$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/3b7d3002-3189-3caa-bfba-e9b3b4897732.roa File: 3b7d3002-3189-3caa-bfba-e9b3b4897732.roa (raw, json) Hash identifier: ZSqcBpzY2yDtBN4n6HazwwauQVinR9CXbT+ofVmhPKY= Subject key identifier: 3F:EA:15:96:CC:56:7D:A9:74:5D:1B:99:EB:B7:CE:D3:8B:76:72:CE Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F225CF61F448C3CA35B6B1480 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/3b7d3002-3189-3caa-bfba-e9b3b4897732.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 152.44.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:f6:1f:44:8c:3c:a3:5b:6b:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=2c8081ec-3f2e-4e43-8ca7-95c1e5abcc6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4a:46:51:51:7d:5f:b0:be:d3:03:b2:5e:a3: 23:6f:2c:bb:b5:19:61:c8:59:26:19:79:02:db:e7: f7:50:e8:c9:54:ed:ae:f1:67:1c:ae:e0:16:4e:da: 67:65:d7:2e:73:c1:9a:db:d0:71:8d:0d:c5:3b:e4: a4:2c:0f:a5:14:8a:44:54:48:c1:b4:ad:d4:c0:ea: 77:31:13:41:69:ee:ea:a7:bb:97:4f:b7:0e:6c:0f: 07:ec:ab:89:3f:46:6a:13:ef:c3:46:27:6b:08:d9: c5:e1:dd:1d:b6:a9:96:42:30:c1:4f:78:0c:ba:c8: 35:b1:bc:0b:4a:7d:1d:e0:41:5f:92:37:d4:b5:ff: c1:73:9b:93:f3:25:b9:e0:d5:4a:47:82:84:f1:16: a9:7a:00:70:a3:72:ed:27:d0:a8:b2:49:07:14:4e: 4e:18:a7:4b:1f:fa:22:8c:fb:6e:0a:9c:bf:1f:44: c1:22:0e:a8:88:ec:c8:4e:dd:01:ae:49:4c:27:89: a5:90:c1:fb:fd:42:58:2e:55:79:ed:bc:01:45:f0: 08:32:26:ec:ef:1a:f6:3c:a9:2c:1a:37:de:52:0e: 3c:39:b6:06:1c:5b:ae:50:0e:47:3a:87:86:28:74: 54:4a:e1:dd:95:f4:4b:64:10:0a:51:0c:ed:0c:f4: d5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EA:15:96:CC:56:7D:A9:74:5D:1B:99:EB:B7:CE:D3:8B:76:72:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/3b7d3002-3189-3caa-bfba-e9b3b4897732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:0a:52:3b:f3:81:55:97:36:83:ef:83:bf:37:55:5c:5f:bb: af:35:1c:f0:64:41:c9:d2:84:b5:bd:3e:f2:e2:93:0c:cb:3d: 63:cc:2a:76:27:20:8f:8c:36:3f:c7:e3:0b:25:ae:f2:31:78: 91:fd:d4:34:47:64:a3:68:5e:c7:a5:7b:6d:3d:20:ed:12:1a: 84:be:2c:fe:96:6b:de:c2:41:f0:7e:5a:cb:c1:4f:97:04:f0: c6:10:c6:af:86:9c:1b:ca:d3:6e:94:a7:45:82:f5:b9:c4:16: b9:f1:c9:de:ff:81:ba:1b:67:52:b2:8e:72:39:f2:a8:43:6c: 1a:e8:fe:62:ed:0b:bc:54:1c:7f:49:9f:2d:87:f1:69:41:66: 72:ef:19:b4:24:45:b2:2b:c7:68:59:71:7b:35:96:53:d0:f1: 03:fc:2b:48:4c:65:75:25:06:06:ce:4c:d3:40:cb:fd:e0:71: 5f:95:74:07:2b:3f:b6:ad:a9:55:57:56:b3:d1:e8:c0:bc:0e: ca:0a:4a:2d:1c:88:0f:c5:d1:0d:fb:ca:d9:50:c0:7c:a3:94: c9:fa:c5:32:56:97:70:d6:ee:3c:25:63:2e:7f:fa:63:55:0f: 17:3e:49:c2:5b:6e:1c:49:5a:09:5d:e5:2e:b2:cc:b3:76:07: 9c:c5:1a:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXPYfRIw8o1trFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk MmM4MDgxZWMtM2YyZS00ZTQzLThjYTctOTVjMWU1YWJjYzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0pGUVF9X7C+0wOyXqMjbyy7tRlhyFkmGXkC 2+f3UOjJVO2u8WccruAWTtpnZdcuc8Ga29BxjQ3FO+SkLA+lFIpEVEjBtK3UwOp3 MRNBae7qp7uXT7cObA8H7KuJP0ZqE+/DRidrCNnF4d0dtqmWQjDBT3gMusg1sbwL Sn0d4EFfkjfUtf/Bc5uT8yW54NVKR4KE8RapegBwo3LtJ9CoskkHFE5OGKdLH/oi jPtuCpy/H0TBIg6oiOzITt0BrklMJ4mlkMH7/UJYLlV57bwBRfAIMibs7xr2PKks GjfeUg48ObYGHFuuUA5HOoeGKHRUSuHdlfRLZBAKUQztDPTVRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/qFZbMVn2pdF0bmeu3ztOLdnLOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvM2I3ZDMwMDItMzE4OS0z Y2FhLWJmYmEtZTliM2I0ODk3NzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAKUjvzgVWXNoPvg783VVxfu681HPBkQcnShLW9PvLikwzLPWPMKnYn II+MNj/H4wslrvIxeJH91DRHZKNoXsele209IO0SGoS+LP6Wa97CQfB+WsvBT5cE 8MYQxq+GnBvK026Up0WC9bnEFrnxyd7/gbobZ1KyjnI58qhDbBro/mLtC7xUHH9J ny2H8WlBZnLvGbQkRbIrx2hZcXs1llPQ8QP8K0hMZXUlBgbOTNNAy/3gcV+VdAcr P7atqVVXVrPR6MC8DsoKSi0ciA/F0Q37ytlQwHyjlMn6xTJWl3DW7jwlYy5/+mNV Dxc+ScJbbhxJWgld5S6yzLN2B5zFGmQ= -----END CERTIFICATE-----Generated at Sun Sep 27 20:22:50 2026 by rpki-client