$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/022a5b11-7602-3ba2-a3a6-2fcc8b2c6ecf.roa File: 022a5b11-7602-3ba2-a3a6-2fcc8b2c6ecf.roa (raw, json) Hash identifier: 6QbdL7IqizyCSw/sZqHPdh88/rvTP4FqAUcvTbZ+M78= Subject key identifier: 1F:AB:92:BC:44:11:88:03:61:39:24:2F:3C:FF:2D:67:0A:0D:78:F1 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F2ABCFF431C2580F1165E3AA0 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/022a5b11-7602-3ba2-a3a6-2fcc8b2c6ecf.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 152.44.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bc:ff:43:1c:25:80:f1:16:5e:3a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=1f235833-7523-49ad-ad61-708e956bfd81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:70:76:c4:86:7e:12:8f:79:b5:b4:0f:4a:f5: eb:17:72:fd:48:57:4a:05:8d:1b:e1:4f:36:c8:23: fd:4e:36:09:17:71:29:5b:4c:2c:99:6e:bf:e9:73: c6:3c:0c:7a:0f:ad:37:77:2d:a4:55:d5:07:cc:ba: ac:6d:4f:32:43:53:4a:63:16:5c:e8:ad:66:18:b0: fb:47:fe:ab:10:66:1e:88:54:af:06:43:1c:0b:02: 9e:16:89:e8:4d:bb:e3:3d:5c:1d:93:6d:e2:9e:b5: 63:b2:28:75:9d:44:31:ef:23:05:e3:7a:0b:69:b3: f5:56:d9:3e:62:e9:a5:17:2c:8a:91:61:b8:ac:32: 2f:ce:be:45:77:90:5d:69:66:43:3e:17:1b:d3:db: d6:33:50:58:a4:42:70:34:bb:5d:8c:b5:74:39:e6: e9:88:fa:08:a7:40:32:b1:69:c4:ba:56:4e:b0:c1: e7:61:98:a7:2f:db:77:aa:71:a8:ac:85:01:11:9b: 26:3e:31:fa:3b:47:37:7c:97:e1:2c:0f:c5:f7:6a: 0f:9f:64:90:b8:cc:88:c1:bc:9e:4c:16:2b:02:38: 26:4f:66:e0:8a:a3:6a:c4:33:2e:d7:91:af:99:58: ba:46:ed:bf:49:5e:15:2c:33:0e:1e:8a:82:51:01: 12:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AB:92:BC:44:11:88:03:61:39:24:2F:3C:FF:2D:67:0A:0D:78:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/022a5b11-7602-3ba2-a3a6-2fcc8b2c6ecf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:f2:b5:c5:c8:c2:ac:0e:d1:65:07:01:25:d0:b1:8c:35:4d: 9f:05:db:e1:d7:f5:df:ea:ec:4b:e6:3c:6a:52:bc:b4:83:6f: 57:7b:a4:09:24:bd:88:46:76:5e:2d:14:84:47:b5:82:47:06: 3f:f4:90:68:b3:83:53:84:83:e0:94:b8:1c:ce:4f:c0:a2:c4: 97:23:12:df:54:02:e5:cb:10:f5:2b:f3:b4:5c:21:39:ff:65: 95:d1:cc:f6:03:6f:ba:53:c5:a0:08:ea:e8:df:9b:02:0a:d6: d6:ff:82:d2:44:55:23:bf:42:a2:1a:e3:b9:ee:c9:34:d0:be: e3:16:e7:6b:91:cf:35:8e:f8:1e:7b:2c:8c:4b:be:dd:71:dc: 4e:45:f8:cf:51:a9:ed:62:83:f4:dc:bb:f0:2d:ca:f0:3a:61: 3b:5d:31:fd:10:16:fd:52:ef:20:a3:8e:02:37:c1:1c:92:a5: 63:56:a7:40:e0:80:ee:6e:43:c5:63:20:b0:e8:d5:ff:46:ff: 93:40:2a:f1:62:03:2f:aa:d6:9c:2d:a1:d1:53:a4:48:2a:b2: 45:29:6b:7e:ac:b5:dd:28:77:25:63:28:8d:99:53:83:a7:93: c3:48:04:50:91:c2:84:a5:1f:19:84:ea:c3:81:30:81:f8:4a: 5e:27:c6:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvP9DHCWA8RZeOqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk MWYyMzU4MzMtNzUyMy00OWFkLWFkNjEtNzA4ZTk1NmJmZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXB2xIZ+Eo95tbQPSvXrF3L9SFdKBY0b4U82 yCP9TjYJF3EpW0wsmW6/6XPGPAx6D603dy2kVdUHzLqsbU8yQ1NKYxZc6K1mGLD7 R/6rEGYeiFSvBkMcCwKeFonoTbvjPVwdk23inrVjsih1nUQx7yMF43oLabP1Vtk+ YumlFyyKkWG4rDIvzr5Fd5BdaWZDPhcb09vWM1BYpEJwNLtdjLV0OebpiPoIp0Ay sWnEulZOsMHnYZinL9t3qnGorIUBEZsmPjH6O0c3fJfhLA/F92oPn2SQuMyIwbye TBYrAjgmT2bgiqNqxDMu15GvmVi6Ru2/SV4VLDMOHoqCUQESiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+rkrxEEYgDYTkkLzz/LWcKDXjxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvMDIyYTViMTEtNzYwMi0z YmEyLWEzYTYtMmZjYzhiMmM2ZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnytcXIwqwO0WUHASXQsYw1TZ8F2+HX9d/q7EvmPGpSvLSDb1d7pAkk vYhGdl4tFIRHtYJHBj/0kGizg1OEg+CUuBzOT8CixJcjEt9UAuXLEPUr87RcITn/ ZZXRzPYDb7pTxaAI6ujfmwIK1tb/gtJEVSO/QqIa47nuyTTQvuMW52uRzzWO+B57 LIxLvt1x3E5F+M9Rqe1ig/Tcu/AtyvA6YTtdMf0QFv1S7yCjjgI3wRySpWNWp0Dg gO5uQ8VjILDo1f9G/5NAKvFiAy+q1pwtodFTpEgqskUpa36std0odyVjKI2ZU4On k8NIBFCRwoSlHxmE6sOBMIH4Sl4nxvQ= -----END CERTIFICATE-----Generated at Sat Sep 26 11:09:26 2026 by rpki-client