$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/86a3c40a-62b3-3ed2-aeb0-1f6a7dd17e9e.roa File: 86a3c40a-62b3-3ed2-aeb0-1f6a7dd17e9e.roa (raw, json) Hash identifier: K3MMe8MjcWHIpZyccuWvOhYStlEn6oXUcQddoRIIleQ= Subject key identifier: D2:F5:0F:B1:B8:78:A8:F6:AC:35:05:18:B1:88:9D:28:65:16:D4:D1 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584F51D29BEB802328A58E6A3880 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/86a3c40a-62b3-3ed2-aeb0-1f6a7dd17e9e.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 81 IP address blocks: 152.45.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:9b:eb:80:23:28:a5:8e:6a:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=162efa9e-0ca1-49c0-8988-c7f7b1df90f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c4:e9:c9:d3:ab:e4:0f:0b:e8:17:90:e2:b3: c8:a3:98:6a:63:86:56:36:ee:b0:17:0d:ae:95:72: f8:4c:1a:b9:4d:4b:8f:be:4e:7c:2b:79:85:65:a2: ec:81:0c:dc:dd:da:34:b6:61:29:3d:c9:35:fa:98: f4:5a:f4:16:93:0e:77:16:08:88:ec:55:d4:f0:09: 65:34:fc:a9:47:9b:45:49:a1:46:0a:03:99:af:fa: 4b:50:78:99:ac:55:1a:5c:39:c6:a7:20:1c:4b:43: 5b:bd:7c:30:dc:49:3b:c7:21:3c:11:df:2b:04:ae: c7:24:76:d2:23:1b:d1:ae:a9:a1:82:84:7a:4b:a0: 84:89:67:84:1c:b9:2b:90:f6:42:2c:1d:46:18:b6: a1:52:e3:2d:64:9c:57:ae:52:34:df:2c:48:78:50: 19:3a:c8:e1:0f:94:55:13:08:f8:77:55:2f:38:ff: fc:e6:2a:54:3f:0c:60:eb:c2:f8:7e:9c:7f:45:dd: 24:63:f5:17:49:d2:cd:f9:45:45:f7:19:07:e0:40: 7e:4b:fc:8c:8f:35:9f:92:02:21:31:4f:6d:32:e4: b5:ac:8a:ea:cc:a9:4c:4a:3d:2c:1a:76:35:71:e6: 62:6c:4f:10:05:ac:4e:9b:69:3c:2e:82:17:87:14: e0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F5:0F:B1:B8:78:A8:F6:AC:35:05:18:B1:88:9D:28:65:16:D4:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/86a3c40a-62b3-3ed2-aeb0-1f6a7dd17e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.45.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:9f:24:8a:1d:6b:1b:a0:1d:72:a2:e0:49:93:94:10:18:dd: c5:19:11:0b:9a:e0:a7:ec:7e:51:50:be:c2:18:b2:37:7e:b9: b6:1c:1c:01:aa:4b:f8:97:da:30:3c:eb:0c:18:97:56:e6:9d: 16:43:5c:c8:37:04:ce:1c:f6:14:dd:44:6b:9a:58:6b:ff:11: f2:73:66:91:39:a6:39:c7:18:b1:b4:36:41:e4:14:3a:66:6b: 79:29:61:cd:b5:1e:a6:13:a4:d7:8c:f8:25:32:b7:e8:b8:9d: 95:d8:22:47:fb:8e:24:ba:6c:3a:3a:bd:05:37:91:06:f3:d0: 55:bf:10:94:e7:1f:fe:8d:b1:4b:5d:1e:ff:58:97:fc:13:16: d9:c0:8b:7b:94:74:aa:c8:48:64:c7:07:0c:a7:d9:ac:bf:96: af:ef:92:4a:21:27:f8:a6:45:fb:50:3e:9c:dc:f7:32:e0:11: 16:58:a7:97:19:7e:9c:37:b8:d3:d8:4a:12:c9:59:3f:41:ed: 51:b9:fa:9f:36:95:aa:dc:d5:22:f3:0e:ef:1f:0b:06:54:e9: 6b:0f:4c:a8:75:bb:61:7f:df:a4:29:af:21:e0:12:aa:e3:89: e2:0c:80:95:57:f6:0d:9d:f7:51:f1:26:50:38:43:5b:c8:db: cf:11:69:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0pvrgCMopY5qOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk MTYyZWZhOWUtMGNhMS00OWMwLTg5ODgtYzdmN2IxZGY5MGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsTpydOr5A8L6BeQ4rPIo5hqY4ZWNu6wFw2u lXL4TBq5TUuPvk58K3mFZaLsgQzc3do0tmEpPck1+pj0WvQWkw53FgiI7FXU8All NPypR5tFSaFGCgOZr/pLUHiZrFUaXDnGpyAcS0NbvXww3Ek7xyE8Ed8rBK7HJHbS IxvRrqmhgoR6S6CEiWeEHLkrkPZCLB1GGLahUuMtZJxXrlI03yxIeFAZOsjhD5RV Ewj4d1UvOP/85ipUPwxg68L4fpx/Rd0kY/UXSdLN+UVF9xkH4EB+S/yMjzWfkgIh MU9tMuS1rIrqzKlMSj0sGnY1ceZibE8QBaxOm2k8LoIXhxTgRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNL1D7G4eKj2rDUFGLGInShlFtTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvODZhM2M0MGEtNjJiMy0z ZWQyLWFlYjAtMWY2YTdkZDE3ZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqfJIodaxugHXKi4EmTlBAY3cUZEQua4KfsflFQvsIYsjd+ubYcHAGq S/iX2jA86wwYl1bmnRZDXMg3BM4c9hTdRGuaWGv/EfJzZpE5pjnHGLG0NkHkFDpm a3kpYc21HqYTpNeM+CUyt+i4nZXYIkf7jiS6bDo6vQU3kQbz0FW/EJTnH/6NsUtd Hv9Yl/wTFtnAi3uUdKrISGTHBwyn2ay/lq/vkkohJ/imRftQPpzc9zLgERZYp5cZ fpw3uNPYShLJWT9B7VG5+p82larc1SLzDu8fCwZU6WsPTKh1u2F/36QpryHgEqrj ieIMgJVX9g2d91HxJlA4Q1vI288RaW0= -----END CERTIFICATE-----Generated at Thu Oct 8 23:34:49 2026 by rpki-client