$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4733c78a-74b2-36ce-8265-e75f07c9798e.roa File: 4733c78a-74b2-36ce-8265-e75f07c9798e.roa (raw, json) Hash identifier: I+qL/6Cfd3lGD0JdVo0ttPW4PQE59hYJk72ghtvcWg0= Subject key identifier: 9D:40:E6:A0:52:9C:F5:3C:D0:3D:66:21:7A:83:E0:69:99:84:50:69 Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Certificate serial: 010D0C9F4328584AB650D99761B412B964CE9790 Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4733c78a-74b2-36ce-8265-e75f07c9798e.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 16509 IP address blocks: 192.175.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:d9:97:61:b4:12:b9:64:ce:97:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=9b38d138-c993-433a-8857-fb7841cabcae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0c:93:4f:8c:e8:3c:63:81:d4:a3:e2:af:28: 83:95:b0:0b:c5:af:a8:fa:89:40:de:fa:5d:8e:a6: 1a:9c:91:94:aa:5c:4e:e7:29:db:c8:88:b8:96:f7: 6d:35:29:e7:c5:d7:18:43:c6:f6:ea:c7:3f:29:4f: 11:6f:2f:e0:b5:e5:77:d0:38:5a:6d:08:2b:a7:5d: 3e:f0:32:95:de:c1:87:02:3f:52:33:48:63:09:64: eb:20:af:88:65:76:7c:f7:d9:c2:61:aa:9c:94:6c: e0:d3:89:fc:65:29:e0:f3:f8:a0:70:5e:e6:0a:50: c0:d7:88:7a:dd:c4:7d:75:1f:9e:54:52:92:1d:ec: f8:0a:02:39:93:7a:22:a2:ac:d3:0d:62:dc:10:15: 3f:f3:e9:e2:a1:ac:32:83:9e:76:7f:27:9b:94:0e: be:f3:f0:73:11:35:d1:b8:93:34:28:c6:97:31:13: f6:d0:91:a7:60:a4:e6:a9:2c:23:9e:22:bb:21:fd: d2:d9:e3:49:9c:cc:23:71:57:ec:88:c4:b7:50:7f: 91:76:f2:19:09:e7:69:a8:57:6f:aa:a3:cc:5c:f3: d6:5f:e5:0d:9e:b6:37:ee:67:a1:57:a9:71:90:b4: 6f:af:c6:1a:4a:be:d4:a8:5a:3b:51:8a:7b:ec:54: db:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:40:E6:A0:52:9C:F5:3C:D0:3D:66:21:7A:83:E0:69:99:84:50:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4733c78a-74b2-36ce-8265-e75f07c9798e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl X509v3 Authority Key Identifier: keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer sbgp-ipAddrBlock: critical IPv4: 192.175.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:d0:e5:55:7a:d1:3d:d5:ef:98:11:85:d0:73:38:b6:64:cb: 78:e2:d7:2f:f9:c4:1d:04:11:19:34:12:77:9c:ff:bd:22:74: 6a:65:85:37:2b:ba:23:46:f4:ba:e6:a7:32:0e:17:2b:d8:39: 36:8b:7b:ba:2a:cd:f9:55:17:54:7d:91:fb:7a:81:50:05:34: 42:8a:f5:19:ca:ad:03:77:ec:96:e9:fd:3e:68:de:bd:66:0d: 19:e7:01:b5:f3:26:b7:f3:84:05:9a:30:8c:c9:24:10:c8:9f: 2d:00:26:84:69:71:8c:a7:af:9f:2d:13:d1:81:90:16:d3:f7: 98:e5:8c:53:eb:67:4c:d0:b8:d8:f0:6f:9d:de:d5:d6:42:3a: 08:7c:bf:ce:db:77:18:77:2e:af:be:c1:47:34:dd:8e:48:35: cf:2d:20:72:f5:92:49:7c:55:ac:0e:5b:2e:e0:ef:07:b3:72: 47:19:16:be:ae:b3:fe:57:37:96:48:5a:78:35:41:5d:a0:f8: 6e:62:a6:f6:b2:15:80:32:00:89:e9:ff:68:20:03:7d:f5:f6: 9d:68:ef:97:ee:d1:c9:b3:25:bb:5b:e9:2c:0a:7f:51:13:e3: cb:5a:a5:15:6e:7b:8c:a6:d6:36:26:f8:e1:93:47:29:92:55: ff:bf:5c:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UNmXYbQSuWTOl5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjZGE4YTAtYTNjZC00MTY5LTk1MWUtYWI2ODM4ZDZk N2YwMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk OWIzOGQxMzgtYzk5My00MzNhLTg4NTctZmI3ODQxY2FiY2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggyTT4zoPGOB1KPiryiDlbALxa+o+olA3vpd jqYanJGUqlxO5ynbyIi4lvdtNSnnxdcYQ8b26sc/KU8Rby/gteV30DhabQgrp10+ 8DKV3sGHAj9SM0hjCWTrIK+IZXZ899nCYaqclGzg04n8ZSng8/igcF7mClDA14h6 3cR9dR+eVFKSHez4CgI5k3oioqzTDWLcEBU/8+nioawyg552fyeblA6+8/BzETXR uJM0KMaXMRP20JGnYKTmqSwjniK7If3S2eNJnMwjcVfsiMS3UH+RdvIZCedpqFdv qqPMXPPWX+UNnrY37mehV6lxkLRvr8YaSr7UqFo7UYp77FTbDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1A5qBSnPU80D1mIXqD4GmZhFBpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNk YThhMC1hM2NkLTQxNjktOTUxZS1hYjY4MzhkNmQ3ZjAvNDczM2M3OGEtNzRiMi0z NmNlLTgyNjUtZTc1ZjA3Yzk3OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmZjZGE4YTAtYTNjZC00MTY5LTk1 MWUtYWI2ODM4ZDZkN2YwL2ZmY2RhOGEwLWEzY2QtNDE2OS05NTFlLWFiNjgzOGQ2 ZDdmMC5jcmwwHwYDVR0jBBgwFoAUuunwIc1gU+J5R6d+X/PoDlObwL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNkYThhMC1hM2NkLTQxNjktOTUxZS1hYjY4 MzhkNmQ3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwK8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrQ5VV60T3V75gRhdBzOLZky3ji1y/5xB0EERk0Enec/70idGplhTcr uiNG9LrmpzIOFyvYOTaLe7oqzflVF1R9kft6gVAFNEKK9RnKrQN37Jbp/T5o3r1m DRnnAbXzJrfzhAWaMIzJJBDIny0AJoRpcYynr58tE9GBkBbT95jljFPrZ0zQuNjw b53e1dZCOgh8v87bdxh3Lq++wUc03Y5INc8tIHL1kkl8VawOWy7g7wezckcZFr6u s/5XN5ZIWng1QV2g+G5ipvayFYAyAInp/2ggA3319p1o75fu0cmzJbtb6SwKf1ET 48tapRVue4ym1jYm+OGTRymSVf+/XBc= -----END CERTIFICATE-----Generated at Mon Aug 4 19:04:31 2025 by rpki-client