$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/b8fea7ba-70dd-3f7d-b7e4-7e4c4616a346.roa File: b8fea7ba-70dd-3f7d-b7e4-7e4c4616a346.roa (raw, json) Hash identifier: U3g3bA8P6/q7qUAhgdhoLvAN9Vnq3KsPSPz2SKVhnWE= Subject key identifier: 48:AB:E9:B6:82:2C:11:10:B1:07:46:73:59:3F:12:EB:B2:1B:26:5D Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F27F25215D74B90CE00346500 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/b8fea7ba-70dd-3f7d-b7e4-7e4c4616a346.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 152.44.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:52:15:d7:4b:90:ce:00:34:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=ad913b39-cd8a-4879-857d-3c8db16cc892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:52:ea:dd:11:61:85:18:1a:51:8f:29:a9:0e: 54:2d:42:09:8e:f4:92:3f:73:73:60:56:db:5e:16: c7:a2:41:46:3f:d3:4d:50:6a:2c:8b:39:0f:66:26: c7:48:6b:a5:48:01:f9:3e:f7:65:3a:46:81:ac:df: c8:24:9d:33:b4:2b:ee:a3:ac:20:7e:46:8a:82:a8: ba:a7:9c:56:b1:6e:9d:d7:92:02:1f:3b:aa:3a:3a: df:4c:df:f2:db:78:86:34:8a:99:f8:7d:1d:8a:59: 69:e0:67:45:27:1b:21:0c:2b:6a:d6:b6:29:6e:4f: b2:96:db:21:7e:e8:5a:7e:5b:1b:c5:ab:a2:dd:17: 94:86:2a:92:7d:91:50:0c:b8:d1:a1:9a:50:aa:50: 02:1a:2f:7f:30:11:b0:85:70:b6:10:41:29:e5:51: a1:c4:e7:8f:d5:1c:59:ab:5e:7a:34:40:53:6e:f8: 62:61:dd:f0:f5:8d:4a:9f:10:9e:83:f9:14:e4:d4: 4a:8c:7f:a3:ca:39:d0:d3:29:ab:e0:e9:71:01:a0: f7:75:00:55:21:21:a8:88:6d:69:db:64:d2:93:86: 42:d6:b8:d5:7a:a4:08:a2:21:1f:7d:38:5b:83:db: ab:0f:70:19:9f:60:cc:ea:bd:42:c0:92:45:d2:b4: f7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:AB:E9:B6:82:2C:11:10:B1:07:46:73:59:3F:12:EB:B2:1B:26:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/b8fea7ba-70dd-3f7d-b7e4-7e4c4616a346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:44:13:cf:1f:f7:61:ff:89:70:99:66:86:e3:49:b6:02:11: 2a:4f:e8:d3:bf:5e:c4:55:b5:db:9a:33:4b:88:42:51:52:b2: 0b:1c:59:4f:b8:e0:50:98:a4:d1:c5:3d:43:68:3f:f2:7e:77: fe:9c:61:23:49:b5:84:20:cb:b1:d5:0a:2d:31:d0:c9:3b:b1: 5a:6e:03:be:45:73:39:08:a0:b7:b9:ec:89:0a:2a:60:fa:0e: cd:8b:5e:03:29:84:67:dc:61:f3:ff:67:be:44:99:16:ff:de: 15:d0:02:3c:be:a7:76:d3:4d:b7:16:d1:6b:98:2d:1d:25:9a: 07:07:42:d0:08:89:7a:41:46:67:dd:37:6e:20:af:45:80:5d: 8a:8c:f3:69:05:5a:0c:de:23:88:79:09:bf:fd:0e:5f:c7:ce: d9:78:06:1d:24:89:4a:a7:0a:3c:ff:26:0d:db:7c:d2:22:90: a6:3c:4b:e6:45:52:92:dc:d1:01:53:ea:b7:01:c4:7a:79:ae: 86:0f:c4:c5:41:52:7b:b5:12:4c:4c:bd:8a:31:ca:29:23:7c: af:75:3f:95:e0:42:01:67:f7:64:d4:83:a1:04:88:82:d0:59: 82:a4:65:61:c0:75:86:a1:29:a2:e7:e4:29:97:d3:27:22:27: 50:73:e5:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8lIV10uQzgA0ZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk YWQ5MTNiMzktY2Q4YS00ODc5LTg1N2QtM2M4ZGIxNmNjODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1Lq3RFhhRgaUY8pqQ5ULUIJjvSSP3NzYFbb XhbHokFGP9NNUGosizkPZibHSGulSAH5PvdlOkaBrN/IJJ0ztCvuo6wgfkaKgqi6 p5xWsW6d15ICHzuqOjrfTN/y23iGNIqZ+H0dillp4GdFJxshDCtq1rYpbk+yltsh fuhaflsbxaui3ReUhiqSfZFQDLjRoZpQqlACGi9/MBGwhXC2EEEp5VGhxOeP1RxZ q156NEBTbvhiYd3w9Y1KnxCeg/kU5NRKjH+jyjnQ0ymr4OlxAaD3dQBVISGoiG1p 22TSk4ZC1rjVeqQIoiEffThbg9urD3AZn2DM6r1CwJJF0rT36wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEir6baCLBEQsQdGc1k/EuuyGyZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvYjhmZWE3YmEtNzBkZC0z ZjdkLWI3ZTQtN2U0YzQ2MTZhMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNEE88f92H/iXCZZobjSbYCESpP6NO/XsRVtduaM0uIQlFSsgscWU+4 4FCYpNHFPUNoP/J+d/6cYSNJtYQgy7HVCi0x0Mk7sVpuA75FczkIoLe57IkKKmD6 Ds2LXgMphGfcYfP/Z75EmRb/3hXQAjy+p3bTTbcW0WuYLR0lmgcHQtAIiXpBRmfd N24gr0WAXYqM82kFWgzeI4h5Cb/9Dl/Hztl4Bh0kiUqnCjz/Jg3bfNIikKY8S+ZF UpLc0QFT6rcBxHp5roYPxMVBUnu1EkxMvYoxyikjfK91P5XgQgFn92TUg6EEiILQ WYKkZWHAdYahKaLn5CmX0yciJ1Bz5S8= -----END CERTIFICATE-----Generated at Fri Sep 25 21:51:10 2026 by rpki-client