$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/3a4c33e4-6a79-33f2-8c92-073c6ab35091.roa File: 3a4c33e4-6a79-33f2-8c92-073c6ab35091.roa (raw, json) Hash identifier: zIEX7iRBT/RwY1uIwHXDJJbelanRmLbarMrtXLB9seg= Subject key identifier: E2:25:39:D6:31:BB:C4:6E:B3:9E:61:45:80:8C:0B:90:A6:19:F4:DA Certificate issuer: /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Certificate serial: 010D0C9F4328584AFCC96B26093E9C537264C700 Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/3a4c33e4-6a79-33f2-8c92-073c6ab35091.roa Signing time: Tue 26 Aug 2025 18:50:18 +0000 ROA not before: Tue 26 Aug 2025 18:50:18 +0000 ROA not after: Mon 24 Nov 2025 19:50:18 +0000 asID: 400072 IP address blocks: 192.159.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:c9:6b:26:09:3e:9c:53:72:64:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Validity Not Before: Aug 26 18:50:18 2025 GMT Not After : Nov 24 19:50:18 2025 GMT Subject: CN=2a53ce3a-91ea-408f-9025-844cfa1bdb95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:48:f8:d1:6a:c0:35:84:45:91:ea:be:2e:86: 96:0b:fa:c7:9a:f7:79:93:4a:7f:7e:f5:ed:9f:45: e4:19:78:66:32:9c:cc:93:80:7e:f6:31:ea:a9:92: 45:68:33:27:f5:fb:2f:e4:84:d0:74:c6:37:0e:41: 82:02:7f:9e:b7:81:ee:c2:95:be:05:f3:ba:33:8d: 5a:e5:77:38:f3:13:b1:af:08:00:c3:c3:2f:ed:ac: 95:89:3b:2e:d6:16:3a:83:4b:98:ff:7f:4a:48:f7: d4:43:77:64:d4:ae:e2:be:aa:e2:6a:bf:84:b4:81: de:56:53:55:20:49:01:4c:98:69:b3:04:11:ab:b0: f9:34:01:d3:3e:62:59:7b:17:b4:ba:bb:7e:5a:fe: 42:63:2f:16:03:22:26:bc:3b:d6:04:e7:68:fb:8c: e8:1f:83:64:53:7c:00:1b:1a:8b:84:c8:bc:94:7b: 61:0b:81:95:b3:70:45:83:23:a7:9a:cf:22:cb:e9: 1c:a5:fb:f7:21:9d:62:9f:f3:1a:18:14:d0:b4:ef: a3:e1:84:51:c7:20:b7:9a:bf:ab:9b:ea:9a:d6:cc: b6:0f:42:da:ad:c7:49:c7:8f:f2:9e:05:ae:f3:95: aa:80:f2:33:86:a8:6a:24:a2:3d:dd:e7:9b:d1:ef: d2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:25:39:D6:31:BB:C4:6E:B3:9E:61:45:80:8C:0B:90:A6:19:F4:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/3a4c33e4-6a79-33f2-8c92-073c6ab35091.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl X509v3 Authority Key Identifier: keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer sbgp-ipAddrBlock: critical IPv4: 192.159.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:e0:1c:7e:d7:03:4e:34:c2:7a:bd:a7:d9:01:cf:7c:cd:53: fb:9b:b9:a7:e1:30:7f:c1:63:26:0b:c2:17:a8:57:1f:d0:ad: 27:62:ff:42:21:ae:03:b9:d6:c2:e0:a2:5e:3e:83:17:0d:ca: 78:09:90:e6:ed:e6:e3:11:a7:26:8f:a2:c1:bb:35:38:ee:7f: 01:57:94:94:55:22:db:11:8d:61:df:2c:e4:29:55:a9:de:3d: 35:b8:d4:e2:12:eb:14:c1:fd:7c:1a:f9:e6:43:95:15:1a:90: 52:95:d1:b7:29:64:dc:e0:4d:18:23:6a:9a:1f:53:a8:9a:cc: 17:44:50:e2:23:64:8e:c7:34:1b:b2:f8:9b:e5:5c:3b:8d:4a: f7:28:6c:7b:4e:00:7f:31:78:96:7d:33:ec:1d:93:3e:ac:c5: 52:66:a7:62:03:59:c0:d7:64:e0:f1:eb:78:bc:d1:7d:0b:f1: 60:c4:a0:b6:a1:4c:bb:9d:3d:83:fb:ee:f5:95:fb:6a:d2:fe: 44:94:ac:b3:b1:0b:de:22:2b:73:5e:ea:81:03:03:ba:c0:31: de:72:ce:4c:65:a4:62:86:9f:f9:47:ea:80:8e:b8:e9:24:98: 1d:73:d0:13:f9:cb:b9:76:9c:5f:7e:96:45:e5:eb:b5:3b:39: ea:76:61:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8yWsmCT6cU3JkxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJiOTAzYTItNGM4My00YmZhLTk1NzItMzZmYmFmYjg0 YTIzMB4XDTI1MDgyNjE4NTAxOFoXDTI1MTEyNDE5NTAxOFowLzEtMCsGA1UEAxMk MmE1M2NlM2EtOTFlYS00MDhmLTkwMjUtODQ0Y2ZhMWJkYjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEj40WrANYRFkeq+LoaWC/rHmvd5k0p/fvXt n0XkGXhmMpzMk4B+9jHqqZJFaDMn9fsv5ITQdMY3DkGCAn+et4HuwpW+BfO6M41a 5Xc48xOxrwgAw8Mv7ayViTsu1hY6g0uY/39KSPfUQ3dk1K7ivqriar+EtIHeVlNV IEkBTJhpswQRq7D5NAHTPmJZexe0urt+Wv5CYy8WAyImvDvWBOdo+4zoH4NkU3wA GxqLhMi8lHthC4GVs3BFgyOnms8iy+kcpfv3IZ1in/MaGBTQtO+j4YRRxyC3mr+r m+qa1sy2D0LarcdJx4/yngWu85WqgPIzhqhqJKI93eeb0e/SNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIlOdYxu8Rus55hRYCMC5CmGfTaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5 MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZiYWZiODRhMjMvM2E0YzMzZTQtNmE3OS0z M2YyLThjOTItMDczYzZhYjM1MDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmJiOTAzYTItNGM4My00YmZhLTk1 NzItMzZmYmFmYjg0YTIzL2ZiYjkwM2EyLTRjODMtNGJmYS05NTcyLTM2ZmJhZmI4 NGEyMy5jcmwwHwYDVR0jBBgwFoAUzusqfornrD1acybne0mkRJaEkYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZi YWZiODRhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ8jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHgHH7XA040wnq9p9kBz3zNU/ubuafhMH/BYyYLwheoVx/QrSdi/0Ih rgO51sLgol4+gxcNyngJkObt5uMRpyaPosG7NTjufwFXlJRVItsRjWHfLOQpVane PTW41OIS6xTB/Xwa+eZDlRUakFKV0bcpZNzgTRgjapofU6iazBdEUOIjZI7HNBuy +JvlXDuNSvcobHtOAH8xeJZ9M+wdkz6sxVJmp2IDWcDXZODx63i80X0L8WDEoLah TLudPYP77vWV+2rS/kSUrLOxC94iK3Ne6oEDA7rAMd5yzkxlpGKGn/lH6oCOuOkk mB1z0BP5y7l2nF9+lkXl67U7Oep2YSI= -----END CERTIFICATE-----Generated at Wed Nov 5 03:36:05 2025 by rpki-client