$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/3611eb1d-586a-3087-8c7c-45e34fe9b737.roa File: 3611eb1d-586a-3087-8c7c-45e34fe9b737.roa (raw, json) Hash identifier: vR7xFDzfUIEyOlY/sb23aXupNN5kwQu0wnLpF43Mvrk= Subject key identifier: 84:97:36:D1:42:BF:4C:57:32:71:69:49:B1:AD:96:79:1F:A1:92:3D Certificate issuer: /CN=628d865a-2d19-4af1-984a-6c443304d9f0 Certificate serial: 010D0C9F4328584EB57C5732468E8B5085D95500 Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/3611eb1d-586a-3087-8c7c-45e34fe9b737.roa Signing time: Mon 03 Aug 2026 01:00:11 +0000 ROA not before: Mon 03 Aug 2026 01:00:11 +0000 ROA not after: Sun 01 Nov 2026 01:00:11 +0000 asID: 81 IP address blocks: 152.30.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b5:7c:57:32:46:8e:8b:50:85:d9:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0 Validity Not Before: Aug 3 01:00:11 2026 GMT Not After : Nov 1 01:00:11 2026 GMT Subject: CN=21a8c3b9-9bea-4664-a1c6-0209f3bf4b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:49:72:5c:e5:06:93:13:d5:cb:fa:7c:f3:e1: a2:ef:fa:e4:81:36:38:3c:f0:e5:32:37:93:49:e8: 06:49:50:3f:91:e1:fd:70:06:ef:da:e0:ec:82:a9: 49:ef:33:ed:ef:5c:44:6a:cf:0f:5a:57:09:c7:99: 36:05:89:0b:2d:89:0c:53:27:95:4a:fb:f1:0c:2f: f3:db:53:60:c0:e2:54:1f:f2:02:52:34:d5:ab:6c: f8:bc:8c:38:16:d1:ea:3a:4d:4a:a7:4c:70:ab:2d: 79:6c:80:58:93:82:9c:80:fc:fc:78:f1:06:bf:f8: d1:6e:19:0d:c5:88:f2:86:06:f5:ea:d0:72:3e:d3: 8b:0a:ba:58:b6:89:b8:6a:06:0d:05:fd:dc:5f:44: 00:ca:12:93:1d:3b:99:ec:c7:c2:5a:a4:46:c9:6f: d5:22:90:06:53:b6:0d:70:0b:c2:13:53:e8:ea:5c: 51:80:f1:e3:a6:01:cc:99:45:32:34:f4:41:bd:bf: e2:0d:eb:4a:a3:19:0d:16:75:33:6a:69:59:a2:2d: 41:bd:fd:3a:8b:45:f0:78:6f:67:bf:40:29:87:d1: 97:ed:62:9a:b0:d0:35:be:e3:9e:02:32:b7:87:65: bd:e3:9f:e6:fa:58:f9:88:31:7a:72:df:ec:2b:b9: 83:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:97:36:D1:42:BF:4C:57:32:71:69:49:B1:AD:96:79:1F:A1:92:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/3611eb1d-586a-3087-8c7c-45e34fe9b737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl X509v3 Authority Key Identifier: keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer sbgp-ipAddrBlock: critical IPv4: 152.30.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:34:8b:47:04:ee:f8:aa:4b:72:05:b5:98:ec:ba:d6:8a:ff: 1a:7f:e4:44:12:44:e6:69:e5:1a:0a:79:e6:a9:85:74:db:96: 0e:49:58:bd:c7:91:4f:34:78:47:c4:3c:84:fe:5e:09:f9:a2: bf:17:e8:20:c7:f4:50:e0:03:2d:a0:bb:e2:c5:8a:ab:05:c8: 9d:12:3e:8a:b8:e8:7f:63:3a:01:e5:68:5e:e2:68:de:cf:99: 43:f9:f9:6d:87:14:93:6a:80:9c:db:8c:60:ba:86:bf:08:9c: b5:87:ab:2e:a0:ba:9f:69:2b:31:82:39:0e:4a:2d:01:1b:db: c0:04:a5:b7:6d:5f:98:9b:ad:58:69:b6:24:ac:93:1d:ac:14: 32:25:0d:de:b5:05:90:75:c1:23:b3:ba:45:a2:45:ef:a8:88: 5c:84:66:2b:93:da:cc:44:47:99:c3:e0:cb:28:4b:b8:2a:98: 7d:54:e0:07:a4:01:ac:dc:17:b6:03:60:3d:ad:30:76:bf:8d: b6:f7:45:b6:f8:4b:2f:63:a6:9c:d3:25:49:4c:37:6e:8e:b0: 87:cc:7d:c9:a3:f1:60:d9:55:3d:80:70:60:ac:3e:5b:b2:1a: 3c:bd:47:cd:21:8a:ad:46:37:d5:73:62:4f:b1:d1:f7:70:31: 30:a6:23:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE61fFcyRo6LUIXZVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI4ZDg2NWEtMmQxOS00YWYxLTk4NGEtNmM0NDMzMDRk OWYwMB4XDTI2MDgwMzAxMDAxMVoXDTI2MTEwMTAxMDAxMVowLzEtMCsGA1UEAxMk MjFhOGMzYjktOWJlYS00NjY0LWExYzYtMDIwOWYzYmY0YjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ElyXOUGkxPVy/p88+Gi7/rkgTY4PPDlMjeT SegGSVA/keH9cAbv2uDsgqlJ7zPt71xEas8PWlcJx5k2BYkLLYkMUyeVSvvxDC/z 21NgwOJUH/ICUjTVq2z4vIw4FtHqOk1Kp0xwqy15bIBYk4KcgPz8ePEGv/jRbhkN xYjyhgb16tByPtOLCrpYtom4agYNBf3cX0QAyhKTHTuZ7MfCWqRGyW/VIpAGU7YN cAvCE1Po6lxRgPHjpgHMmUUyNPRBvb/iDetKoxkNFnUzamlZoi1Bvf06i0XweG9n v0Aph9GX7WKasNA1vuOeAjK3h2W945/m+lj5iDF6ct/sK7mDrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISXNtFCv0xXMnFpSbGtlnkfoZI9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82Mjhk ODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0MzMwNGQ5ZjAvMzYxMWViMWQtNTg2YS0z MDg3LThjN2MtNDVlMzRmZTliNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjI4ZDg2NWEtMmQxOS00YWYxLTk4 NGEtNmM0NDMzMDRkOWYwLzYyOGQ4NjVhLTJkMTktNGFmMS05ODRhLTZjNDQzMzA0 ZDlmMC5jcmwwHwYDVR0jBBgwFoAUJYu8/Mz4Vjaea43uldPRD0mYCCQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MjhkODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0 MzMwNGQ5ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmB5cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADE0i0cE7viqS3IFtZjsutaK/xp/5EQSROZp5RoKeeaphXTblg5JWL3H kU80eEfEPIT+Xgn5or8X6CDH9FDgAy2gu+LFiqsFyJ0SPoq46H9jOgHlaF7iaN7P mUP5+W2HFJNqgJzbjGC6hr8InLWHqy6gup9pKzGCOQ5KLQEb28AEpbdtX5ibrVhp tiSskx2sFDIlDd61BZB1wSOzukWiRe+oiFyEZiuT2sxER5nD4MsoS7gqmH1U4Aek AazcF7YDYD2tMHa/jbb3Rbb4Sy9jppzTJUlMN26OsIfMfcmj8WDZVT2AcGCsPluy Gjy9R80hiq1GN9VzYk+x0fdwMTCmI60= -----END CERTIFICATE-----Generated at Sat Aug 22 18:49:19 2026 by rpki-client