$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/6bb9aaee-b794-32ef-9cbe-5db764601630.roa File: 6bb9aaee-b794-32ef-9cbe-5db764601630.roa (raw, json) Hash identifier: JRLJwO3Ht8kFbLl5EGKA7QS/I31rfW9YzyP6GvXojBE= Subject key identifier: B1:EC:6D:BA:23:D8:77:33:46:D2:60:48:2D:5B:7C:DD:15:96:20:61 Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Certificate serial: 010D0C9F4328584ED001E68FA83A4CC692833A00 Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/6bb9aaee-b794-32ef-9cbe-5db764601630.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 192.190.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:e6:8f:a8:3a:4c:c6:92:83:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=9d40c711-ccc4-4377-adbe-1b0386c63b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:45:ff:68:83:41:51:3d:00:5c:5c:08:3a:79: 2a:15:d5:d4:76:4d:71:f5:e9:fa:38:f5:a8:32:8a: 41:bd:7e:ce:b6:58:e7:1c:51:65:66:fd:9a:65:86: 37:cc:ae:ee:34:6b:49:1f:ce:1f:16:9e:9d:79:81: ee:46:e1:57:61:95:46:2d:07:72:9e:5a:93:3b:ee: 7e:b9:e1:a1:f9:7d:27:f5:e4:80:3d:20:55:d3:a4: 5c:42:09:b4:42:9e:61:03:f5:53:63:e1:20:28:9a: fc:d9:a0:11:5a:7b:39:a8:3c:24:b1:c8:da:76:e2: 21:80:d1:08:38:2e:9e:6f:e7:16:d4:76:cd:bd:66: b6:92:5d:9b:19:29:e0:47:2c:cd:84:b7:47:fa:1b: 94:1d:72:a2:cc:bd:21:54:c4:80:2d:65:67:e1:a9: 13:c3:30:50:73:c7:29:f5:75:fe:5a:29:0a:52:1d: 1b:92:dd:9a:79:9d:7e:51:77:08:42:d2:8e:92:23: 16:68:4c:cb:ce:cb:ee:82:ae:b4:cf:d6:b2:28:ec: 71:ad:6d:35:8f:a8:5c:09:d0:48:b0:ae:c0:fe:a8: 73:ec:51:6d:4d:5f:83:d1:ac:2d:ce:4a:06:cb:6e: 65:11:c5:77:42:c4:a7:72:df:cf:71:91:5c:17:93: b8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EC:6D:BA:23:D8:77:33:46:D2:60:48:2D:5B:7C:DD:15:96:20:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/6bb9aaee-b794-32ef-9cbe-5db764601630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl X509v3 Authority Key Identifier: keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer sbgp-ipAddrBlock: critical IPv4: 192.190.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:05:74:41:02:2a:44:39:f6:16:cf:87:98:c1:8f:a8:49:0b: 8e:65:d0:4e:48:fe:30:6f:1b:94:1e:e3:11:df:2c:79:ae:82: 79:1c:3d:03:38:a5:d1:77:a1:20:f4:95:69:32:de:f0:4e:5e: 91:88:07:5c:e8:2d:66:ef:c7:e3:7b:d7:14:17:0f:7e:3f:2a: 5a:61:5d:ce:30:47:cc:39:28:6b:83:2f:e9:b0:e2:44:0c:b7: bb:a4:df:cb:36:ff:5d:14:3e:75:a3:5e:a1:b6:4f:35:3d:ae: b1:5d:c5:b1:44:3c:d6:2b:fb:e8:96:e1:ce:97:a2:62:51:05: fa:f7:81:ac:bd:b0:9e:1e:49:fc:d4:d2:8e:94:23:97:0d:65: 34:08:b0:ff:30:58:88:36:95:ca:81:f6:a2:35:47:ca:72:73: 72:47:b5:5d:7c:70:6d:03:a9:b8:b2:72:65:68:e6:52:13:25: 6d:24:b5:9d:68:76:e7:cd:3e:10:bf:c4:12:4a:29:04:66:23: aa:59:60:7d:43:38:25:4b:b4:74:2d:98:5c:26:85:76:31:63: 64:e6:af:b9:f6:86:85:4f:54:26:52:a5:a7:62:0b:bf:c4:70: 4c:9d:dd:e1:af:f9:cc:31:a0:90:3e:32:1d:3c:64:b2:1c:e5: b7:ec:aa:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAeaPqDpMxpKDOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjZGE4YTAtYTNjZC00MTY5LTk1MWUtYWI2ODM4ZDZk N2YwMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk OWQ0MGM3MTEtY2NjNC00Mzc3LWFkYmUtMWIwMzg2YzYzYjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEX/aINBUT0AXFwIOnkqFdXUdk1x9en6OPWo MopBvX7OtljnHFFlZv2aZYY3zK7uNGtJH84fFp6deYHuRuFXYZVGLQdynlqTO+5+ ueGh+X0n9eSAPSBV06RcQgm0Qp5hA/VTY+EgKJr82aARWns5qDwkscjaduIhgNEI OC6eb+cW1HbNvWa2kl2bGSngRyzNhLdH+huUHXKizL0hVMSALWVn4akTwzBQc8cp 9XX+WikKUh0bkt2aeZ1+UXcIQtKOkiMWaEzLzsvugq60z9ayKOxxrW01j6hcCdBI sK7A/qhz7FFtTV+D0awtzkoGy25lEcV3QsSnct/PcZFcF5O4CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHsbboj2HczRtJgSC1bfN0VliBhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNk YThhMC1hM2NkLTQxNjktOTUxZS1hYjY4MzhkNmQ3ZjAvNmJiOWFhZWUtYjc5NC0z MmVmLTljYmUtNWRiNzY0NjAxNjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmZjZGE4YTAtYTNjZC00MTY5LTk1 MWUtYWI2ODM4ZDZkN2YwL2ZmY2RhOGEwLWEzY2QtNDE2OS05NTFlLWFiNjgzOGQ2 ZDdmMC5jcmwwHwYDVR0jBBgwFoAUuunwIc1gU+J5R6d+X/PoDlObwL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNkYThhMC1hM2NkLTQxNjktOTUxZS1hYjY4 MzhkNmQ3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoFdEECKkQ59hbPh5jBj6hJC45l0E5I/jBvG5Qe4xHfLHmugnkcPQM4 pdF3oSD0lWky3vBOXpGIB1zoLWbvx+N71xQXD34/KlphXc4wR8w5KGuDL+mw4kQM t7uk38s2/10UPnWjXqG2TzU9rrFdxbFEPNYr++iW4c6XomJRBfr3gay9sJ4eSfzU 0o6UI5cNZTQIsP8wWIg2lcqB9qI1R8pyc3JHtV18cG0DqbiycmVo5lITJW0ktZ1o dufNPhC/xBJKKQRmI6pZYH1DOCVLtHQtmFwmhXYxY2Tmr7n2hoVPVCZSpadiC7/E cEyd3eGv+cwxoJA+Mh08ZLIc5bfsqhU= -----END CERTIFICATE-----Generated at Fri Sep 25 18:08:36 2026 by rpki-client