$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/999d4880-da1a-3f72-ada7-611e3a383d8b.roa File: 999d4880-da1a-3f72-ada7-611e3a383d8b.roa (raw, json) Hash identifier: ipL+Fo7oI9KP/2ObUXqTdJvQBxE8j+zNBXb2IUXqzHc= Subject key identifier: B3:3D:3E:27:F8:0D:77:6F:03:98:72:58:EB:8E:5E:7D:D4:53:5F:91 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E7F3B9186E69F8F90EB358740 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/999d4880-da1a-3f72-ada7-611e3a383d8b.roa Signing time: Tue 14 Jul 2026 14:36:12 +0000 ROA not before: Tue 14 Jul 2026 14:36:12 +0000 ROA not after: Mon 12 Oct 2026 14:36:12 +0000 asID: 10279 IP address blocks: 152.44.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7f:3b:91:86:e6:9f:8f:90:eb:35:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 14 14:36:12 2026 GMT Not After : Oct 12 14:36:12 2026 GMT Subject: CN=9fa4fe4d-d505-46d6-842e-1be562a4c263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:df:1b:ed:7f:f5:5f:96:81:f9:63:63:61:4f: 9f:49:7d:12:c9:78:34:96:26:da:64:7b:80:1b:60: 30:9e:c5:7f:26:1f:c6:05:ba:e0:ca:f4:af:79:5d: 19:be:89:54:bd:6f:20:d8:3e:0b:ad:43:28:14:6e: b4:f4:3b:1a:88:bd:f6:8b:1a:2b:02:3b:3f:b8:dd: f7:2d:f0:8d:41:4a:ce:49:76:16:c7:d6:00:fa:3a: 0b:47:cc:c1:5d:eb:6e:3a:c5:0a:f0:6a:a8:d2:5e: f9:8f:33:b3:32:77:27:3f:a4:8a:7a:2d:e0:1b:91: 7e:4d:7a:59:93:49:8d:12:7d:5d:b2:ee:be:18:37: ae:07:b9:ff:e4:99:dc:75:ce:53:df:f0:df:4e:28: bf:17:f4:74:5a:6a:f1:de:b6:71:cd:2f:73:0a:12: 59:d2:4d:8d:c7:09:ed:5e:ba:c4:94:e5:35:a5:79: 7c:b3:e1:25:46:e4:83:3c:8d:c6:96:a1:db:47:d1: 3c:82:77:9a:99:59:c9:04:06:5d:d3:c2:c7:3b:94: e9:61:e8:ac:33:d8:1c:1b:d8:d3:f5:08:64:60:96: a2:e5:5e:03:9d:af:db:05:56:3a:be:47:82:18:f0: c7:cb:01:e2:bf:c1:70:15:ac:fc:05:e0:3e:ca:f8: eb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3D:3E:27:F8:0D:77:6F:03:98:72:58:EB:8E:5E:7D:D4:53:5F:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/999d4880-da1a-3f72-ada7-611e3a383d8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:01:65:b0:27:35:3e:de:69:e7:ae:7e:51:f7:55:58:fa:bb: 44:48:76:11:a7:b9:c6:a0:77:d5:d2:11:50:80:89:50:a4:c2: a9:85:6e:b2:cc:26:83:23:d2:9a:1d:e5:06:1b:e8:dd:f3:a5: 63:4d:8f:37:9b:23:ae:57:36:04:f3:20:4d:62:83:ed:a5:c1: 86:11:36:dc:3d:c5:f5:d5:1d:0f:7a:44:8b:91:f9:f5:82:ed: f9:65:2e:d6:bb:0b:76:71:90:27:8d:12:01:bf:42:81:5a:09: b4:a1:8d:3a:6f:88:d5:fd:81:4a:06:08:68:54:d1:15:4f:04: e4:6e:00:c0:fb:a3:2c:24:0c:c8:bb:3b:b1:db:e2:c3:22:be: 5c:fc:9a:a0:ed:09:17:ac:a8:e6:cc:75:5d:8a:0e:75:ec:9d: d9:83:b6:4f:03:cc:43:cd:3f:d3:67:66:97:3e:cd:64:b2:b6: 5b:2e:26:58:76:1e:d3:b7:57:b4:0d:30:57:d8:55:b8:2a:d5: f5:73:38:a4:92:b7:3f:99:44:27:63:fa:77:70:07:13:bd:e7: a0:0f:76:75:59:18:3e:9b:b0:1c:9e:39:fc:68:40:cf:22:da: b0:8d:78:dc:f8:92:d6:5d:ef:cc:cd:27:f7:17:64:95:39:9d: 48:d2:82:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5/O5GG5p+PkOs1h0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcxNDE0MzYxMloXDTI2MTAxMjE0MzYxMlowLzEtMCsGA1UEAxMk OWZhNGZlNGQtZDUwNS00NmQ2LTg0MmUtMWJlNTYyYTRjMjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq98b7X/1X5aB+WNjYU+fSX0SyXg0libaZHuA G2AwnsV/Jh/GBbrgyvSveV0ZvolUvW8g2D4LrUMoFG609DsaiL32ixorAjs/uN33 LfCNQUrOSXYWx9YA+joLR8zBXetuOsUK8Gqo0l75jzOzMncnP6SKei3gG5F+TXpZ k0mNEn1dsu6+GDeuB7n/5Jncdc5T3/DfTii/F/R0Wmrx3rZxzS9zChJZ0k2Nxwnt XrrElOU1pXl8s+ElRuSDPI3GlqHbR9E8gneamVnJBAZd08LHO5TpYeisM9gcG9jT 9QhkYJai5V4Dna/bBVY6vkeCGPDHywHiv8FwFaz8BeA+yvjrAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLM9Pif4DXdvA5hyWOuOXn3UU1+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvOTk5ZDQ4ODAtZGExYS0z ZjcyLWFkYTctNjExZTNhMzgzZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkBZbAnNT7eaeeuflH3VVj6u0RIdhGnucagd9XSEVCAiVCkwqmFbrLM JoMj0pod5QYb6N3zpWNNjzebI65XNgTzIE1ig+2lwYYRNtw9xfXVHQ96RIuR+fWC 7fllLta7C3ZxkCeNEgG/QoFaCbShjTpviNX9gUoGCGhU0RVPBORuAMD7oywkDMi7 O7Hb4sMivlz8mqDtCResqObMdV2KDnXsndmDtk8DzEPNP9NnZpc+zWSytlsuJlh2 HtO3V7QNMFfYVbgq1fVzOKSStz+ZRCdj+ndwBxO956APdnVZGD6bsByeOfxoQM8i 2rCNeNz4ktZd78zNJ/cXZJU5nUjSgks= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:01 2026 by rpki-client