$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/caeb7c8d-0982-3d95-b098-c026e1772ccb.roa File: caeb7c8d-0982-3d95-b098-c026e1772ccb.roa (raw, json) Hash identifier: qECIqFdF0+oEqT4c2yhrpZIiKmnIda2CJ0Iw0VMjweo= Subject key identifier: 6B:80:AA:18:E4:6D:D4:21:6F:29:F5:C2:73:2C:78:62:FC:A0:38:09 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F225CF62DE31ACC287C595540 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/caeb7c8d-0982-3d95-b098-c026e1772ccb.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 152.44.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:f6:2d:e3:1a:cc:28:7c:59:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=5d365109-5d8e-41bf-9fd8-2dcb541fd03e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6b:48:d1:b0:2d:2f:a4:d2:0c:f0:33:d6:94: 59:d9:27:5d:6d:4c:5f:25:f8:5c:32:f0:46:ad:3c: 5c:9a:e9:f9:82:08:81:d9:97:07:0a:2d:20:f5:d3: e3:7c:3c:0a:85:4f:ca:4f:f5:a2:9b:8e:93:c5:58: df:64:a6:e2:c2:78:18:44:ed:44:0f:73:da:41:2c: f9:c2:04:a8:9a:f7:1f:70:42:fe:4f:80:1c:7b:d6: 08:3c:69:24:7d:ef:69:c6:c9:fc:ac:59:ab:2c:dd: 7e:d7:d5:a5:41:d0:47:14:35:9c:cb:e1:ff:16:81: 04:08:ec:81:4d:51:74:11:ba:9b:0d:d4:1d:d6:fd: 6b:9a:58:5b:b2:94:ef:d4:91:a0:37:06:f1:44:ec: d9:84:07:27:90:f3:f2:1f:4d:84:4c:7f:95:1e:79: f8:30:8c:f1:8e:90:a9:4f:c9:50:7f:b0:26:a7:aa: a3:d8:c2:6d:49:46:ae:6a:88:92:22:89:9c:24:d8: fd:a9:d6:dc:13:69:6d:5f:0c:c1:7a:8a:2a:77:a0: 09:f7:2e:62:b2:82:6f:5d:e1:42:a6:1c:34:04:8e: 20:bd:dd:54:ae:26:d5:68:82:eb:67:a1:b5:de:82: 87:d4:08:4a:70:ad:ad:f1:18:f2:d3:ca:c5:55:9a: 69:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:80:AA:18:E4:6D:D4:21:6F:29:F5:C2:73:2C:78:62:FC:A0:38:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/caeb7c8d-0982-3d95-b098-c026e1772ccb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c2:cb:ca:71:4b:77:70:c8:93:cf:b3:b3:1f:d2:53:49:69: 91:ff:80:06:17:18:55:69:4e:bc:c1:33:f0:80:1d:5b:d9:2f: 7c:9e:a0:93:27:dd:fe:58:15:01:eb:fb:5b:e3:2a:dc:62:7f: cb:4e:fb:6d:1d:2b:9f:94:41:48:b1:96:1f:05:5a:ae:e2:2a: 77:01:8d:1a:f7:5a:79:dd:f3:08:b8:c8:69:2a:db:60:fd:5d: 2c:21:ca:d4:2b:4a:c5:eb:4c:03:0c:6b:d4:06:60:e9:ad:54: cb:d3:56:ee:35:4c:b5:3a:38:33:ee:18:d2:9b:d7:15:73:3d: 7c:a2:99:e8:47:84:02:2d:86:93:e1:c2:19:e0:df:ce:ad:a5: d0:7d:cc:31:08:b7:03:ec:3c:11:dc:cf:25:69:8d:ac:02:80: bb:d8:b3:56:3e:55:f0:30:b2:d4:6c:5f:9f:f8:d0:b1:91:26: 80:13:5d:56:82:75:05:7f:51:2c:55:f7:24:8b:56:9b:cc:eb: d4:c0:71:d3:77:e5:54:ea:c7:bc:0e:5f:9d:05:1c:dd:21:e4: d4:54:65:10:8c:48:fa:65:8e:01:18:3e:fb:d8:6d:bc:36:3f: cd:c3:21:90:4d:ac:62:6a:9f:4b:3d:8d:5e:99:a3:03:02:a2: f1:80:31:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXPYt4xrMKHxZVUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk NWQzNjUxMDktNWQ4ZS00MWJmLTlmZDgtMmRjYjU0MWZkMDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmtI0bAtL6TSDPAz1pRZ2SddbUxfJfhcMvBG rTxcmun5ggiB2ZcHCi0g9dPjfDwKhU/KT/Wim46TxVjfZKbiwngYRO1ED3PaQSz5 wgSomvcfcEL+T4Ace9YIPGkkfe9pxsn8rFmrLN1+19WlQdBHFDWcy+H/FoEECOyB TVF0EbqbDdQd1v1rmlhbspTv1JGgNwbxROzZhAcnkPPyH02ETH+VHnn4MIzxjpCp T8lQf7Amp6qj2MJtSUauaoiSIomcJNj9qdbcE2ltXwzBeooqd6AJ9y5isoJvXeFC phw0BI4gvd1UribVaILrZ6G13oKH1AhKcK2t8Rjy08rFVZppaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuAqhjkbdQhbyn1wnMseGL8oDgJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvY2FlYjdjOGQtMDk4Mi0z ZDk1LWIwOTgtYzAyNmUxNzcyY2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTCy8pxS3dwyJPPs7Mf0lNJaZH/gAYXGFVpTrzBM/CAHVvZL3yeoJMn 3f5YFQHr+1vjKtxif8tO+20dK5+UQUixlh8FWq7iKncBjRr3Wnnd8wi4yGkq22D9 XSwhytQrSsXrTAMMa9QGYOmtVMvTVu41TLU6ODPuGNKb1xVzPXyimehHhAIthpPh whng386tpdB9zDEItwPsPBHczyVpjawCgLvYs1Y+VfAwstRsX5/40LGRJoATXVaC dQV/USxV9ySLVpvM69TAcdN35VTqx7wOX50FHN0h5NRUZRCMSPpljgEYPvvYbbw2 P83DIZBNrGJqn0s9jV6ZowMCovGAMW4= -----END CERTIFICATE-----Generated at Sun Sep 27 16:58:48 2026 by rpki-client