$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/999d4880-da1a-3f72-ada7-611e3a383d8b.roa File: 999d4880-da1a-3f72-ada7-611e3a383d8b.roa (raw, json) Hash identifier: 3XY4uccXgwoQ0Y9gAoV62NKdYcAblYrKyvyqM0e9TJg= Subject key identifier: 62:87:55:36:A5:CE:49:50:6F:98:95:36:09:B2:D9:CF:D1:09:C6:F9 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F225CF63BFA20352D74E9C7C0 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/999d4880-da1a-3f72-ada7-611e3a383d8b.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 152.44.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:f6:3b:fa:20:35:2d:74:e9:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=60ed055e-c540-4626-a983-5afe0f451df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:54:ff:bc:cc:04:7a:54:5c:1f:8c:f1:ba:dd: 9a:d8:a9:a3:b8:d1:19:6b:b3:75:2e:1c:f8:71:95: 61:66:04:95:a3:d6:17:36:18:2f:77:a2:60:5c:9d: 98:af:e0:dc:48:94:ca:4c:d4:77:55:a0:5b:35:1d: 84:c2:81:cb:16:3a:a3:52:5b:b0:14:a7:8e:68:5f: 7c:a2:7a:08:6b:cf:f0:bd:35:0b:a9:8d:6b:30:05: 88:e9:b4:31:bd:f6:b0:a7:30:dd:f5:4c:90:aa:fe: 12:90:ab:cb:10:f4:d2:85:e9:be:a9:74:42:70:8e: ea:83:a0:23:22:25:08:84:72:8a:2c:fc:03:f0:f3: 60:05:f9:84:fe:da:3e:86:85:64:16:16:5c:ee:be: c6:12:9c:95:6b:70:8f:90:bc:b1:33:3d:b3:ea:a2: ae:19:e6:53:03:dc:89:01:bb:fa:1d:e2:3f:56:59: 34:52:e2:29:9f:f0:65:0c:a0:76:ea:85:4a:e0:5e: 1b:e2:9f:90:28:f7:8a:2a:d0:53:29:9c:64:4d:e3: 34:48:d8:64:0c:c5:cb:19:b2:f7:49:6d:dc:26:cf: ab:1e:00:6b:bd:5a:32:2d:2d:a6:d9:fc:76:f6:1a: b8:d1:c9:30:7c:95:04:68:34:76:46:1e:f0:23:2b: 10:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:87:55:36:A5:CE:49:50:6F:98:95:36:09:B2:D9:CF:D1:09:C6:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/999d4880-da1a-3f72-ada7-611e3a383d8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:39:4d:01:f6:fa:be:99:62:85:ec:b2:a8:3f:eb:e7:fb:bc: 7d:8c:7e:c3:4a:9f:42:c2:2d:46:14:70:08:21:95:e6:af:25: 81:74:0c:45:4e:e4:61:2b:6c:2d:6f:b8:77:40:cd:8b:48:49: 9c:e5:2e:1c:04:fb:c7:a7:69:5e:0a:62:3d:5b:8d:50:84:a2: 13:f9:8f:19:da:13:45:00:da:ba:c6:2c:9a:fc:7b:bc:49:6a: 08:5f:ed:34:08:f0:d3:96:e0:9a:6e:9c:f3:41:4d:fe:22:bb: 02:52:71:e6:78:df:97:4b:3e:7b:0b:dc:85:64:27:d9:07:98: 68:83:9a:a6:7f:51:bc:94:9a:92:e2:22:dc:87:97:84:ea:5a: 9c:ee:cc:44:b7:b7:96:01:63:6c:9e:87:41:15:54:3d:fa:a8: 1d:be:94:a5:4b:96:ff:a4:45:c3:20:d4:05:8f:43:16:25:f0: b7:f0:99:c9:fe:b0:76:f5:88:65:97:c9:1f:62:70:80:ce:b2: c0:5c:14:4c:6a:e2:b0:0b:c2:44:ab:5b:4d:3d:af:0f:be:6f: dc:d5:94:57:d4:e0:a1:5a:48:62:e0:86:3c:c0:40:45:a6:ce: b5:e0:26:53:bc:25:a2:64:a8:ac:f7:b6:e0:29:7d:d3:6e:aa: 73:a6:c0:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXPY7+iA1LXTpx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk NjBlZDA1NWUtYzU0MC00NjI2LWE5ODMtNWFmZTBmNDUxZGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1T/vMwEelRcH4zxut2a2KmjuNEZa7N1Lhz4 cZVhZgSVo9YXNhgvd6JgXJ2Yr+DcSJTKTNR3VaBbNR2EwoHLFjqjUluwFKeOaF98 onoIa8/wvTULqY1rMAWI6bQxvfawpzDd9UyQqv4SkKvLEPTShem+qXRCcI7qg6Aj IiUIhHKKLPwD8PNgBfmE/to+hoVkFhZc7r7GEpyVa3CPkLyxMz2z6qKuGeZTA9yJ Abv6HeI/Vlk0UuIpn/BlDKB26oVK4F4b4p+QKPeKKtBTKZxkTeM0SNhkDMXLGbL3 SW3cJs+rHgBrvVoyLS2m2fx29hq40ckwfJUEaDR2Rh7wIysQRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKHVTalzklQb5iVNgmy2c/RCcb5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvOTk5ZDQ4ODAtZGExYS0z ZjcyLWFkYTctNjExZTNhMzgzZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAg5TQH2+r6ZYoXssqg/6+f7vH2MfsNKn0LCLUYUcAghleavJYF0DEVO 5GErbC1vuHdAzYtISZzlLhwE+8enaV4KYj1bjVCEohP5jxnaE0UA2rrGLJr8e7xJ aghf7TQI8NOW4JpunPNBTf4iuwJSceZ435dLPnsL3IVkJ9kHmGiDmqZ/UbyUmpLi ItyHl4TqWpzuzES3t5YBY2yeh0EVVD36qB2+lKVLlv+kRcMg1AWPQxYl8Lfwmcn+ sHb1iGWXyR9icIDOssBcFExq4rALwkSrW009rw++b9zVlFfU4KFaSGLghjzAQEWm zrXgJlO8JaJkqKz3tuApfdNuqnOmwF8= -----END CERTIFICATE-----Generated at Sat Sep 26 07:43:34 2026 by rpki-client