$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/161b3327-d90f-347f-94d9-e2d5a2299cfa.roa File: 161b3327-d90f-347f-94d9-e2d5a2299cfa.roa (raw, json) Hash identifier: TiWJcbU0yqEtLt+g9ioMbpU/y/44zWfWpH8XhHREDJ8= Subject key identifier: 14:30:DC:86:5C:EA:32:33:E5:F4:D8:7B:B2:27:65:32:78:C2:3F:FA Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E84A9573DA0D5CD99FA4E4700 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/161b3327-d90f-347f-94d9-e2d5a2299cfa.roa Signing time: Thu 16 Jul 2026 13:16:25 +0000 ROA not before: Thu 16 Jul 2026 13:16:25 +0000 ROA not after: Wed 14 Oct 2026 13:16:25 +0000 asID: 10279 IP address blocks: 152.44.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:a9:57:3d:a0:d5:cd:99:fa:4e:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 16 13:16:25 2026 GMT Not After : Oct 14 13:16:25 2026 GMT Subject: CN=b0f20e19-751f-48d4-915f-a565a0265a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cf:08:ff:ee:ff:c4:ea:43:47:ca:98:c8:3f: bf:87:e7:8d:53:bf:1a:1f:9c:38:e9:8f:bd:a4:8e: 6f:d5:c1:65:18:fe:2d:9e:46:99:18:c7:f1:f0:03: 48:40:83:61:62:3a:45:c1:de:f8:5a:fc:f6:56:40: fd:92:1d:e5:5d:aa:2b:d2:b8:d6:b4:6d:1c:62:b0: 7d:fd:0a:c6:87:9d:89:cb:7e:d6:7e:2f:29:d2:33: de:3e:48:3d:01:70:8d:d0:00:4d:b6:9d:cc:52:fd: 2e:fb:31:03:e3:18:f3:aa:67:b3:57:dd:be:20:72: 4f:45:c1:88:53:b8:3e:51:e2:cd:10:59:bb:88:e2: b1:d1:31:e1:7f:7b:d3:5a:3b:d4:e7:68:ff:96:e2: 69:92:62:b4:f5:ae:d8:42:97:27:a3:d6:e8:20:4d: 13:bb:1a:d4:ea:33:6f:ad:b6:56:d1:85:aa:a3:8e: 53:9b:83:c7:33:1e:fb:fe:cd:2a:3e:6f:d3:f6:20: be:0d:f7:95:0d:29:03:89:75:3e:fe:8a:11:e0:79: 23:74:7a:89:ea:ab:f9:c3:79:8e:39:8b:b2:b9:54: 56:cf:71:d2:55:07:04:c1:4e:6a:06:67:7b:94:cf: ac:2a:8b:72:ff:06:71:1b:02:38:80:0d:b7:fd:70: 1b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:30:DC:86:5C:EA:32:33:E5:F4:D8:7B:B2:27:65:32:78:C2:3F:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/161b3327-d90f-347f-94d9-e2d5a2299cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:eb:5b:5f:45:8a:26:42:f9:26:58:fc:81:4c:aa:68:3c:5a: 4a:48:a3:6a:15:9c:02:6c:2c:84:f6:6e:88:c9:51:24:99:0a: 57:34:e1:71:06:92:e0:48:d0:d4:75:ef:2e:ac:a1:4a:4f:0f: c5:ba:77:cd:21:44:8b:8f:1e:1a:34:07:0f:4d:4b:36:58:30: 63:4b:c5:31:b9:2d:4a:1b:22:c5:2c:be:ea:ee:e3:6c:22:42: bc:8e:4a:e9:bc:f1:ee:34:29:bb:fe:4f:2b:77:8d:b2:59:90: 82:84:71:70:70:57:98:aa:5f:84:e0:d5:3d:92:50:ff:70:05: 34:c4:8e:6e:a8:21:e9:2d:61:e6:d2:35:96:af:e4:ae:8c:69: 15:44:06:4a:5e:71:ea:39:e1:f5:f2:ee:f0:f5:48:0f:dd:70: 2d:cb:60:eb:37:b1:0e:03:67:e6:96:a4:15:eb:cf:5f:97:35: 2c:fc:a2:d3:d5:fb:52:72:51:4e:3f:50:94:c1:fd:71:ff:be: ab:41:1a:88:f2:37:28:c2:91:bf:07:25:10:2b:04:1a:e1:a0: 91:2f:74:87:32:8a:ea:9f:e6:19:f4:bb:d8:13:e3:2a:f8:60: ee:73:8e:0e:cd:77:5e:09:db:4b:3b:ab:ce:32:b0:21:6a:4b: 9d:d0:81:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EqVc9oNXNmfpORwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcxNjEzMTYyNVoXDTI2MTAxNDEzMTYyNVowLzEtMCsGA1UEAxMk YjBmMjBlMTktNzUxZi00OGQ0LTkxNWYtYTU2NWEwMjY1YTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg88I/+7/xOpDR8qYyD+/h+eNU78aH5w46Y+9 pI5v1cFlGP4tnkaZGMfx8ANIQINhYjpFwd74Wvz2VkD9kh3lXaor0rjWtG0cYrB9 /QrGh52Jy37Wfi8p0jPePkg9AXCN0ABNtp3MUv0u+zED4xjzqmezV92+IHJPRcGI U7g+UeLNEFm7iOKx0THhf3vTWjvU52j/luJpkmK09a7YQpcno9boIE0TuxrU6jNv rbZW0YWqo45Tm4PHMx77/s0qPm/T9iC+DfeVDSkDiXU+/ooR4HkjdHqJ6qv5w3mO OYuyuVRWz3HSVQcEwU5qBmd7lM+sKoty/wZxGwI4gA23/XAbXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQw3IZc6jIz5fTYe7InZTJ4wj/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvMTYxYjMzMjctZDkwZi0z NDdmLTk0ZDktZTJkNWEyMjk5Y2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLrW19FiiZC+SZY/IFMqmg8WkpIo2oVnAJsLIT2bojJUSSZClc04XEG kuBI0NR17y6soUpPD8W6d80hRIuPHho0Bw9NSzZYMGNLxTG5LUobIsUsvuru42wi QryOSum88e40Kbv+Tyt3jbJZkIKEcXBwV5iqX4Tg1T2SUP9wBTTEjm6oIektYebS NZav5K6MaRVEBkpeceo54fXy7vD1SA/dcC3LYOs3sQ4DZ+aWpBXrz1+XNSz8otPV +1JyUU4/UJTB/XH/vqtBGojyNyjCkb8HJRArBBrhoJEvdIcyiuqf5hn0u9gT4yr4 YO5zjg7Nd14J20s7q84ysCFqS53QgQw= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:12 2026 by rpki-client