$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/8d1a1226-fd95-3745-96b5-e43dfde89699.roa File: 8d1a1226-fd95-3745-96b5-e43dfde89699.roa (raw, json) Hash identifier: 0Lj26Ll6uJNmCIRXsUWVR1SHPr6rVSeOaPaoEPWzTP0= Subject key identifier: 29:75:42:75:42:E0:0E:EB:AA:0D:58:D4:10:E8:65:12:E6:DA:50:47 Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Certificate serial: 010D0C9F4328584ED001D0BCBBEC549480AFC0C0 Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/8d1a1226-fd95-3745-96b5-e43dfde89699.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 14618 IP address blocks: 192.190.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:d0:bc:bb:ec:54:94:80:af:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=82e3fdf0-37a8-4c15-a1a8-1f76976bda12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a7:44:8e:68:fa:b9:0f:f8:0a:17:dd:19:51: 52:9b:e9:bf:0f:80:79:13:a7:b3:c3:c6:ab:6c:55: d4:f6:78:3e:8e:b4:ca:46:7f:31:3f:c8:1f:ae:e6: 62:8c:ba:42:b9:1a:c8:e5:16:ac:af:8b:1d:6a:0f: 27:83:5a:51:54:d0:4f:8f:c3:66:92:d6:52:bc:02: ff:b7:12:75:54:8e:50:93:bc:8c:5d:ab:3b:b5:b6: b4:f3:26:50:b2:cc:cb:80:7b:4e:80:77:59:65:36: f3:52:4e:b0:9a:c7:e9:c9:0c:58:7c:f8:61:e3:52: 66:2d:c1:a4:ec:37:3e:ba:c0:2a:8a:07:ea:ca:37: 9e:72:dd:3f:ed:4b:45:56:fd:fb:24:58:82:c9:17: 12:ed:af:10:08:4c:3d:d9:c6:69:38:c2:d8:e8:23: bb:fb:f7:cd:52:28:70:5b:1c:7f:e6:d8:14:2b:a1: ba:72:ee:f4:b4:de:e0:d6:52:3d:01:a0:85:41:61: 12:08:fe:03:cb:44:46:d9:32:d4:48:31:69:e8:51: a9:f6:ae:85:de:dd:06:93:d5:e4:49:49:1b:94:97: cc:43:58:04:04:f4:a9:a4:1b:49:e2:da:81:e9:f4: c8:55:6e:48:db:c0:32:5c:42:bf:b9:e7:9b:d4:0f: 78:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:75:42:75:42:E0:0E:EB:AA:0D:58:D4:10:E8:65:12:E6:DA:50:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/8d1a1226-fd95-3745-96b5-e43dfde89699.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl X509v3 Authority Key Identifier: keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer sbgp-ipAddrBlock: critical IPv4: 192.190.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:7f:72:2f:ff:61:63:fe:94:90:b1:71:d6:fd:86:87:19:9e: 84:eb:17:74:47:b9:06:59:00:2b:44:44:54:cc:4a:f8:1b:2d: a0:76:3e:a5:f7:26:7c:fd:05:22:08:f0:c7:c7:78:7f:f3:6c: 29:18:05:a4:c1:18:e6:da:41:a0:22:86:de:1e:57:45:09:26: 6b:49:26:34:16:c9:80:29:25:06:eb:a7:56:f9:25:2e:62:0e: 4d:8a:e0:a0:9c:fd:1a:f9:14:b4:cd:ce:1a:ac:2d:15:07:cd: 0d:2a:1c:d5:9b:fc:92:3e:3a:7e:2d:22:a0:5b:40:f4:25:e7: 56:41:1b:10:3d:e8:86:29:ce:24:7d:1d:fd:bf:35:af:f1:cc: 57:4e:0e:69:1c:98:01:54:53:25:64:c4:7f:46:6d:bf:ec:88: e5:4a:44:4e:ab:b7:19:86:96:71:51:c5:d2:77:d3:f0:b4:3a: 17:bf:db:8b:af:62:66:4f:45:61:ef:0e:fe:8c:7b:ed:58:78: dd:e0:12:04:06:b3:b9:cb:39:38:31:5a:80:7a:e5:c9:20:48: 84:c5:a4:9d:b1:9a:aa:38:47:85:ed:22:33:15:db:2d:fd:ba: 98:30:1e:59:2c:9d:78:81:b8:ff:6f:18:bf:16:7b:25:3d:d2: 2d:b6:3d:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAdC8u+xUlICvwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjZGE4YTAtYTNjZC00MTY5LTk1MWUtYWI2ODM4ZDZk N2YwMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk ODJlM2ZkZjAtMzdhOC00YzE1LWExYTgtMWY3Njk3NmJkYTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKdEjmj6uQ/4ChfdGVFSm+m/D4B5E6ezw8ar bFXU9ng+jrTKRn8xP8gfruZijLpCuRrI5Rasr4sdag8ng1pRVNBPj8NmktZSvAL/ txJ1VI5Qk7yMXas7tba08yZQsszLgHtOgHdZZTbzUk6wmsfpyQxYfPhh41JmLcGk 7Dc+usAqigfqyjeect0/7UtFVv37JFiCyRcS7a8QCEw92cZpOMLY6CO7+/fNUihw Wxx/5tgUK6G6cu70tN7g1lI9AaCFQWESCP4Dy0RG2TLUSDFp6FGp9q6F3t0Gk9Xk SUkblJfMQ1gEBPSppBtJ4tqB6fTIVW5I28AyXEK/ueeb1A94oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCl1QnVC4A7rqg1Y1BDoZRLm2lBHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNk YThhMC1hM2NkLTQxNjktOTUxZS1hYjY4MzhkNmQ3ZjAvOGQxYTEyMjYtZmQ5NS0z NzQ1LTk2YjUtZTQzZGZkZTg5Njk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmZjZGE4YTAtYTNjZC00MTY5LTk1 MWUtYWI2ODM4ZDZkN2YwL2ZmY2RhOGEwLWEzY2QtNDE2OS05NTFlLWFiNjgzOGQ2 ZDdmMC5jcmwwHwYDVR0jBBgwFoAUuunwIc1gU+J5R6d+X/PoDlObwL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNkYThhMC1hM2NkLTQxNjktOTUxZS1hYjY4 MzhkNmQ3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL6ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIt/ci//YWP+lJCxcdb9hocZnoTrF3RHuQZZACtERFTMSvgbLaB2PqX3 Jnz9BSII8MfHeH/zbCkYBaTBGObaQaAiht4eV0UJJmtJJjQWyYApJQbrp1b5JS5i Dk2K4KCc/Rr5FLTNzhqsLRUHzQ0qHNWb/JI+On4tIqBbQPQl51ZBGxA96IYpziR9 Hf2/Na/xzFdODmkcmAFUUyVkxH9Gbb/siOVKRE6rtxmGlnFRxdJ30/C0Ohe/24uv YmZPRWHvDv6Me+1YeN3gEgQGs7nLOTgxWoB65ckgSITFpJ2xmqo4R4XtIjMV2y39 upgwHlksnXiBuP9vGL8WeyU90i22PXM= -----END CERTIFICATE-----Generated at Thu Sep 24 06:47:02 2026 by rpki-client