$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/96fdadfb-ba18-3067-ab96-46533f828a9d.roa File: 96fdadfb-ba18-3067-ab96-46533f828a9d.roa (raw, json) Hash identifier: qF6lRFssJxxhECwCMPZsFtRWRaO/v6E7gGEYueno28g= Subject key identifier: 52:E9:26:C4:D3:9A:A1:90:20:FF:70:35:86:0C:85:10:2E:CE:51:84 Certificate issuer: /CN=fc3262f6-73f3-433b-ba28-112a484fec8a Certificate serial: 010D0C9F4328584AD23442831B7BB5BD737E6F00 Authority key identifier: 52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/96fdadfb-ba18-3067-ab96-46533f828a9d.roa Signing time: Mon 11 Aug 2025 12:45:49 +0000 ROA not before: Mon 11 Aug 2025 12:45:49 +0000 ROA not after: Sun 09 Nov 2025 13:45:49 +0000 asID: 63360 IP address blocks: 168.225.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:34:42:83:1b:7b:b5:bd:73:7e:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc3262f6-73f3-433b-ba28-112a484fec8a Validity Not Before: Aug 11 12:45:49 2025 GMT Not After : Nov 9 13:45:49 2025 GMT Subject: CN=581fd03a-0072-4d15-a3b4-9c4cf25dd031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:43:7b:4f:85:67:ae:2e:af:ac:46:49:f7:b4: 91:0d:52:ca:5f:89:27:2d:c4:df:fd:45:4b:ff:d3: be:ca:9b:5d:47:1b:55:45:64:a9:06:bf:1e:70:46: 05:d0:92:12:b4:3d:18:1a:c9:15:3f:e2:47:28:d1: 61:f5:f0:1c:70:f8:2a:07:e0:d7:71:27:56:6a:db: db:5f:7f:12:b0:59:26:e2:54:53:f2:e4:e0:2d:c6: 76:91:f7:1e:ec:ea:d6:3d:4e:de:0c:ce:c8:88:b0: 38:50:12:27:ff:46:f5:8f:be:f8:5c:42:db:c9:d6: a8:f4:f9:49:ca:c4:78:9b:7b:4a:9f:3c:4f:01:c2: e4:86:d0:d6:2b:3a:94:ba:6c:75:d5:f6:7a:7e:2f: 7b:f3:64:f5:81:f2:88:b1:d5:d5:18:bb:59:c6:89: 7e:71:dc:4d:e8:1f:69:76:f1:b4:9b:d0:04:82:b8: a1:a4:56:dd:8b:88:7a:76:41:5f:40:33:66:02:94: 41:ad:f1:58:3e:3a:98:31:32:bb:a9:6d:48:ce:86: f4:2f:5d:59:4c:a4:db:9f:12:14:24:40:4a:07:c8: 9f:9e:9f:96:a8:b0:d5:57:b7:89:cd:7f:37:8b:67: 7e:85:a9:a2:e9:9b:f7:78:d4:9b:43:13:c6:4d:73: 49:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E9:26:C4:D3:9A:A1:90:20:FF:70:35:86:0C:85:10:2E:CE:51:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/96fdadfb-ba18-3067-ab96-46533f828a9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a/fc3262f6-73f3-433b-ba28-112a484fec8a.crl X509v3 Authority Key Identifier: keyid:52:92:BC:10:FA:15:F7:79:CE:A5:C3:F4:59:ED:11:D6:0C:B8:33:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fc3262f6-73f3-433b-ba28-112a484fec8a.cer sbgp-ipAddrBlock: critical IPv4: 168.225.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:40:f3:f8:07:9e:b1:83:3e:47:59:09:5e:8a:4d:a5:32:db: 55:34:24:88:42:fc:f7:31:72:ad:6f:01:6e:3a:38:57:08:36: ef:17:b1:d8:9c:04:2d:26:ab:10:f4:53:dd:e7:08:37:d7:8d: 1f:28:5c:0f:8a:f4:a8:bc:51:a1:fe:ce:e1:42:1f:a2:f8:0e: 24:f5:d2:9d:2c:7b:44:b8:80:27:50:db:86:1f:0d:48:72:16: 8e:7e:b1:ab:70:27:87:51:e7:18:6e:ac:de:e7:f7:40:bd:ae: 84:09:1e:4e:b2:48:a2:09:6a:31:70:40:85:e0:46:df:5d:66: d5:1b:e6:5e:9f:dc:6f:63:b1:ac:a3:20:79:32:2a:64:b8:bd: 33:cc:8a:97:34:94:20:c7:21:22:d1:1e:02:44:ca:90:48:dd: 24:fc:08:12:bd:0e:87:4a:53:c6:aa:d7:f9:b0:51:6a:94:0b: 1a:c0:e7:8d:4b:93:5c:1d:cf:56:e1:59:bc:4e:db:35:a6:b7: 38:47:5a:e6:9a:99:40:cd:46:f0:58:8d:d4:dd:fb:c0:f2:d8: af:0f:d4:c4:71:93:e7:47:14:34:82:6a:8b:97:c8:65:1b:16: 97:a0:29:3e:9f:d0:b3:46:92:3c:81:cf:3a:90:e0:15:99:29: b2:a2:02:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSNEKDG3u1vXN+bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzMjYyZjYtNzNmMy00MzNiLWJhMjgtMTEyYTQ4NGZl YzhhMB4XDTI1MDgxMTEyNDU0OVoXDTI1MTEwOTEzNDU0OVowLzEtMCsGA1UEAxMk NTgxZmQwM2EtMDA3Mi00ZDE1LWEzYjQtOWM0Y2YyNWRkMDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UN7T4Vnri6vrEZJ97SRDVLKX4knLcTf/UVL /9O+yptdRxtVRWSpBr8ecEYF0JIStD0YGskVP+JHKNFh9fAccPgqB+DXcSdWatvb X38SsFkm4lRT8uTgLcZ2kfce7OrWPU7eDM7IiLA4UBIn/0b1j774XELbydao9PlJ ysR4m3tKnzxPAcLkhtDWKzqUumx11fZ6fi9782T1gfKIsdXVGLtZxol+cdxN6B9p dvG0m9AEgrihpFbdi4h6dkFfQDNmApRBrfFYPjqYMTK7qW1Izob0L11ZTKTbnxIU JEBKB8ifnp+WqLDVV7eJzX83i2d+hami6Zv3eNSbQxPGTXNJfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLpJsTTmqGQIP9wNYYMhRAuzlGEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMy NjJmNi03M2YzLTQzM2ItYmEyOC0xMTJhNDg0ZmVjOGEvOTZmZGFkZmItYmExOC0z MDY3LWFiOTYtNDY1MzNmODI4YTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmMzMjYyZjYtNzNmMy00MzNiLWJh MjgtMTEyYTQ4NGZlYzhhL2ZjMzI2MmY2LTczZjMtNDMzYi1iYTI4LTExMmE0ODRm ZWM4YS5jcmwwHwYDVR0jBBgwFoAUUpK8EPoV93nOpcP0We0R1gy4M5UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mYzMyNjJmNi03M2YzLTQzM2ItYmEyOC0xMTJh NDg0ZmVjOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqOEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZA8/gHnrGDPkdZCV6KTaUy21U0JIhC/Pcxcq1vAW46OFcINu8Xsdic BC0mqxD0U93nCDfXjR8oXA+K9Ki8UaH+zuFCH6L4DiT10p0se0S4gCdQ24YfDUhy Fo5+satwJ4dR5xhurN7n90C9roQJHk6ySKIJajFwQIXgRt9dZtUb5l6f3G9jsayj IHkyKmS4vTPMipc0lCDHISLRHgJEypBI3ST8CBK9DodKU8aq1/mwUWqUCxrA541L k1wdz1bhWbxO2zWmtzhHWuaamUDNRvBYjdTd+8Dy2K8P1MRxk+dHFDSCaouXyGUb FpegKT6f0LNGkjyBzzqQ4BWZKbKiAnE= -----END CERTIFICATE-----Generated at Sat Aug 23 21:14:05 2025 by rpki-client