$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/01d900ee-03cc-3a62-8985-3af3d67f0830.roa File: 01d900ee-03cc-3a62-8985-3af3d67f0830.roa (raw, json) Hash identifier: +zko+QTIh9IwUdD4zEf4uRsCi34vL27AjB6jA/XNqxg= Subject key identifier: F3:7E:05:31:D9:A2:A0:B3:2A:FA:4F:E0:F6:FD:C0:14:9F:49:2D:7F Certificate issuer: /CN=fc3262f6-73f3-433b-ba28-112a484fec8a Certificate serial: 010D0C9F4328584BA39D3EE2D2933E5EA90ABF80 Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/01d900ee-03cc-3a62-8985-3af3d67f0830.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 63360 IP address blocks: 168.225.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:3e:e2:d2:93:3e:5e:a9:0a:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=97bdb654-1492-4e84-aaac-fdeb14f8f23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:94:79:bf:51:20:d0:1b:c8:be:c4:7c:21:9b: ed:f9:b0:c4:5b:f8:54:4c:5f:e8:e7:da:31:70:3d: ce:bf:e4:54:90:9a:a4:0f:1f:3a:48:12:9a:28:7c: 6f:5f:51:0d:cc:82:7b:f5:11:6e:38:31:d4:13:1f: fe:93:51:7d:92:db:af:9f:54:42:a0:40:92:b3:38: 89:d9:89:e9:7d:4f:c9:f0:93:31:30:dc:e8:89:86: 7d:80:6a:57:b9:97:9b:fc:eb:fb:9c:db:54:c1:41: ad:8f:81:3b:80:99:0e:35:79:92:c1:9c:24:b4:94: 99:62:e1:7e:20:c3:7f:b8:19:2f:8c:bb:23:44:ee: 98:b3:4c:27:01:68:b6:b1:f3:d6:1b:cc:26:8c:e9: 18:98:e8:9c:fa:b4:c2:e0:3f:d1:67:a1:25:01:52: ec:2b:98:52:1b:e1:a6:72:0a:75:07:40:75:00:1e: 9f:5a:e9:fd:f5:a9:ea:a5:d2:14:2b:0d:dc:b7:07: 2b:44:16:33:a8:eb:e2:17:5f:bb:e5:46:e2:39:ec: bf:c5:9b:63:9c:4a:b6:22:e1:64:32:0b:78:5e:e6: 81:a4:2d:c5:07:27:a6:58:94:74:a1:c5:db:ed:87: bf:54:38:d2:d8:7b:6d:bf:bb:2f:18:6f:96:7a:84: 53:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:7E:05:31:D9:A2:A0:B3:2A:FA:4F:E0:F6:FD:C0:14:9F:49:2D:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/01d900ee-03cc-3a62-8985-3af3d67f0830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl X509v3 Authority Key Identifier: keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer sbgp-ipAddrBlock: critical IPv4: 168.225.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:76:97:0e:92:e0:a4:09:44:66:89:d1:70:8c:25:67:a6:de: d0:66:fa:84:13:b7:8e:3f:cd:39:ef:e3:94:0c:57:e9:e6:6e: b9:f5:9d:02:d4:26:2f:c3:05:0b:ae:fb:ef:bb:ac:33:27:fa: 56:67:34:66:1a:c4:de:f2:3d:4e:05:79:fc:04:61:85:a0:23: 46:98:31:dd:63:0a:85:8e:14:b2:8f:c0:2e:b2:f4:4a:c5:6f: 87:72:00:ef:af:ab:fe:4a:47:40:5f:25:b3:1b:8f:da:e0:02: ea:db:0c:6b:0d:95:00:60:c1:ad:93:0b:97:c2:19:03:39:a3: a5:6f:73:79:4d:6b:7d:82:59:df:b4:e6:e1:0e:ef:0e:65:9d: 04:3a:ee:6f:21:7f:80:36:80:e8:a0:d1:d5:5e:97:fe:e8:91: c0:55:ca:95:6a:d0:8d:40:82:b0:32:25:70:d7:b8:2f:8b:b4: 0d:9a:00:57:b8:ac:21:c4:69:5d:89:db:97:17:b6:03:b3:3f: d1:9f:cc:cf:65:96:3a:c7:23:23:35:68:ee:46:97:3b:2b:04: 95:8a:98:dd:70:8a:80:9d:a7:0a:f8:f7:d5:bc:9e:4c:ae:f3: ee:b2:ac:0d:30:7d:aa:ab:eb:98:0d:28:13:d2:7e:c8:c3:16: 79:78:8d:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnT7i0pM+XqkKv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl YzhhMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTdiZGI2NTQtMTQ5Mi00ZTg0LWFhYWMtZmRlYjE0ZjhmMjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJR5v1Eg0BvIvsR8IZvt+bDEW/hUTF/o59ox cD3Ov+RUkJqkDx86SBKaKHxvX1ENzIJ79RFuODHUEx/+k1F9ktuvn1RCoECSsziJ 2YnpfU/J8JMxMNzoiYZ9gGpXuZeb/Ov7nNtUwUGtj4E7gJkONXmSwZwktJSZYuF+ IMN/uBkvjLsjRO6Ys0wnAWi2sfPWG8wmjOkYmOic+rTC4D/RZ6ElAVLsK5hSG+Gm cgp1B0B1AB6fWun99anqpdIUKw3ctwcrRBYzqOviF1+75UbiOey/xZtjnEq2IuFk Mgt4XuaBpC3FByemWJR0ocXb7Ye/VDjS2Httv7svGG+WeoRTDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPN+BTHZoqCzKvpP4Pb9wBSfSS1/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvMDFkOTAwZWUtMDNjYy0z YTYyLTg5ODUtM2FmM2Q2N2YwODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEd2lw6S4KQJRGaJ0XCMJWem3tBm+oQTt44/zTnv45QMV+nmbrn1nQLU Ji/DBQuu+++7rDMn+lZnNGYaxN7yPU4FefwEYYWgI0aYMd1jCoWOFLKPwC6y9ErF b4dyAO+vq/5KR0BfJbMbj9rgAurbDGsNlQBgwa2TC5fCGQM5o6Vvc3lNa32CWd+0 5uEO7w5lnQQ67m8hf4A2gOig0dVel/7okcBVypVq0I1AgrAyJXDXuC+LtA2aAFe4 rCHEaV2J25cXtgOzP9GfzM9lljrHIyM1aO5GlzsrBJWKmN1wioCdpwr499W8nkyu 8+6yrA0wfaqr65gNKBPSfsjDFnl4jQQ= -----END CERTIFICATE-----Generated at Wed Nov 5 14:48:37 2025 by rpki-client