$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/dede55f6-b224-31db-a529-5375c3b87b1d.roa File: dede55f6-b224-31db-a529-5375c3b87b1d.roa (raw, json) Hash identifier: lwsU04N8x6yUgXmhVQjkZAJFMjP4UagggA6ER7I3YTA= Subject key identifier: 44:C6:0D:3E:7B:3E:F8:06:6B:66:A7:C4:AE:9B:BC:36:36:82:A4:7C Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584F3052677A50DF1CC95844A480 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/dede55f6-b224-31db-a529-5375c3b87b1d.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 400208 IP address blocks: 152.44.191.0/24 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:67:7a:50:df:1c:c9:58:44:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=e99cd6a7-bd4d-496d-b8aa-b805ff77c07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5b:1b:8a:b0:23:93:f5:bb:53:d2:36:e7:1a: be:f3:95:00:97:ae:f2:fe:40:c3:0d:65:ba:95:d5: 77:cb:7a:93:58:5d:a8:32:77:04:47:ff:ed:35:bb: e8:e8:f6:1e:9d:df:87:88:87:72:32:dc:99:61:a3: 87:24:eb:5f:d8:c3:81:e6:5a:fa:0b:1a:b5:a8:9b: 4d:dc:21:a7:f9:13:4e:93:a4:af:a1:19:41:7e:e0: e2:ab:fa:10:99:81:b6:d9:9a:38:48:b3:7f:78:71: 9d:4e:4e:65:ac:b4:55:23:11:6c:2f:b9:a3:39:93: 56:97:13:0b:a0:e7:c8:72:bb:36:59:ff:3e:76:66: 6d:d1:a2:93:cf:af:2e:fc:ba:10:94:2e:05:83:36: af:9f:79:4b:1e:fe:e3:a3:8a:a5:d9:19:53:7f:68: 4f:b1:4e:6d:39:bd:eb:71:6d:09:70:73:cf:79:14: e7:63:69:9f:7b:a1:af:e6:76:f6:3a:9c:27:ae:7c: be:9d:5b:89:7c:1d:79:bc:fa:13:02:78:89:3e:b5: 94:83:81:00:86:30:ac:19:4f:64:76:56:6b:6f:88: 93:10:cb:93:65:90:29:60:1c:29:e0:50:92:d1:c7: 12:64:8e:55:7b:28:2b:59:f3:e7:fd:10:52:ad:67: 3e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:C6:0D:3E:7B:3E:F8:06:6B:66:A7:C4:AE:9B:BC:36:36:82:A4:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/dede55f6-b224-31db-a529-5375c3b87b1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 152.44.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:ef:65:96:6f:bb:12:e6:4c:b7:f2:54:ae:37:97:8d:87:63: 93:df:39:c1:29:0a:28:c1:61:a0:48:4d:65:6c:a1:2a:fe:29: 2a:a4:ce:74:7d:3b:cb:48:0c:cc:e5:4e:04:08:bd:d7:ce:fb: d5:f0:db:cb:8b:1a:9f:04:a8:94:ad:d5:4e:df:7b:e7:ed:1f: 19:63:a2:78:f0:2d:ef:aa:80:20:c7:0b:15:12:bd:29:04:49: cd:27:10:9c:68:92:f6:26:10:eb:da:dc:ca:97:64:f2:24:9b: 57:21:98:df:ee:1a:c5:1e:d6:33:8a:e8:1d:07:03:11:30:81: 10:9d:c1:43:f5:d0:2c:41:f1:57:48:b4:a5:aa:53:3d:37:cd: c4:3b:19:8a:ee:03:67:9d:55:aa:84:1d:4f:07:31:db:4b:fa: f3:1f:16:b6:8a:7a:cc:aa:43:c9:8e:56:03:a0:8c:f2:9b:e9: 19:9d:cf:36:1f:a9:a1:ec:55:65:e3:c7:64:d6:2f:7e:3e:33: fe:0d:21:52:f0:6f:1b:08:d0:3c:85:28:a7:70:e1:01:88:68: ee:c7:ce:79:db:40:13:8e:ae:f2:83:6f:27:54:e8:23:35:62: bb:18:3c:63:ae:27:ea:ff:44:71:74:0c:82:55:9b:32:ae:67: 30:b0:fa:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUmd6UN8cyVhEpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk ZTk5Y2Q2YTctYmQ0ZC00OTZkLWI4YWEtYjgwNWZmNzdjMDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1sbirAjk/W7U9I25xq+85UAl67y/kDDDWW6 ldV3y3qTWF2oMncER//tNbvo6PYend+HiIdyMtyZYaOHJOtf2MOB5lr6Cxq1qJtN 3CGn+RNOk6SvoRlBfuDiq/oQmYG22Zo4SLN/eHGdTk5lrLRVIxFsL7mjOZNWlxML oOfIcrs2Wf8+dmZt0aKTz68u/LoQlC4Fgzavn3lLHv7jo4ql2RlTf2hPsU5tOb3r cW0JcHPPeRTnY2mfe6Gv5nb2Opwnrny+nVuJfB15vPoTAniJPrWUg4EAhjCsGU9k dlZrb4iTEMuTZZApYBwp4FCS0ccSZI5VeygrWfPn/RBSrWc+KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETGDT57PvgGa2anxK6bvDY2gqR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZGVkZTU1ZjYtYjIyNC0z MWRiLWE1MjktNTM3NWMzYjg3YjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCy/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDvZZZvuxLmTLfyVK43l42HY5PfOcEpCijBYaBITWVsoSr+KSqkznR9 O8tIDMzlTgQIvdfO+9Xw28uLGp8EqJSt1U7fe+ftHxljonjwLe+qgCDHCxUSvSkE Sc0nEJxokvYmEOva3MqXZPIkm1chmN/uGsUe1jOK6B0HAxEwgRCdwUP10CxB8VdI tKWqUz03zcQ7GYruA2edVaqEHU8HMdtL+vMfFraKesyqQ8mOVgOgjPKb6RmdzzYf qaHsVWXjx2TWL34+M/4NIVLwbxsI0DyFKKdw4QGIaO7HznnbQBOOrvKDbydU6CM1 YrsYPGOuJ+r/RHF0DIJVmzKuZzCw+tE= -----END CERTIFICATE-----Generated at Wed Sep 23 00:55:57 2026 by rpki-client