$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4733c78a-74b2-36ce-8265-e75f07c9798e.roa File: 4733c78a-74b2-36ce-8265-e75f07c9798e.roa (raw, json) Hash identifier: 5DVtY9dFTX4T30hYU+MnX6bal1ktzqA2tKL2JQucStg= Subject key identifier: 6F:14:95:91:40:65:06:7D:F1:00:6C:9D:77:CC:00:34:C3:99:CA:EA Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Certificate serial: 010D0C9F4328584D571FA2D71D31777A695EE710 Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4733c78a-74b2-36ce-8265-e75f07c9798e.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 16509 IP address blocks: 192.175.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:a2:d7:1d:31:77:7a:69:5e:e7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=9668e128-1a79-449d-a57e-a7f15f2640af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3f:32:46:3d:f5:fd:fc:01:34:76:9d:d3:81: a3:de:cd:fd:7f:e1:e9:93:52:cc:64:f7:ea:70:04: 67:8f:20:c5:80:a4:bc:d2:a5:81:6d:de:53:55:e4: 15:67:e4:f1:f7:5d:c0:24:9f:a6:ae:e5:3a:b1:6d: 20:f6:c9:15:d3:13:f6:ef:7d:5c:3e:bf:23:ca:d0: d4:ea:98:f5:bc:ce:d8:8b:0a:dc:a7:82:8b:46:88: 38:c8:34:af:53:cd:9c:b6:ce:43:98:75:e0:ba:8f: 29:bd:c5:6e:31:c0:6a:8a:19:1d:09:5c:bc:d0:19: 65:79:64:31:1e:0c:db:6c:a8:fa:c6:b9:11:51:cd: 43:b6:91:55:ac:5f:04:59:5c:e0:99:60:70:ed:93: f3:69:f0:58:6a:9f:e0:cd:30:9b:77:5d:30:4f:a0: 10:f0:3d:74:df:3e:57:39:6b:1e:6a:9c:fd:c3:5a: 28:a9:3c:ca:45:4c:39:3a:e8:44:54:c3:01:42:0f: 7c:ce:dd:9e:d3:44:4e:64:1f:e6:c6:cb:dd:ff:26: e5:d8:fe:f7:0f:c5:5b:e3:c4:b9:62:7b:08:70:58: 73:92:cd:c1:9b:06:8a:11:ee:39:38:43:33:d6:6f: b5:11:c5:83:dd:37:be:3b:98:da:e6:5f:58:ae:4b: 3b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:14:95:91:40:65:06:7D:F1:00:6C:9D:77:CC:00:34:C3:99:CA:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4733c78a-74b2-36ce-8265-e75f07c9798e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl X509v3 Authority Key Identifier: keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer sbgp-ipAddrBlock: critical IPv4: 192.175.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:02:16:25:2f:83:26:2c:94:f8:4f:0b:2f:33:76:27:97:2f: 17:e2:dd:1c:f0:23:85:73:c6:c7:5a:4d:66:7f:c6:a1:29:ba: 0e:e7:6f:1f:2e:8f:fb:c3:ee:81:97:71:e9:c6:01:da:0b:76: d3:df:f8:4a:db:82:42:dc:cc:e5:3a:5d:d4:79:46:e0:ad:ea: bf:6d:f9:07:93:88:f3:03:a6:d3:b2:ba:d3:f2:d0:f5:f7:2f: 00:be:8f:40:70:38:70:41:3d:e6:fe:ee:01:fe:95:49:81:67: 48:bd:54:80:01:15:02:2f:2d:f7:90:dd:8c:e1:b3:cd:54:b4: ad:96:74:58:62:0f:97:e8:28:a5:7a:76:a6:be:4b:87:ba:6c: 72:b7:89:5e:15:38:46:8e:52:98:d5:d7:4c:ab:af:dd:57:c4: 26:6b:10:49:16:f2:f1:4b:60:9e:a0:ce:d9:65:50:32:8f:90: f8:69:d5:43:de:b5:4e:ef:fb:13:2f:3a:2b:6c:47:08:82:16: 2e:c9:81:17:82:e3:6a:27:c1:99:c1:81:2e:54:26:81:70:eb: c9:75:f9:97:a5:0f:e2:68:29:b4:22:87:c9:13:3a:b8:05:0f: b7:2d:2c:b9:7a:34:d2:2d:59:c0:e6:e7:24:4f:55:5e:e9:52: 6e:3d:89:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH6LXHTF3emle5xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjZGE4YTAtYTNjZC00MTY5LTk1MWUtYWI2ODM4ZDZk N2YwMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk OTY2OGUxMjgtMWE3OS00NDlkLWE1N2UtYTdmMTVmMjY0MGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoD8yRj31/fwBNHad04Gj3s39f+Hpk1LMZPfq cARnjyDFgKS80qWBbd5TVeQVZ+Tx913AJJ+mruU6sW0g9skV0xP2731cPr8jytDU 6pj1vM7Yiwrcp4KLRog4yDSvU82cts5DmHXguo8pvcVuMcBqihkdCVy80BlleWQx HgzbbKj6xrkRUc1DtpFVrF8EWVzgmWBw7ZPzafBYap/gzTCbd10wT6AQ8D103z5X OWseapz9w1ooqTzKRUw5OuhEVMMBQg98zt2e00ROZB/mxsvd/ybl2P73D8Vb48S5 YnsIcFhzks3BmwaKEe45OEMz1m+1EcWD3Te+O5ja5l9Yrks7LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8UlZFAZQZ98QBsnXfMADTDmcrqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNk YThhMC1hM2NkLTQxNjktOTUxZS1hYjY4MzhkNmQ3ZjAvNDczM2M3OGEtNzRiMi0z NmNlLTgyNjUtZTc1ZjA3Yzk3OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmZjZGE4YTAtYTNjZC00MTY5LTk1 MWUtYWI2ODM4ZDZkN2YwL2ZmY2RhOGEwLWEzY2QtNDE2OS05NTFlLWFiNjgzOGQ2 ZDdmMC5jcmwwHwYDVR0jBBgwFoAUuunwIc1gU+J5R6d+X/PoDlObwL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNkYThhMC1hM2NkLTQxNjktOTUxZS1hYjY4 MzhkNmQ3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwK8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8CFiUvgyYslPhPCy8zdieXLxfi3RzwI4VzxsdaTWZ/xqEpug7nbx8u j/vD7oGXcenGAdoLdtPf+ErbgkLczOU6XdR5RuCt6r9t+QeTiPMDptOyutPy0PX3 LwC+j0BwOHBBPeb+7gH+lUmBZ0i9VIABFQIvLfeQ3Yzhs81UtK2WdFhiD5foKKV6 dqa+S4e6bHK3iV4VOEaOUpjV10yrr91XxCZrEEkW8vFLYJ6gztllUDKPkPhp1UPe tU7v+xMvOitsRwiCFi7JgReC42onwZnBgS5UJoFw68l1+ZelD+JoKbQih8kTOrgF D7ctLLl6NNItWcDm5yRPVV7pUm49iU4= -----END CERTIFICATE-----Generated at Fri Apr 17 14:27:05 2026 by rpki-client