$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ec7712ad-6f5c-3833-87a6-573eb654c4d3.roa File: ec7712ad-6f5c-3833-87a6-573eb654c4d3.roa (raw, json) Hash identifier: CSdA+WTq1QvqwNDjIeOVlFocEYV5mI9t4lPHn1nLOj8= Subject key identifier: EF:1C:04:74:1F:33:BE:7F:7E:09:1C:A2:0A:08:8E:B0:56:44:2A:40 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F2ABCFF58CA7AC57A8CF31740 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ec7712ad-6f5c-3833-87a6-573eb654c4d3.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 152.44.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bc:ff:58:ca:7a:c5:7a:8c:f3:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=517dc808-4ce3-4554-97bc-ce17d85414cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a0:33:4b:6d:f3:a4:68:8f:52:31:bd:f7:0f: 83:4c:55:70:09:72:2b:28:27:10:96:a3:f2:8d:40: d9:47:40:f7:5d:a8:51:f8:7c:a4:1e:85:4b:ab:aa: 74:7c:4c:1d:ec:db:9e:99:4e:f1:81:ac:c7:f6:eb: e9:b0:e3:3c:bf:f2:f8:c7:f0:f6:f5:fb:3e:ae:ea: 0e:0a:9d:da:d2:97:12:28:8d:2c:fc:70:f0:78:07: c2:40:ce:9d:3c:bd:dd:13:2f:da:4c:27:0d:b7:34: a2:f6:46:86:7b:d0:98:9c:b3:94:af:8b:b1:11:c1: dc:45:7a:1c:60:08:2b:46:61:ab:36:ce:4a:26:08: 3f:95:3c:e5:b3:44:11:31:ef:3a:b3:1e:9b:9b:67: 90:33:2b:37:50:ae:35:09:00:09:ce:46:27:0e:77: 9b:74:f9:ee:7a:e7:8a:2b:d1:50:ff:04:92:3c:55: 8f:1e:9f:bf:af:d8:45:1d:97:0b:e6:12:bf:ed:1c: d4:60:45:c8:e5:28:c3:61:f0:ff:52:76:19:d2:d5: f0:a8:41:86:69:78:29:23:84:0c:63:0b:fa:b3:3c: 74:0e:a1:6a:f2:f7:3c:07:1b:0e:97:93:4c:ac:b0: f5:0c:6a:a3:4d:f3:1c:3b:22:1c:68:4f:b6:e0:d0: da:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1C:04:74:1F:33:BE:7F:7E:09:1C:A2:0A:08:8E:B0:56:44:2A:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ec7712ad-6f5c-3833-87a6-573eb654c4d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:2b:9c:e3:ae:4b:b5:43:d2:ad:f6:35:09:d9:a8:26:5f:50: ad:1c:78:1e:46:0a:23:fb:68:c0:51:13:d3:d9:0f:1b:ae:5d: a5:bc:5a:15:4e:70:a7:5e:1e:e6:42:60:bf:bc:80:18:e4:4c: c1:dc:f1:1d:e3:c8:a3:1c:85:d5:86:c3:4b:87:67:59:bf:bd: f2:4c:01:76:c7:60:8b:8a:30:56:e3:56:58:e5:a5:ad:a1:c7: b8:cf:72:34:91:0c:c1:76:45:19:24:04:85:4e:0c:56:79:21: c2:8e:d0:25:45:15:f8:1a:f7:85:49:ff:b7:5a:37:f8:12:7a: 8d:b1:61:6f:96:7c:0a:3b:04:a3:a6:0b:cd:e6:22:25:99:86: 68:b9:ef:9a:eb:50:a5:eb:07:f4:c1:73:5f:c5:82:6f:bd:82: 47:a7:0e:b9:75:ff:9a:49:c1:84:80:1c:b0:4b:85:b2:ca:9a: 58:25:c8:96:27:f8:d7:89:71:c7:1f:93:77:e2:5f:2d:d2:3f: 38:25:ae:cd:c6:76:c1:a5:2d:89:25:4d:f4:13:bc:42:e6:47: 6e:c1:ae:7e:fb:f6:77:13:92:5b:35:33:21:ad:68:b7:5a:9f: 44:d6:62:46:95:6d:cb:43:06:c5:9a:7b:29:3b:b8:c8:9c:33: 46:20:6c:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvP9YynrFeozzF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk NTE3ZGM4MDgtNGNlMy00NTU0LTk3YmMtY2UxN2Q4NTQxNGNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6AzS23zpGiPUjG99w+DTFVwCXIrKCcQlqPy jUDZR0D3XahR+HykHoVLq6p0fEwd7NuemU7xgazH9uvpsOM8v/L4x/D29fs+ruoO Cp3a0pcSKI0s/HDweAfCQM6dPL3dEy/aTCcNtzSi9kaGe9CYnLOUr4uxEcHcRXoc YAgrRmGrNs5KJgg/lTzls0QRMe86sx6bm2eQMys3UK41CQAJzkYnDnebdPnueueK K9FQ/wSSPFWPHp+/r9hFHZcL5hK/7RzUYEXI5SjDYfD/UnYZ0tXwqEGGaXgpI4QM Ywv6szx0DqFq8vc8BxsOl5NMrLD1DGqjTfMcOyIcaE+24NDadQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8cBHQfM75/fgkcogoIjrBWRCpAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvZWM3NzEyYWQtNmY1Yy0z ODMzLTg3YTYtNTczZWI2NTRjNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcrnOOuS7VD0q32NQnZqCZfUK0ceB5GCiP7aMBRE9PZDxuuXaW8WhVO cKdeHuZCYL+8gBjkTMHc8R3jyKMchdWGw0uHZ1m/vfJMAXbHYIuKMFbjVljlpa2h x7jPcjSRDMF2RRkkBIVODFZ5IcKO0CVFFfga94VJ/7daN/gSeo2xYW+WfAo7BKOm C83mIiWZhmi575rrUKXrB/TBc1/Fgm+9gkenDrl1/5pJwYSAHLBLhbLKmlglyJYn +NeJcccfk3fiXy3SPzglrs3GdsGlLYklTfQTvELmR27Brn779ncTkls1MyGtaLda n0TWYkaVbctDBsWaeyk7uMicM0YgbPg= -----END CERTIFICATE-----Generated at Sat Sep 26 07:18:18 2026 by rpki-client