$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/ffe10a4a-433b-3696-8bd3-f6fad77d0bfa.roa File: ffe10a4a-433b-3696-8bd3-f6fad77d0bfa.roa (raw, json) Hash identifier: fJ5q1xOQyf+P0vlQMRA3V1rXD0cx55CWUxFLBduCmj4= Subject key identifier: 74:95:26:28:49:CA:60:ED:89:E3:DC:61:38:03:03:28:FA:E4:0B:C7 Certificate issuer: /CN=fc3262f6-73f3-433b-ba28-112a484fec8a Certificate serial: 010D0C9F4328584BA39D3E7209CDF3C53F70BA40 Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/ffe10a4a-433b-3696-8bd3-f6fad77d0bfa.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 63360 IP address blocks: 168.225.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:3e:72:09:cd:f3:c5:3f:70:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=07ed84ed-537b-4676-b670-0e6b5a48457c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:98:6c:5e:2b:72:7d:a3:17:85:78:1a:92:45: 60:f1:f4:45:74:c5:17:69:7b:e9:d6:0a:b4:95:4b: 59:b5:5f:81:68:93:1d:a2:03:55:a7:50:c3:61:b6: 79:f6:76:1a:24:76:21:23:e8:06:5f:74:00:bc:00: a6:36:85:f1:f7:84:7d:95:f5:34:0d:16:d9:91:a9: c7:f0:ef:21:9c:32:c4:df:d2:74:13:61:55:6a:3d: bd:42:fc:5f:f5:dd:23:a6:17:ca:de:25:1e:c7:57: c7:fe:84:b3:d4:00:78:ec:62:e1:8d:64:f6:56:50: fe:27:fc:a6:14:e7:59:82:c0:09:7a:35:0a:05:af: d4:d0:91:c8:8f:bb:bd:3f:a2:1a:a8:d8:b3:d9:f2: f9:22:2b:75:f6:4b:fb:f4:5d:ab:85:39:cf:c9:92: 35:5b:5c:87:2c:eb:ce:0b:77:c6:2a:d3:01:c6:9c: e5:16:d4:b2:4e:66:3c:d5:17:2c:6e:00:d7:ae:f0: 59:af:e4:54:f2:ed:36:92:51:98:3f:96:17:ca:44: 77:69:a1:d0:3e:25:d6:c1:32:75:e4:1b:97:28:af: e3:b0:72:ca:69:be:8b:f6:ba:a4:8a:2a:fa:e8:e7: c5:89:e0:a5:ca:b2:dd:22:43:66:aa:99:85:46:07: 4b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:95:26:28:49:CA:60:ED:89:E3:DC:61:38:03:03:28:FA:E4:0B:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/ffe10a4a-433b-3696-8bd3-f6fad77d0bfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl X509v3 Authority Key Identifier: keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer sbgp-ipAddrBlock: critical IPv4: 168.225.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:5b:af:b9:1b:15:a9:34:04:5f:be:86:15:9b:8c:49:3f:db: 84:b2:ad:1a:93:a5:63:6f:07:8c:85:3c:20:be:d0:b6:fb:73: ea:69:b7:5b:63:27:5d:6c:33:a2:42:1e:4a:9e:78:c9:cb:f0: fa:96:0d:e6:c5:cb:e1:89:1a:74:5d:e0:e5:4f:7b:5a:65:f1: 88:d4:93:03:0d:58:36:8e:f7:21:c5:2a:64:41:8a:ad:d2:30: c0:b8:51:ac:2e:3c:03:3d:34:22:04:ca:5d:29:6c:35:8f:e9: 12:16:fe:92:40:79:a2:e4:ca:e0:40:06:88:34:c0:34:fc:21: 7c:4b:2a:ca:f2:e1:13:1e:b7:c6:5b:01:71:72:a3:61:a0:f0: 08:a8:a2:8b:80:dd:28:26:53:24:d0:46:82:17:d7:13:53:76: 28:cd:92:17:c7:1c:7c:73:69:56:d6:e4:a9:e6:76:a5:27:69: 96:e3:9b:a6:09:e7:f7:da:0e:f2:be:7b:3f:7d:28:0a:f0:c6: fc:1d:17:9b:a4:7a:6d:a5:b5:be:4a:28:39:8e:1d:ea:e0:11: 92:d9:d9:2a:38:26:d9:a6:6e:fe:92:52:d1:0c:1f:ce:99:07: 7b:3d:65:04:ab:24:8b:6f:20:52:c3:c9:50:1a:ca:ce:83:38: 4d:3a:5e:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnT5yCc3zxT9wukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl YzhhMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MDdlZDg0ZWQtNTM3Yi00Njc2LWI2NzAtMGU2YjVhNDg0NTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5hsXityfaMXhXgakkVg8fRFdMUXaXvp1gq0 lUtZtV+BaJMdogNVp1DDYbZ59nYaJHYhI+gGX3QAvACmNoXx94R9lfU0DRbZkanH 8O8hnDLE39J0E2FVaj29Qvxf9d0jphfK3iUex1fH/oSz1AB47GLhjWT2VlD+J/ym FOdZgsAJejUKBa/U0JHIj7u9P6IaqNiz2fL5Iit19kv79F2rhTnPyZI1W1yHLOvO C3fGKtMBxpzlFtSyTmY81RcsbgDXrvBZr+RU8u02klGYP5YXykR3aaHQPiXWwTJ1 5BuXKK/jsHLKab6L9rqkiir66OfFieClyrLdIkNmqpmFRgdLuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSVJihJymDtiePcYTgDAyj65AvHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvZmZlMTBhNGEtNDMzYi0z Njk2LThiZDMtZjZmYWQ3N2QwYmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJbr7kbFak0BF++hhWbjEk/24SyrRqTpWNvB4yFPCC+0Lb7c+ppt1tj J11sM6JCHkqeeMnL8PqWDebFy+GJGnRd4OVPe1pl8YjUkwMNWDaO9yHFKmRBiq3S MMC4UawuPAM9NCIEyl0pbDWP6RIW/pJAeaLkyuBABog0wDT8IXxLKsry4RMet8Zb AXFyo2Gg8AiooouA3SgmUyTQRoIX1xNTdijNkhfHHHxzaVbW5KnmdqUnaZbjm6YJ 5/faDvK+ez99KArwxvwdF5ukem2ltb5KKDmOHergEZLZ2So4Jtmmbv6SUtEMH86Z B3s9ZQSrJItvIFLDyVAays6DOE06XmA= -----END CERTIFICATE-----Generated at Wed Nov 5 14:48:22 2025 by rpki-client