$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/1ba91c5d-adcc-3366-aa37-e977fdff7064.roa File: 1ba91c5d-adcc-3366-aa37-e977fdff7064.roa (raw, json) Hash identifier: /uQ7SBz20TlTXs0EpeYTm4E7BREesPR6wTtRBNzlpXA= Subject key identifier: EE:83:A0:62:57:63:32:09:4F:9B:F0:3B:C2:85:F1:FD:F2:6B:4D:99 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F225CF673DB802F29AFE99400 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/1ba91c5d-adcc-3366-aa37-e977fdff7064.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 152.44.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:f6:73:db:80:2f:29:af:e9:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=c84bc03d-6cb1-4960-aa3c-73ac93f5f68b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8b:fd:0e:7b:83:f9:21:03:6d:9a:b2:aa:92: 69:c7:7b:eb:45:93:49:85:3c:e5:2a:cf:7b:a6:20: 36:f4:da:80:8b:84:b1:0c:49:0d:7e:d8:7b:96:1c: 50:bb:ab:d2:27:b2:98:40:13:0a:c3:22:87:b6:3a: b2:57:f2:79:57:f2:3b:bf:e4:cb:f6:47:3e:6d:77: a5:59:8e:4f:72:9a:c5:dd:4c:18:25:6a:5d:55:4f: 59:70:2d:db:e8:9b:f1:55:cd:84:31:7f:73:d7:7f: 05:e7:1d:07:1c:91:55:a3:de:96:87:9d:d2:a8:7f: a3:90:ba:8c:fc:82:8d:47:f6:b5:ee:32:0e:dc:31: af:46:b8:cf:08:77:d1:82:21:4c:6d:ec:ec:c8:51: 45:25:33:1c:19:3d:2c:3b:a5:ad:eb:31:e0:40:13: 37:52:a3:c1:be:65:fd:07:a7:c5:91:7b:b9:f6:1e: 77:cf:41:9f:85:54:69:f9:f1:61:37:eb:76:7d:3b: 37:ca:49:a2:70:a7:52:4d:56:8a:d1:fd:b0:60:74: 7c:17:50:db:be:6a:12:3c:22:0a:7e:fc:49:a6:de: a5:0c:96:ee:3a:bd:35:f3:3b:27:04:65:a5:78:89: 1f:5d:62:09:1c:89:31:1c:eb:9c:e3:14:2d:65:ea: 4f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:83:A0:62:57:63:32:09:4F:9B:F0:3B:C2:85:F1:FD:F2:6B:4D:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/1ba91c5d-adcc-3366-aa37-e977fdff7064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:9c:e3:50:71:d7:01:51:f7:68:05:58:17:01:6c:7b:d1:00: 2b:0b:ae:30:98:21:ad:e7:97:f6:ee:40:7f:3e:9d:ea:3d:2b: 13:d5:db:50:1e:e7:49:1c:75:7e:03:44:24:72:7a:ee:5b:5f: c6:ff:7d:d6:b9:f2:92:15:78:25:b8:a2:c9:09:64:34:eb:1f: 20:60:f2:85:25:40:45:ad:60:1d:4e:71:ca:85:7a:9b:cf:0c: e6:1a:ea:92:11:a1:7b:e9:18:2a:a0:c3:a1:73:c0:d9:f2:cc: 24:df:0e:54:4d:30:33:17:1e:43:ce:43:59:56:88:78:f9:e3: 20:f1:a4:fd:68:72:cf:5e:30:3e:3b:83:e8:31:54:f1:e2:e1: 48:da:c5:2f:4c:8a:9c:3b:36:f5:d5:63:1f:ba:90:87:dd:c3: 8a:27:ed:09:fd:ca:b1:f5:3c:d1:a0:5f:98:9c:39:a0:e4:ac: e2:81:ca:92:e6:5e:95:fd:67:c8:97:97:5d:a1:ac:59:b8:9c: b2:e7:99:b1:07:36:a1:ba:bb:85:a9:b3:88:d9:a6:bf:1f:f3: a7:2b:70:2e:bd:4f:f2:b6:cf:eb:ea:ef:13:4c:d7:30:be:b0: cd:6c:4f:f5:e3:da:bf:a6:be:f0:d8:08:19:0c:aa:4a:67:ee: 43:0b:df:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXPZz24AvKa/plAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk Yzg0YmMwM2QtNmNiMS00OTYwLWFhM2MtNzNhYzkzZjVmNjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIv9DnuD+SEDbZqyqpJpx3vrRZNJhTzlKs97 piA29NqAi4SxDEkNfth7lhxQu6vSJ7KYQBMKwyKHtjqyV/J5V/I7v+TL9kc+bXel WY5PcprF3UwYJWpdVU9ZcC3b6JvxVc2EMX9z138F5x0HHJFVo96Wh53SqH+jkLqM /IKNR/a17jIO3DGvRrjPCHfRgiFMbezsyFFFJTMcGT0sO6Wt6zHgQBM3UqPBvmX9 B6fFkXu59h53z0GfhVRp+fFhN+t2fTs3ykmicKdSTVaK0f2wYHR8F1DbvmoSPCIK fvxJpt6lDJbuOr018zsnBGWleIkfXWIJHIkxHOuc4xQtZepPuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6DoGJXYzIJT5vwO8KF8f3ya02ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvMWJhOTFjNWQtYWRjYy0z MzY2LWFhMzctZTk3N2ZkZmY3MDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSc41Bx1wFR92gFWBcBbHvRACsLrjCYIa3nl/buQH8+neo9KxPV21Ae 50kcdX4DRCRyeu5bX8b/fda58pIVeCW4oskJZDTrHyBg8oUlQEWtYB1OccqFepvP DOYa6pIRoXvpGCqgw6FzwNnyzCTfDlRNMDMXHkPOQ1lWiHj54yDxpP1ocs9eMD47 g+gxVPHi4UjaxS9Mipw7NvXVYx+6kIfdw4on7Qn9yrH1PNGgX5icOaDkrOKBypLm XpX9Z8iXl12hrFm4nLLnmbEHNqG6u4Wps4jZpr8f86crcC69T/K2z+vq7xNM1zC+ sM1sT/Xj2r+mvvDYCBkMqkpn7kML3/I= -----END CERTIFICATE-----Generated at Fri Sep 25 16:34:18 2026 by rpki-client