$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/7b289c16-ebd1-3c40-97de-0c2ddaaef5ab.roa File: 7b289c16-ebd1-3c40-97de-0c2ddaaef5ab.roa (raw, json) Hash identifier: rHZbZn1MC1IUo5uXNTHCjefsvNtAVngn/PD+R5663RQ= Subject key identifier: C9:98:D9:CE:27:DA:E7:34:D7:15:D8:7E:23:C0:ED:CE:8C:6C:CD:A3 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F225CF6498B619E7AFC33EC80 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/7b289c16-ebd1-3c40-97de-0c2ddaaef5ab.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 152.44.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:f6:49:8b:61:9e:7a:fc:33:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=c99a4cf6-822b-4584-8263-413ca5afb236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cc:07:54:9f:e6:1e:4b:48:4c:3a:eb:98:b7: f1:b2:52:fe:93:ec:24:53:7f:1e:ba:d9:fd:4b:80: 83:ad:f8:cf:af:26:6e:f4:09:d0:84:7a:65:2d:1f: 8c:ca:26:1f:56:45:af:fd:c4:5f:2a:30:fc:cb:a2: fa:cd:c1:3e:b5:ff:48:58:a6:2e:bc:a9:4b:5d:82: 4f:f6:bf:eb:c1:15:7f:66:83:ae:91:e1:56:4a:87: 6c:81:bb:2e:af:b3:80:49:41:7c:e9:d6:2b:c9:c8: 06:95:06:3a:ee:e2:9a:fb:f7:11:64:ad:78:02:13: 60:86:a9:74:6f:43:72:1e:bc:b0:6c:a6:f0:1d:d1: a3:41:8a:14:5d:b0:58:32:6a:ac:98:6d:95:48:aa: c0:38:91:9a:0e:cd:b5:47:30:6d:37:7f:51:4b:2f: ab:c8:c1:ac:9d:91:85:42:2b:2e:06:30:1f:9a:e8: 13:44:09:49:cb:81:8b:1a:44:dc:65:7f:e4:ca:21: f0:c7:34:05:05:b9:96:b5:12:85:57:00:12:f2:1d: 55:24:f8:d4:bf:1e:0a:93:7f:1c:14:d2:a0:3a:8f: 0d:25:be:12:61:7a:aa:f7:a5:2e:bd:36:4c:26:36: 81:26:39:33:69:ec:82:ed:b5:2c:4c:28:0e:94:1c: 3f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:98:D9:CE:27:DA:E7:34:D7:15:D8:7E:23:C0:ED:CE:8C:6C:CD:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/7b289c16-ebd1-3c40-97de-0c2ddaaef5ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:81:d5:c7:09:a0:32:75:67:5f:79:8e:fc:e9:1d:5b:fc:35: 7e:31:13:60:47:de:bd:a3:8e:7a:2e:11:31:e5:b8:1f:52:54: f1:66:b8:8c:5e:10:f3:06:2b:1d:af:2a:fe:51:af:e1:0d:15: f8:9a:9c:99:2d:1b:ad:89:1b:d0:00:d4:68:84:53:b4:24:e2: cc:03:be:c6:e5:89:ec:c0:c5:8f:52:24:8e:bb:c8:82:68:6c: a8:0c:43:53:cf:7f:05:07:1a:bb:14:cd:7f:51:3a:ca:f3:06: c2:f4:e6:0a:33:bd:cf:ee:30:b1:33:61:6d:53:28:2d:fc:31: 27:fd:3f:82:aa:31:05:1e:a6:42:e6:a8:bf:56:fb:cb:69:cf: 13:1c:bd:12:70:c3:dc:e8:91:3a:1a:c8:22:11:c7:a1:08:00: 2e:7f:6f:5d:02:19:ba:6d:f2:41:7a:6b:c1:4b:22:c6:9e:8d: 0f:bb:09:28:55:87:b6:cf:ed:fa:3e:e2:14:66:4d:fe:d0:03: 3b:64:70:07:dd:99:17:90:a2:86:af:ba:45:57:81:12:96:21: 76:d8:f4:04:2f:f5:5a:01:7f:b8:40:f2:57:ec:1f:c7:58:e1: e0:7e:bd:aa:56:40:5d:24:be:56:00:41:3f:db:32:c3:ba:16: b8:3e:90:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXPZJi2Geevwz7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk Yzk5YTRjZjYtODIyYi00NTg0LTgyNjMtNDEzY2E1YWZiMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjswHVJ/mHktITDrrmLfxslL+k+wkU38eutn9 S4CDrfjPryZu9AnQhHplLR+MyiYfVkWv/cRfKjD8y6L6zcE+tf9IWKYuvKlLXYJP 9r/rwRV/ZoOukeFWSodsgbsur7OASUF86dYrycgGlQY67uKa+/cRZK14AhNghql0 b0NyHrywbKbwHdGjQYoUXbBYMmqsmG2VSKrAOJGaDs21RzBtN39RSy+ryMGsnZGF QisuBjAfmugTRAlJy4GLGkTcZX/kyiHwxzQFBbmWtRKFVwAS8h1VJPjUvx4Kk38c FNKgOo8NJb4SYXqq96UuvTZMJjaBJjkzaeyC7bUsTCgOlBw/kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmY2c4n2uc01xXYfiPA7c6MbM2jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvN2IyODljMTYtZWJkMS0z YzQwLTk3ZGUtMGMyZGRhYWVmNWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+B1ccJoDJ1Z195jvzpHVv8NX4xE2BH3r2jjnouETHluB9SVPFmuIxe EPMGKx2vKv5Rr+ENFfianJktG62JG9AA1GiEU7Qk4swDvsbliezAxY9SJI67yIJo bKgMQ1PPfwUHGrsUzX9ROsrzBsL05gozvc/uMLEzYW1TKC38MSf9P4KqMQUepkLm qL9W+8tpzxMcvRJww9zokToayCIRx6EIAC5/b10CGbpt8kF6a8FLIsaejQ+7CShV h7bP7fo+4hRmTf7QAztkcAfdmReQooavukVXgRKWIXbY9AQv9VoBf7hA8lfsH8dY 4eB+vapWQF0kvlYAQT/bMsO6Frg+kKA= -----END CERTIFICATE-----Generated at Fri Sep 25 15:04:39 2026 by rpki-client