$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/022a5b11-7602-3ba2-a3a6-2fcc8b2c6ecf.roa File: 022a5b11-7602-3ba2-a3a6-2fcc8b2c6ecf.roa (raw, json) Hash identifier: Vg7u2fZvtKNUBMZiGPR5caGIGw/b/PMyCO+GkyAI2/U= Subject key identifier: 04:E8:F3:B6:1F:57:70:D7:AF:87:95:55:BE:B6:38:4A:3A:97:C2:EB Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E876FD972C1B3893C7062F120 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/022a5b11-7602-3ba2-a3a6-2fcc8b2c6ecf.roa Signing time: Fri 17 Jul 2026 13:08:00 +0000 ROA not before: Fri 17 Jul 2026 13:08:00 +0000 ROA not after: Thu 15 Oct 2026 13:08:00 +0000 asID: 10279 IP address blocks: 152.44.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:87:6f:d9:72:c1:b3:89:3c:70:62:f1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 17 13:08:00 2026 GMT Not After : Oct 15 13:08:00 2026 GMT Subject: CN=3b58b3e1-eee9-427c-b907-8125e84b6953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bd:ba:41:08:86:55:8b:fc:25:17:6f:72:0f: 5b:b4:2c:33:a1:ca:ae:ac:62:b3:90:e7:52:6d:64: a5:dd:e0:a4:24:39:46:fa:43:c7:c1:87:bd:0e:30: 91:21:cf:1f:3e:74:e3:58:92:b2:71:23:fa:1d:60: 27:88:9a:ef:4b:a3:40:db:15:0a:ef:f8:21:5f:74: b8:d6:11:15:18:20:2e:bb:e9:91:b6:35:5e:b4:e6: d6:13:d3:61:cf:4e:c3:35:55:62:cb:38:ba:41:7f: aa:68:1f:4a:cb:81:60:5d:cd:d5:ad:69:eb:e3:17: ca:a6:1c:6f:f3:97:3f:6a:7e:19:53:de:28:b8:aa: 9b:08:fd:40:1d:53:c0:88:17:89:17:98:e2:e5:2a: 05:35:54:b4:7f:16:d5:57:87:07:92:09:a0:33:6b: f5:a5:55:5a:1d:a4:a6:9f:bc:03:f7:ed:df:0d:c6: 84:9d:17:6d:c1:24:09:47:e5:0b:2a:df:81:5a:4b: 8f:92:44:80:44:36:a5:90:51:05:72:73:b0:37:1d: 66:9b:45:1b:6d:fc:24:b0:f2:43:bf:ae:d0:2a:80: 52:1b:e5:4f:7c:7d:91:28:c4:af:95:66:aa:49:b1: cc:a3:b5:86:60:af:62:01:83:8a:f2:52:41:e8:cf: 6e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E8:F3:B6:1F:57:70:D7:AF:87:95:55:BE:B6:38:4A:3A:97:C2:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/022a5b11-7602-3ba2-a3a6-2fcc8b2c6ecf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:e2:9e:ea:18:ce:ed:25:85:64:4d:5d:3d:e0:f2:cc:75:89: 13:94:d3:9b:28:1f:4e:f2:76:e0:27:06:d4:53:9b:50:63:26: d3:23:0d:7c:e0:ac:8c:9a:7d:c6:85:22:af:32:8f:99:28:23: b9:c2:e1:e5:b4:ae:de:50:1e:84:53:b4:da:9a:61:37:ad:b5: 94:0e:7b:84:61:c1:84:14:e1:ed:bd:25:f2:ca:2b:d4:fc:19: 23:cc:11:43:a8:d0:93:eb:4f:f6:c7:3d:21:c8:6c:b3:99:0a: 5e:48:4f:12:04:c6:11:e3:cb:23:ab:c4:bc:12:8b:a7:09:d4: ad:ca:8d:64:64:c4:c8:bb:46:c5:80:af:52:2e:c0:60:44:6e: 4d:3a:58:68:5b:3b:86:11:00:4a:d3:65:89:83:11:18:c5:1c: ca:15:00:dd:ad:46:78:05:a7:5a:9d:06:17:1b:8a:6b:a4:a5: 74:ca:c4:8d:bc:ee:f2:c4:36:dc:1e:1b:c7:aa:d8:37:cd:04: b0:91:82:87:aa:0c:a9:99:ab:43:f8:3b:20:22:ed:46:a1:e8: 28:66:9f:6c:a7:0d:dd:16:d2:bb:ba:b5:c6:e8:72:12:56:0b: 9a:16:cf:d0:43:cf:2e:91:e3:ba:8e:d5:c5:b4:3b:ab:64:12: 63:dc:b3:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Hb9lywbOJPHBi8SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcxNzEzMDgwMFoXDTI2MTAxNTEzMDgwMFowLzEtMCsGA1UEAxMk M2I1OGIzZTEtZWVlOS00MjdjLWI5MDctODEyNWU4NGI2OTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo726QQiGVYv8JRdvcg9btCwzocqurGKzkOdS bWSl3eCkJDlG+kPHwYe9DjCRIc8fPnTjWJKycSP6HWAniJrvS6NA2xUK7/ghX3S4 1hEVGCAuu+mRtjVetObWE9Nhz07DNVViyzi6QX+qaB9Ky4FgXc3VrWnr4xfKphxv 85c/an4ZU94ouKqbCP1AHVPAiBeJF5ji5SoFNVS0fxbVV4cHkgmgM2v1pVVaHaSm n7wD9+3fDcaEnRdtwSQJR+ULKt+BWkuPkkSARDalkFEFcnOwNx1mm0UbbfwksPJD v67QKoBSG+VPfH2RKMSvlWaqSbHMo7WGYK9iAYOK8lJB6M9ulQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFATo87YfV3DXr4eVVb62OEo6l8LrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvMDIyYTViMTEtNzYwMi0z YmEyLWEzYTYtMmZjYzhiMmM2ZWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPinuoYzu0lhWRNXT3g8sx1iROU05soH07yduAnBtRTm1BjJtMjDXzg rIyafcaFIq8yj5koI7nC4eW0rt5QHoRTtNqaYTettZQOe4RhwYQU4e29JfLKK9T8 GSPMEUOo0JPrT/bHPSHIbLOZCl5ITxIExhHjyyOrxLwSi6cJ1K3KjWRkxMi7RsWA r1IuwGBEbk06WGhbO4YRAErTZYmDERjFHMoVAN2tRngFp1qdBhcbimukpXTKxI28 7vLENtweG8eq2DfNBLCRgoeqDKmZq0P4OyAi7Uah6Chmn2ynDd0W0ru6tcbochJW C5oWz9BDzy6R47qO1cW0O6tkEmPcszo= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:09 2026 by rpki-client