$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/7bcd25c1-5d49-3223-9bb6-5b069a84ad64.roa File: 7bcd25c1-5d49-3223-9bb6-5b069a84ad64.roa (raw, json) Hash identifier: BKLJVf87RYm9U3MUlbLDWgAmJcWHc+0PwuuVddYu0dU= Subject key identifier: 56:48:A6:95:09:2B:03:A5:C9:A7:A7:20:09:95:A9:FE:35:0A:F5:D0 Certificate issuer: /CN=0152b1c5-8eb6-4add-99f6-7fa28184dcd1 Certificate serial: 010D0C9F4328584EE6574098A59E9D3E40526040 Authority key identifier: CE:0E:D7:91:DD:17:98:76:12:AE:A9:E6:7D:2A:97:6A:88:79:A4:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/7bcd25c1-5d49-3223-9bb6-5b069a84ad64.roa Signing time: Thu 20 Aug 2026 13:00:12 +0000 ROA not before: Thu 20 Aug 2026 13:00:12 +0000 ROA not after: Wed 18 Nov 2026 14:00:12 +0000 asID: 8075 IP address blocks: 162.252.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e6:57:40:98:a5:9e:9d:3e:40:52:60:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0152b1c5-8eb6-4add-99f6-7fa28184dcd1 Validity Not Before: Aug 20 13:00:12 2026 GMT Not After : Nov 18 14:00:12 2026 GMT Subject: CN=28a9e555-74c8-48c4-b3c5-3625f36172ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ca:d9:12:a0:2d:4c:bf:bc:17:db:f0:50:1c: 5e:f6:92:07:06:22:87:3d:0f:7d:81:2e:89:19:f4: 0b:27:8f:31:0f:5c:5d:76:cd:4e:76:29:a5:ac:69: bc:10:cc:94:9a:46:0f:c9:e1:09:c2:6f:ba:4e:b3: 4a:2e:7d:f9:e6:bb:28:d4:0f:98:30:a5:b2:38:e2: 0b:62:d0:8e:ae:e0:06:7e:cb:e9:f7:08:95:a0:d0: 76:cc:79:cb:14:94:0d:6c:4a:da:58:54:a5:c9:12: 56:af:68:87:0e:91:cd:83:8e:87:1f:12:54:09:2b: 6d:58:87:df:31:15:c3:7c:71:d6:af:57:6e:46:d3: 78:6d:c8:d5:e5:37:23:00:b8:16:d4:33:eb:a2:fc: 8e:07:02:ba:6c:2e:5d:23:c6:de:27:dc:43:61:6b: e2:37:2c:df:c4:af:3b:42:a7:f7:35:c3:b5:c7:a7: 4e:29:52:a4:68:ba:9e:64:6d:5a:cb:46:f7:d6:d9: be:57:c8:0b:93:19:6a:5c:40:30:05:29:ee:0a:c8: 8a:24:83:b2:3f:8a:c6:bd:be:b3:9c:45:dd:a1:d6: 84:fb:80:a3:4c:c3:a3:69:17:75:3d:0f:dd:6b:b6: 1f:4b:37:3a:a1:f6:dd:87:1b:1a:d4:ff:9e:b0:e5: e1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:48:A6:95:09:2B:03:A5:C9:A7:A7:20:09:95:A9:FE:35:0A:F5:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/7bcd25c1-5d49-3223-9bb6-5b069a84ad64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.crl X509v3 Authority Key Identifier: keyid:CE:0E:D7:91:DD:17:98:76:12:AE:A9:E6:7D:2A:97:6A:88:79:A4:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.cer sbgp-ipAddrBlock: critical IPv4: 162.252.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:05:8f:8c:1d:81:61:36:4d:8a:d9:c2:06:22:66:d9:1c:0f: 72:fc:02:5a:1a:bb:bb:72:18:67:c5:3c:cc:c7:64:06:e9:a0: 04:dc:83:0f:4a:d5:b0:c0:e0:ab:d0:64:00:8d:82:e4:ed:7c: 36:8f:c0:6d:bf:05:e9:75:6d:be:84:70:5e:40:95:eb:4d:1f: c3:a1:dd:21:93:33:6c:23:f7:60:87:5b:22:a1:80:ed:3d:52: 20:44:ec:09:5f:ce:27:42:0c:23:e3:b3:e8:08:96:79:1e:01: 04:86:6f:cb:dd:08:92:89:6f:b9:ee:53:19:65:8d:42:73:1d: f6:d5:44:ed:34:ac:4a:d6:fb:7f:86:bd:5d:12:b6:dc:81:ef: 51:ae:35:3f:98:af:05:96:20:df:61:91:27:44:f8:f9:e2:1b: 43:48:45:c5:1e:e7:9c:aa:ed:1f:e9:60:89:42:25:9e:bf:6c: dd:19:b2:d2:80:a1:5e:7a:46:4e:46:78:72:8b:80:ad:c4:2b: cf:7d:ca:e3:d8:cc:86:dd:11:ea:c3:82:fb:4c:e5:74:34:45: 69:ad:57:03:d5:57:81:ec:df:55:06:f6:03:4d:0f:81:57:cd: dd:75:2f:3e:a9:58:87:b1:fc:24:cb:e3:ce:a6:b7:f7:bc:62: f8:32:3d:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7mV0CYpZ6dPkBSYEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1MmIxYzUtOGViNi00YWRkLTk5ZjYtN2ZhMjgxODRk Y2QxMB4XDTI2MDgyMDEzMDAxMloXDTI2MTExODE0MDAxMlowLzEtMCsGA1UEAxMk MjhhOWU1NTUtNzRjOC00OGM0LWIzYzUtMzYyNWYzNjE3MmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8rZEqAtTL+8F9vwUBxe9pIHBiKHPQ99gS6J GfQLJ48xD1xdds1OdimlrGm8EMyUmkYPyeEJwm+6TrNKLn355rso1A+YMKWyOOIL YtCOruAGfsvp9wiVoNB2zHnLFJQNbEraWFSlyRJWr2iHDpHNg46HHxJUCSttWIff MRXDfHHWr1duRtN4bcjV5TcjALgW1DProvyOBwK6bC5dI8beJ9xDYWviNyzfxK87 Qqf3NcO1x6dOKVKkaLqeZG1ay0b31tm+V8gLkxlqXEAwBSnuCsiKJIOyP4rGvb6z nEXdodaE+4CjTMOjaRd1PQ/da7YfSzc6ofbdhxsa1P+esOXh7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZIppUJKwOlyaenIAmVqf41CvXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMTUy YjFjNS04ZWI2LTRhZGQtOTlmNi03ZmEyODE4NGRjZDEvN2JjZDI1YzEtNWQ0OS0z MjIzLTliYjYtNWIwNjlhODRhZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDE1MmIxYzUtOGViNi00YWRkLTk5 ZjYtN2ZhMjgxODRkY2QxLzAxNTJiMWM1LThlYjYtNGFkZC05OWY2LTdmYTI4MTg0 ZGNkMS5jcmwwHwYDVR0jBBgwFoAUzg7Xkd0XmHYSrqnmfSqXaoh5pMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMTUyYjFjNS04ZWI2LTRhZGQtOTlmNi03ZmEy ODE4NGRjZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovwrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYFj4wdgWE2TYrZwgYiZtkcD3L8Aloau7tyGGfFPMzHZAbpoATcgw9K 1bDA4KvQZACNguTtfDaPwG2/Bel1bb6EcF5AletNH8Oh3SGTM2wj92CHWyKhgO09 UiBE7AlfzidCDCPjs+gIlnkeAQSGb8vdCJKJb7nuUxlljUJzHfbVRO00rErW+3+G vV0SttyB71GuNT+YrwWWIN9hkSdE+PniG0NIRcUe55yq7R/pYIlCJZ6/bN0ZstKA oV56Rk5GeHKLgK3EK899yuPYzIbdEerDgvtM5XQ0RWmtVwPVV4Hs31UG9gNND4FX zd11Lz6pWIex/CTL486mt/e8YvgyPfk= -----END CERTIFICATE-----Generated at Sat Sep 5 00:23:47 2026 by rpki-client