$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/08424691-e488-3b93-9a8d-564530dbb008.roa File: 08424691-e488-3b93-9a8d-564530dbb008.roa (raw, json) Hash identifier: ZzXK/dPpdqTHqhvEkH0kUokn81O3lGm2+UkRMNEAyNw= Subject key identifier: CA:61:EA:08:1A:69:5C:11:96:81:0A:07:18:25:05:A5:50:9A:A2:5C Certificate issuer: /CN=0152b1c5-8eb6-4add-99f6-7fa28184dcd1 Certificate serial: 010D0C9F4328584F1F924B4056B8F00B21C96400 Authority key identifier: CE:0E:D7:91:DD:17:98:76:12:AE:A9:E6:7D:2A:97:6A:88:79:A4:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/08424691-e488-3b93-9a8d-564530dbb008.roa Signing time: Thu 10 Sep 2026 01:00:12 +0000 ROA not before: Thu 10 Sep 2026 01:00:12 +0000 ROA not after: Wed 09 Dec 2026 02:00:12 +0000 asID: 8075 IP address blocks: 162.252.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:92:4b:40:56:b8:f0:0b:21:c9:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0152b1c5-8eb6-4add-99f6-7fa28184dcd1 Validity Not Before: Sep 10 01:00:12 2026 GMT Not After : Dec 9 02:00:12 2026 GMT Subject: CN=9b8a8cc4-f98b-441f-a94f-38e987cef2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:39:3e:d3:af:73:c0:cd:22:0f:fd:fb:aa:ba: c3:06:6c:af:89:d3:f3:28:d4:1b:5d:96:eb:1e:9d: 43:c1:14:e1:ac:69:ce:56:f3:c3:0a:35:9a:e6:d5: 09:1d:9b:10:25:35:a3:07:bb:c4:77:69:ab:9e:23: a4:f6:c5:20:49:71:36:d3:0a:32:f0:19:47:3f:65: 58:6e:15:df:f0:2c:a1:99:40:13:d3:65:d7:9e:a2: 0d:c7:22:4d:f5:5a:38:a9:81:2c:d2:84:e9:42:84: 29:65:6c:bd:9c:a5:bb:a7:7f:2e:3b:4a:fa:26:9c: b8:e6:6e:78:7d:4d:01:ee:b0:a6:46:7f:72:e2:42: db:87:2a:8d:ea:14:b7:ad:5b:9a:1d:a0:75:a6:3b: d9:55:5e:dd:ed:32:48:0e:fa:01:63:5d:ad:a3:d6: b4:6d:5e:76:84:19:c3:37:43:de:e3:aa:57:97:d0: 9a:47:56:29:ae:bf:34:e5:64:e6:76:15:91:74:56: b8:cc:94:bd:bf:3a:2e:46:0d:21:12:7f:ef:ae:f7: 32:65:64:9b:2f:e3:c0:af:03:16:cc:a2:08:e4:cb: a7:bd:9a:89:e6:ce:30:e0:82:8a:37:ee:8d:c9:ce: 7f:b1:67:e6:dc:2f:4d:8f:33:b3:bd:59:09:2c:69: 90:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:61:EA:08:1A:69:5C:11:96:81:0A:07:18:25:05:A5:50:9A:A2:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/08424691-e488-3b93-9a8d-564530dbb008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.crl X509v3 Authority Key Identifier: keyid:CE:0E:D7:91:DD:17:98:76:12:AE:A9:E6:7D:2A:97:6A:88:79:A4:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0152b1c5-8eb6-4add-99f6-7fa28184dcd1.cer sbgp-ipAddrBlock: critical IPv4: 162.252.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:7e:3b:bd:47:e0:38:0c:cf:7d:b8:3d:35:cb:0b:46:b8:4e: d2:f0:90:0c:15:0e:cb:e4:3b:53:1c:2e:20:3c:94:7b:21:77: 46:69:26:73:91:1b:7a:ed:8b:cf:d8:55:59:3f:bd:f8:91:a5: f6:ff:73:b0:96:9a:0d:46:ec:7a:79:70:0d:da:5d:45:0e:8f: d6:21:9d:b6:67:81:ba:e1:b4:ab:67:39:ad:7b:49:78:a3:8d: 7c:6c:aa:9b:15:a1:39:81:88:d7:59:73:63:f2:1b:49:24:d0: 5c:07:8d:c0:e9:78:86:d2:6b:ef:5c:6a:3d:30:1b:f4:7a:8c: 67:2f:f8:f4:15:3f:d8:e7:68:07:ec:fd:55:1b:06:5a:ea:59: 7b:c7:a2:e3:56:9a:ac:64:50:c9:a0:eb:7a:1f:14:d7:45:1d: dc:c0:13:0b:4c:da:35:31:88:39:6b:d9:ea:c7:2a:63:b3:f6: 38:fb:95:dc:8b:b1:82:e4:79:3a:b1:0e:cb:fa:28:2c:5c:10: 01:29:60:86:5d:ac:cc:4f:cb:cc:3f:a8:39:a3:f6:5f:80:68: 29:58:02:e9:fc:4a:84:fd:2b:a2:ef:57:07:32:a7:2d:d4:bd: 4a:7e:b6:7c:d9:fb:71:92:99:b7:ed:35:dc:b8:b7:5f:b6:39: 51:a9:da:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8fkktAVrjwCyHJZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDE1MmIxYzUtOGViNi00YWRkLTk5ZjYtN2ZhMjgxODRk Y2QxMB4XDTI2MDkxMDAxMDAxMloXDTI2MTIwOTAyMDAxMlowLzEtMCsGA1UEAxMk OWI4YThjYzQtZjk4Yi00NDFmLWE5NGYtMzhlOTg3Y2VmMmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTk+069zwM0iD/37qrrDBmyvidPzKNQbXZbr Hp1DwRThrGnOVvPDCjWa5tUJHZsQJTWjB7vEd2mrniOk9sUgSXE20woy8BlHP2VY bhXf8CyhmUAT02XXnqINxyJN9Vo4qYEs0oTpQoQpZWy9nKW7p38uO0r6Jpy45m54 fU0B7rCmRn9y4kLbhyqN6hS3rVuaHaB1pjvZVV7d7TJIDvoBY12to9a0bV52hBnD N0Pe46pXl9CaR1Yprr805WTmdhWRdFa4zJS9vzouRg0hEn/vrvcyZWSbL+PArwMW zKII5MunvZqJ5s4w4IKKN+6Nyc5/sWfm3C9NjzOzvVkJLGmQKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMph6ggaaVwRloEKBxglBaVQmqJcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMTUy YjFjNS04ZWI2LTRhZGQtOTlmNi03ZmEyODE4NGRjZDEvMDg0MjQ2OTEtZTQ4OC0z YjkzLTlhOGQtNTY0NTMwZGJiMDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDE1MmIxYzUtOGViNi00YWRkLTk5 ZjYtN2ZhMjgxODRkY2QxLzAxNTJiMWM1LThlYjYtNGFkZC05OWY2LTdmYTI4MTg0 ZGNkMS5jcmwwHwYDVR0jBBgwFoAUzg7Xkd0XmHYSrqnmfSqXaoh5pMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wMTUyYjFjNS04ZWI2LTRhZGQtOTlmNi03ZmEy ODE4NGRjZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovwqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJB+O71H4DgMz324PTXLC0a4TtLwkAwVDsvkO1McLiA8lHshd0ZpJnOR G3rti8/YVVk/vfiRpfb/c7CWmg1G7Hp5cA3aXUUOj9YhnbZngbrhtKtnOa17SXij jXxsqpsVoTmBiNdZc2PyG0kk0FwHjcDpeIbSa+9caj0wG/R6jGcv+PQVP9jnaAfs /VUbBlrqWXvHouNWmqxkUMmg63ofFNdFHdzAEwtM2jUxiDlr2erHKmOz9jj7ldyL sYLkeTqxDsv6KCxcEAEpYIZdrMxPy8w/qDmj9l+AaClYAun8SoT9K6LvVwcypy3U vUp+tnzZ+3GSmbftNdy4t1+2OVGp2o0= -----END CERTIFICATE-----Generated at Tue Sep 22 05:42:23 2026 by rpki-client