$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/70eced2d-24db-373e-a5ac-da0a44ef7a41.roa File: 70eced2d-24db-373e-a5ac-da0a44ef7a41.roa (raw, json) Hash identifier: LnrqY2Kt6LpnbqRsjzARdskZe9ynlZ3aLjjN28dO76o= Subject key identifier: 4E:7C:85:92:E2:38:00:E9:DF:18:A6:47:70:9A:11:F2:17:88:3E:EF Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F27F251426DB572E15C20A900 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/70eced2d-24db-373e-a5ac-da0a44ef7a41.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 152.44.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:51:42:6d:b5:72:e1:5c:20:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=d59e2d70-410e-43df-b9a1-b5ea72a725d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a3:d7:59:90:8a:04:66:b6:51:cc:a7:dd:1d: 9f:db:27:05:b8:4d:c5:80:d8:bd:ff:d0:2e:2d:a9: 90:a7:07:f0:3a:0d:84:1e:a0:c9:94:0f:7d:42:e1: 49:c2:fa:96:6d:5a:18:6f:76:99:05:9d:ff:77:16: 0a:34:34:b3:ee:ee:75:1a:c5:08:b9:4e:f5:6d:a1: c5:6f:ee:d4:7c:d2:9f:50:f5:3d:35:7b:70:63:21: 9c:25:28:52:78:a4:da:e5:ba:e9:c9:93:ac:c6:89: d0:c9:03:53:3a:de:b5:24:b3:99:10:36:58:15:eb: d8:2e:64:06:41:36:f8:e3:81:69:83:2c:b1:d8:ba: 6a:e4:66:aa:66:65:82:09:4f:46:bd:03:15:51:c8: d3:90:da:e5:46:19:b0:2b:5b:e3:52:b6:55:1a:5d: 3d:33:5b:3c:0f:78:49:43:e3:71:c9:1b:b7:fa:10: 2d:73:f1:43:54:75:c7:19:19:8b:08:b7:aa:86:33: 91:c4:99:bf:41:4a:4a:b3:e5:93:f5:9b:f6:4d:1a: 6c:e7:8e:c6:fe:ec:b8:e5:0a:13:b0:55:d9:c7:bb: 6d:a6:72:da:2f:29:cf:3d:f9:74:c1:ad:62:74:70: 2a:16:e7:78:51:62:f7:58:ec:45:89:10:6a:b2:53: 5d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:7C:85:92:E2:38:00:E9:DF:18:A6:47:70:9A:11:F2:17:88:3E:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/70eced2d-24db-373e-a5ac-da0a44ef7a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:98:58:34:36:01:2f:ae:6f:8c:c6:ce:5d:ea:79:31:4c:12: 77:5c:96:8f:6b:e0:8a:29:b6:95:b8:0b:88:2b:58:23:23:5c: 15:a1:90:44:f8:1e:d7:be:d8:93:20:f5:f4:52:b8:29:92:63: 15:5c:bc:f5:6c:4e:bf:5d:6d:bb:31:47:ab:cc:66:28:8f:7b: 62:a4:84:d1:ae:c0:af:a4:2f:bf:9c:57:5d:c6:6c:13:a7:6c: 07:35:e3:8c:93:0c:c2:a9:82:1e:5b:28:a7:cd:ba:22:1e:79: 09:58:68:33:4e:18:6c:16:29:52:3b:81:07:22:97:8d:d8:62: 29:73:7f:67:f8:ec:32:52:fc:ba:9f:7f:1f:6d:86:00:7e:18: 3b:17:aa:6d:c0:c2:2c:54:fb:1f:ae:05:bc:da:ed:f9:6a:4e: de:89:28:81:ee:95:89:df:46:52:cd:cc:cd:b0:88:94:26:48: 1d:41:83:6a:ee:f6:88:ee:2c:e7:d2:d6:aa:ee:b7:1d:23:ee: 43:77:c5:36:37:e3:99:df:06:55:92:8c:9a:cf:21:e8:82:be: f2:61:90:53:29:c0:94:7a:2e:3d:3c:e7:4e:38:0f:9d:1b:ec: 75:15:ff:bb:bc:4b:eb:a5:ea:53:27:d4:fa:53:72:87:98:94: 4f:ce:8b:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8lFCbbVy4VwgqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk ZDU5ZTJkNzAtNDEwZS00M2RmLWI5YTEtYjVlYTcyYTcyNWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaPXWZCKBGa2Ucyn3R2f2ycFuE3FgNi9/9Au LamQpwfwOg2EHqDJlA99QuFJwvqWbVoYb3aZBZ3/dxYKNDSz7u51GsUIuU71baHF b+7UfNKfUPU9NXtwYyGcJShSeKTa5brpyZOsxonQyQNTOt61JLOZEDZYFevYLmQG QTb444Fpgyyx2Lpq5GaqZmWCCU9GvQMVUcjTkNrlRhmwK1vjUrZVGl09M1s8D3hJ Q+NxyRu3+hAtc/FDVHXHGRmLCLeqhjORxJm/QUpKs+WT9Zv2TRps547G/uy45QoT sFXZx7ttpnLaLynPPfl0wa1idHAqFud4UWL3WOxFiRBqslNdOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE58hZLiOADp3ximR3CaEfIXiD7vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvNzBlY2VkMmQtMjRkYi0z NzNlLWE1YWMtZGEwYTQ0ZWY3YTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiYWDQ2AS+ub4zGzl3qeTFMEndclo9r4IoptpW4C4grWCMjXBWhkET4 Hte+2JMg9fRSuCmSYxVcvPVsTr9dbbsxR6vMZiiPe2KkhNGuwK+kL7+cV13GbBOn bAc144yTDMKpgh5bKKfNuiIeeQlYaDNOGGwWKVI7gQcil43YYilzf2f47DJS/Lqf fx9thgB+GDsXqm3AwixU+x+uBbza7flqTt6JKIHulYnfRlLNzM2wiJQmSB1Bg2ru 9ojuLOfS1qrutx0j7kN3xTY345nfBlWSjJrPIeiCvvJhkFMpwJR6Lj085044D50b 7HUV/7u8S+ul6lMn1PpTcoeYlE/Oi9s= -----END CERTIFICATE-----Generated at Sat Sep 26 14:14:40 2026 by rpki-client