$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/8943ba76-2440-3676-bc94-655519f6b1ba.roa File: 8943ba76-2440-3676-bc94-655519f6b1ba.roa (raw, json) Hash identifier: 95iCQ6aSmC0BtGVDfT81yQCtjmvvaWG8JOGxe4OskmM= Subject key identifier: AA:46:7D:37:D5:6E:E8:87:75:48:61:C4:64:DE:06:44:C3:EE:24:14 Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436 Certificate serial: 010D0C9F4328584F497358801FC5B7C68E0A43C0 Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/8943ba76-2440-3676-bc94-655519f6b1ba.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 10384 IP address blocks: 152.85.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 17 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:58:80:1f:c5:b7:c6:8e:0a:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b51393-7784-45a0-9621-168719782436 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cc203dc8-a97e-47f1-a99e-83e1f931115e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:58:0c:d4:b2:55:a5:9a:dc:6b:b0:5a:5c:41: 6f:bb:bb:f3:32:5c:61:a7:a0:8a:e3:fc:0f:3e:ac: 85:a5:59:be:ba:5a:d1:db:ae:15:f2:70:47:b8:36: ec:87:66:70:d8:11:4d:8e:9c:e0:bf:38:e2:5c:45: e0:9c:3c:88:9d:4c:fd:70:da:44:16:8a:00:b6:13: 9f:27:88:02:34:3f:23:38:d8:27:2c:29:a8:98:2e: d0:f3:82:aa:e9:66:72:7b:2f:9b:fc:0b:96:be:e0: e9:f3:2a:98:3e:53:0e:5f:81:0b:8e:d9:a3:18:ea: 2d:1b:35:22:1e:f4:5e:75:d0:a4:d6:1a:cc:47:82: 79:04:23:23:74:63:4a:42:6f:00:6f:3d:16:13:69: 67:8c:9e:bb:22:0b:52:2c:73:9d:cd:a0:62:7a:67: f0:e3:77:22:a2:cb:e4:7b:1e:e4:c2:c7:8e:b5:3b: 64:0a:68:d4:d3:de:52:6c:4a:af:d7:9c:56:21:e1: ab:9f:c8:7d:e8:29:5d:c7:51:99:16:00:a7:af:cc: a9:bb:cb:53:1b:e6:73:2f:55:40:ba:6e:0b:3d:c2: 03:16:6f:89:29:da:37:d9:48:14:2d:43:64:56:08: b4:e3:25:70:1e:57:78:53:0f:de:a8:66:d9:8e:5b: af:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:46:7D:37:D5:6E:E8:87:75:48:61:C4:64:DE:06:44:C3:EE:24:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/8943ba76-2440-3676-bc94-655519f6b1ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl X509v3 Authority Key Identifier: keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer sbgp-ipAddrBlock: critical IPv4: 152.85.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:2b:89:c9:95:60:12:4a:0d:0d:a5:a5:e0:c1:04:1d:7d:31: 25:cb:c4:d6:a8:43:4e:27:0b:43:c8:77:52:8e:bb:c8:1b:a3: db:9e:cc:81:ad:cd:29:be:8d:73:6e:b1:6d:fb:5d:c2:77:32: a7:1f:a3:a8:d7:b4:9e:2b:da:13:2c:48:c4:ee:a8:17:15:65: 4a:cc:36:27:e3:af:cd:d6:66:e9:ac:dd:1d:35:ac:c8:75:87: d9:dc:69:68:55:c6:95:9c:cb:bb:2a:d4:41:43:f9:f4:10:7e: 12:17:c6:43:9c:4a:8c:6f:c7:0f:be:fc:f5:73:19:c0:96:8a: 43:6a:20:e3:ef:2e:0e:3e:41:dd:f4:4e:c9:98:1e:ef:3b:b8: 59:3f:1a:60:fd:ae:b5:e7:3f:e1:05:71:49:e7:d5:34:c6:aa: fa:d1:2a:a3:5e:6c:c7:0a:d0:02:ce:54:39:28:31:b8:bf:9c: 8f:85:17:1e:46:83:25:9b:1a:2e:66:c0:14:dc:28:20:e3:6f: 78:1f:b2:e7:e1:be:d3:9d:81:2f:16:8c:d6:80:a9:4a:28:fc: ee:3f:77:72:e5:75:cc:80:df:c8:17:4f:02:5b:88:8b:ac:7b: d8:3f:c7:9e:97:aa:f9:b9:96:be:22:f6:e7:a0:c5:fb:c4:a3: 0b:d5:c6:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc1iAH8W3xo4KQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTEzOTMtNzc4NC00NWEwLTk2MjEtMTY4NzE5Nzgy NDM2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2MyMDNkYzgtYTk3ZS00N2YxLWE5OWUtODNlMWY5MzExMTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVgM1LJVpZrca7BaXEFvu7vzMlxhp6CK4/wP PqyFpVm+ulrR264V8nBHuDbsh2Zw2BFNjpzgvzjiXEXgnDyInUz9cNpEFooAthOf J4gCND8jONgnLCmomC7Q84Kq6WZyey+b/AuWvuDp8yqYPlMOX4ELjtmjGOotGzUi HvReddCk1hrMR4J5BCMjdGNKQm8Abz0WE2lnjJ67IgtSLHOdzaBiemfw43ciosvk ex7kwseOtTtkCmjU095SbEqv15xWIeGrn8h96Cldx1GZFgCnr8ypu8tTG+ZzL1VA um4LPcIDFm+JKdo32UgULUNkVgi04yVwHld4Uw/eqGbZjluvhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpGfTfVbuiHdUhhxGTeBkTD7iQUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1 MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3ODI0MzYvODk0M2JhNzYtMjQ0MC0z Njc2LWJjOTQtNjU1NTE5ZjZiMWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNiNTEzOTMtNzc4NC00NWEwLTk2 MjEtMTY4NzE5NzgyNDM2LzAzYjUxMzkzLTc3ODQtNDVhMC05NjIxLTE2ODcxOTc4 MjQzNi5jcmwwHwYDVR0jBBgwFoAU7JlLmZuUJgV0wzFS7LnS+o4/BSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3 MTk3ODI0MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmFUqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQricmVYBJKDQ2lpeDBBB19MSXLxNaoQ04nC0PId1KOu8gbo9uezIGt zSm+jXNusW37XcJ3Mqcfo6jXtJ4r2hMsSMTuqBcVZUrMNifjr83WZums3R01rMh1 h9ncaWhVxpWcy7sq1EFD+fQQfhIXxkOcSoxvxw++/PVzGcCWikNqIOPvLg4+Qd30 TsmYHu87uFk/GmD9rrXnP+EFcUnn1TTGqvrRKqNebMcK0ALOVDkoMbi/nI+FFx5G gyWbGi5mwBTcKCDjb3gfsufhvtOdgS8WjNaAqUoo/O4/d3LldcyA38gXTwJbiIus e9g/x56Xqvm5lr4i9uegxfvEowvVxrw= -----END CERTIFICATE-----Generated at Fri Oct 16 13:07:40 2026 by rpki-client