$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/cf6191a4-5eb5-3a43-a4fb-182106832540.roa File: cf6191a4-5eb5-3a43-a4fb-182106832540.roa (raw, json) Hash identifier: rUXwDVpYZwUSq9iy0KvdMPVAulPTholKaaCFsN1PWx8= Subject key identifier: AC:6A:DB:76:2F:14:4C:6A:CC:A0:0A:BB:C9:76:AC:17:3A:ED:18:B3 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584E84A8C37DA044A98A596A7600 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/cf6191a4-5eb5-3a43-a4fb-182106832540.roa Signing time: Thu 16 Jul 2026 13:15:15 +0000 ROA not before: Thu 16 Jul 2026 13:15:15 +0000 ROA not after: Wed 14 Oct 2026 13:15:15 +0000 asID: 10279 IP address blocks: 152.44.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:a8:c3:7d:a0:44:a9:8a:59:6a:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Jul 16 13:15:15 2026 GMT Not After : Oct 14 13:15:15 2026 GMT Subject: CN=a6008c24-18a3-48ac-a20c-414937698f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c0:6d:17:a5:2c:6e:79:c5:51:3b:50:01:8e: a3:90:cb:78:37:a1:57:4c:3a:b3:37:7f:cc:9e:78: 51:56:bf:13:5d:03:1d:40:2a:98:dd:59:50:86:f8: fc:2d:3c:75:8a:2e:66:b1:78:3f:20:b1:9d:9c:dd: 74:08:af:1a:d9:65:93:0b:60:55:e8:0e:b3:95:df: bd:2d:3e:8a:18:c0:fe:f8:ee:2b:35:a5:b2:c5:c9: 76:66:4b:4b:da:6e:3d:4a:44:1b:50:98:f3:89:ee: ac:bf:56:79:96:d0:72:e5:e2:a4:3b:c0:1f:12:2d: cd:ac:b6:46:2d:f6:de:49:87:3f:a6:53:96:79:c6: 7c:a6:d3:c1:5b:58:5d:fb:b8:64:86:52:a5:01:fd: 58:a5:12:e7:ea:08:c2:67:74:fc:55:cb:e5:3c:7f: b4:28:75:10:ef:69:88:36:2a:7a:74:4e:a5:95:79: bd:2f:bb:d1:98:5f:e7:c9:e5:f3:7a:81:c6:c4:d4: c8:6a:8e:0d:17:8b:be:31:1d:49:81:f8:8f:c2:40: b4:75:6d:29:41:6f:73:00:c7:7e:77:de:99:9e:e2: 4e:22:7a:f7:71:49:44:99:6b:6e:9e:d9:8c:65:c7: bb:cf:56:8d:f6:40:f8:c5:42:ab:4a:58:fd:2f:c5: c4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6A:DB:76:2F:14:4C:6A:CC:A0:0A:BB:C9:76:AC:17:3A:ED:18:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/cf6191a4-5eb5-3a43-a4fb-182106832540.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 152.44.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:77:03:57:21:81:38:4e:23:f6:08:9d:44:63:0f:54:5f:90: 30:4f:d3:f8:96:09:73:aa:02:f9:a0:0a:84:82:ac:70:5f:f9: fb:ab:ba:0f:88:6c:06:cb:93:65:51:79:3c:d5:0f:75:fb:14: b1:7d:53:a8:cd:55:47:92:1a:61:cf:aa:91:bf:3d:91:6b:5d: 2a:f7:4a:e9:59:dc:05:a9:e9:cc:1b:68:dd:06:02:58:7a:81: ff:e3:94:10:13:11:c6:ba:b8:f0:85:6f:62:90:7d:ea:a3:0e: f1:a2:43:51:3d:f2:77:d1:3c:be:10:02:2c:65:4a:fb:66:19: d1:51:cb:3d:0b:8a:b1:9d:e1:85:b5:92:41:44:d2:10:7f:74: a2:f6:09:72:b7:07:8d:7c:5c:9b:dd:77:92:39:9a:01:92:8e: 60:fe:51:8f:11:e2:f7:a6:44:37:5b:5f:90:4a:03:82:0b:c6: ce:f8:c0:c4:71:a8:ef:7f:d6:1e:25:ad:fe:0b:1a:53:e0:08: ea:e0:4a:59:22:f3:1b:ca:75:66:6b:3c:ab:f1:f2:5e:1b:e2: c2:c3:9e:48:29:00:d4:35:23:e2:d7:76:f8:bc:e9:a8:d6:69: 57:d0:02:75:e0:fb:ed:63:6f:bb:65:cd:fd:06:20:ab:3d:5a: 86:a6:b0:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EqMN9oESpillqdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDcxNjEzMTUxNVoXDTI2MTAxNDEzMTUxNVowLzEtMCsGA1UEAxMk YTYwMDhjMjQtMThhMy00OGFjLWEyMGMtNDE0OTM3Njk4ZjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsBtF6UsbnnFUTtQAY6jkMt4N6FXTDqzN3/M nnhRVr8TXQMdQCqY3VlQhvj8LTx1ii5msXg/ILGdnN10CK8a2WWTC2BV6A6zld+9 LT6KGMD++O4rNaWyxcl2ZktL2m49SkQbUJjzie6sv1Z5ltBy5eKkO8AfEi3NrLZG LfbeSYc/plOWecZ8ptPBW1hd+7hkhlKlAf1YpRLn6gjCZ3T8VcvlPH+0KHUQ72mI Nip6dE6llXm9L7vRmF/nyeXzeoHGxNTIao4NF4u+MR1JgfiPwkC0dW0pQW9zAMd+ d96ZnuJOInr3cUlEmWtuntmMZce7z1aN9kD4xUKrSlj9L8XEqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxq23YvFExqzKAKu8l2rBc67RizMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvY2Y2MTkxYTQtNWViNS0z YTQzLWE0ZmItMTgyMTA2ODMyNTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCwPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAh3A1chgThOI/YInURjD1RfkDBP0/iWCXOqAvmgCoSCrHBf+furug+I bAbLk2VReTzVD3X7FLF9U6jNVUeSGmHPqpG/PZFrXSr3SulZ3AWp6cwbaN0GAlh6 gf/jlBATEca6uPCFb2KQfeqjDvGiQ1E98nfRPL4QAixlSvtmGdFRyz0LirGd4YW1 kkFE0hB/dKL2CXK3B418XJvdd5I5mgGSjmD+UY8R4vemRDdbX5BKA4ILxs74wMRx qO9/1h4lrf4LGlPgCOrgSlki8xvKdWZrPKvx8l4b4sLDnkgpANQ1I+LXdvi86ajW aVfQAnXg++1jb7tlzf0GIKs9WoamsAY= -----END CERTIFICATE-----Generated at Tue Jul 21 20:12:02 2026 by rpki-client