$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/8d1a1226-fd95-3745-96b5-e43dfde89699.roa File: 8d1a1226-fd95-3745-96b5-e43dfde89699.roa (raw, json) Hash identifier: ccBd3mdXF6hEgeZ6PffxjiDLz4Da+N/yO0gMyfaGUVQ= Subject key identifier: 80:ED:AF:B0:01:72:B7:20:CE:DB:A2:13:40:C4:C5:2F:09:35:F1:40 Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Certificate serial: 010D0C9F4328584D4D5A41E2383FBFDE85A93000 Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/8d1a1226-fd95-3745-96b5-e43dfde89699.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 14618 IP address blocks: 192.190.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:41:e2:38:3f:bf:de:85:a9:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=31242928-10f8-452f-b946-f18e940e7c71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:94:ac:35:8b:6c:ce:20:9c:58:00:96:97:b2: 57:27:a8:2e:61:58:ca:98:d8:76:c0:fb:ca:89:6e: 2c:3d:be:af:be:08:d9:b5:4e:b0:74:c7:ba:0f:b3: 03:85:a7:d0:35:70:ec:62:f2:28:db:5e:86:77:86: 44:69:49:bb:2c:9b:f5:2d:39:9e:05:d1:fa:f4:f4: 40:e6:97:2c:14:d7:fc:85:f1:62:59:40:2f:ec:dd: 0c:7c:4f:0c:1a:aa:4d:64:f6:a2:59:01:4c:40:1e: 8f:54:28:99:a3:85:22:7f:95:c3:da:6a:61:ae:7c: ae:a1:97:5d:58:5a:9a:9f:c8:2b:8c:a1:11:6a:7a: 08:bd:00:a2:d7:81:6c:fc:26:68:0d:8b:19:6c:31: 8f:5e:c3:ea:43:05:dc:9a:a5:94:32:96:fd:66:1d: a6:bf:0b:d7:5c:0c:fc:17:59:b0:fe:84:45:cd:91: 8a:e7:d2:57:33:fd:3b:cc:11:75:65:d2:53:da:73: e1:f1:29:aa:1b:1e:9a:81:a8:7a:a1:8a:3a:cd:a8: 2b:a4:32:8e:77:4c:fc:3a:85:3e:9c:65:45:18:a5: a9:6a:64:4a:89:dc:4d:36:bc:ef:49:79:88:ed:11: f7:59:6d:0a:75:41:af:1e:39:7e:49:c7:a4:41:02: f9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:ED:AF:B0:01:72:B7:20:CE:DB:A2:13:40:C4:C5:2F:09:35:F1:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/8d1a1226-fd95-3745-96b5-e43dfde89699.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl X509v3 Authority Key Identifier: keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer sbgp-ipAddrBlock: critical IPv4: 192.190.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:c5:13:61:d9:fa:82:41:d6:a5:0f:b6:31:13:d9:11:5c:85: 38:08:1d:90:de:ae:f7:5d:55:fb:32:fd:ca:30:62:88:eb:ee: 6b:3b:be:eb:c9:cc:69:2b:45:36:8e:2f:90:09:9a:93:b0:19: 63:72:cd:9c:c2:55:df:ed:32:f2:87:8d:41:8c:20:83:72:d3: d4:9d:99:8d:5a:78:3e:d5:67:a1:75:47:a7:3a:16:06:cc:6f: 16:e8:2d:a2:3b:36:e3:d6:59:56:5b:aa:5a:49:b8:81:16:5d: db:ad:ed:54:d3:93:2a:6c:f9:98:61:e8:18:72:96:2f:3b:70: 84:da:fc:57:e9:8e:28:b3:61:74:ca:b7:75:90:88:f5:b8:82: 38:b6:a8:fa:de:2d:76:5b:e5:63:45:e1:49:d8:31:cf:fb:29: 1f:5b:7b:37:b1:19:1c:fc:3d:ff:4b:2f:8a:ed:bd:fb:a8:ae: ef:cf:8f:40:dd:77:8e:41:b9:87:55:a7:4d:61:e6:30:38:5c: d1:8a:18:38:67:51:75:08:d6:bc:7a:92:47:97:36:14:00:16: 97:d9:4f:a6:fb:88:99:52:52:12:e8:14:f5:a1:b7:28:84:52: 20:3f:4a:39:4b:4f:fa:af:41:cc:d4:6b:c6:52:63:c5:ee:d9: e5:06:29:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWkHiOD+/3oWpMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjZGE4YTAtYTNjZC00MTY5LTk1MWUtYWI2ODM4ZDZk N2YwMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk MzEyNDI5MjgtMTBmOC00NTJmLWI5NDYtZjE4ZTk0MGU3YzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpSsNYtsziCcWACWl7JXJ6guYVjKmNh2wPvK iW4sPb6vvgjZtU6wdMe6D7MDhafQNXDsYvIo216Gd4ZEaUm7LJv1LTmeBdH69PRA 5pcsFNf8hfFiWUAv7N0MfE8MGqpNZPaiWQFMQB6PVCiZo4Uif5XD2mphrnyuoZdd WFqan8grjKERanoIvQCi14Fs/CZoDYsZbDGPXsPqQwXcmqWUMpb9Zh2mvwvXXAz8 F1mw/oRFzZGK59JXM/07zBF1ZdJT2nPh8SmqGx6agah6oYo6zagrpDKOd0z8OoU+ nGVFGKWpamRKidxNNrzvSXmI7RH3WW0KdUGvHjl+ScekQQL5cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDtr7ABcrcgztuiE0DExS8JNfFAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNk YThhMC1hM2NkLTQxNjktOTUxZS1hYjY4MzhkNmQ3ZjAvOGQxYTEyMjYtZmQ5NS0z NzQ1LTk2YjUtZTQzZGZkZTg5Njk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmZjZGE4YTAtYTNjZC00MTY5LTk1 MWUtYWI2ODM4ZDZkN2YwL2ZmY2RhOGEwLWEzY2QtNDE2OS05NTFlLWFiNjgzOGQ2 ZDdmMC5jcmwwHwYDVR0jBBgwFoAUuunwIc1gU+J5R6d+X/PoDlObwL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNkYThhMC1hM2NkLTQxNjktOTUxZS1hYjY4 MzhkNmQ3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL6ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALrFE2HZ+oJB1qUPtjET2RFchTgIHZDervddVfsy/cowYojr7ms7vuvJ zGkrRTaOL5AJmpOwGWNyzZzCVd/tMvKHjUGMIINy09SdmY1aeD7VZ6F1R6c6FgbM bxboLaI7NuPWWVZbqlpJuIEWXdut7VTTkyps+Zhh6Bhyli87cITa/FfpjiizYXTK t3WQiPW4gji2qPreLXZb5WNF4UnYMc/7KR9bezexGRz8Pf9LL4rtvfuoru/Pj0Dd d45BuYdVp01h5jA4XNGKGDhnUXUI1rx6kkeXNhQAFpfZT6b7iJlSUhLoFPWhtyiE UiA/SjlLT/qvQczUa8ZSY8Xu2eUGKYE= -----END CERTIFICATE-----Generated at Fri Apr 17 07:35:29 2026 by rpki-client