$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/5cab67b5-147a-3e1a-9b15-b6a52b3e76de.roa File: 5cab67b5-147a-3e1a-9b15-b6a52b3e76de.roa (raw, json) Hash identifier: 89GFb7Tb49kKL4pEwEpCqpu4DLPtSUz0UEyBEdvTqWg= Subject key identifier: 32:9A:D3:45:13:EE:C4:C4:F9:2E:BC:AD:F5:2A:EA:85:0E:3D:D0:B8 Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Certificate serial: 010D0C9F4328584D4D5A619124607E43CB7C1E80 Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/5cab67b5-147a-3e1a-9b15-b6a52b3e76de.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 14618 IP address blocks: 192.190.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:61:91:24:60:7e:43:cb:7c:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=989b0303-fa73-426f-a9d8-72e9c93dbc1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2d:c0:64:1d:ae:48:45:cd:6f:9e:16:1b:a9: 8d:8f:c1:e5:04:dd:f5:8b:8e:6d:66:3f:0a:77:6b: 90:c1:a7:2b:32:d8:93:0a:6c:f1:66:93:bc:ed:d5: 1d:d5:fa:af:a3:dd:fd:dc:01:28:41:35:0a:5c:61: 36:59:af:9a:eb:fb:00:e2:45:e7:e5:7b:1a:8c:e9: c2:2b:8a:8f:08:5f:98:82:6c:22:b3:8a:95:ee:6b: 66:e0:9f:81:d5:07:c1:8d:a5:9f:77:be:1c:67:13: d9:e0:5a:6e:2b:e2:87:3b:13:89:90:a5:3f:87:72: ac:ab:a0:d8:b1:b4:6c:21:1c:e3:05:1b:bb:a6:51: 1f:9a:b0:44:85:47:fb:d6:28:fe:30:04:cd:4e:1f: a1:a1:66:42:cc:67:01:b7:e0:09:e5:e2:ed:b4:68: 88:91:29:93:39:97:10:13:69:b3:23:cf:92:97:94: df:c0:34:22:88:41:75:d6:b7:3e:59:73:16:d9:c7: 2a:4f:ca:91:10:9c:b0:05:e7:fd:b5:84:3f:11:d9: ae:e8:18:17:91:25:e0:5a:40:a4:39:c7:05:5e:fd: dd:cc:d4:94:4f:4b:ea:8a:45:6c:1c:b0:e7:a6:44: ba:b6:c5:26:7a:d9:33:62:05:0b:67:af:ad:76:cc: e6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:9A:D3:45:13:EE:C4:C4:F9:2E:BC:AD:F5:2A:EA:85:0E:3D:D0:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/5cab67b5-147a-3e1a-9b15-b6a52b3e76de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl X509v3 Authority Key Identifier: keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer sbgp-ipAddrBlock: critical IPv4: 192.190.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:d0:cc:31:4d:ea:4b:64:e6:3d:23:1a:e8:ec:2c:c5:53:76: ae:d6:20:b5:e4:25:4b:ea:a3:d2:ef:f1:25:c9:56:92:87:db: f4:55:47:c3:95:75:39:88:5a:23:11:85:2a:37:93:52:69:58: a9:16:31:5b:d1:fa:7d:67:6d:99:c2:89:d6:fd:83:90:44:00: 57:5c:c5:ca:4c:03:91:d1:7e:0a:48:8d:be:fa:b8:f2:c6:75: 4f:f3:4f:28:42:22:97:7b:4d:48:b3:39:9b:c1:86:7d:63:63: 0e:26:92:16:d9:35:35:9d:93:01:25:e8:40:e3:50:2f:a8:5e: ca:e3:d6:89:ec:41:c3:c4:34:b8:3e:e4:db:9f:91:b9:c7:e1: 50:b4:83:ad:1f:a0:b7:90:07:88:25:2d:5c:a8:f2:a8:7a:d5: ea:37:ca:b1:df:4c:d7:bc:1a:70:99:e9:67:5b:68:9a:ec:cc: 25:66:ec:32:57:6e:d6:9e:b4:89:75:c1:a2:64:5a:c8:ae:38: c8:e7:ce:55:64:a6:a2:94:de:75:fe:ee:84:db:5f:51:a3:1e: 6b:10:25:1b:81:0e:b8:ee:55:ea:73:f6:e0:e5:01:2c:6e:d8: 96:01:dd:f7:06:3c:0c:74:f5:b9:ef:74:c3:0b:2a:96:bb:c3: 0b:14:14:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWmGRJGB+Q8t8HoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjZGE4YTAtYTNjZC00MTY5LTk1MWUtYWI2ODM4ZDZk N2YwMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk OTg5YjAzMDMtZmE3My00MjZmLWE5ZDgtNzJlOWM5M2RiYzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky3AZB2uSEXNb54WG6mNj8HlBN31i45tZj8K d2uQwacrMtiTCmzxZpO87dUd1fqvo9393AEoQTUKXGE2Wa+a6/sA4kXn5XsajOnC K4qPCF+Ygmwis4qV7mtm4J+B1QfBjaWfd74cZxPZ4FpuK+KHOxOJkKU/h3Ksq6DY sbRsIRzjBRu7plEfmrBEhUf71ij+MATNTh+hoWZCzGcBt+AJ5eLttGiIkSmTOZcQ E2mzI8+Sl5TfwDQiiEF11rc+WXMW2ccqT8qREJywBef9tYQ/Edmu6BgXkSXgWkCk OccFXv3dzNSUT0vqikVsHLDnpkS6tsUmetkzYgULZ6+tdszmfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKa00UT7sTE+S68rfUq6oUOPdC4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNk YThhMC1hM2NkLTQxNjktOTUxZS1hYjY4MzhkNmQ3ZjAvNWNhYjY3YjUtMTQ3YS0z ZTFhLTliMTUtYjZhNTJiM2U3NmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmZjZGE4YTAtYTNjZC00MTY5LTk1 MWUtYWI2ODM4ZDZkN2YwL2ZmY2RhOGEwLWEzY2QtNDE2OS05NTFlLWFiNjgzOGQ2 ZDdmMC5jcmwwHwYDVR0jBBgwFoAUuunwIc1gU+J5R6d+X/PoDlObwL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNkYThhMC1hM2NkLTQxNjktOTUxZS1hYjY4 MzhkNmQ3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALnQzDFN6ktk5j0jGujsLMVTdq7WILXkJUvqo9Lv8SXJVpKH2/RVR8OV dTmIWiMRhSo3k1JpWKkWMVvR+n1nbZnCidb9g5BEAFdcxcpMA5HRfgpIjb76uPLG dU/zTyhCIpd7TUizOZvBhn1jYw4mkhbZNTWdkwEl6EDjUC+oXsrj1onsQcPENLg+ 5NufkbnH4VC0g60foLeQB4glLVyo8qh61eo3yrHfTNe8GnCZ6WdbaJrszCVm7DJX btaetIl1waJkWsiuOMjnzlVkpqKU3nX+7oTbX1GjHmsQJRuBDrjuVepz9uDlASxu 2JYB3fcGPAx09bnvdMMLKpa7wwsUFMo= -----END CERTIFICATE-----Generated at Fri Apr 17 13:14:14 2026 by rpki-client