$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/86a3c40a-62b3-3ed2-aeb0-1f6a7dd17e9e.roa File: 86a3c40a-62b3-3ed2-aeb0-1f6a7dd17e9e.roa (raw, json) Hash identifier: C8JZwmXZyOnAEUe9IiUT89ed/H2fp5OHNU9ogAUjV54= Subject key identifier: 54:3B:13:0C:C2:D1:07:94:DE:0D:86:9B:7B:EB:17:38:7D:79:30:F6 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584EAF234D94F0F023B75ECE16C0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/86a3c40a-62b3-3ed2-aeb0-1f6a7dd17e9e.roa Signing time: Fri 31 Jul 2026 18:26:06 +0000 ROA not before: Fri 31 Jul 2026 18:26:06 +0000 ROA not after: Thu 29 Oct 2026 18:26:06 +0000 asID: 81 IP address blocks: 152.45.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:23:4d:94:f0:f0:23:b7:5e:ce:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Jul 31 18:26:06 2026 GMT Not After : Oct 29 18:26:06 2026 GMT Subject: CN=025de813-43f7-4589-a538-41f2c7a50be8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:0c:73:9d:e2:c1:34:a1:c6:3a:38:e4:e9: 3a:aa:3c:21:0f:ca:d7:a9:69:ea:86:7d:8d:c8:cf: fc:00:dc:ff:61:56:de:e6:ef:e1:1b:e5:1c:db:09: 70:db:dc:a4:f1:b7:25:b2:ff:aa:33:af:27:c9:e9: e9:2e:11:30:4d:8e:92:75:69:36:52:f9:74:eb:7e: 04:d4:cd:82:19:a6:e5:fa:f3:b9:3a:bf:72:c9:70: ea:d3:76:b0:c7:51:d8:1a:0e:bd:a9:65:9e:0b:d5: aa:8a:f8:93:9a:cf:b1:d6:df:f9:e9:64:62:da:34: 64:6a:a3:7a:34:10:17:e0:60:34:d3:c6:ef:8f:d9: 6c:8c:a4:12:a1:8a:fa:d8:d2:46:73:6e:7a:17:84: 1e:78:09:0b:14:58:06:bb:9d:5f:dc:08:7b:b2:06: d0:b3:ff:c0:a1:65:0d:22:41:bf:92:57:3d:60:d3: 81:ba:ff:2b:48:dd:04:b0:52:a5:ca:97:f3:0d:fd: ac:80:4b:9d:94:eb:87:dc:aa:bb:cc:c0:25:61:86: 53:c8:35:03:9b:8a:d8:d1:35:b1:9f:42:ab:ea:9e: 02:07:eb:4f:da:de:98:e4:41:bf:d7:4d:16:7b:f6: e7:c9:a8:24:aa:03:d2:9f:26:a3:5a:72:40:55:17: 46:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:3B:13:0C:C2:D1:07:94:DE:0D:86:9B:7B:EB:17:38:7D:79:30:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/86a3c40a-62b3-3ed2-aeb0-1f6a7dd17e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.45.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:71:69:df:39:38:6a:0e:b7:e2:a2:2a:74:c2:bc:7b:f5:70: bd:e5:36:c4:96:85:cb:d8:f2:61:f7:94:ae:c7:46:ee:99:58: 2d:42:64:d4:38:53:c7:61:aa:93:d0:26:fb:29:4e:cf:ee:b7: 1b:48:5f:7a:26:f1:c8:6d:a5:17:6e:74:83:09:3b:ee:4d:04: 93:1b:06:7d:37:0a:d0:c1:b2:4e:eb:94:77:2a:83:0a:4a:f9: f3:9a:fe:76:12:7c:fc:ef:35:86:75:c7:34:cb:c8:0a:4e:c8: 8e:71:7c:9b:43:23:00:24:61:cb:1b:9c:33:c5:1c:80:c5:da: 90:4a:89:e1:33:83:f5:95:9a:a4:11:3e:77:6e:d8:5d:17:90: 0b:6b:8d:27:8d:10:98:a1:2a:49:46:7f:c9:ee:ba:fd:b9:d2: 39:55:4f:43:ab:b7:15:b9:fb:70:d5:fe:77:98:4c:40:90:d2: 7c:5a:08:8b:e7:13:93:a3:fe:b0:1a:02:d1:f3:13:01:f2:25: df:5b:84:09:40:db:38:27:c8:93:67:c3:ab:39:10:6b:d0:bc: 99:6b:bc:5d:93:a5:0f:71:55:c8:31:2b:cb:60:f1:d4:83:90: 88:b5:dd:93:4d:54:58:b7:d2:56:13:5e:72:69:fa:f1:06:96: c5:b5:ad:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6vI02U8PAjt17OFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDczMTE4MjYwNloXDTI2MTAyOTE4MjYwNlowLzEtMCsGA1UEAxMk MDI1ZGU4MTMtNDNmNy00NTg5LWE1MzgtNDFmMmM3YTUwYmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpwMc53iwTShxjo45Ok6qjwhD8rXqWnqhn2N yM/8ANz/YVbe5u/hG+Uc2wlw29yk8bclsv+qM68nyenpLhEwTY6SdWk2Uvl0634E 1M2CGabl+vO5Or9yyXDq03awx1HYGg69qWWeC9WqiviTms+x1t/56WRi2jRkaqN6 NBAX4GA008bvj9lsjKQSoYr62NJGc256F4QeeAkLFFgGu51f3Ah7sgbQs//AoWUN IkG/klc9YNOBuv8rSN0EsFKlypfzDf2sgEudlOuH3Kq7zMAlYYZTyDUDm4rY0TWx n0Kr6p4CB+tP2t6Y5EG/100We/bnyagkqgPSnyajWnJAVRdGKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQ7EwzC0QeU3g2Gm3vrFzh9eTD2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvODZhM2M0MGEtNjJiMy0z ZWQyLWFlYjAtMWY2YTdkZDE3ZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1xad85OGoOt+KiKnTCvHv1cL3lNsSWhcvY8mH3lK7HRu6ZWC1CZNQ4 U8dhqpPQJvspTs/utxtIX3om8chtpRdudIMJO+5NBJMbBn03CtDBsk7rlHcqgwpK +fOa/nYSfPzvNYZ1xzTLyApOyI5xfJtDIwAkYcsbnDPFHIDF2pBKieEzg/WVmqQR Pndu2F0XkAtrjSeNEJihKklGf8nuuv250jlVT0OrtxW5+3DV/neYTECQ0nxaCIvn E5Oj/rAaAtHzEwHyJd9bhAlA2zgnyJNnw6s5EGvQvJlrvF2TpQ9xVcgxK8tg8dSD kIi13ZNNVFi30lYTXnJp+vEGlsW1rXM= -----END CERTIFICATE-----Generated at Sat Aug 22 18:44:16 2026 by rpki-client