$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/1a9639da-a216-3ece-b327-c09a057856a3.roa File: 1a9639da-a216-3ece-b327-c09a057856a3.roa (raw, json) Hash identifier: 0WxYByBYlMQIIh5LMA+Hf1T8bIqqiU6tmGI2XtpdK7I= Subject key identifier: 5B:27:3A:F8:01:19:5C:09:2C:BD:14:A6:A4:2F:C6:68:14:38:B2:BB Certificate issuer: /CN=628d865a-2d19-4af1-984a-6c443304d9f0 Certificate serial: 010D0C9F4328584B742751F82666B4E133022480 Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/1a9639da-a216-3ece-b327-c09a057856a3.roa Signing time: Wed 08 Oct 2025 13:00:37 +0000 ROA not before: Wed 08 Oct 2025 13:00:37 +0000 ROA not after: Tue 06 Jan 2026 14:00:37 +0000 asID: 81 IP address blocks: 152.30.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:51:f8:26:66:b4:e1:33:02:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0 Validity Not Before: Oct 8 13:00:37 2025 GMT Not After : Jan 6 14:00:37 2026 GMT Subject: CN=f510df8e-0d7d-45e1-ac48-5eefb764b6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:25:d3:a0:3d:c1:19:db:05:17:90:08:2a:b4: 36:9b:8d:18:45:5d:f2:72:81:48:bc:fc:0c:96:1f: ff:88:83:13:af:18:30:1e:a9:d1:ac:7b:fe:30:34: d7:f1:56:8a:af:12:77:3f:dc:d8:d4:94:3a:55:ab: d3:82:e8:b7:0f:c5:aa:d4:fb:a2:6f:a6:c9:ec:ae: 28:32:6e:2d:90:da:2d:71:ba:b2:58:73:49:c8:30: df:98:14:fe:79:d5:c0:53:e7:9e:7f:b5:c6:79:34: cd:84:5e:2a:60:64:47:2f:27:27:94:40:ff:1f:05: 89:d9:75:5f:88:06:5a:c1:f8:ef:76:b5:68:49:89: de:85:fe:9f:59:83:04:40:df:75:12:89:65:a5:53: 2c:b9:cd:e0:70:fc:25:4e:37:c5:21:d2:8b:2d:a6: 3a:53:74:66:4a:4e:61:56:32:56:25:c7:33:ec:87: d2:1a:51:fb:e8:7c:26:81:53:cc:db:e6:e5:0f:c3: ae:be:64:f2:6c:d0:19:29:9c:9f:4b:d7:2c:68:50: 12:e9:b2:20:84:0e:3f:02:e5:b3:af:0b:21:48:15: e8:99:77:83:11:98:32:03:1d:3a:85:37:39:39:23: d5:47:2e:98:64:21:d3:52:b9:bb:63:4b:a3:fb:5a: ec:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:27:3A:F8:01:19:5C:09:2C:BD:14:A6:A4:2F:C6:68:14:38:B2:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/1a9639da-a216-3ece-b327-c09a057856a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl X509v3 Authority Key Identifier: keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer sbgp-ipAddrBlock: critical IPv4: 152.30.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:fc:32:bf:fd:52:10:63:79:7b:2b:9b:4f:89:33:96:a8:27: 15:58:bf:fd:26:72:a0:22:97:62:14:09:76:47:5f:66:d2:fd: 89:f0:e6:1a:40:0e:1a:10:0b:a4:b4:4f:9a:dd:f6:af:c4:26: bc:e9:e1:b4:4f:f9:bc:f7:63:8c:3f:e2:46:a4:eb:d3:1f:da: f2:9b:69:f5:a3:bc:24:6c:dd:9d:b6:ef:26:93:1c:f8:8b:82: 7f:21:51:a2:21:d9:13:3e:57:3c:2c:a8:e9:65:97:3a:74:e7: 88:c1:cb:fe:6e:68:92:4f:3d:20:c1:e7:63:de:8a:68:55:b2: 21:17:12:c4:e6:fb:ec:98:45:de:6a:55:da:bf:35:3e:27:cd: fa:4b:2a:dd:f1:d9:ae:cd:b2:29:81:88:24:bf:e0:f9:b4:59: 75:8b:cf:4a:7a:c4:3e:73:79:44:56:bc:40:7c:9d:2d:b7:9a: 6a:c6:24:6b:e0:fb:ea:b3:97:47:57:fa:3c:f5:78:2f:d2:f2: b9:68:08:86:c0:eb:c2:54:8a:9f:03:d0:6e:e4:6f:f5:46:ef: 1b:72:e2:ae:e2:9f:ab:72:2a:ae:b2:42:d7:cf:83:50:e4:e6: 45:ad:ca:63:00:15:59:25:81:ae:d1:d2:1c:89:b2:76:10:06: 42:0e:fb:4c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEt0J1H4Jma04TMCJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI4ZDg2NWEtMmQxOS00YWYxLTk4NGEtNmM0NDMzMDRk OWYwMB4XDTI1MTAwODEzMDAzN1oXDTI2MDEwNjE0MDAzN1owLzEtMCsGA1UEAxMk ZjUxMGRmOGUtMGQ3ZC00NWUxLWFjNDgtNWVlZmI3NjRiNmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCXToD3BGdsFF5AIKrQ2m40YRV3ycoFIvPwM lh//iIMTrxgwHqnRrHv+MDTX8VaKrxJ3P9zY1JQ6VavTgui3D8Wq1Puib6bJ7K4o Mm4tkNotcbqyWHNJyDDfmBT+edXAU+eef7XGeTTNhF4qYGRHLycnlED/HwWJ2XVf iAZawfjvdrVoSYnehf6fWYMEQN91EollpVMsuc3gcPwlTjfFIdKLLaY6U3RmSk5h VjJWJccz7IfSGlH76HwmgVPM2+blD8OuvmTybNAZKZyfS9csaFAS6bIghA4/AuWz rwshSBXomXeDEZgyAx06hTc5OSPVRy6YZCHTUrm7Y0uj+1rs4QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFsnOvgBGVwJLL0UpqQvxmgUOLK7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82Mjhk ODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0MzMwNGQ5ZjAvMWE5NjM5ZGEtYTIxNi0z ZWNlLWIzMjctYzA5YTA1Nzg1NmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjI4ZDg2NWEtMmQxOS00YWYxLTk4 NGEtNmM0NDMzMDRkOWYwLzYyOGQ4NjVhLTJkMTktNGFmMS05ODRhLTZjNDQzMzA0 ZDlmMC5jcmwwHwYDVR0jBBgwFoAUJYu8/Mz4Vjaea43uldPRD0mYCCQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MjhkODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0 MzMwNGQ5ZjAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmB4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAcPwyv/1SEGN5eyubT4kzlqgnFVi//SZyoCKXYhQJdkdfZtL9ifDmGkAO GhALpLRPmt32r8QmvOnhtE/5vPdjjD/iRqTr0x/a8ptp9aO8JGzdnbbvJpMc+IuC fyFRoiHZEz5XPCyo6WWXOnTniMHL/m5okk89IMHnY96KaFWyIRcSxOb77JhF3mpV 2r81PifN+ksq3fHZrs2yKYGIJL/g+bRZdYvPSnrEPnN5RFa8QHydLbeaasYka+D7 6rOXR1f6PPV4L9LyuWgIhsDrwlSKnwPQbuRv9UbvG3LiruKfq3IqrrJC18+DUOTm Ra3KYwAVWSWBrtHSHImydhAGQg77TA== -----END CERTIFICATE-----Generated at Mon Nov 3 23:06:16 2025 by rpki-client