$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/3325e3fe-1ca5-341f-b639-388821219e7f.roa File: 3325e3fe-1ca5-341f-b639-388821219e7f.roa (raw, json) Hash identifier: hGdZwN78380LKE/JfpqQ6718PRJ+HfocrUr8lodxtj8= Subject key identifier: B1:11:F5:1B:62:8E:E1:76:80:F4:8C:56:1A:A9:23:74:6D:FE:F9:76 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E84A847EF16F114DE851FB500 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/3325e3fe-1ca5-341f-b639-388821219e7f.roa Signing time: Thu 16 Jul 2026 13:14:17 +0000 ROA not before: Thu 16 Jul 2026 13:14:17 +0000 ROA not after: Wed 14 Oct 2026 13:14:17 +0000 asID: 10279 IP address blocks: 152.44.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:a8:47:ef:16:f1:14:de:85:1f:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 16 13:14:17 2026 GMT Not After : Oct 14 13:14:17 2026 GMT Subject: CN=1f34180d-5975-4f57-a583-eef2bc5a9022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:eb:8a:9f:29:5d:86:99:87:e4:f6:78:cc:d1: 24:29:41:8f:a8:08:b8:df:0c:a9:f8:65:c9:ae:4e: 96:f4:4a:7d:d0:7c:28:f2:84:20:3e:74:1f:24:b3: bd:a6:cf:4c:2d:5c:69:db:d3:2c:e6:b9:0c:54:ac: 7f:ec:69:e3:90:b4:58:05:06:2e:33:44:9e:cb:c7: 40:0d:cf:c4:4f:07:28:e1:3d:9e:0c:d5:8c:27:25: 16:c9:2e:a1:07:22:54:fb:b0:8d:48:39:dc:d8:b1: bb:91:fa:b5:fd:91:88:57:ca:47:55:08:84:dd:d2: d7:01:7d:a8:7b:21:8e:c5:eb:2b:80:d7:a1:31:af: 31:f4:c6:5d:42:37:05:4f:5a:00:f5:cd:88:54:e7: e8:5d:07:83:6d:ad:90:96:14:22:e9:54:d8:64:eb: 18:c5:e7:a6:37:78:48:5b:c3:9f:ab:48:59:44:ab: 44:ce:f7:a4:b4:8d:43:60:1a:21:19:2a:08:84:15: a0:55:2e:58:6c:d1:14:d5:24:ac:5b:f2:ea:5a:08: e1:5c:20:8f:17:17:56:7a:c9:f1:a7:bd:69:6b:e3: e8:0d:5b:23:eb:c9:2c:1b:7b:aa:df:1f:c2:e7:53: 37:be:95:21:ff:f5:46:94:42:3a:bc:93:f9:05:d8: 32:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:11:F5:1B:62:8E:E1:76:80:F4:8C:56:1A:A9:23:74:6D:FE:F9:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/3325e3fe-1ca5-341f-b639-388821219e7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e1:76:df:c4:ef:7d:bd:4c:00:99:0d:b2:2b:88:df:12:1a: 13:ff:62:65:6f:88:06:f8:bf:9b:e9:b8:4c:63:bd:75:4d:a3: 4f:59:9c:29:34:7e:29:d5:7b:3d:91:92:94:1b:ba:48:09:07: a5:8a:e7:84:ea:dd:74:d7:a9:d3:0e:a3:bb:9f:8f:09:10:2a: d9:7d:ce:03:64:aa:63:c2:56:53:fe:f0:94:5e:75:53:6a:e0: c0:9b:4b:13:34:fc:b1:5b:d8:61:22:c2:00:04:a7:39:9d:0f: 91:5c:9c:97:05:62:8c:75:e5:73:50:01:03:db:1f:a4:33:a3: 03:08:d7:b7:a5:e3:aa:b7:97:14:d9:6d:76:be:99:cc:db:bb: ad:35:0c:79:8f:32:d9:a0:fe:8e:6f:ed:81:e2:c6:57:08:f1: 10:eb:6e:35:ba:b8:9c:74:ea:a0:e3:88:96:1d:e4:6f:75:a2: 03:8b:b4:15:84:ba:e1:5d:5e:90:b5:69:90:1b:9c:a2:83:35: 48:f4:fb:10:cd:51:ac:89:68:6d:c5:37:6e:00:28:ac:30:51: 5a:0e:96:b8:8e:d8:f5:08:d6:ba:d7:fd:bc:fa:0a:5b:64:7f: 8b:cd:e7:30:35:92:0e:26:e9:12:9a:6c:24:c6:ce:d4:74:d1: 5f:bb:79:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EqEfvFvEU3oUftQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcxNjEzMTQxN1oXDTI2MTAxNDEzMTQxN1owLzEtMCsGA1UEAxMk MWYzNDE4MGQtNTk3NS00ZjU3LWE1ODMtZWVmMmJjNWE5MDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOuKnyldhpmH5PZ4zNEkKUGPqAi43wyp+GXJ rk6W9Ep90Hwo8oQgPnQfJLO9ps9MLVxp29Ms5rkMVKx/7GnjkLRYBQYuM0Sey8dA Dc/ETwco4T2eDNWMJyUWyS6hByJU+7CNSDnc2LG7kfq1/ZGIV8pHVQiE3dLXAX2o eyGOxesrgNehMa8x9MZdQjcFT1oA9c2IVOfoXQeDba2QlhQi6VTYZOsYxeemN3hI W8Ofq0hZRKtEzvektI1DYBohGSoIhBWgVS5YbNEU1SSsW/LqWgjhXCCPFxdWesnx p71pa+PoDVsj68ksG3uq3x/C51M3vpUh//VGlEI6vJP5BdgymwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLER9RtijuF2gPSMVhqpI3Rt/vl2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvMzMyNWUzZmUtMWNhNS0z NDFmLWI2MzktMzg4ODIxMjE5ZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3hdt/E7329TACZDbIriN8SGhP/YmVviAb4v5vpuExjvXVNo09ZnCk0 finVez2RkpQbukgJB6WK54Tq3XTXqdMOo7ufjwkQKtl9zgNkqmPCVlP+8JRedVNq 4MCbSxM0/LFb2GEiwgAEpzmdD5FcnJcFYox15XNQAQPbH6QzowMI17el46q3lxTZ bXa+mczbu601DHmPMtmg/o5v7YHixlcI8RDrbjW6uJx06qDjiJYd5G91ogOLtBWE uuFdXpC1aZAbnKKDNUj0+xDNUayJaG3FN24AKKwwUVoOlriO2PUI1rrX/bz6Cltk f4vN5zA1kg4m6RKabCTGztR00V+7eTc= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:50 2026 by rpki-client