$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/30c680af-2210-3ff7-a49b-bf1302b1a5bb.roa File: 30c680af-2210-3ff7-a49b-bf1302b1a5bb.roa (raw, json) Hash identifier: tsqqEtlEJfwNtzxfiYGkKwJVqDHhRMsyFK4y2PgX9SE= Subject key identifier: F7:29:CB:D2:F4:15:B4:9B:00:DC:57:5C:5E:45:5D:AA:DD:CC:51:BE Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584BA0D24E11BF277DBD374FD880 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/30c680af-2210-3ff7-a49b-bf1302b1a5bb.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 16815 IP address blocks: 216.115.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:4e:11:bf:27:7d:bd:37:4f:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=f8fa0ef4-a75e-46f4-94c0-322908642cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7d:74:8c:bc:4d:33:2f:34:bb:ec:92:8a:ab: 81:2c:84:bb:24:fa:96:f0:04:14:a5:d7:9c:da:57: a2:dc:4b:4c:a5:bd:d9:98:b0:78:04:43:c3:06:c2: da:f1:c6:47:61:c0:f8:4a:dd:d3:2a:e0:40:e5:2c: 40:21:ab:6e:11:99:01:70:c6:a8:b0:ca:89:d0:19: 76:57:0e:c6:18:dc:29:ba:13:5a:09:49:08:08:df: a0:40:30:3f:71:a8:49:70:bc:de:93:f6:02:a3:20: 9f:59:aa:5d:c9:2e:2a:d8:b5:63:98:82:50:c6:6b: 5c:b9:d7:d8:02:b4:3f:b1:7a:50:90:fd:ab:ff:e4: b3:c2:0e:44:af:e1:b5:19:96:9a:ab:14:b7:44:b1: bf:e2:c0:e9:f2:9b:c9:8b:fa:39:75:26:f8:0c:b4: b5:d5:fd:1e:e5:e9:42:51:2d:39:93:11:6b:f6:5b: 4b:cf:82:13:9c:dd:f5:08:d9:9c:c6:df:4a:c3:a5: 63:d7:6e:9a:d1:15:8f:60:37:3c:cf:af:e8:ac:75: f8:0c:8a:df:dc:2b:13:8d:27:9b:18:24:32:39:ed: f7:68:94:8f:a0:00:57:66:87:98:87:0a:77:26:d0: ed:3d:d4:27:75:55:b6:6a:b8:f9:ae:ab:9f:6a:59: 54:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:29:CB:D2:F4:15:B4:9B:00:DC:57:5C:5E:45:5D:AA:DD:CC:51:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/30c680af-2210-3ff7-a49b-bf1302b1a5bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 216.115.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:1d:85:38:06:2a:5c:af:27:1e:cb:48:f6:02:38:4c:fa:36: a9:a6:01:03:e0:1f:c5:b3:33:ae:eb:6c:c7:42:da:46:0f:b6: f4:fb:57:9f:13:ca:fc:dd:0f:5f:5c:e5:d9:3d:b1:43:4c:af: bf:ae:ac:c1:52:7b:87:4e:b8:e4:4c:2b:7b:93:f1:68:8f:fc: cf:8c:8d:db:0b:ac:ad:ed:8a:28:50:c4:4f:aa:1a:fc:20:53: 5e:42:22:e5:98:cc:a3:72:4a:50:cb:b1:d7:3a:8f:5c:95:51: 27:95:eb:52:56:cf:82:77:27:3a:40:79:a6:eb:8d:31:00:b7: 93:d7:2d:40:ef:53:04:74:6c:5c:f7:2c:57:34:5f:13:5f:11: 9a:3d:a2:65:22:83:df:de:d9:ff:13:c4:de:6d:8a:d2:87:0b: 22:2b:c2:bf:54:18:aa:b5:18:87:e4:fd:c9:dc:bf:43:48:0d: 26:ef:25:5b:dd:dd:18:39:79:2d:08:d9:3e:b9:e6:19:26:17: 56:7a:2f:4d:50:81:c6:11:96:ab:ba:f5:97:7c:4a:47:98:eb: 5b:1d:a7:bc:1f:d7:56:0e:0d:2e:a3:df:ad:a5:ed:3e:c8:16: fe:78:77:e9:01:fe:cd:cf:2b:52:e4:3c:f2:b8:d8:e2:aa:d0: 57:73:50:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0k4Rvyd9vTdP2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZjhmYTBlZjQtYTc1ZS00NmY0LTk0YzAtMzIyOTA4NjQyY2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1H10jLxNMy80u+ySiquBLIS7JPqW8AQUpdec 2lei3EtMpb3ZmLB4BEPDBsLa8cZHYcD4St3TKuBA5SxAIatuEZkBcMaosMqJ0Bl2 Vw7GGNwpuhNaCUkICN+gQDA/cahJcLzek/YCoyCfWapdyS4q2LVjmIJQxmtcudfY ArQ/sXpQkP2r/+Szwg5Er+G1GZaaqxS3RLG/4sDp8pvJi/o5dSb4DLS11f0e5elC US05kxFr9ltLz4ITnN31CNmcxt9Kw6Vj126a0RWPYDc8z6/orHX4DIrf3CsTjSeb GCQyOe33aJSPoABXZoeYhwp3JtDtPdQndVW2arj5rqufallU0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcpy9L0FbSbANxXXF5FXardzFG+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMzBjNjgwYWYtMjIxMC0z ZmY3LWE0OWItYmYxMzAyYjFhNWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2HPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEdhTgGKlyvJx7LSPYCOEz6NqmmAQPgH8WzM67rbMdC2kYPtvT7V58T yvzdD19c5dk9sUNMr7+urMFSe4dOuORMK3uT8WiP/M+MjdsLrK3tiihQxE+qGvwg U15CIuWYzKNySlDLsdc6j1yVUSeV61JWz4J3JzpAeabrjTEAt5PXLUDvUwR0bFz3 LFc0XxNfEZo9omUig9/e2f8TxN5titKHCyIrwr9UGKq1GIfk/cncv0NIDSbvJVvd 3Rg5eS0I2T655hkmF1Z6L01QgcYRlqu69Zd8SkeY61sdp7wf11YODS6j362l7T7I Fv54d+kB/s3PK1LkPPK42OKq0FdzUH8= -----END CERTIFICATE-----Generated at Wed Nov 5 12:44:31 2025 by rpki-client