$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ef622074-f47c-3abc-99c2-6a172dedaceb.roa File: ef622074-f47c-3abc-99c2-6a172dedaceb.roa (raw, json) Hash identifier: xNebtZoSzyQCIxCjQoahoTdJRArebBmcOGTrCDDFNE8= Subject key identifier: 24:C9:3C:E7:1A:6D:7F:9C:92:2E:8A:EA:08:A3:5D:6E:11:96:A6:D2 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F27F250FD91AF0B6C2712ADC0 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ef622074-f47c-3abc-99c2-6a172dedaceb.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 10279 IP address blocks: 152.44.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:50:fd:91:af:0b:6c:27:12:ad:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=f3956fa5-7223-4ff0-b121-345ee56c024d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7d:43:eb:66:f1:c7:ed:38:c4:38:58:cc:55: 42:35:ef:2e:99:af:66:e2:63:5f:3b:e1:74:54:59: 12:a9:f5:90:41:3a:45:10:4b:6d:7e:14:1c:33:58: 80:4f:c3:7f:25:5c:ae:2d:e9:6d:dc:9c:81:59:a4: cd:96:33:3e:5e:0b:f7:91:7d:d1:16:c4:26:aa:b4: 19:f1:5b:d2:66:10:dc:a8:b8:93:58:55:9a:0d:f7: e9:be:ed:28:d5:61:74:82:9a:22:7c:0b:3c:06:1f: a8:5c:46:6c:df:ce:96:b4:7e:69:06:dc:5e:85:6d: 68:76:bd:fe:3e:b9:50:92:f2:10:cd:16:6d:13:20: dc:38:95:30:2f:24:d4:ea:80:7e:50:fc:49:1e:89: a7:5d:6e:63:e5:5b:06:eb:43:e3:20:66:b8:01:2a: f4:7b:bc:43:d6:3a:57:a0:28:f9:9c:09:ab:e3:93: a3:b5:c2:d6:8e:77:1e:48:b9:ef:19:a2:6e:08:f3: 0e:45:80:04:2e:2b:74:cf:33:41:0a:f3:0c:f3:40: 6b:a7:ad:eb:73:bf:e7:9b:e8:66:dd:84:87:35:06: 02:f1:31:55:71:d0:15:46:09:37:05:79:29:5e:b7: 9b:ec:5d:03:34:94:d3:f7:e9:ba:66:1a:d5:5d:26: 2d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C9:3C:E7:1A:6D:7F:9C:92:2E:8A:EA:08:A3:5D:6E:11:96:A6:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/ef622074-f47c-3abc-99c2-6a172dedaceb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:9f:ad:b5:88:c6:d9:2d:a7:44:27:57:32:6c:de:f6:bd:81: 34:2d:1e:34:d5:8b:42:85:38:b2:4f:22:b9:34:22:90:6e:eb: e8:7a:c5:22:b8:7e:ef:db:5c:a6:ab:91:36:55:dd:30:fd:0e: 2a:24:07:f9:ca:02:5c:6f:b7:9b:fe:b3:c9:93:7b:16:f8:fe: aa:6d:77:31:d1:a5:61:74:2d:ff:e2:e7:0a:58:ed:6c:12:b1: 3c:85:34:8e:96:a0:07:b1:f0:ea:32:2e:cf:3c:3c:a2:9c:0d: ed:f2:37:18:e8:23:f0:ef:05:7f:92:fa:b3:51:0c:13:87:8e: 39:0d:40:8e:74:f5:8a:98:20:da:21:4e:1b:8d:03:ad:29:5a: 79:b5:79:c3:09:b0:1f:02:53:6e:33:8e:75:c4:d0:91:09:c8: b0:65:b5:75:d0:6f:e1:2f:5e:84:86:50:6f:78:17:af:09:0e: f7:60:df:cc:fb:64:05:46:15:5f:07:98:28:7e:76:3a:3e:a3: a5:1b:7f:9f:a7:72:d4:d3:41:3a:20:d0:c2:3f:73:e9:2b:8e: a1:d0:93:de:d7:d0:97:29:05:d6:e7:54:32:54:b4:e5:cc:32: af:65:69:58:3e:83:89:ad:c3:0f:71:8e:04:4d:d9:18:e6:72: e2:79:46:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8lD9ka8LbCcSrcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk ZjM5NTZmYTUtNzIyMy00ZmYwLWIxMjEtMzQ1ZWU1NmMwMjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX1D62bxx+04xDhYzFVCNe8uma9m4mNfO+F0 VFkSqfWQQTpFEEttfhQcM1iAT8N/JVyuLelt3JyBWaTNljM+Xgv3kX3RFsQmqrQZ 8VvSZhDcqLiTWFWaDffpvu0o1WF0gpoifAs8Bh+oXEZs386WtH5pBtxehW1odr3+ PrlQkvIQzRZtEyDcOJUwLyTU6oB+UPxJHomnXW5j5VsG60PjIGa4ASr0e7xD1jpX oCj5nAmr45OjtcLWjnceSLnvGaJuCPMORYAELit0zzNBCvMM80Brp63rc7/nm+hm 3YSHNQYC8TFVcdAVRgk3BXkpXreb7F0DNJTT9+m6ZhrVXSYtjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTJPOcabX+cki6K6gijXW4RlqbSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvZWY2MjIwNzQtZjQ3Yy0z YWJjLTk5YzItNmExNzJkZWRhY2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICfrbWIxtktp0QnVzJs3va9gTQtHjTVi0KFOLJPIrk0IpBu6+h6xSK4 fu/bXKarkTZV3TD9DiokB/nKAlxvt5v+s8mTexb4/qptdzHRpWF0Lf/i5wpY7WwS sTyFNI6WoAex8OoyLs88PKKcDe3yNxjoI/DvBX+S+rNRDBOHjjkNQI509YqYINoh ThuNA60pWnm1ecMJsB8CU24zjnXE0JEJyLBltXXQb+EvXoSGUG94F68JDvdg38z7 ZAVGFV8HmCh+djo+o6Ubf5+nctTTQTog0MI/c+krjqHQk97X0JcpBdbnVDJUtOXM Mq9laVg+g4mtww9xjgRN2RjmcuJ5Rrc= -----END CERTIFICATE-----Generated at Mon Sep 28 19:57:05 2026 by rpki-client