$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/cc376682-0bb1-395d-a6b9-a4cf005bc880.roa File: cc376682-0bb1-395d-a6b9-a4cf005bc880.roa (raw, json) Hash identifier: sRk0RtTtNAmHd3VIUXl9+bGHn5DuEz1xZwhX2v6G1Is= Subject key identifier: 80:91:1A:A7:B0:F3:30:20:54:73:4F:0C:F6:72:F8:16:75:C5:68:34 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F27F25175ED3F402B53EB2100 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/cc376682-0bb1-395d-a6b9-a4cf005bc880.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 152.44.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:51:75:ed:3f:40:2b:53:eb:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=199c97b1-066b-4303-840b-46acd0678fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bd:27:80:70:fe:3a:8b:f6:74:a4:88:cc:db: b4:07:a8:0d:b0:7b:64:ee:c3:b6:36:52:57:17:d0: 10:07:b4:35:7c:6b:12:7e:5e:b8:f8:61:c5:6b:cc: f4:29:5e:be:af:08:e9:60:d1:02:32:33:bb:2a:22: a3:c4:1a:48:6c:34:d1:2c:58:fd:62:fd:77:42:b4: 23:95:f2:cc:4c:88:29:6d:aa:00:41:9d:ce:b8:6e: f6:e9:23:17:f9:89:89:b7:f4:9f:75:49:14:a2:8d: 5c:08:90:7d:a4:89:33:a8:b9:60:39:5f:7c:23:ed: c0:df:89:4d:cd:d5:47:a7:4f:05:5f:46:90:37:0b: 2a:8a:6e:8b:40:1f:37:97:87:f8:2c:83:5b:aa:60: 0b:c0:a2:b9:27:c2:67:1b:0a:e6:86:f9:20:dd:c5: 88:2d:e7:0b:b4:81:dd:23:64:0e:83:22:d7:72:21: 87:3c:7f:7e:f7:99:1e:01:09:d5:a9:6e:11:02:5b: d8:03:a5:e6:81:38:01:24:78:c0:04:4a:21:96:c6: 51:87:54:d6:2f:ac:27:94:4f:80:48:b2:a8:12:6d: dd:79:10:b9:4a:fa:e6:d1:17:52:f1:39:b4:14:7a: fd:f4:37:41:8f:21:f5:73:ca:02:35:9d:c1:e6:1d: b9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:91:1A:A7:B0:F3:30:20:54:73:4F:0C:F6:72:F8:16:75:C5:68:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/cc376682-0bb1-395d-a6b9-a4cf005bc880.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9d:d1:d4:ba:0d:a7:c4:c7:93:38:d4:95:3c:d5:a5:66:c4: 82:94:ea:2b:a7:2b:04:07:61:8c:64:51:11:89:62:52:51:d8: 73:c5:01:9f:47:40:87:b0:7e:5a:c3:81:34:59:f0:28:d4:da: a7:ea:fa:07:f3:4d:c9:07:9e:4f:74:6a:b3:40:2a:76:03:ed: 01:1e:cd:95:5c:60:b8:40:b5:1b:9c:8c:98:10:46:00:bd:eb: 00:f7:80:a8:56:4b:60:a8:05:0c:9d:05:cb:84:11:59:00:90: 5c:40:b9:d8:e4:6e:ce:b8:91:a9:8d:39:2c:da:5d:1e:18:19: e8:9e:f6:58:a5:af:10:c0:af:0e:25:0f:1e:d3:21:61:99:2d: 2a:6b:9a:5b:be:37:18:88:68:05:69:59:aa:d0:87:24:79:40: 41:3b:ec:4f:46:d6:58:3d:5c:55:41:80:1d:b2:c7:22:e8:22: a0:3e:ce:be:88:c9:4f:02:09:dd:88:25:cb:02:48:16:27:93: 6d:e7:e1:bf:1d:e9:92:31:b0:bb:8b:81:27:cd:e6:6c:d7:c3: 9c:5f:ac:c5:c2:39:26:44:87:82:ce:ed:97:6d:17:73:d8:42: 2c:40:7d:6f:cd:b1:09:99:6b:d1:f5:0a:63:4d:b8:c5:d9:30: 63:bc:71:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8lF17T9AK1PrIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk MTk5Yzk3YjEtMDY2Yi00MzAzLTg0MGItNDZhY2QwNjc4ZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr0ngHD+Oov2dKSIzNu0B6gNsHtk7sO2NlJX F9AQB7Q1fGsSfl64+GHFa8z0KV6+rwjpYNECMjO7KiKjxBpIbDTRLFj9Yv13QrQj lfLMTIgpbaoAQZ3OuG726SMX+YmJt/SfdUkUoo1cCJB9pIkzqLlgOV98I+3A34lN zdVHp08FX0aQNwsqim6LQB83l4f4LINbqmALwKK5J8JnGwrmhvkg3cWILecLtIHd I2QOgyLXciGHPH9+95keAQnVqW4RAlvYA6XmgTgBJHjABEohlsZRh1TWL6wnlE+A SLKoEm3deRC5Svrm0RdS8Tm0FHr99DdBjyH1c8oCNZ3B5h25nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICRGqew8zAgVHNPDPZy+BZ1xWg0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvY2MzNzY2ODItMGJiMS0z OTVkLWE2YjktYTRjZjAwNWJjODgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOd0dS6DafEx5M41JU81aVmxIKU6iunKwQHYYxkURGJYlJR2HPFAZ9H QIewflrDgTRZ8CjU2qfq+gfzTckHnk90arNAKnYD7QEezZVcYLhAtRucjJgQRgC9 6wD3gKhWS2CoBQydBcuEEVkAkFxAudjkbs64kamNOSzaXR4YGeie9lilrxDArw4l Dx7TIWGZLSprmlu+NxiIaAVpWarQhyR5QEE77E9G1lg9XFVBgB2yxyLoIqA+zr6I yU8CCd2IJcsCSBYnk23n4b8d6ZIxsLuLgSfN5mzXw5xfrMXCOSZEh4LO7ZdtF3PY QixAfW/NsQmZa9H1CmNNuMXZMGO8cRU= -----END CERTIFICATE-----Generated at Sun Sep 27 23:42:48 2026 by rpki-client