a:71:64:20:bc:17:5a:21:c1:9a:7f:be:98: c4:19:e1:3b:f3:b6:be:0a:ca:08:d1:7d:88:58:5d: b4:bd:a4:a3:89:cc:87:43:e9:19:3a:f8:b8:86:eb: 7c:3b:fe:a1:1d:97:d1:35:50:ea:97:19:23:d9:6f: bd:75:47:20:b4:e7:00:dd:b9:08:53:95:b0:d3:7b: 6c:8d:7d:5d:0b:62:23:6b:f8:27:fe:89:eb:13:ad: 6c:6a:e6:46:e2:5b:ee:73:63:f7:69:2a:38:83:28: 1a:17:b1:62:a3:bb:2c:80:34:46:c4:6c:e0:f7:a3: 96:3a:cd:e7:7a:cd:da:27:5b:02:ff:ad:40:4f:8a: 8c:3b:bb:6e:60:71:55:a6:eb:4e:0b:18:9f:ec:18: d4:03:d7:1a:89:2c:f3:eb:85:46:62:cb:ad:e3:b9: 38:69:0e:c1:1e:6c:97:57:2c:10:3e:ef:55:eb:09: 9a:9d:78:72:98:ae:a4:c4:3a:61:bb:fe:2d:2f:3b: 10:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:82:FC:7A:5B:E9:A3:B5:95:7C:2F:2E:99:70:C8:64:E6:06:8A:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/3325e3fe-1ca5-341f-b639-388821219e7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e7:74:e8:7e:3a:f5:16:a5:73:ba:f5:00:1d:21:41:ca:42: 95:7f:a4:42:b4:9e:06:c2:09:a3:19:88:b3:52:fd:79:99:a8: ed:36:ba:bd:9f:b3:ae:b3:ec:d7:d4:5b:ef:bc:6b:85:23:d0: ed:64:21:59:dd:b3:66:a5:63:92:6a:f3:f9:61:0c:9d:d5:72: 1d:8b:55:99:4d:4d:77:96:a0:67:5c:a0:11:84:d8:34:b9:9f: 8c:94:b2:85:e5:c4:ca:9a:c6:6a:e2:ce:2a:3e:e4:60:73:8e: 4a:9c:a5:bb:69:5c:2c:53:8e:81:2e:43:4b:65:2f:ff:e9:0f: 1f:fa:b1:87:62:c2:cf:58:4b:27:7f:c2:87:6a:15:ba:0a:3e: 18:25:b9:12:0f:b8:1f:b5:59:a2:4d:cf:68:80:a4:50:85:3b: 15:dc:0f:f8:49:af:9b:e3:a1:26:3c:35:87:25:4a:86:d2:17: 81:b8:69:b6:9a:0c:a0:c3:e3:df:51:1c:af:6f:88:8e:42:b0: cb:17:02:41:a7:ac:16:41:2a:f9:33:8c:29:86:fe:65:72:24: a9:b7:1a:b9:a6:48:89:65:c8:d2:dd:80:68:ae:4d:d9:1c:0f: 64:81:63:d1:d9:e6:d2:7b:da:f4:92:e0:46:89:4d:66:11:fd: 9a:96:ab:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8lEfshPpukgea7wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk YjhhZTA4OWItZTMyZC00ODQ1LWJkZGUtNmU4MWQ4MTdhYmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SohEq9C2Z8M88wTu/1Ro3qfCXdngU4e/Edh hQ8lyASiMAbotLdkYH7mGP1JhfZKRxv8FQcUIxXcdtheNSpxZCC8F1ohwZp/vpjE GeE787a+CsoI0X2IWF20vaSjicyHQ+kZOvi4hut8O/6hHZfRNVDqlxkj2W+9dUcg tOcA3bkIU5Ww03tsjX1dC2Ija/gn/onrE61sauZG4lvuc2P3aSo4gygaF7Fio7ss gDRGxGzg96OWOs3nes3aJ1sC/61AT4qMO7tuYHFVputOCxif7BjUA9caiSzz64VG Ysut47k4aQ7BHmyXVywQPu9V6wmanXhymK6kxDphu/4tLzsQ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaC/Hpb6aO1lXwvLplwyGTmBop2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvMzMyNWUzZmUtMWNhNS0z NDFmLWI2MzktMzg4ODIxMjE5ZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzndOh+OvUWpXO69QAdIUHKQpV/pEK0ngbCCaMZiLNS/XmZqO02ur2f s66z7NfUW++8a4Uj0O1kIVnds2alY5Jq8/lhDJ3Vch2LVZlNTXeWoGdcoBGE2DS5 n4yUsoXlxMqaxmrizio+5GBzjkqcpbtpXCxTjoEuQ0tlL//pDx/6sYdiws9YSyd/ wodqFboKPhgluRIPuB+1WaJNz2iApFCFOxXcD/hJr5vjoSY8NYclSobSF4G4abaa DKDD499RHK9viI5CsMsXAkGnrBZBKvkzjCmG/mVyJKm3GrmmSIllyNLdgGiuTdkc D2SBY9HZ5tJ72vSS4EaJTWYR/ZqWqw0= -----END CERTIFICATE-----Generated at Mon Oct 12 04:59:14 2026 by rpki-client