$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/56d6b564-a58b-3a45-9cf6-99c9278b379f.roa File: 56d6b564-a58b-3a45-9cf6-99c9278b379f.roa (raw, json) Hash identifier: 4F3G3XsDETEnSmXaF2jJF+hozBkvTwfYrYpsAP/wTHs= Subject key identifier: 36:1E:E8:29:C5:D2:EE:F5:B3:50:76:6D:66:6B:88:06:0F:AA:0E:A4 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F225CF65834C8F3F1D7651780 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/56d6b564-a58b-3a45-9cf6-99c9278b379f.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 152.44.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:f6:58:34:c8:f3:f1:d7:65:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=604cc590-7950-4e01-9cb3-77e724802ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:87:30:0d:c0:88:f1:10:1b:30:31:f4:7b:79: 94:fa:ea:ef:db:c1:db:ad:b5:1d:3c:f1:de:0c:3c: 47:e2:db:aa:cf:ca:38:35:be:c2:ab:10:39:11:7c: a1:b3:ee:4d:9c:b4:ba:21:67:ca:94:14:11:dc:12: 52:b5:4f:23:42:b4:f0:db:55:e3:86:b1:97:e5:d6: 64:45:2a:a8:9b:40:0d:1d:3c:fb:50:c7:1f:2d:f1: 57:3e:1e:2a:15:9d:bb:0e:ed:a7:2c:ea:34:bf:d5: 53:ae:8c:2d:21:40:26:0d:0c:1c:8e:98:00:e8:87: b4:f2:94:35:ca:c0:ce:39:9b:96:8c:05:3c:02:7e: 55:33:22:4a:eb:27:6f:61:62:48:d8:18:d5:78:b3: d8:44:b4:04:c8:0d:20:6e:3e:ee:f2:a5:c8:6a:19: ed:42:21:62:34:3f:fc:99:36:8b:10:7e:b8:9e:13: d7:d3:c7:51:5e:10:0e:94:bb:4a:36:40:a7:48:5b: 69:fe:62:b0:65:49:d7:5a:8a:59:9c:63:2a:4a:92: 06:00:79:9c:88:b5:ca:00:c1:3d:a9:f8:29:43:8d: ba:cd:ef:d6:54:b3:dd:11:23:13:71:d7:b3:61:c8: 14:21:05:88:01:d4:b0:8f:e8:f6:70:38:e5:a0:0f: 57:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:1E:E8:29:C5:D2:EE:F5:B3:50:76:6D:66:6B:88:06:0F:AA:0E:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/56d6b564-a58b-3a45-9cf6-99c9278b379f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:c3:73:05:7d:34:3b:20:cc:0a:75:f7:81:62:f8:e0:7e:8b: 4d:b3:f5:eb:f5:e9:4b:00:24:a8:8a:2f:23:1b:95:f9:3b:7c: 9a:71:92:2e:38:eb:84:ab:3c:18:1d:b5:8d:ca:7f:20:ff:2b: 4b:f0:dd:11:6f:8b:b9:c7:43:e6:68:fc:5a:8d:34:cc:95:d6: 2d:da:5e:19:89:f1:d6:de:70:45:54:2a:f6:e6:6f:33:c2:3a: 55:9a:b4:ad:39:b1:b8:f8:dc:eb:94:a6:6c:3b:4a:25:d5:1d: 04:9f:41:ea:2d:79:bb:01:33:b3:49:4f:5c:6f:a5:3d:8a:06: 8d:d6:bd:dc:ec:6b:58:a8:fd:eb:53:ac:01:71:b0:c1:63:04: ad:e2:8f:a0:56:14:1a:78:65:d3:a7:e3:38:a0:54:e5:fc:4d: fa:ea:01:71:ea:7b:f2:8f:9b:a2:e2:c3:3a:d1:f1:31:e1:c9: c7:ed:f5:7a:da:74:12:5f:63:b5:fb:12:2b:f1:0e:65:7a:5a: ad:1a:8d:49:9c:e8:51:1d:d8:67:52:9a:5e:32:38:2d:44:66: 03:66:31:d1:82:aa:38:af:a4:c4:49:ae:7c:a1:99:48:52:62: b8:45:65:3f:90:8c:bb:3e:cb:57:33:b2:98:85:07:10:da:fe: 45:5c:4f:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXPZYNMjz8ddlF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk NjA0Y2M1OTAtNzk1MC00ZTAxLTljYjMtNzdlNzI0ODAyYWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4cwDcCI8RAbMDH0e3mU+urv28HbrbUdPPHe DDxH4tuqz8o4Nb7CqxA5EXyhs+5NnLS6IWfKlBQR3BJStU8jQrTw21XjhrGX5dZk RSqom0ANHTz7UMcfLfFXPh4qFZ27Du2nLOo0v9VTrowtIUAmDQwcjpgA6Ie08pQ1 ysDOOZuWjAU8An5VMyJK6ydvYWJI2BjVeLPYRLQEyA0gbj7u8qXIahntQiFiND/8 mTaLEH64nhPX08dRXhAOlLtKNkCnSFtp/mKwZUnXWopZnGMqSpIGAHmciLXKAME9 qfgpQ426ze/WVLPdESMTcdezYcgUIQWIAdSwj+j2cDjloA9XMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYe6CnF0u71s1B2bWZriAYPqg6kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvNTZkNmI1NjQtYTU4Yi0z YTQ1LTljZjYtOTljOTI3OGIzNzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHDcwV9NDsgzAp194Fi+OB+i02z9ev16UsAJKiKLyMblfk7fJpxki44 64SrPBgdtY3KfyD/K0vw3RFvi7nHQ+Zo/FqNNMyV1i3aXhmJ8dbecEVUKvbmbzPC OlWatK05sbj43OuUpmw7SiXVHQSfQeotebsBM7NJT1xvpT2KBo3Wvdzsa1io/etT rAFxsMFjBK3ij6BWFBp4ZdOn4zigVOX8TfrqAXHqe/KPm6LiwzrR8THhycft9Xra dBJfY7X7EivxDmV6Wq0ajUmc6FEd2GdSml4yOC1EZgNmMdGCqjivpMRJrnyhmUhS YrhFZT+QjLs+y1czspiFBxDa/kVcTwY= -----END CERTIFICATE-----Generated at Mon Sep 28 18:31:53 2026 by rpki-client