$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/833f5f93-724a-3c22-a00b-700ea32b586a.roa File: 833f5f93-724a-3c22-a00b-700ea32b586a.roa (raw, json) Hash identifier: T3Y41QZzO2VYQ72/kPv3aYLoXLQ0NOwMR/1Y8fc028k= Subject key identifier: DB:42:16:93:EE:27:CC:83:DB:AC:78:60:1E:6B:5A:12:B3:C6:28:CC Certificate issuer: /CN=fc3262f6-73f3-433b-ba28-112a484fec8a Certificate serial: 010D0C9F4328584AE9F67F20FD7F3D1672B20E20 Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/833f5f93-724a-3c22-a00b-700ea32b586a.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 63360 IP address blocks: 168.225.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:7f:20:fd:7f:3d:16:72:b2:0e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=884f0d6b-903f-402e-a4ae-ca191bd31587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b6:f2:d1:e9:4a:24:98:8c:4b:b6:70:29:44: 8e:a5:11:1b:b8:90:c3:71:c8:f6:82:70:55:2f:5d: 44:2c:4f:49:04:84:4a:4f:39:b8:ca:44:4c:a5:13: 4c:cd:c2:e8:3d:69:d7:7b:ed:f5:43:03:b7:ff:db: 05:12:f9:33:52:c1:67:43:14:99:30:20:bf:d2:4b: b6:c8:34:5a:90:86:a4:e2:86:61:97:91:aa:be:61: b7:a2:36:60:15:a6:be:2b:e3:bb:4a:26:1c:01:09: 12:55:87:88:90:83:84:18:df:f4:dc:ad:b5:4b:59: 57:f4:32:de:a2:1a:93:24:88:5a:c3:47:43:4e:5b: ab:db:a7:19:90:a6:ca:05:58:30:ca:70:26:60:db: be:dc:91:ee:c1:18:68:90:96:40:75:75:49:3e:2f: 2b:e3:21:57:85:0f:ed:5e:33:31:82:81:ce:9f:67: 53:fa:a6:e7:3c:1c:8d:55:a2:1e:96:5a:8b:8b:bb: ce:02:b4:ff:14:1f:db:ed:d6:44:29:d6:5b:37:3c: 56:11:a3:05:84:e4:08:23:05:d5:4a:bf:fd:ba:49: 57:52:72:93:f4:68:44:ad:bf:4e:f0:a4:0f:89:c4: 3d:e5:da:99:dc:f2:47:53:ab:e3:90:38:40:cd:dd: ea:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:42:16:93:EE:27:CC:83:DB:AC:78:60:1E:6B:5A:12:B3:C6:28:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/833f5f93-724a-3c22-a00b-700ea32b586a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl X509v3 Authority Key Identifier: keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer sbgp-ipAddrBlock: critical IPv4: 168.225.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:88:02:ba:13:24:32:df:f3:17:9f:17:30:c1:fb:b5:54:33: ef:d3:29:66:94:17:18:90:14:55:47:72:f2:9d:79:f1:c6:94: 77:c5:0b:18:5b:0a:7b:57:4f:f6:b0:04:64:1d:40:6c:e8:59: 9b:ad:b8:ce:36:76:9a:a0:1e:98:ba:4e:2a:5b:7a:85:c7:bf: b6:81:93:90:41:60:16:f7:4a:c6:b2:c9:ec:31:ec:a4:45:4a: 54:26:1a:cb:ba:00:24:b4:05:42:5c:d7:45:9a:5b:60:e6:dd: d9:2f:b2:26:9e:d8:14:f0:23:a0:bd:49:69:ee:62:ae:b8:a1: 2f:9c:ce:c7:b1:9d:48:d2:48:0e:83:9e:06:8b:e8:91:85:61: ba:cb:85:70:dc:0b:bf:ef:71:9e:9f:ce:83:18:2f:28:80:1e: 0a:fc:87:f1:54:a9:33:4d:f9:3e:f8:00:14:7c:41:e7:30:a1: 23:3f:29:ab:a6:4d:57:6d:a7:5d:a6:cd:8f:8f:16:75:8c:44: 23:bf:f0:3e:4c:b5:eb:1b:58:c8:5e:93:39:87:96:44:f2:59: b4:08:da:ca:3e:f8:9b:c9:e1:d8:34:84:e3:e7:84:99:21:1e: 4d:01:eb:63:e4:ba:6a:8f:53:3d:cc:24:b3:9d:51:d5:3a:83: 7f:09:1b:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9n8g/X89FnKyDiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl YzhhMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk ODg0ZjBkNmItOTAzZi00MDJlLWE0YWUtY2ExOTFiZDMxNTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirby0elKJJiMS7ZwKUSOpREbuJDDccj2gnBV L11ELE9JBIRKTzm4ykRMpRNMzcLoPWnXe+31QwO3/9sFEvkzUsFnQxSZMCC/0ku2 yDRakIak4oZhl5GqvmG3ojZgFaa+K+O7SiYcAQkSVYeIkIOEGN/03K21S1lX9DLe ohqTJIhaw0dDTlur26cZkKbKBVgwynAmYNu+3JHuwRhokJZAdXVJPi8r4yFXhQ/t XjMxgoHOn2dT+qbnPByNVaIellqLi7vOArT/FB/b7dZEKdZbNzxWEaMFhOQIIwXV Sr/9uklXUnKT9GhErb9O8KQPicQ95dqZ3PJHU6vjkDhAzd3q8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtCFpPuJ8yD26x4YB5rWhKzxijMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvODMzZjVmOTMtNzI0YS0z YzIyLWEwMGItNzAwZWEzMmI1ODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmIAroTJDLf8xefFzDB+7VUM+/TKWaUFxiQFFVHcvKdefHGlHfFCxhb CntXT/awBGQdQGzoWZutuM42dpqgHpi6TipbeoXHv7aBk5BBYBb3Ssayyewx7KRF SlQmGsu6ACS0BUJc10WaW2Dm3dkvsiae2BTwI6C9SWnuYq64oS+czsexnUjSSA6D ngaL6JGFYbrLhXDcC7/vcZ6fzoMYLyiAHgr8h/FUqTNN+T74ABR8QecwoSM/Kaum TVdtp12mzY+PFnWMRCO/8D5MtesbWMhekzmHlkTyWbQI2so++JvJ4dg0hOPnhJkh Hk0B62PkumqPUz3MJLOdUdU6g38JG7k= -----END CERTIFICATE-----Generated at Sat Aug 23 21:13:14 2025 by rpki-client