$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152868.roa File: AS152868.roa (raw, json) Hash identifier: tmaJLfC4RSUkWC/rrFfCi/YtIHMdJzzTiq2gdHZEBIs= Subject key identifier: E3:BE:DC:21:F9:AF:0A:9C:70:FC:98:AC:3C:F5:E0:B2:A2:C6:BB:FD Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 4384E5B2263341FDC23DD5D1798CC2DCFD03D2C4 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152868.roa Signing time: Mon 21 Sep 2026 16:53:08 +0000 ROA not before: Mon 21 Sep 2026 16:48:08 +0000 ROA not after: Mon 20 Sep 2027 16:53:08 +0000 asID: 152868 IP address blocks: 216.227.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 07:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:84:e5:b2:26:33:41:fd:c2:3d:d5:d1:79:8c:c2:dc:fd:03:d2:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Sep 21 16:48:08 2026 GMT Not After : Sep 20 16:53:08 2027 GMT Subject: CN=E3BEDC21F9AF0A9C70FC98AC3CF5E0B2A2C6BBFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:07:43:72:a1:db:9e:48:8c:b6:99:80:2a:d0: 11:cf:2a:e8:e0:f5:9f:f2:1b:64:d8:0a:d0:2a:d1: 7a:7e:9f:ba:46:08:3f:f5:55:4f:fb:81:da:63:27: 16:ef:2d:7f:d3:f0:ef:ac:e7:e4:8c:43:b2:83:50: 5d:4b:83:4f:cc:f9:4f:65:bb:36:60:d5:17:da:29: 92:29:a9:61:e8:d2:d6:9c:d9:b5:85:4f:59:30:47: df:09:d0:b6:86:d7:c4:80:ef:45:7a:a6:e5:79:14: 34:d7:91:32:00:da:58:21:ff:43:24:4a:65:e1:f8: e6:ee:ea:dc:3c:29:13:35:bd:21:5b:3d:0c:21:26: e5:95:d2:df:ad:57:c1:77:8d:e3:09:81:da:99:8d: 20:d8:0f:59:70:b1:81:29:8f:c2:32:5e:56:2e:76: 39:6d:9a:b0:a4:22:4b:22:73:ff:fa:1c:e5:ee:09: be:be:17:07:09:80:81:7e:1f:8a:01:33:d0:53:28: 44:9b:70:0b:10:b4:b0:b3:8c:23:b9:d0:0b:5f:cf: 45:e1:a5:a8:16:4c:a2:9b:89:cd:c9:68:cd:f3:2f: 5d:a7:44:6a:1f:79:87:ba:8b:ac:3b:97:47:b0:9a: a9:0b:09:ff:84:62:bb:4c:da:37:47:2d:65:ca:0a: af:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BE:DC:21:F9:AF:0A:9C:70:FC:98:AC:3C:F5:E0:B2:A2:C6:BB:FD X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152868.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.227.216.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:fe:4c:cf:29:eb:33:7e:6c:27:c5:97:85:68:2f:c3:de:87: 5e:a0:95:39:fb:3a:48:8e:04:8f:ff:9c:88:cf:be:76:11:05: c4:49:5d:9d:21:2b:a4:c9:87:3a:6e:c4:06:a1:81:6c:09:bb: 3a:4f:df:6f:46:fa:1a:f6:d9:72:ce:70:cf:5a:bb:b8:3f:85: eb:23:1a:46:88:44:c1:19:8e:6a:1f:c8:2b:12:70:42:bc:b5: 33:a8:ee:db:ba:b5:50:fa:41:06:3b:1d:9e:8a:55:2a:6e:b0: a4:73:ca:31:78:10:7e:d8:eb:26:87:2c:56:fd:83:89:b8:ca: a6:d2:f8:d0:35:98:bc:ba:b2:03:21:3f:e9:02:64:0d:44:89: 99:c1:56:25:d0:85:0a:cb:c9:ed:85:a1:d2:01:54:d6:79:6e: 54:80:60:9c:b9:5c:6e:9b:fc:b3:50:a2:aa:e5:4e:89:01:c1: 47:24:3c:f7:6b:f9:df:78:a3:b4:53:57:c3:94:8c:f6:45:e0: e5:a9:68:53:46:2a:11:62:74:3e:05:8b:d1:6a:73:b8:79:35: 0e:92:a3:79:7d:6d:5e:f5:9c:14:c6:8a:93:df:a9:44:ed:00: 4e:02:a9:eb:fb:2a:6b:8d:3c:3c:0a:ae:8f:fa:2c:ce:21:33: ec:30:2d:d2 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUQ4TlsiYzQf3CPdXReYzC3P0D0sQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwOTIxMTY0ODA4WhcNMjcwOTIwMTY1MzA4 WjAzMTEwLwYDVQQDEyhFM0JFREMyMUY5QUYwQTlDNzBGQzk4QUMzQ0Y1RTBCMkEy QzZCQkZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAdDcqHbnkiM tpmAKtARzyro4PWf8htk2ArQKtF6fp+6Rgg/9VVP+4HaYycW7y1/0/DvrOfkjEOy g1BdS4NPzPlPZbs2YNUX2imSKalh6NLWnNm1hU9ZMEffCdC2htfEgO9FeqbleRQ0 15EyANpYIf9DJEpl4fjm7urcPCkTNb0hWz0MISblldLfrVfBd43jCYHamY0g2A9Z cLGBKY/CMl5WLnY5bZqwpCJLInP/+hzl7gm+vhcHCYCBfh+KATPQUyhEm3ALELSw s4wjudALX89F4aWoFkyim4nNyWjN8y9dp0RqH3mHuousO5dHsJqpCwn/hGK7TNo3 Ry1lygqv4QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFOO+3CH5rwqccPyYrDz14LKi xrv9MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzE1Mjg2OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANjj2DANBgkqhkiG9w0BAQsFAAOC AQEATP5MzynrM35sJ8WXhWgvw96HXqCVOfs6SI4Ej/+ciM++dhEFxEldnSErpMmH Om7EBqGBbAm7Ok/fb0b6GvbZcs5wz1q7uD+F6yMaRohEwRmOah/IKxJwQry1M6ju 27q1UPpBBjsdnopVKm6wpHPKMXgQftjrJocsVv2DibjKptL40DWYvLqyAyE/6QJk DUSJmcFWJdCFCsvJ7YWh0gFU1nluVIBgnLlcbpv8s1CiquVOiQHBRyQ892v533ij tFNXw5SM9kXg5aloU0YqEWJ0PgWL0WpzuHk1DpKjeX1tXvWcFMaKk9+pRO0ATgKp 6/sqa408PAquj/osziEz7DAt0g== -----END CERTIFICATE-----Generated at Tue Sep 22 11:59:09 2026 by rpki-client