$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/469993f3-0274-3649-9005-a1294d7d49cc.roa File: 469993f3-0274-3649-9005-a1294d7d49cc.roa (raw, json) Hash identifier: lFSLxc2bezjdZUvjw7ATWFSdtMaT6aGNDj0ZLGwprto= Subject key identifier: 18:96:EC:93:B8:0D:BB:3A:F9:E5:C1:75:82:67:0C:42:44:07:11:B0 Certificate issuer: /CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Certificate serial: 010D0C9F4328584B970D02BE67AFAD2CBFE23F00 Authority key identifier: CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/469993f3-0274-3649-9005-a1294d7d49cc.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 7018 IP address blocks: 192.159.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0d:02:be:67:af:ad:2c:bf:e2:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbb903a2-4c83-4bfa-9572-36fbafb84a23 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=24b3b8af-1f00-4ae7-849e-fe55685d8033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f1:98:f8:bb:07:78:44:75:0e:ab:2d:10:a9: cb:f4:46:c1:14:97:88:0a:09:a4:77:46:7a:d4:a1: c0:d3:d4:d0:e0:62:2f:33:b2:42:c8:ac:fb:39:4f: eb:16:c3:85:27:71:f9:dd:5b:4d:8b:84:dd:44:9a: e1:26:68:33:36:77:79:22:58:a3:98:53:51:23:d1: 13:2b:d6:a3:5e:96:c9:b1:b8:31:77:df:a7:a2:0d: 09:a5:3b:07:73:4b:52:d7:cc:ad:67:85:a2:50:e3: a6:66:5a:4e:b9:70:f0:f3:f8:b0:32:6c:84:51:18: 85:30:b5:95:c1:3c:42:55:74:b6:29:2d:ed:d8:01: cb:41:98:b9:19:cd:38:e9:e5:56:2c:8c:57:74:22: 6e:e3:bd:69:a6:da:bb:f4:7b:86:3e:dd:7f:70:fe: 4b:dd:43:dc:80:e2:c6:7a:94:a0:0f:1a:a3:0e:04: bb:2d:8b:87:49:69:1f:fb:22:e1:24:44:a0:9d:28: 83:e0:dd:b3:db:da:a2:7a:d5:9e:ba:a2:cf:ba:dc: 0a:98:5b:ac:bd:59:51:4e:5e:64:a1:26:ea:63:2a: b8:95:ce:23:fb:3f:b1:a4:34:15:8e:9b:5f:43:fc: 8f:8d:ac:c1:20:17:27:33:72:67:7a:30:e7:23:2a: 9b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:96:EC:93:B8:0D:BB:3A:F9:E5:C1:75:82:67:0C:42:44:07:11:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/469993f3-0274-3649-9005-a1294d7d49cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23/fbb903a2-4c83-4bfa-9572-36fbafb84a23.crl X509v3 Authority Key Identifier: keyid:CE:EB:2A:7E:8A:E7:AC:3D:5A:73:26:E7:7B:49:A4:44:96:84:91:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fbb903a2-4c83-4bfa-9572-36fbafb84a23.cer sbgp-ipAddrBlock: critical IPv4: 192.159.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:30:7a:b3:34:da:d6:cd:3f:65:a7:df:62:55:80:eb:2b:5e: 5b:7d:30:52:c9:f3:97:3d:be:e7:cd:af:3a:81:ac:d6:fa:4e: 73:78:1a:27:f9:53:03:c6:1f:ff:d9:f6:02:fe:ad:d9:c2:72: a3:f8:f3:49:46:a8:5c:2b:40:6f:79:bb:d8:13:22:b2:1c:0a: 31:a4:e3:46:53:d4:57:11:26:b0:98:1f:1b:8b:6e:e0:a4:4a: 78:8c:d0:74:1a:ce:82:ef:8c:6b:83:52:6c:7f:50:60:0e:4b: 85:d2:25:aa:4c:cd:56:6c:52:67:f1:b7:7c:bf:dc:10:b4:f7: fd:05:e6:20:41:b9:76:11:ec:b3:1d:df:cc:04:ec:eb:3c:dd: 13:ff:74:f9:51:aa:d6:49:69:30:8d:b9:68:3e:23:94:b3:27: a5:6a:e3:7c:68:c4:5b:fb:46:2d:d9:9a:a1:5d:04:6c:92:20: 49:1f:ae:8d:ae:11:9f:da:7b:c7:2c:52:9b:5d:47:33:34:ce: 2e:06:e0:43:81:60:16:98:6b:56:75:fd:34:26:ac:96:cc:81: d5:9e:d7:2e:02:53:b4:ec:0e:d9:40:ba:5f:79:d5:c9:51:10: 82:26:5f:04:a4:8d:24:72:d6:d1:69:3f:71:96:44:d5:fc:e2: d7:49:99:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDQK+Z6+tLL/iPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJiOTAzYTItNGM4My00YmZhLTk1NzItMzZmYmFmYjg0 YTIzMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MjRiM2I4YWYtMWYwMC00YWU3LTg0OWUtZmU1NTY4NWQ4MDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPGY+LsHeER1DqstEKnL9EbBFJeICgmkd0Z6 1KHA09TQ4GIvM7JCyKz7OU/rFsOFJ3H53VtNi4TdRJrhJmgzNnd5IlijmFNRI9ET K9ajXpbJsbgxd9+nog0JpTsHc0tS18ytZ4WiUOOmZlpOuXDw8/iwMmyEURiFMLWV wTxCVXS2KS3t2AHLQZi5Gc046eVWLIxXdCJu471pptq79HuGPt1/cP5L3UPcgOLG epSgDxqjDgS7LYuHSWkf+yLhJESgnSiD4N2z29qietWeuqLPutwKmFusvVlRTl5k oSbqYyq4lc4j+z+xpDQVjptfQ/yPjazBIBcnM3JnejDnIyqbCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiW7JO4Dbs6+eXBdYJnDEJEBxGwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5 MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZiYWZiODRhMjMvNDY5OTkzZjMtMDI3NC0z NjQ5LTkwMDUtYTEyOTRkN2Q0OWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmJiOTAzYTItNGM4My00YmZhLTk1 NzItMzZmYmFmYjg0YTIzL2ZiYjkwM2EyLTRjODMtNGJmYS05NTcyLTM2ZmJhZmI4 NGEyMy5jcmwwHwYDVR0jBBgwFoAUzusqfornrD1acybne0mkRJaEkYowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mYmI5MDNhMi00YzgzLTRiZmEtOTU3Mi0zNmZi YWZiODRhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ8jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKwwerM02tbNP2Wn32JVgOsrXlt9MFLJ85c9vufNrzqBrNb6TnN4Gif5 UwPGH//Z9gL+rdnCcqP480lGqFwrQG95u9gTIrIcCjGk40ZT1FcRJrCYHxuLbuCk SniM0HQazoLvjGuDUmx/UGAOS4XSJapMzVZsUmfxt3y/3BC09/0F5iBBuXYR7LMd 38wE7Os83RP/dPlRqtZJaTCNuWg+I5SzJ6Vq43xoxFv7Ri3ZmqFdBGySIEkfro2u EZ/ae8csUptdRzM0zi4G4EOBYBaYa1Z1/TQmrJbMgdWe1y4CU7TsDtlAul951clR EIImXwSkjSRy1tFpP3GWRNX84tdJmSU= -----END CERTIFICATE-----Generated at Wed Nov 5 14:43:08 2025 by rpki-client