$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/30a8bdac-312e-345b-a999-1cd6f377893b.roa File: 30a8bdac-312e-345b-a999-1cd6f377893b.roa (raw, json) Hash identifier: X22I6Zn6cGPJ1cUoOX75jf3aa+FPwjX2ULaDKMsRaSc= Subject key identifier: A4:1A:59:21:73:7C:65:06:9C:4F:E3:63:79:75:76:4E:B1:EF:F0:72 Certificate issuer: /CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4 Certificate serial: 010D0C9F4328584B515FF08F10ED772C38C59700 Authority key identifier: 2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/30a8bdac-312e-345b-a999-1cd6f377893b.roa Signing time: Fri 26 Sep 2025 02:01:29 +0000 ROA not before: Fri 26 Sep 2025 02:01:29 +0000 ROA not after: Thu 25 Dec 2025 03:01:29 +0000 asID: 21507 IP address blocks: 153.56.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:5f:f0:8f:10:ed:77:2c:38:c5:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4 Validity Not Before: Sep 26 02:01:29 2025 GMT Not After : Dec 25 03:01:29 2025 GMT Subject: CN=b1317fc9-356d-44dd-88e4-8905af311530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:35:ae:4f:88:a2:7f:39:ce:2d:70:01:2c:e5: 18:f4:93:64:ae:12:1a:75:9e:83:e1:ab:38:e7:d5: 07:9e:7b:36:4b:04:f2:9c:fd:10:96:b8:35:bc:f1: dd:d6:5e:db:08:f7:5f:4d:94:08:87:65:c2:c8:1c: 8f:56:53:ed:37:92:b0:4a:c8:44:d5:08:c5:78:b0: 77:09:a3:f1:46:8f:f8:ec:7e:a1:ec:c9:83:cd:79: fd:82:c1:55:47:35:8b:17:36:98:b0:d1:7d:aa:78: ed:be:c7:48:64:2c:25:ca:57:ca:f6:aa:23:43:1c: c2:b9:c7:ca:09:99:54:5c:5a:e6:f2:d1:ca:c3:5d: 5f:ed:d3:90:ce:1e:0b:7a:9c:5b:81:f3:45:fb:6d: 78:62:83:17:4f:b1:f5:78:9a:17:de:d5:7a:ad:79: 05:b9:ff:8c:1d:d3:35:be:33:b2:62:3b:82:79:8b: 0f:4e:f2:bc:af:93:7e:ab:5b:48:96:cf:d7:26:f1: d2:24:52:f8:1d:a5:bd:0a:39:6d:f6:49:cb:0c:a7: c9:0b:7e:da:9a:41:37:69:bc:f9:aa:ff:8d:47:db: 3f:fa:b0:39:49:87:2f:07:c8:92:68:a9:8f:e8:56: 36:4c:94:06:73:7b:15:2b:58:93:b1:ea:b1:0c:63: b9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1A:59:21:73:7C:65:06:9C:4F:E3:63:79:75:76:4E:B1:EF:F0:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/30a8bdac-312e-345b-a999-1cd6f377893b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl X509v3 Authority Key Identifier: keyid:2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer sbgp-ipAddrBlock: critical IPv4: 153.56.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:c0:44:66:f8:b7:c6:c6:c7:67:d5:71:eb:17:a6:5a:de:b3: 74:9e:b8:81:4c:01:ff:6c:60:11:b7:bf:33:a7:da:62:3a:00: ff:b6:26:18:3e:a9:37:e1:5b:60:c1:84:5e:b1:c5:9e:f8:b6: ae:a7:45:17:dc:5f:8c:3e:6c:59:3e:c6:59:76:9f:ed:c5:bf: b2:aa:77:af:0b:1d:3b:24:b1:3d:49:ba:77:6a:05:8f:61:7a: 09:b2:52:df:8b:80:16:b7:2f:fc:f4:0d:c5:6e:f5:b2:fc:2e: 69:8c:fe:02:4f:f0:1a:87:91:a1:16:39:dd:64:0a:55:2c:10: 98:95:8f:53:3a:68:2a:d3:44:8b:f0:b0:72:60:2e:c5:47:13: 83:ed:5f:55:d2:40:eb:94:80:d0:a6:06:9d:13:b5:90:9c:59: 9c:01:34:19:6a:65:45:c5:61:45:44:fe:43:f5:55:ae:9e:69: c7:c8:4b:72:f3:f2:29:17:ce:d5:c4:c7:c7:84:79:c9:52:da: 89:1e:38:f9:be:e2:ee:78:3d:c9:6d:85:58:fc:29:52:af:63: 02:e2:9a:53:19:df:3b:93:fd:77:d7:54:f0:df:b7:2a:ee:a7: c9:8e:5f:26:5c:f0:88:3d:2b:e5:f1:6e:9d:17:57:77:fd:11: 29:eb:a1:f5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtRX/CPEO13LDjFlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzI1ZjRkOGUtMjIwZC00YjIxLWE4ZjgtNTdlZDkxYmE4 NmU0MB4XDTI1MDkyNjAyMDEyOVoXDTI1MTIyNTAzMDEyOVowLzEtMCsGA1UEAxMk YjEzMTdmYzktMzU2ZC00NGRkLTg4ZTQtODkwNWFmMzExNTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzWuT4iifznOLXABLOUY9JNkrhIadZ6D4as4 59UHnns2SwTynP0Qlrg1vPHd1l7bCPdfTZQIh2XCyByPVlPtN5KwSshE1QjFeLB3 CaPxRo/47H6h7MmDzXn9gsFVRzWLFzaYsNF9qnjtvsdIZCwlylfK9qojQxzCucfK CZlUXFrm8tHKw11f7dOQzh4LepxbgfNF+214YoMXT7H1eJoX3tV6rXkFuf+MHdM1 vjOyYjuCeYsPTvK8r5N+q1tIls/XJvHSJFL4HaW9Cjlt9knLDKfJC37amkE3abz5 qv+NR9s/+rA5SYcvB8iSaKmP6FY2TJQGc3sVK1iTseqxDGO5nQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKQaWSFzfGUGnE/jY3l1dk6x7/ByMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMjVm NGQ4ZS0yMjBkLTRiMjEtYThmOC01N2VkOTFiYTg2ZTQvMzBhOGJkYWMtMzEyZS0z NDViLWE5OTktMWNkNmYzNzc4OTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzI1ZjRkOGUtMjIwZC00YjIxLWE4 ZjgtNTdlZDkxYmE4NmU0L2MyNWY0ZDhlLTIyMGQtNGIyMS1hOGY4LTU3ZWQ5MWJh ODZlNC5jcmwwHwYDVR0jBBgwFoAULMAHHFwzZ6QTgXk+lrcV2bN7LlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMjVmNGQ4ZS0yMjBkLTRiMjEtYThmOC01N2Vk OTFiYTg2ZTQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmTgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEcBEZvi3xsbHZ9Vx6xemWt6zdJ64gUwB/2xgEbe/M6faYjoA/7YmGD6p N+FbYMGEXrHFnvi2rqdFF9xfjD5sWT7GWXaf7cW/sqp3rwsdOySxPUm6d2oFj2F6 CbJS34uAFrcv/PQNxW71svwuaYz+Ak/wGoeRoRY53WQKVSwQmJWPUzpoKtNEi/Cw cmAuxUcTg+1fVdJA65SA0KYGnRO1kJxZnAE0GWplRcVhRUT+Q/VVrp5px8hLcvPy KRfO1cTHx4R5yVLaiR44+b7i7ng9yW2FWPwpUq9jAuKaUxnfO5P9d9dU8N+3Ku6n yY5fJlzwiD0r5fFunRdXd/0RKeuh9Q== -----END CERTIFICATE-----Generated at Thu Oct 9 03:30:08 2025 by rpki-client