$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/fe8a7f17-e2f0-31aa-a65a-ade36d2e6276.roa File: fe8a7f17-e2f0-31aa-a65a-ade36d2e6276.roa (raw, json) Hash identifier: WWEhQHtIDGK23apFpK6ovsP9fX3FlXdBmwdMIyFPApI= Subject key identifier: FB:98:63:F3:9D:22:9E:FB:45:03:37:BC:C6:90:CF:3F:F6:6A:00:90 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F225CF68275D090F95CF11780 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/fe8a7f17-e2f0-31aa-a65a-ade36d2e6276.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 152.44.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:f6:82:75:d0:90:f9:5c:f1:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=e4dfdd57-41e2-4002-b6d5-ec61ac43512f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:28:78:57:16:db:e2:5c:a0:3e:44:dc:9c:e1: 3d:8c:c0:2a:24:05:99:4e:fc:84:93:1f:5b:d4:6f: 0b:03:c0:44:4e:33:e6:5b:05:1a:84:c5:6c:45:c8: bb:c0:c5:f3:c7:45:62:24:1f:3c:ef:95:32:bc:0d: 23:f5:26:54:45:23:f0:4b:85:26:bf:ef:1d:d3:a3: a9:a1:5f:48:fb:aa:13:29:fe:40:8a:ae:16:a3:4e: 39:cb:a5:80:2f:6a:a5:8b:4e:68:54:0c:cd:a4:32: c9:28:e6:ab:a6:e3:6b:a4:53:b7:e6:c3:07:16:35: b6:66:55:44:8b:ed:f7:d6:fd:ac:38:97:ca:98:a8: 14:63:6c:ac:15:fb:bd:7f:2d:18:b0:7a:84:82:85: a6:26:66:fa:22:34:1f:22:71:cd:c9:dd:3c:03:dd: a6:57:14:e7:7a:ef:ca:a6:04:9f:e0:04:84:ac:8d: 97:60:48:eb:78:dc:95:ea:20:49:d5:b3:18:f2:17: 21:b2:2c:b5:4f:73:96:52:3c:e5:de:73:05:4c:d7: 32:09:81:bf:42:a1:11:a1:3d:d7:31:a9:6b:3c:55: b1:0d:4b:15:7d:51:5b:fb:8c:dc:86:0d:be:35:c9: 67:72:c8:43:07:a7:46:7a:ba:75:d8:13:ed:b2:3a: 6d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:98:63:F3:9D:22:9E:FB:45:03:37:BC:C6:90:CF:3F:F6:6A:00:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/fe8a7f17-e2f0-31aa-a65a-ade36d2e6276.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:f3:19:60:1f:1c:59:a4:da:a6:69:2b:75:68:73:30:21:8f: c2:10:df:55:bc:a2:46:18:51:26:b6:26:04:38:bb:0e:51:56: 13:5a:a4:62:98:8a:f5:13:32:27:53:62:29:3b:bb:e6:8b:f5: 71:28:67:54:a8:4c:67:a7:a7:b8:14:fb:da:fd:2e:fb:60:2a: 53:fc:8c:e6:9a:ce:25:82:69:3f:ae:cc:13:a5:c2:0a:bc:55: 9f:a0:fa:2b:f4:c1:1f:0f:74:a2:1e:2e:0c:41:6a:da:f4:db: bb:61:ce:d7:65:b7:62:80:65:f3:1f:08:42:6a:92:86:f1:af: 4e:1c:b8:fb:89:3d:9e:c5:7c:9d:20:a4:48:d1:eb:8c:e4:44: b3:12:25:ce:c0:ab:bd:fb:19:8d:2d:d0:a1:37:2f:7f:54:4b: 94:5c:75:a2:43:6a:64:05:64:07:72:86:10:0d:21:3f:41:15: 1c:90:c9:54:c9:9b:37:e7:76:6f:1d:a4:06:18:8d:70:fd:40: 5a:b4:5b:60:ed:93:e3:5f:8a:f9:55:2d:db:51:4b:71:1a:34: de:2e:0d:35:0c:68:fd:1b:a6:79:89:9f:d8:c2:2f:be:1e:39: 3d:47:a2:4a:30:dc:b0:1f:ea:85:a3:d6:b1:3d:3e:65:47:e1: e2:32:5a:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXPaCddCQ+VzxF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk ZTRkZmRkNTctNDFlMi00MDAyLWI2ZDUtZWM2MWFjNDM1MTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCh4Vxbb4lygPkTcnOE9jMAqJAWZTvyEkx9b 1G8LA8BETjPmWwUahMVsRci7wMXzx0ViJB8875UyvA0j9SZURSPwS4Umv+8d06Op oV9I+6oTKf5Aiq4Wo045y6WAL2qli05oVAzNpDLJKOarpuNrpFO35sMHFjW2ZlVE i+331v2sOJfKmKgUY2ysFfu9fy0YsHqEgoWmJmb6IjQfInHNyd08A92mVxTneu/K pgSf4ASErI2XYEjreNyV6iBJ1bMY8hchsiy1T3OWUjzl3nMFTNcyCYG/QqERoT3X MalrPFWxDUsVfVFb+4zchg2+NclncshDB6dGerp12BPtsjptcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPuYY/OdIp77RQM3vMaQzz/2agCQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvZmU4YTdmMTctZTJmMC0z MWFhLWE2NWEtYWRlMzZkMmU2Mjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXzGWAfHFmk2qZpK3VoczAhj8IQ31W8okYYUSa2JgQ4uw5RVhNapGKY ivUTMidTYik7u+aL9XEoZ1SoTGenp7gU+9r9LvtgKlP8jOaaziWCaT+uzBOlwgq8 VZ+g+iv0wR8PdKIeLgxBatr027thztdlt2KAZfMfCEJqkobxr04cuPuJPZ7FfJ0g pEjR64zkRLMSJc7Aq737GY0t0KE3L39US5RcdaJDamQFZAdyhhANIT9BFRyQyVTJ mzfndm8dpAYYjXD9QFq0W2Dtk+NfivlVLdtRS3EaNN4uDTUMaP0bpnmJn9jCL74e OT1Hokow3LAf6oWj1rE9PmVH4eIyWq8= -----END CERTIFICATE-----Generated at Sun Sep 27 14:16:09 2026 by rpki-client