$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/d14f4284-9557-350f-b079-f474e8a6bc0e.roa File: d14f4284-9557-350f-b079-f474e8a6bc0e.roa (raw, json) Hash identifier: /UnfzoJOmPL8x6LSQQYbukTR01NNTBoebtQdKMVDwcA= Subject key identifier: 8A:F2:01:86:A8:2F:85:9F:E0:03:FA:0E:03:56:5D:63:1A:D5:92:80 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F225CF66643A7B97FDFC8AC80 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/d14f4284-9557-350f-b079-f474e8a6bc0e.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 152.44.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:f6:66:43:a7:b9:7f:df:c8:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=494ee854-4494-4433-a2de-dee21858cdaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6e:a9:ab:50:a7:f1:8b:7d:3c:48:25:d9:ab: 5f:9a:e6:86:9b:0f:16:7f:49:34:3f:76:95:46:dc: cc:1c:f4:28:be:9a:a8:5b:fd:c0:d6:98:14:b4:d9: 55:5e:d5:a4:1d:c0:dd:f5:08:40:b1:b1:fe:81:df: 77:e8:98:11:b4:3c:13:98:d0:c3:21:53:d2:14:c7: c9:d0:a5:9c:63:ac:33:5b:d2:d5:aa:a3:e0:ca:04: 5f:cf:2c:f2:8e:c6:51:ac:85:48:d7:c3:47:e0:ef: 2e:71:8a:f7:b6:88:32:7b:41:27:f9:da:70:70:6d: 73:5f:5c:2a:75:25:e9:74:03:6e:60:19:b9:be:9e: 93:1d:a3:69:a6:57:97:77:ce:fc:51:5b:5d:3c:f6: 58:ec:e6:8b:ab:6c:a6:47:8e:92:9c:43:08:cf:57: df:fe:0d:be:c6:c2:04:e0:92:95:18:ca:fe:97:aa: 78:8d:e0:52:d0:58:77:a9:3e:17:da:54:e6:19:84: 1a:df:bb:6b:5a:68:9b:db:aa:2a:d5:b3:1b:4b:37: f1:a7:e3:9a:69:eb:66:50:61:b6:0f:b4:a0:d2:ba: ef:43:bf:8d:a7:8e:3f:55:c3:22:c2:dc:fd:78:de: 0b:df:86:39:c5:84:13:0e:5a:78:b8:98:62:ed:87: 1f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F2:01:86:A8:2F:85:9F:E0:03:FA:0E:03:56:5D:63:1A:D5:92:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/d14f4284-9557-350f-b079-f474e8a6bc0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:ed:f0:33:60:54:c2:08:2e:43:4c:ce:78:23:f4:4d:4b:cf: 5a:bb:2a:ef:1e:c1:2c:38:6a:9d:7b:60:43:0f:f9:40:12:04: 16:ab:f7:19:5c:04:b3:bb:29:69:57:04:ca:30:36:3e:fd:26: 91:d7:1a:fa:57:58:83:58:57:26:c6:91:64:3f:89:0e:72:6c: ae:c7:f7:a1:e9:f9:79:d0:3f:4a:05:39:a9:1a:69:73:dd:60: 00:25:ad:b5:a2:df:8d:bd:de:f2:b4:2b:40:fa:7a:db:a5:32: 68:13:9a:96:49:49:22:3d:83:92:89:65:55:51:9b:20:1f:3c: 84:45:2a:cd:40:02:e2:3d:8b:d8:1f:b5:5b:c9:33:95:bb:ba: 69:53:98:01:cf:89:22:7f:a7:99:aa:f7:0e:23:dd:7b:4c:57: 5c:94:b7:75:6e:50:86:54:fc:b6:bd:2f:06:ed:37:b4:b6:16: 94:72:15:19:a7:11:47:0f:dd:fb:c4:14:b4:04:a5:22:5f:27: 77:c2:4b:4f:2a:bd:94:12:a3:a6:2b:c0:93:7c:e9:73:75:64: b0:18:0f:8f:f4:94:92:bf:c1:d0:95:60:93:32:e6:f1:ac:f0: 2b:06:45:02:5c:a5:de:55:2b:e9:e5:bf:72:a8:da:3a:4d:55: 9b:8c:79:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXPZmQ6e5f9/IrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk NDk0ZWU4NTQtNDQ5NC00NDMzLWEyZGUtZGVlMjE4NThjZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm6pq1Cn8Yt9PEgl2atfmuaGmw8Wf0k0P3aV RtzMHPQovpqoW/3A1pgUtNlVXtWkHcDd9QhAsbH+gd936JgRtDwTmNDDIVPSFMfJ 0KWcY6wzW9LVqqPgygRfzyzyjsZRrIVI18NH4O8ucYr3togye0En+dpwcG1zX1wq dSXpdANuYBm5vp6THaNppleXd878UVtdPPZY7OaLq2ymR46SnEMIz1ff/g2+xsIE 4JKVGMr+l6p4jeBS0Fh3qT4X2lTmGYQa37trWmib26oq1bMbSzfxp+OaaetmUGG2 D7Sg0rrvQ7+Np44/VcMiwtz9eN4L34Y5xYQTDlp4uJhi7YcfswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIryAYaoL4Wf4AP6DgNWXWMa1ZKAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvZDE0ZjQyODQtOTU1Ny0z NTBmLWIwNzktZjQ3NGU4YTZiYzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7t8DNgVMIILkNMzngj9E1Lz1q7Ku8ewSw4ap17YEMP+UASBBar9xlc BLO7KWlXBMowNj79JpHXGvpXWINYVybGkWQ/iQ5ybK7H96Hp+XnQP0oFOakaaXPd YAAlrbWi34293vK0K0D6etulMmgTmpZJSSI9g5KJZVVRmyAfPIRFKs1AAuI9i9gf tVvJM5W7umlTmAHPiSJ/p5mq9w4j3XtMV1yUt3VuUIZU/La9LwbtN7S2FpRyFRmn EUcP3fvEFLQEpSJfJ3fCS08qvZQSo6YrwJN86XN1ZLAYD4/0lJK/wdCVYJMy5vGs 8CsGRQJcpd5VK+nlv3Ko2jpNVZuMeco= -----END CERTIFICATE-----Generated at Thu Oct 8 18:05:14 2026 by rpki-client