$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/161b3327-d90f-347f-94d9-e2d5a2299cfa.roa File: 161b3327-d90f-347f-94d9-e2d5a2299cfa.roa (raw, json) Hash identifier: CpSpLSJxqQZjBnkxJM3UJweS1GSCnCznnd/oeZ0Tzu4= Subject key identifier: 3B:6E:FF:0D:57:C5:68:38:EE:52:B5:8B:F7:65:7D:28:BB:6C:3C:35 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F27F251980C352ABDC5583AE0 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/161b3327-d90f-347f-94d9-e2d5a2299cfa.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 152.44.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:51:98:0c:35:2a:bd:c5:58:3a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=b7879e4f-7db1-47f3-9e4e-3ec2b0006fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c6:4b:1d:0f:fe:c8:da:d5:f6:9d:65:7d:e2: 5f:d4:a1:66:3f:5f:43:c9:9e:1d:91:ee:7d:87:22: 8a:cb:79:05:2a:d5:74:79:d9:f5:f2:45:51:b1:1e: 20:17:80:6b:a7:ca:77:ab:1e:2e:f5:0c:f1:10:a7: c0:ca:79:87:f6:01:10:2e:6b:d0:c1:a3:5a:6b:44: 26:a1:28:47:f4:92:89:83:de:bf:17:24:6b:03:4f: 4a:86:12:a3:be:61:cc:3d:ec:fa:74:67:38:61:c8: 6a:b5:fc:2d:0a:c5:85:f4:d0:bd:59:27:e9:f2:f9: 88:79:8f:d8:31:3b:aa:39:c5:46:a9:12:fd:c0:22: cb:f8:5c:21:12:64:24:2c:09:10:4f:14:c2:af:27: ea:c0:40:c7:94:c5:60:59:72:37:46:a6:d3:7a:69: d7:1e:ae:f5:24:7f:6d:e2:99:c6:91:dd:ff:a2:40: 04:24:a1:29:a9:21:27:95:f8:cc:77:70:99:53:18: 60:6a:0c:a5:b0:08:40:94:ca:e8:37:c9:df:10:84: 11:76:d4:d7:72:e8:ff:ef:c2:cf:53:13:e3:08:e4: af:3f:b9:88:ef:e7:0a:9f:f8:72:2f:14:45:cc:0b: b0:29:ad:49:97:7c:a0:27:be:3f:56:d8:ad:77:b9: e7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6E:FF:0D:57:C5:68:38:EE:52:B5:8B:F7:65:7D:28:BB:6C:3C:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/161b3327-d90f-347f-94d9-e2d5a2299cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:d3:c0:8a:72:c3:09:6d:46:93:a1:da:8b:a1:18:45:5f:ef: 3d:7d:0f:b2:16:95:c8:71:c9:58:32:11:58:78:b6:77:01:4b: f3:06:87:69:eb:3c:e6:b1:8b:49:7a:63:a9:ef:07:a9:7c:bb: 83:42:fb:ab:39:96:5a:b3:b2:6a:bc:bb:11:42:22:94:c7:f9: 1a:a7:73:63:93:5c:df:46:9e:1d:4e:06:d0:ac:09:05:72:8e: 53:60:19:7d:e1:71:ee:0e:1f:62:eb:ca:7c:ea:4e:93:e1:f0: 73:1f:9a:b7:bc:49:6e:58:cb:01:2e:cc:74:a9:32:19:b6:8a: 7b:df:7a:68:78:2b:f3:44:7b:c5:6c:77:67:b7:8a:c1:be:af: f1:57:a7:c0:38:13:3e:ea:d1:2d:91:11:1e:67:c6:f0:ac:57: c1:3f:99:24:d7:3a:32:d7:a7:60:05:84:94:ad:17:21:8d:43: 0b:86:aa:48:19:19:65:50:d3:15:97:00:a4:ec:37:ea:8d:03: 91:d3:3d:6e:00:25:04:17:0d:9e:14:0e:dd:40:a1:56:4a:ca: 4e:cf:2c:b8:15:19:e0:03:95:eb:1b:3c:8b:7a:ea:c9:bf:cc: af:42:05:42:a2:9d:45:b1:a3:28:f0:4e:e2:bb:cb:df:b9:da: db:02:3c:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8lGYDDUqvcVYOuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk Yjc4NzllNGYtN2RiMS00N2YzLTllNGUtM2VjMmIwMDA2ZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMZLHQ/+yNrV9p1lfeJf1KFmP19DyZ4dke59 hyKKy3kFKtV0edn18kVRsR4gF4Brp8p3qx4u9QzxEKfAynmH9gEQLmvQwaNaa0Qm oShH9JKJg96/FyRrA09KhhKjvmHMPez6dGc4YchqtfwtCsWF9NC9WSfp8vmIeY/Y MTuqOcVGqRL9wCLL+FwhEmQkLAkQTxTCryfqwEDHlMVgWXI3RqbTemnXHq71JH9t 4pnGkd3/okAEJKEpqSEnlfjMd3CZUxhgagylsAhAlMroN8nfEIQRdtTXcuj/78LP UxPjCOSvP7mI7+cKn/hyLxRFzAuwKa1Jl3ygJ74/Vtitd7nncQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtu/w1XxWg47lK1i/dlfSi7bDw1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvMTYxYjMzMjctZDkwZi0z NDdmLTk0ZDktZTJkNWEyMjk5Y2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7TwIpywwltRpOh2ouhGEVf7z19D7IWlchxyVgyEVh4tncBS/MGh2nr POaxi0l6Y6nvB6l8u4NC+6s5llqzsmq8uxFCIpTH+Rqnc2OTXN9Gnh1OBtCsCQVy jlNgGX3hce4OH2LrynzqTpPh8HMfmre8SW5YywEuzHSpMhm2invfemh4K/NEe8Vs d2e3isG+r/FXp8A4Ez7q0S2RER5nxvCsV8E/mSTXOjLXp2AFhJStFyGNQwuGqkgZ GWVQ0xWXAKTsN+qNA5HTPW4AJQQXDZ4UDt1AoVZKyk7PLLgVGeADlesbPIt66sm/ zK9CBUKinUWxoyjwTuK7y9+52tsCPLc= -----END CERTIFICATE-----Generated at Fri Sep 25 17:47:01 2026 by rpki-client