$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/477c9adf-427c-35db-ae04-836a3971a157.roa File: 477c9adf-427c-35db-ae04-836a3971a157.roa (raw, json) Hash identifier: MP4+1HPHMHnkW2Y/aeKM6K3B9p/fUMwjUx0esFF0ONE= Subject key identifier: F0:E2:DF:82:35:7F:77:70:EC:EE:3F:0F:CB:95:34:68:68:E8:8C:8B Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F27F251874008683A975A76C0 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/477c9adf-427c-35db-ae04-836a3971a157.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 152.44.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:51:87:40:08:68:3a:97:5a:76:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=a580d5c6-8170-4002-8a94-12db5e7829bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:58:d0:e2:e8:9b:b6:b4:c2:57:c0:fa:5f:17: 0c:4a:63:29:27:89:93:09:30:40:18:24:d6:d8:03: 61:aa:31:f2:4b:eb:9d:84:02:da:8d:2f:e1:47:0f: 84:26:a6:88:a4:64:65:4a:de:5b:2b:3c:00:19:ef: 24:d9:9c:2c:3c:b8:b5:82:bf:ab:72:e9:9e:c1:77: 7d:fc:41:29:c1:1d:3e:ef:d9:4c:22:f4:f7:7a:25: 7e:73:8e:eb:b1:c8:f8:ec:16:97:69:33:85:1b:bc: f1:16:0c:13:bf:eb:80:03:64:22:e7:1b:c2:a3:fc: c3:e4:26:77:31:41:d6:dc:70:82:97:5e:7c:23:79: f7:0b:62:60:6c:20:34:e1:21:79:63:5e:37:8e:59: 2d:1c:27:de:6c:17:46:fb:ed:63:c2:84:4e:8f:8a: 28:bc:41:a4:19:04:4a:6c:c0:45:9d:31:18:1c:1f: 90:a1:58:37:b2:d1:98:44:e3:a8:a6:2d:40:09:61: 97:6e:ed:aa:4b:d5:1c:02:2a:e8:1a:9e:a4:bd:ef: 85:6e:23:e1:78:ed:c4:db:7f:ce:c6:b5:74:c8:95: a9:ca:6f:27:32:49:89:05:57:8f:5c:29:19:fa:0b: 46:81:2f:b3:3a:f7:96:73:e3:ba:ff:96:6c:95:74: 0f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E2:DF:82:35:7F:77:70:EC:EE:3F:0F:CB:95:34:68:68:E8:8C:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/477c9adf-427c-35db-ae04-836a3971a157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:aa:33:54:e0:74:d1:33:ae:36:37:d4:21:ef:d3:4f:98:6d: 12:87:e6:db:ab:0e:ed:fd:c2:b9:7f:a3:41:91:81:a2:44:57: b9:5f:a4:bd:f3:f4:94:30:74:9f:ba:02:a0:04:7f:04:76:dc: 26:4f:3d:f7:5b:75:09:b1:40:30:66:37:32:44:8c:f4:c5:18: 2e:a2:e7:20:bb:25:08:a8:02:33:e8:a1:dc:d2:67:08:5f:57: b4:8f:a6:fd:56:17:52:ae:7d:c0:5a:d7:26:5e:b2:35:db:10: d6:41:7c:1f:2b:79:c6:f7:0b:25:24:85:97:82:70:d4:55:00: 31:9a:3e:26:06:2e:43:44:15:f9:b3:55:b3:7c:9b:f8:2d:6a: 25:53:70:c9:b0:0b:36:0b:47:3b:2f:d1:2b:36:4f:97:ca:c7: c8:d9:91:05:06:f2:01:15:79:0a:00:c2:15:e1:9b:4d:f8:3d: 3a:54:a7:24:4c:1e:b7:10:93:69:b2:7d:30:05:a0:c5:f9:7d: a1:91:fa:ab:8e:3e:83:58:b1:7b:82:52:1a:c4:fe:74:6e:1e: b5:6a:c2:0e:17:ed:cf:2f:e5:01:aa:34:87:06:4e:61:13:1c: b1:e0:62:05:60:a4:51:ec:91:6f:cf:6b:79:95:d0:45:47:84: 72:ab:69:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8lGHQAhoOpdadsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk YTU4MGQ1YzYtODE3MC00MDAyLThhOTQtMTJkYjVlNzgyOWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxljQ4uibtrTCV8D6XxcMSmMpJ4mTCTBAGCTW 2ANhqjHyS+udhALajS/hRw+EJqaIpGRlSt5bKzwAGe8k2ZwsPLi1gr+rcumewXd9 /EEpwR0+79lMIvT3eiV+c47rscj47BaXaTOFG7zxFgwTv+uAA2Qi5xvCo/zD5CZ3 MUHW3HCCl158I3n3C2JgbCA04SF5Y143jlktHCfebBdG++1jwoROj4oovEGkGQRK bMBFnTEYHB+QoVg3stGYROOopi1ACWGXbu2qS9UcAiroGp6kve+FbiPheO3E23/O xrV0yJWpym8nMkmJBVePXCkZ+gtGgS+zOveWc+O6/5ZslXQPKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDi34I1f3dw7O4/D8uVNGho6IyLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvNDc3YzlhZGYtNDI3Yy0z NWRiLWFlMDQtODM2YTM5NzFhMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+qM1TgdNEzrjY31CHv00+YbRKH5turDu39wrl/o0GRgaJEV7lfpL3z 9JQwdJ+6AqAEfwR23CZPPfdbdQmxQDBmNzJEjPTFGC6i5yC7JQioAjPoodzSZwhf V7SPpv1WF1KufcBa1yZesjXbENZBfB8recb3CyUkhZeCcNRVADGaPiYGLkNEFfmz VbN8m/gtaiVTcMmwCzYLRzsv0Ss2T5fKx8jZkQUG8gEVeQoAwhXhm034PTpUpyRM HrcQk2myfTAFoMX5faGR+quOPoNYsXuCUhrE/nRuHrVqwg4X7c8v5QGqNIcGTmET HLHgYgVgpFHskW/Pa3mV0EVHhHKraSI= -----END CERTIFICATE-----Generated at Sun Sep 27 05:40:07 2026 by rpki-client