$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/5cab67b5-147a-3e1a-9b15-b6a52b3e76de.roa File: 5cab67b5-147a-3e1a-9b15-b6a52b3e76de.roa (raw, json) Hash identifier: xDL/ABNfOHxhF5Gzr4siOwzjnOgXoAh43xyTAGrdRcQ= Subject key identifier: 99:6B:77:94:8C:CC:C9:B0:2B:91:65:2E:79:D5:63:47:3E:45:33:CD Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Certificate serial: 010D0C9F4328584B8EACD8159E7DEDBFC92BB780 Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/5cab67b5-147a-3e1a-9b15-b6a52b3e76de.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 192.190.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:d8:15:9e:7d:ed:bf:c9:2b:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=07a03a1f-ee12-49f7-9be4-e035d72467af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6f:89:01:b3:d2:4b:a5:7f:bb:18:68:d7:f4: 5c:8b:f3:82:9e:6d:28:32:47:1f:7a:13:c9:4e:54: 3c:c2:7f:70:03:4f:b1:4f:e2:0c:1f:db:dd:4f:35: ab:2e:7f:3c:88:ae:3a:f5:76:10:2c:ad:49:90:d8: b1:9c:86:aa:e3:33:d3:8e:43:96:b8:8c:a5:83:c7: fe:b3:df:61:2c:9f:2c:25:c2:18:2c:5b:f4:0d:76: f6:07:0a:88:61:bd:b3:ae:0b:07:5a:d5:4d:40:d9: f6:78:f2:46:71:9e:98:c5:15:1f:e2:f5:2c:1b:46: f0:d1:74:11:b1:13:ca:24:70:c4:79:8b:ec:74:89: 8b:dc:9c:70:be:9b:27:43:fd:1d:2b:21:d2:7f:ed: e2:99:74:6d:fa:96:f3:cf:9b:88:9b:cc:ea:74:36: 7b:6f:71:88:e5:13:0e:9e:48:49:b6:1b:03:50:6c: a5:e2:91:1d:38:df:7c:82:5b:43:2c:d6:36:b7:72: cc:86:6f:b8:d1:d9:c3:df:f3:13:e7:8a:e7:a2:07: 21:b6:73:16:f8:92:be:bb:cd:0e:34:3e:ab:26:63: 93:8a:ea:cd:65:5b:2a:3b:c1:fb:c2:f9:74:47:41: 5f:f3:4b:09:f9:8e:20:3b:67:62:71:1f:76:9a:53: 00:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:6B:77:94:8C:CC:C9:B0:2B:91:65:2E:79:D5:63:47:3E:45:33:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/5cab67b5-147a-3e1a-9b15-b6a52b3e76de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl X509v3 Authority Key Identifier: keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer sbgp-ipAddrBlock: critical IPv4: 192.190.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:95:e6:eb:e8:0f:77:4c:cc:39:99:26:40:8f:4c:bf:19:64: 42:1c:37:60:cd:c5:7c:6d:68:18:29:76:bb:39:9c:af:75:55: 50:2d:4f:c4:2c:53:ff:73:b8:45:c6:e0:3a:45:8a:74:3b:ab: 25:6c:0e:e1:97:a6:89:da:5a:52:57:92:cc:b2:df:b2:c7:16: 76:f3:c6:8d:bf:50:19:d3:e9:21:7c:e9:41:5b:88:bc:08:2b: a6:d4:6a:e9:5a:0e:0d:ed:23:99:31:3b:33:48:65:f5:62:1f: 56:ef:da:95:59:86:91:67:ba:56:4e:2b:18:21:a3:4c:5d:19: df:06:78:96:f5:43:99:b9:67:d2:f3:6a:eb:56:39:18:3e:b4: 9c:72:18:c7:fd:b7:d4:18:55:4c:48:7b:23:62:42:68:7b:36: ac:12:56:d9:c2:47:70:8b:85:e0:fd:18:f5:a7:8e:3c:2e:73: 64:e8:e9:9f:a4:93:d0:e6:e9:5f:f2:ec:ae:3b:6c:9f:8a:b6: 39:fb:cf:00:5e:c9:5a:cb:4f:6a:c8:0f:76:f5:33:db:91:3f: 12:6f:d3:8d:c3:56:16:78:a8:81:6e:39:65:50:e3:76:e1:82: 43:54:eb:00:8a:58:08:47:27:a0:46:5a:46:52:fb:a2:7c:56: 68:cc:45:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrNgVnn3tv8krt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjZGE4YTAtYTNjZC00MTY5LTk1MWUtYWI2ODM4ZDZk N2YwMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MDdhMDNhMWYtZWUxMi00OWY3LTliZTQtZTAzNWQ3MjQ2N2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2+JAbPSS6V/uxho1/Rci/OCnm0oMkcfehPJ TlQ8wn9wA0+xT+IMH9vdTzWrLn88iK469XYQLK1JkNixnIaq4zPTjkOWuIylg8f+ s99hLJ8sJcIYLFv0DXb2BwqIYb2zrgsHWtVNQNn2ePJGcZ6YxRUf4vUsG0bw0XQR sRPKJHDEeYvsdImL3JxwvpsnQ/0dKyHSf+3imXRt+pbzz5uIm8zqdDZ7b3GI5RMO nkhJthsDUGyl4pEdON98gltDLNY2t3LMhm+40dnD3/MT54rnogchtnMW+JK+u80O ND6rJmOTiurNZVsqO8H7wvl0R0Ff80sJ+Y4gO2dicR92mlMA8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlrd5SMzMmwK5FlLnnVY0c+RTPNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNk YThhMC1hM2NkLTQxNjktOTUxZS1hYjY4MzhkNmQ3ZjAvNWNhYjY3YjUtMTQ3YS0z ZTFhLTliMTUtYjZhNTJiM2U3NmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmZjZGE4YTAtYTNjZC00MTY5LTk1 MWUtYWI2ODM4ZDZkN2YwL2ZmY2RhOGEwLWEzY2QtNDE2OS05NTFlLWFiNjgzOGQ2 ZDdmMC5jcmwwHwYDVR0jBBgwFoAUuunwIc1gU+J5R6d+X/PoDlObwL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNkYThhMC1hM2NkLTQxNjktOTUxZS1hYjY4 MzhkNmQ3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuV5uvoD3dMzDmZJkCPTL8ZZEIcN2DNxXxtaBgpdrs5nK91VVAtT8Qs U/9zuEXG4DpFinQ7qyVsDuGXponaWlJXksyy37LHFnbzxo2/UBnT6SF86UFbiLwI K6bUaulaDg3tI5kxOzNIZfViH1bv2pVZhpFnulZOKxgho0xdGd8GeJb1Q5m5Z9Lz autWORg+tJxyGMf9t9QYVUxIeyNiQmh7NqwSVtnCR3CLheD9GPWnjjwuc2To6Z+k k9Dm6V/y7K47bJ+Ktjn7zwBeyVrLT2rID3b1M9uRPxJv043DVhZ4qIFuOWVQ43bh gkNU6wCKWAhHJ6BGWkZS+6J8VmjMRc8= -----END CERTIFICATE-----Generated at Wed Nov 5 03:01:29 2025 by rpki-client