$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/3611eb1d-586a-3087-8c7c-45e34fe9b737.roa File: 3611eb1d-586a-3087-8c7c-45e34fe9b737.roa (raw, json) Hash identifier: woiYGe3mktKfsGSUtRcvDjo1sRLYf5ekMrjY0JaemJs= Subject key identifier: 87:11:13:7F:61:DA:98:E2:E7:32:A0:E6:20:08:EE:E8:7A:DB:A6:70 Certificate issuer: /CN=628d865a-2d19-4af1-984a-6c443304d9f0 Certificate serial: 010D0C9F4328584B742751E7DAF2D522A22ED7B0 Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/3611eb1d-586a-3087-8c7c-45e34fe9b737.roa Signing time: Wed 08 Oct 2025 13:00:37 +0000 ROA not before: Wed 08 Oct 2025 13:00:37 +0000 ROA not after: Tue 06 Jan 2026 14:00:37 +0000 asID: 81 IP address blocks: 152.30.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:51:e7:da:f2:d5:22:a2:2e:d7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0 Validity Not Before: Oct 8 13:00:37 2025 GMT Not After : Jan 6 14:00:37 2026 GMT Subject: CN=b0379a2f-29a9-4dc6-ab20-7330b2994a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d0:a0:12:d9:4f:39:b7:6e:65:6b:03:20:5d: 31:02:7a:03:b7:ce:27:34:ac:b3:ec:64:47:3a:03: 29:98:fe:07:c4:29:b6:5a:5f:1b:60:c9:3c:f2:44: 16:2f:24:0a:5d:f8:b3:b3:af:a3:0a:4d:2c:b5:b9: 63:93:c4:9b:99:d4:1a:07:12:cc:c3:77:da:0f:f5: 56:78:03:42:47:bf:fb:bb:e2:06:63:ae:59:0a:f8: ce:a2:c0:06:60:74:48:ed:20:61:1c:ec:b4:fb:e9: 1f:e6:4e:a4:9f:1a:c5:55:9e:53:ea:83:ae:46:aa: 7c:e1:89:e9:a8:2b:be:44:cb:38:4a:fc:55:67:a8: 11:97:5e:65:46:7c:0e:16:b1:c8:f1:48:59:bb:15: 59:63:6c:0c:c4:6c:b1:2b:b4:75:4d:70:af:f1:ef: b1:ec:22:5c:96:92:19:26:13:b0:b2:60:63:2b:49: 13:8d:36:17:e1:3c:10:74:c0:94:8e:7d:4b:be:b0: da:fc:40:0b:e5:2c:4d:55:af:47:e5:da:53:1e:32: ff:50:9f:88:ce:c0:48:43:0e:e6:39:a2:c5:f0:60: 8e:54:7b:15:cf:f2:d6:47:31:1b:5e:c4:4f:3f:8b: fa:42:fd:1f:a7:64:ed:4e:76:1c:00:00:3b:0b:e3: a5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:11:13:7F:61:DA:98:E2:E7:32:A0:E6:20:08:EE:E8:7A:DB:A6:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/3611eb1d-586a-3087-8c7c-45e34fe9b737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl X509v3 Authority Key Identifier: keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer sbgp-ipAddrBlock: critical IPv4: 152.30.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:e9:ce:fc:2b:b8:56:6f:bb:ae:5f:dd:e3:6e:1d:d2:5c:b9: 52:7c:3f:f3:e6:72:ed:cb:f6:2b:00:98:60:64:57:82:52:56: 8e:92:2b:ad:53:f7:3d:8d:c3:11:b0:42:02:fe:04:2a:c8:f8: 0a:5a:76:f5:df:3e:d5:9e:07:af:ac:42:16:b0:0c:c4:40:43: c4:20:10:df:ae:61:71:dd:fc:92:e0:78:11:02:bf:fe:53:93: be:5f:18:05:41:2a:e1:54:64:07:83:58:f9:d9:fe:04:73:70: 2c:c0:c3:7d:49:18:cf:4d:d7:67:22:64:f3:ac:d3:22:ba:b6: 74:86:f9:a1:17:5e:59:5b:89:17:e6:91:03:82:c3:0b:27:8a: 43:55:25:c1:6c:56:0e:44:0a:7d:2b:1b:54:39:6c:64:f8:dc: 94:aa:64:1c:2b:90:d5:4d:cf:68:e3:25:fc:a5:f6:30:73:2b: d7:ac:30:94:76:53:83:cb:35:3d:47:f2:82:fc:f0:0c:f8:76: 2e:f6:02:58:51:36:dd:0d:c9:ff:8b:3a:df:dd:11:7c:e1:51: a2:bf:f2:66:cb:2c:0d:be:12:64:ce:aa:e2:e5:a2:80:0f:ff: a9:14:90:0c:ae:6f:80:35:5e:08:c3:f4:d8:27:97:9a:88:0d: a6:1d:1d:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0J1Hn2vLVIqIu17AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI4ZDg2NWEtMmQxOS00YWYxLTk4NGEtNmM0NDMzMDRk OWYwMB4XDTI1MTAwODEzMDAzN1oXDTI2MDEwNjE0MDAzN1owLzEtMCsGA1UEAxMk YjAzNzlhMmYtMjlhOS00ZGM2LWFiMjAtNzMzMGIyOTk0YTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dCgEtlPObduZWsDIF0xAnoDt84nNKyz7GRH OgMpmP4HxCm2Wl8bYMk88kQWLyQKXfizs6+jCk0stbljk8SbmdQaBxLMw3faD/VW eANCR7/7u+IGY65ZCvjOosAGYHRI7SBhHOy0++kf5k6knxrFVZ5T6oOuRqp84Ynp qCu+RMs4SvxVZ6gRl15lRnwOFrHI8UhZuxVZY2wMxGyxK7R1TXCv8e+x7CJclpIZ JhOwsmBjK0kTjTYX4TwQdMCUjn1LvrDa/EAL5SxNVa9H5dpTHjL/UJ+IzsBIQw7m OaLF8GCOVHsVz/LWRzEbXsRPP4v6Qv0fp2TtTnYcAAA7C+OltwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcRE39h2pji5zKg5iAI7uh626ZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82Mjhk ODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0MzMwNGQ5ZjAvMzYxMWViMWQtNTg2YS0z MDg3LThjN2MtNDVlMzRmZTliNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjI4ZDg2NWEtMmQxOS00YWYxLTk4 NGEtNmM0NDMzMDRkOWYwLzYyOGQ4NjVhLTJkMTktNGFmMS05ODRhLTZjNDQzMzA0 ZDlmMC5jcmwwHwYDVR0jBBgwFoAUJYu8/Mz4Vjaea43uldPRD0mYCCQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MjhkODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0 MzMwNGQ5ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmB5cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHpzvwruFZvu65f3eNuHdJcuVJ8P/Pmcu3L9isAmGBkV4JSVo6SK61T 9z2NwxGwQgL+BCrI+ApadvXfPtWeB6+sQhawDMRAQ8QgEN+uYXHd/JLgeBECv/5T k75fGAVBKuFUZAeDWPnZ/gRzcCzAw31JGM9N12ciZPOs0yK6tnSG+aEXXllbiRfm kQOCwwsnikNVJcFsVg5ECn0rG1Q5bGT43JSqZBwrkNVNz2jjJfyl9jBzK9esMJR2 U4PLNT1H8oL88Az4di72AlhRNt0Nyf+LOt/dEXzhUaK/8mbLLA2+EmTOquLlooAP /6kUkAyub4A1XgjD9Ngnl5qIDaYdHeY= -----END CERTIFICATE-----Generated at Mon Oct 20 10:14:47 2025 by rpki-client