$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/7843e3bf-3384-3278-96e2-5e373d475829.roa File: 7843e3bf-3384-3278-96e2-5e373d475829.roa (raw, json) Hash identifier: MgWWA4Y7ikWmSj0y0ZLVvTXEKJcCxM8jZbOcdBgpQdk= Subject key identifier: 1B:9F:B0:B6:4A:EB:14:02:F0:9C:F1:81:7F:F5:7E:CC:C2:68:BB:06 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F2ABCFEF1CDA6986A919BAD40 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/7843e3bf-3384-3278-96e2-5e373d475829.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 152.44.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bc:fe:f1:cd:a6:98:6a:91:9b:ad:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=dfeebda2-db38-457b-8ced-8344d8758443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5a:0a:ac:6a:21:9b:97:72:91:aa:cb:ea:ab: 06:1d:60:0f:49:4f:74:63:0b:da:72:26:86:80:b2: db:d0:2a:35:a5:dd:99:76:b4:51:06:96:c7:d9:ad: 3e:ad:c5:82:e8:35:f2:5b:d2:de:d8:c6:5b:72:89: a9:a1:87:e7:b0:25:63:9f:3c:0f:79:ad:f3:20:ea: e3:7d:cd:77:9e:f2:f3:50:02:b3:51:3b:ac:6f:b6: 96:a8:bb:f8:71:12:9b:88:2c:3f:26:63:82:47:fc: e1:7d:b3:d2:df:f0:b3:d6:42:73:0f:dc:89:76:be: ba:d5:e5:27:cb:ec:97:74:e4:5d:2b:df:16:79:9b: c1:67:b0:1a:9a:91:5d:40:ed:92:a4:85:9a:80:c0: 28:e6:5e:a3:77:7f:7b:e6:f1:86:ee:c0:e1:e2:d9: f5:a4:de:c4:ea:3f:99:5d:3c:9a:3b:88:60:77:ad: ab:5d:46:51:df:98:21:65:2b:72:e0:f1:f5:dd:de: bf:50:3a:59:bc:0c:de:62:1e:ef:b6:92:c1:f8:f3: 4d:cf:5b:86:3f:f2:a9:0e:28:c5:b2:cc:93:ab:7f: 41:b8:4e:e7:f8:6f:de:c5:9c:d9:f9:74:36:36:67: 6a:29:06:88:78:b6:ed:14:79:8d:68:39:e3:4d:f2: 6f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9F:B0:B6:4A:EB:14:02:F0:9C:F1:81:7F:F5:7E:CC:C2:68:BB:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/7843e3bf-3384-3278-96e2-5e373d475829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:c5:d9:c5:09:5e:94:ec:6e:67:65:96:05:52:a6:c8:56:b1: 7e:70:31:be:e5:12:cb:ab:a4:80:a0:fe:e8:d6:bd:24:36:46: 38:04:33:de:6a:68:b1:0d:1d:b6:e6:1e:e3:df:48:20:37:16: 29:bb:ab:b5:55:b4:b3:7b:b0:ad:87:c3:20:70:c4:d0:f8:9c: ab:b0:f5:d4:ec:db:b0:95:82:71:e3:62:a6:52:d5:13:98:b3: b7:fd:01:ba:77:9a:dc:eb:c0:e6:da:2e:4f:53:3c:cb:7b:13: 59:44:39:27:c0:ed:0e:f5:7a:61:20:0e:1d:52:1b:94:6d:10: b5:77:6a:a8:e9:1f:a1:20:be:db:71:71:b3:86:19:57:ed:6c: 9d:e5:03:6d:83:ae:e2:1f:33:ff:c3:ed:b6:35:50:83:4e:e6: b3:52:0a:12:47:bb:31:17:62:40:ba:f3:e2:6c:59:04:ed:df: 83:43:58:37:a4:53:22:93:cf:bd:e7:d5:e6:79:8c:02:7d:c1: 09:db:08:bc:f6:2e:81:c6:5d:0d:34:41:a1:25:e0:23:e9:3c: 0b:0c:7d:19:8e:ed:72:f9:10:42:3e:27:42:be:f3:b3:9c:30: 17:16:ff:fb:db:40:1c:55:1e:16:e9:72:df:f1:eb:68:65:59: d4:cc:54:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvP7xzaaYapGbrUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk ZGZlZWJkYTItZGIzOC00NTdiLThjZWQtODM0NGQ4NzU4NDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1oKrGohm5dykarL6qsGHWAPSU90YwvaciaG gLLb0Co1pd2ZdrRRBpbH2a0+rcWC6DXyW9Le2MZbcompoYfnsCVjnzwPea3zIOrj fc13nvLzUAKzUTusb7aWqLv4cRKbiCw/JmOCR/zhfbPS3/Cz1kJzD9yJdr661eUn y+yXdORdK98WeZvBZ7AampFdQO2SpIWagMAo5l6jd3975vGG7sDh4tn1pN7E6j+Z XTyaO4hgd62rXUZR35ghZSty4PH13d6/UDpZvAzeYh7vtpLB+PNNz1uGP/KpDijF ssyTq39BuE7n+G/exZzZ+XQ2NmdqKQaIeLbtFHmNaDnjTfJvlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBufsLZK6xQC8JzxgX/1fszCaLsGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvNzg0M2UzYmYtMzM4NC0z Mjc4LTk2ZTItNWUzNzNkNDc1ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfF2cUJXpTsbmdllgVSpshWsX5wMb7lEsurpICg/ujWvSQ2RjgEM95q aLENHbbmHuPfSCA3Fim7q7VVtLN7sK2HwyBwxND4nKuw9dTs27CVgnHjYqZS1ROY s7f9Abp3mtzrwObaLk9TPMt7E1lEOSfA7Q71emEgDh1SG5RtELV3aqjpH6Egvttx cbOGGVftbJ3lA22DruIfM//D7bY1UINO5rNSChJHuzEXYkC68+JsWQTt34NDWDek UyKTz73n1eZ5jAJ9wQnbCLz2LoHGXQ00QaEl4CPpPAsMfRmO7XL5EEI+J0K+87Oc MBcW//vbQBxVHhbpct/x62hlWdTMVLY= -----END CERTIFICATE-----Generated at Mon Sep 28 21:38:05 2026 by rpki-client