$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/add3d5a6-1410-3a84-ba24-b5d1dddd441d.roa File: add3d5a6-1410-3a84-ba24-b5d1dddd441d.roa (raw, json) Hash identifier: yST3Sz3dSP4k1KYGQ642ya8QwJBUmgBgVklUZsHdEwo= Subject key identifier: 29:86:39:D6:2B:CE:3A:7E:64:D3:4E:E4:34:47:65:08:03:44:3B:1F Certificate issuer: /CN=fc3262f6-73f3-433b-ba28-112a484fec8a Certificate serial: 010D0C9F4328584D8C2A9502FAA8AEB11800E580 Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/add3d5a6-1410-3a84-ba24-b5d1dddd441d.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 63360 IP address blocks: 168.225.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:95:02:fa:a8:ae:b1:18:00:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=2bd0d6f3-29af-4b17-ae8d-3864a44cfe2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:eb:a8:c4:34:70:8d:f9:e8:1e:cd:74:ed:43: 22:7d:6d:e6:8b:96:93:00:93:01:f7:35:f1:c1:8b: ca:5d:4f:31:86:8d:43:d5:95:91:21:9a:3c:3c:c9: f1:b5:6d:5b:8d:07:a8:31:b7:24:31:18:f4:0d:b1: 4a:73:05:b4:e5:68:f0:67:ac:5f:01:60:bf:4e:19: c7:ae:44:06:b6:51:92:b3:8b:59:15:c6:10:47:24: 79:4d:1d:0d:ba:90:78:66:b9:cb:6d:bd:24:f4:8e: fa:f1:4e:73:69:7e:84:bb:62:5c:73:94:bc:31:df: 51:0a:34:91:c5:1b:b8:b7:45:10:b5:53:25:d0:18: 9b:0f:52:f3:8e:fb:94:c2:b6:3c:a4:b7:9f:58:d4: 9b:d7:04:e0:44:51:67:90:54:1c:b7:1e:1e:2d:7f: 89:31:75:8f:07:73:0f:55:33:e0:62:3a:75:43:c7: 30:f1:a2:1f:3c:bd:54:f5:35:48:97:65:99:10:4c: d3:d8:66:d3:e9:b9:34:54:67:91:f8:39:67:3a:4d: 47:4f:26:83:fd:4d:d3:43:d1:f3:b7:6f:5b:3a:b4: da:25:10:33:81:58:98:95:4e:65:0c:54:a9:d7:09: 1a:6e:17:f9:28:50:c9:13:d0:b7:8e:79:fc:55:0e: 09:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:86:39:D6:2B:CE:3A:7E:64:D3:4E:E4:34:47:65:08:03:44:3B:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/add3d5a6-1410-3a84-ba24-b5d1dddd441d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl X509v3 Authority Key Identifier: keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer sbgp-ipAddrBlock: critical IPv4: 168.225.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:bc:35:68:b2:2a:aa:a9:55:d2:97:70:13:ce:5f:7b:36:9d: d1:11:19:46:d0:6d:bc:0b:c2:82:f8:30:32:1d:0c:0e:18:d5: fb:aa:89:b9:20:ce:35:2d:a8:6b:04:c7:a7:bc:42:0e:c0:d5: 60:93:c3:cb:5d:5d:db:de:17:24:fa:0b:26:bd:a4:79:ef:12: 98:3d:83:21:f8:11:d4:aa:cc:93:5f:77:27:c5:82:7f:e3:4c: 04:d4:62:f9:d6:ef:6a:3c:6b:d4:71:83:85:4f:e2:ac:78:82: f2:6b:f3:86:19:82:77:b7:4b:58:4f:57:4f:f1:f9:73:2d:53: 87:b8:c2:15:66:29:17:d5:06:be:38:f6:c7:1e:b9:8d:b4:b7: 1a:cd:ca:fe:83:40:43:f9:8b:3d:f0:31:7e:bd:44:e2:47:e8: cf:fe:68:c3:33:f1:13:cd:06:14:d1:21:e5:72:52:6a:99:f6: 1c:78:dd:dd:67:1d:2e:11:af:66:e3:5a:00:23:9e:39:74:fc: f0:ef:59:5a:f2:4d:9f:54:8a:1f:d9:e9:ec:d9:2a:3a:5d:77: f6:2c:0f:eb:79:39:bc:ad:f6:e0:5e:48:5f:ed:ed:10:c7:f4: f1:2d:ce:27:62:f6:44:00:41:a8:a7:d1:9e:5a:b2:49:d2:31: 39:19:9b:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKpUC+qiusRgA5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl YzhhMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk MmJkMGQ2ZjMtMjlhZi00YjE3LWFlOGQtMzg2NGE0NGNmZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuuoxDRwjfnoHs107UMifW3mi5aTAJMB9zXx wYvKXU8xho1D1ZWRIZo8PMnxtW1bjQeoMbckMRj0DbFKcwW05WjwZ6xfAWC/ThnH rkQGtlGSs4tZFcYQRyR5TR0NupB4ZrnLbb0k9I768U5zaX6Eu2Jcc5S8Md9RCjSR xRu4t0UQtVMl0BibD1LzjvuUwrY8pLefWNSb1wTgRFFnkFQctx4eLX+JMXWPB3MP VTPgYjp1Q8cw8aIfPL1U9TVIl2WZEEzT2GbT6bk0VGeR+DlnOk1HTyaD/U3TQ9Hz t29bOrTaJRAzgViYlU5lDFSp1wkabhf5KFDJE9C3jnn8VQ4JpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmGOdYrzjp+ZNNO5DRHZQgDRDsfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvYWRkM2Q1YTYtMTQxMC0z YTg0LWJhMjQtYjVkMWRkZGQ0NDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG28NWiyKqqpVdKXcBPOX3s2ndERGUbQbbwLwoL4MDIdDA4Y1fuqibkg zjUtqGsEx6e8Qg7A1WCTw8tdXdveFyT6Cya9pHnvEpg9gyH4EdSqzJNfdyfFgn/j TATUYvnW72o8a9Rxg4VP4qx4gvJr84YZgne3S1hPV0/x+XMtU4e4whVmKRfVBr44 9sceuY20txrNyv6DQEP5iz3wMX69ROJH6M/+aMMz8RPNBhTRIeVyUmqZ9hx43d1n HS4Rr2bjWgAjnjl0/PDvWVryTZ9Uih/Z6ezZKjpdd/YsD+t5Obyt9uBeSF/t7RDH 9PEtzidi9kQAQain0Z5asknSMTkZmyk= -----END CERTIFICATE-----Generated at Sun Apr 19 11:35:36 2026 by rpki-client