$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/01d900ee-03cc-3a62-8985-3af3d67f0830.roa File: 01d900ee-03cc-3a62-8985-3af3d67f0830.roa (raw, json) Hash identifier: tCgth7nimV8OIOhLnEZEPV8k0bycqiVsqqG6zS+9Lrg= Subject key identifier: C2:2A:88:7C:C8:4E:35:4B:64:5E:83:2C:14:4A:4C:04:56:73:C9:60 Certificate issuer: /CN=fc3262f6-73f3-433b-ba28-112a484fec8a Certificate serial: 010D0C9F4328584AC40A1DF095C3A9B8B7A92400 Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/01d900ee-03cc-3a62-8985-3af3d67f0830.roa Signing time: Wed 06 Aug 2025 10:59:35 +0000 ROA not before: Wed 06 Aug 2025 10:59:35 +0000 ROA not after: Tue 04 Nov 2025 11:59:35 +0000 asID: 63360 IP address blocks: 168.225.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c4:0a:1d:f0:95:c3:a9:b8:b7:a9:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a Validity Not Before: Aug 6 10:59:35 2025 GMT Not After : Nov 4 11:59:35 2025 GMT Subject: CN=1d4092c0-b7dc-457b-8761-82b591b95926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:82:8e:50:39:68:4b:f7:10:70:83:ec:b0:24: ca:80:ad:4b:1a:1f:1a:0a:f3:e1:ee:b7:4d:b2:6d: 0f:92:3b:71:5e:d2:46:00:6c:20:c2:68:2c:8d:53: 48:19:d1:e8:71:83:50:23:f5:41:5e:8f:58:b5:52: df:3f:e8:81:4a:bf:e1:ac:0c:be:db:57:0f:45:3c: e6:d5:84:aa:be:80:09:39:5c:ef:b6:14:41:30:3e: a1:88:94:c6:16:e9:e1:d5:1e:55:0e:b7:70:a3:1d: c1:f2:3a:64:92:5c:a9:53:5b:5f:0f:fb:83:1a:ad: fe:08:e2:7a:bb:8d:be:fb:12:85:bf:a9:6e:56:a6: 73:93:06:35:df:31:18:ac:37:0e:a3:52:df:26:60: 39:5d:d9:ad:9b:22:90:8a:55:cc:e8:ef:8d:12:93: 6e:5f:50:cd:26:78:0d:e9:16:65:d4:e7:4e:c9:60: ca:95:fa:b8:7e:58:e1:d5:cc:fb:49:a0:8c:8a:dc: 73:7a:ab:05:6c:91:f8:b6:19:bc:df:44:ef:90:ab: e8:20:fb:26:94:17:9a:1d:06:66:21:05:26:a5:0e: e6:65:51:8b:ea:b4:67:6a:5b:a3:1f:44:7b:f4:ad: 9c:ff:10:08:88:81:67:42:a7:d4:d0:4a:69:aa:9f: dc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:2A:88:7C:C8:4E:35:4B:64:5E:83:2C:14:4A:4C:04:56:73:C9:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/01d900ee-03cc-3a62-8985-3af3d67f0830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl X509v3 Authority Key Identifier: keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer sbgp-ipAddrBlock: critical IPv4: 168.225.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:64:69:16:75:10:2a:a8:0e:51:e7:e6:54:55:02:26:bf:8f: 6e:c1:5c:f3:34:4f:de:85:38:5c:44:05:cb:63:9c:e9:fd:7a: b8:dd:60:b3:ad:c3:15:90:bc:65:74:93:44:a8:e3:c5:57:c8: 65:d6:37:c8:22:f4:9a:8c:fd:b4:f3:2c:35:76:31:ef:ae:0d: 08:ba:f7:39:72:91:54:d5:44:95:af:40:41:72:90:96:a9:63: 09:e9:0a:bd:c7:47:4a:95:df:65:08:1b:e9:57:2c:d2:ee:80: 42:16:bf:5d:66:4e:95:da:b2:90:e2:24:81:63:d2:2d:8b:1f: c0:1a:d2:48:2f:7e:c0:29:99:55:a4:15:e7:6a:0d:0a:e4:92: ce:63:f2:28:1a:35:69:7b:aa:29:6f:7c:ce:7e:77:07:ba:7b: 44:02:5f:4e:40:05:c6:0f:8d:56:6a:9d:f2:87:a7:8e:cf:8e: ac:c4:04:f0:b3:b3:86:8d:1b:73:11:c2:5f:8a:74:64:41:bd: 34:17:4d:35:23:05:a7:5c:78:17:48:e0:87:8e:c0:0a:88:14: e7:dc:a5:d5:85:2b:be:33:9a:5e:fb:1e:a2:0d:5a:3a:ee:28: a0:66:49:20:63:21:9a:f3:80:3a:8c:3f:6a:99:6d:52:fd:48: f8:8e:81:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErECh3wlcOpuLepJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl YzhhMB4XDTI1MDgwNjEwNTkzNVoXDTI1MTEwNDExNTkzNVowLzEtMCsGA1UEAxMk MWQ0MDkyYzAtYjdkYy00NTdiLTg3NjEtODJiNTkxYjk1OTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYKOUDloS/cQcIPssCTKgK1LGh8aCvPh7rdN sm0PkjtxXtJGAGwgwmgsjVNIGdHocYNQI/VBXo9YtVLfP+iBSr/hrAy+21cPRTzm 1YSqvoAJOVzvthRBMD6hiJTGFunh1R5VDrdwox3B8jpkklypU1tfD/uDGq3+COJ6 u42++xKFv6luVqZzkwY13zEYrDcOo1LfJmA5XdmtmyKQilXM6O+NEpNuX1DNJngN 6RZl1OdOyWDKlfq4fljh1cz7SaCMitxzeqsFbJH4thm830TvkKvoIPsmlBeaHQZm IQUmpQ7mZVGL6rRnalujH0R79K2c/xAIiIFnQqfU0Eppqp/c3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIqiHzITjVLZF6DLBRKTARWc8lgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvMDFkOTAwZWUtMDNjYy0z YTYyLTg5ODUtM2FmM2Q2N2YwODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZkaRZ1ECqoDlHn5lRVAia/j27BXPM0T96FOFxEBctjnOn9erjdYLOt wxWQvGV0k0So48VXyGXWN8gi9JqM/bTzLDV2Me+uDQi69zlykVTVRJWvQEFykJap YwnpCr3HR0qV32UIG+lXLNLugEIWv11mTpXaspDiJIFj0i2LH8Aa0kgvfsApmVWk FedqDQrkks5j8igaNWl7qilvfM5+dwe6e0QCX05ABcYPjVZqnfKHp47PjqzEBPCz s4aNG3MRwl+KdGRBvTQXTTUjBadceBdI4IeOwAqIFOfcpdWFK74zml77HqINWjru KKBmSSBjIZrzgDqMP2qZbVL9SPiOgXs= -----END CERTIFICATE-----Generated at Mon Oct 20 20:31:40 2025 by rpki-client