$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/70eced2d-24db-373e-a5ac-da0a44ef7a41.roa File: 70eced2d-24db-373e-a5ac-da0a44ef7a41.roa (raw, json) Hash identifier: jXNld6lggoCTMl4RRLsPbwE/qWfmavd64chBN2TisQ8= Subject key identifier: C3:26:94:96:84:FD:AF:BB:C4:69:2B:B5:F4:D6:A2:7B:45:F0:C5:AE Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E84A89D71A5A72BB802D3F850 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/70eced2d-24db-373e-a5ac-da0a44ef7a41.roa Signing time: Thu 16 Jul 2026 13:14:57 +0000 ROA not before: Thu 16 Jul 2026 13:14:57 +0000 ROA not after: Wed 14 Oct 2026 13:14:57 +0000 asID: 10279 IP address blocks: 152.44.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:a8:9d:71:a5:a7:2b:b8:02:d3:f8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 16 13:14:57 2026 GMT Not After : Oct 14 13:14:57 2026 GMT Subject: CN=8de4a7f5-8308-4528-a7e8-6088d0c55a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:64:51:3c:65:bd:d8:61:f4:1c:3b:70:bb:a9: 6f:c6:b6:c8:fc:1d:99:2d:97:39:dd:8f:66:69:44: 94:2c:6c:5e:81:9c:89:47:c7:8e:4b:2e:27:5b:3f: 8f:9d:27:93:15:93:8b:4c:55:2f:5d:b3:f7:5f:ea: b5:b6:89:2a:0c:b8:1c:b5:b7:61:6d:a5:af:23:07: 3c:a7:2c:9b:98:1b:8a:78:48:fb:1f:5c:9f:f2:d5: 7c:8a:c1:4e:c4:50:4f:68:89:02:30:bf:f1:21:49: 32:b2:eb:cd:e4:30:84:ba:9b:00:65:ab:78:46:81: 3e:37:4c:e5:88:93:03:70:47:be:7f:6f:7b:66:d2: 91:f4:a9:05:c0:89:78:53:77:6f:9c:b7:13:f2:4e: 06:b6:6d:fd:37:2c:f1:58:53:62:09:cb:f2:39:f6: 3f:8f:25:16:ce:03:46:bb:4b:ce:2e:33:90:d9:f3: 7c:aa:b0:d3:cd:f8:18:13:c4:5d:4d:76:d5:75:b8: a3:34:77:33:bd:02:e7:0d:66:01:78:4e:d0:13:33: 85:79:b7:9d:fd:5c:94:48:1d:ae:3a:89:1c:ce:30: bc:9f:a9:68:73:a3:90:79:c3:84:b8:07:dc:43:e0: 80:56:8d:f9:da:ca:00:2e:72:54:74:17:2d:dc:3a: be:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:26:94:96:84:FD:AF:BB:C4:69:2B:B5:F4:D6:A2:7B:45:F0:C5:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/70eced2d-24db-373e-a5ac-da0a44ef7a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:46:e2:d2:be:f0:ce:7f:66:f4:c7:ac:df:fa:f5:1f:77:cb: aa:b5:ed:b2:ac:20:73:b3:23:70:12:99:ba:9f:f5:62:e6:73: 07:19:89:f7:ae:fd:ca:d7:30:0b:2e:38:4d:32:85:f3:1c:94: 27:2c:9d:18:d0:a9:b4:5e:b7:2d:94:ec:bd:a7:e4:e6:bd:5b: 2d:65:9a:f1:5b:57:9b:6b:49:dd:56:7f:96:3c:ff:3e:a5:14: 27:3b:38:10:3c:64:a6:5e:af:51:7a:cc:c8:45:08:07:fa:e8: bd:7b:3e:6b:f2:7e:49:07:46:45:08:3a:71:2a:3a:35:19:b4: 4c:a0:15:b1:44:5c:97:36:de:d3:88:a2:6f:09:b2:ce:76:69: 2c:ad:09:82:f1:bf:b6:e5:0e:c2:6a:6f:b1:54:f3:87:0b:2e: a3:c3:e9:23:46:bc:b7:1c:52:4a:20:b5:a8:3a:f8:bb:93:f6: 20:ab:f1:b3:85:1e:61:56:9e:4e:3f:d9:e8:4d:75:d3:14:fe: 16:f0:37:95:20:56:cb:a2:42:5f:e9:67:68:c2:69:9f:d7:c9: 26:9a:28:0d:58:44:b2:e5:52:02:a5:2d:29:0b:bc:94:2f:66: 2e:df:86:a8:e3:2e:48:ae:d8:85:ed:22:95:51:db:5b:fe:ba: 81:d4:da:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EqJ1xpacruALT+FAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcxNjEzMTQ1N1oXDTI2MTAxNDEzMTQ1N1owLzEtMCsGA1UEAxMk OGRlNGE3ZjUtODMwOC00NTI4LWE3ZTgtNjA4OGQwYzU1YTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2RRPGW92GH0HDtwu6lvxrbI/B2ZLZc53Y9m aUSULGxegZyJR8eOSy4nWz+PnSeTFZOLTFUvXbP3X+q1tokqDLgctbdhbaWvIwc8 pyybmBuKeEj7H1yf8tV8isFOxFBPaIkCML/xIUkysuvN5DCEupsAZat4RoE+N0zl iJMDcEe+f297ZtKR9KkFwIl4U3dvnLcT8k4Gtm39NyzxWFNiCcvyOfY/jyUWzgNG u0vOLjOQ2fN8qrDTzfgYE8RdTXbVdbijNHczvQLnDWYBeE7QEzOFebed/VyUSB2u OokczjC8n6loc6OQecOEuAfcQ+CAVo352soALnJUdBct3Dq+CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMmlJaE/a+7xGkrtfTWontF8MWuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvNzBlY2VkMmQtMjRkYi0z NzNlLWE1YWMtZGEwYTQ0ZWY3YTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1G4tK+8M5/ZvTHrN/69R93y6q17bKsIHOzI3ASmbqf9WLmcwcZifeu /crXMAsuOE0yhfMclCcsnRjQqbRety2U7L2n5Oa9Wy1lmvFbV5trSd1Wf5Y8/z6l FCc7OBA8ZKZer1F6zMhFCAf66L17PmvyfkkHRkUIOnEqOjUZtEygFbFEXJc23tOI om8Jss52aSytCYLxv7blDsJqb7FU84cLLqPD6SNGvLccUkogtag6+LuT9iCr8bOF HmFWnk4/2ehNddMU/hbwN5UgVsuiQl/pZ2jCaZ/XySaaKA1YRLLlUgKlLSkLvJQv Zi7fhqjjLkiu2IXtIpVR21v+uoHU2o4= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:09 2026 by rpki-client