$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/4cea3d26-1d8c-3751-af3b-3472692e154b.roa File: 4cea3d26-1d8c-3751-af3b-3472692e154b.roa (raw, json) Hash identifier: j7vNyq9UdwO8Ei+OYwPgMat7XCSEa0eR6JsnIGhh/LA= Subject key identifier: 9B:59:84:B7:45:9E:29:95:43:F6:E6:8F:BF:F1:5A:58:84:9D:52:E0 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F225CF69007C9D1AA73E48700 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/4cea3d26-1d8c-3751-af3b-3472692e154b.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 152.44.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:f6:90:07:c9:d1:aa:73:e4:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=3861463b-540e-4070-99bf-a2fcb51da638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cb:62:94:7e:d1:e0:fe:e8:23:eb:4a:a3:3d: ec:87:80:65:1b:50:37:28:3b:5f:35:34:38:8b:ae: bd:7d:3c:79:0e:e6:6d:cc:95:0d:9e:85:1d:66:df: 88:84:4a:af:25:09:26:0c:06:17:c0:73:06:4a:d2: cf:a1:4a:c0:d4:49:45:16:27:c4:5e:f8:5e:a1:34: 9d:01:35:c8:7a:ab:a5:3b:b9:7b:d7:85:c6:90:5b: 40:ac:7c:c3:78:68:e9:e6:c5:db:a8:05:a6:1c:2c: 29:a8:86:a6:c2:42:68:d2:d5:6f:b1:19:00:ac:50: 8a:16:f4:d5:a9:10:4e:7d:ce:ac:fc:db:67:c7:fe: ee:6c:33:59:ac:c2:74:87:da:c8:31:b2:7d:bd:c3: 71:d2:97:68:68:17:03:00:50:b3:38:5a:97:17:c2: fe:6b:52:1c:78:b0:42:ff:8d:45:4d:17:5c:36:38: 70:aa:af:7c:8b:cb:4f:7d:d2:5e:36:8a:4b:92:1c: da:e6:e6:d1:ac:69:34:dc:52:e2:c6:9d:e6:a3:21: 87:44:62:f1:e5:df:ff:c3:08:b4:0f:20:96:1e:0f: 94:64:a1:df:7c:bf:75:c9:e4:84:86:ed:97:be:dc: 30:76:ad:df:b6:e1:bd:71:ed:5b:1d:0a:78:a5:44: 7c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:59:84:B7:45:9E:29:95:43:F6:E6:8F:BF:F1:5A:58:84:9D:52:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/4cea3d26-1d8c-3751-af3b-3472692e154b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:1c:3a:d9:8c:d9:d8:2c:d1:00:4d:06:e1:2e:7d:59:ed:47: 9e:81:97:c0:4f:c2:f0:8c:2a:bf:1b:b5:6e:72:24:ce:bb:6f: 19:3a:fa:a8:c6:a3:53:cc:d5:ca:c6:cc:1c:a1:90:f4:42:56: b1:9e:53:19:84:1e:08:b1:92:9a:e7:81:32:34:81:69:55:1c: 5f:fa:a5:81:ab:c9:dc:17:9b:06:90:4d:ce:a7:0a:ea:fa:ae: 74:22:bc:2d:d1:4d:bd:b1:88:71:e5:18:fe:75:b2:b0:df:a9: 92:19:0c:88:a9:81:74:1b:6e:8d:47:b8:80:0d:db:5a:52:72: 09:96:73:b4:77:79:33:4d:b1:c4:59:71:65:a3:d7:0e:10:e4: 98:80:1f:d0:3b:c3:32:42:7c:19:10:bb:4e:29:0a:0b:9b:ac: 66:3d:a8:04:2b:6b:74:e4:6c:39:1b:00:ab:19:1d:7b:b8:06: 78:62:e2:31:18:4b:26:ea:57:31:3c:9e:4a:c4:95:1c:c0:b6: c2:e5:c4:af:17:1b:2e:61:d1:ac:b8:6b:71:80:e4:5e:1f:ec: fd:cf:bf:bf:a5:99:f3:d4:a6:47:f9:4b:15:16:e4:20:b3:9e: e6:7b:1b:17:89:b4:9c:de:55:37:a1:d7:bf:44:f2:49:78:5a: 35:88:bc:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXPaQB8nRqnPkhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk Mzg2MTQ2M2ItNTQwZS00MDcwLTk5YmYtYTJmY2I1MWRhNjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoctilH7R4P7oI+tKoz3sh4BlG1A3KDtfNTQ4 i669fTx5DuZtzJUNnoUdZt+IhEqvJQkmDAYXwHMGStLPoUrA1ElFFifEXvheoTSd ATXIequlO7l714XGkFtArHzDeGjp5sXbqAWmHCwpqIamwkJo0tVvsRkArFCKFvTV qRBOfc6s/Ntnx/7ubDNZrMJ0h9rIMbJ9vcNx0pdoaBcDAFCzOFqXF8L+a1IceLBC /41FTRdcNjhwqq98i8tPfdJeNopLkhza5ubRrGk03FLixp3moyGHRGLx5d//wwi0 DyCWHg+UZKHffL91yeSEhu2Xvtwwdq3ftuG9ce1bHQp4pUR83wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtZhLdFnimVQ/bmj7/xWliEnVLgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvNGNlYTNkMjYtMWQ4Yy0z NzUxLWFmM2ItMzQ3MjY5MmUxNTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwcOtmM2dgs0QBNBuEufVntR56Bl8BPwvCMKr8btW5yJM67bxk6+qjG o1PM1crGzByhkPRCVrGeUxmEHgixkprngTI0gWlVHF/6pYGrydwXmwaQTc6nCur6 rnQivC3RTb2xiHHlGP51srDfqZIZDIipgXQbbo1HuIAN21pScgmWc7R3eTNNscRZ cWWj1w4Q5JiAH9A7wzJCfBkQu04pCgubrGY9qAQra3TkbDkbAKsZHXu4Bnhi4jEY SybqVzE8nkrElRzAtsLlxK8XGy5h0ay4a3GA5F4f7P3Pv7+lmfPUpkf5SxUW5CCz nuZ7GxeJtJzeVTeh179E8kl4WjWIvLQ= -----END CERTIFICATE-----Generated at Sat Sep 26 14:41:42 2026 by rpki-client