$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/cc973206-05ab-3b6d-9739-581605c29707.roa File: cc973206-05ab-3b6d-9739-581605c29707.roa (raw, json) Hash identifier: EWTYLpPPlgRv7WaH5cFJpIgXkQXJX079EFuCXf9CaPQ= Subject key identifier: 03:9B:C1:15:CD:96:EB:23:9C:4F:DB:44:3C:31:EB:C4:10:EB:E0:42 Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Certificate serial: 010D0C9F4328584B970CD7543E5CA710DD594A80 Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/cc973206-05ab-3b6d-9739-581605c29707.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 16509 IP address blocks: 192.175.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:d7:54:3e:5c:a7:10:dd:59:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=b6ee9e07-8101-47f1-8d05-503a0814f899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:75:f8:5f:ee:88:ee:5e:e7:aa:3e:16:cd:87: 5a:a4:c8:56:c5:15:d3:f5:09:ad:ff:72:89:6d:27: dd:45:11:be:06:de:7e:4c:fd:5a:89:64:e8:fa:07: 3c:9f:c8:57:3c:a1:59:31:3d:ec:d5:60:e4:bc:cf: a5:11:e8:52:36:e2:ec:d2:08:52:c3:29:56:ab:3b: 23:1d:8f:ac:0f:43:23:81:ad:cd:e2:ea:9b:97:bf: 34:32:8c:7e:75:71:12:7e:9e:87:4e:a9:b6:b4:ec: a9:1c:28:ac:ca:c4:47:8d:42:36:7c:d5:e3:38:e6: bd:eb:9b:45:2a:1f:cb:58:8e:f6:6a:75:ac:b5:99: d3:51:ee:00:c0:f1:93:90:6c:cb:72:b1:af:88:ad: e7:f3:f3:c9:06:a4:72:18:a1:09:3c:3f:40:4e:ee: 43:28:57:50:c0:de:24:30:d1:93:85:48:63:03:75: 4b:6b:ff:ca:90:91:e4:5e:0a:b6:c9:e8:e3:54:0d: aa:17:8d:45:b2:9f:4b:71:61:53:f6:11:5d:ff:4a: c3:66:79:5e:1b:f0:35:ce:50:fd:44:5a:b6:69:79: 3c:79:ea:1f:f6:bc:57:2f:6f:c7:13:ae:6c:17:1a: cd:ae:7c:30:e7:fa:36:ba:61:a6:43:91:11:88:4e: 3f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9B:C1:15:CD:96:EB:23:9C:4F:DB:44:3C:31:EB:C4:10:EB:E0:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/cc973206-05ab-3b6d-9739-581605c29707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl X509v3 Authority Key Identifier: keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer sbgp-ipAddrBlock: critical IPv4: 192.175.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:34:b8:da:12:e1:dc:37:93:73:93:ea:73:97:48:4c:e6:2d: f3:90:66:8c:85:ab:b0:3d:94:b9:a9:3b:6e:68:51:21:f3:45: 3e:59:98:79:a1:8d:2d:f2:9a:93:75:33:6d:e6:ee:5e:c9:4c: d8:31:54:7e:aa:c9:f6:38:15:b9:b7:46:bb:a9:7f:fb:56:be: d5:82:9c:f6:95:49:16:0a:ad:d2:08:a3:fb:94:28:ce:36:ee: 55:bf:26:32:dc:99:f9:79:67:02:aa:fc:2d:3f:bc:cf:74:37: 2d:49:c7:c7:2b:55:d0:c4:66:d8:ae:0c:2e:c8:2b:88:7c:43: af:70:13:df:b0:e9:b3:8e:6a:4b:ab:0b:e5:58:33:68:27:3c: 7a:75:e8:df:74:37:be:c4:85:85:c1:fa:6f:fb:5d:40:8e:d9: bd:6a:a7:2f:2e:45:f9:f5:dd:c9:ee:28:d7:af:7a:6f:f3:47: fe:6c:ed:f6:04:16:de:d2:90:85:22:0a:4c:a8:a3:fd:67:06: 51:8e:1c:8e:49:d3:88:4f:ec:53:4f:8f:8c:e4:33:00:2e:f0: a9:d4:02:48:fc:d2:bd:03:29:9f:bc:c9:00:b0:3a:6f:58:0a: 38:ad:3c:d5:13:a1:f6:2e:a8:a4:66:5c:3f:c6:39:a9:bb:f2: 8a:44:8a:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDNdUPlynEN1ZSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjZGE4YTAtYTNjZC00MTY5LTk1MWUtYWI2ODM4ZDZk N2YwMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YjZlZTllMDctODEwMS00N2YxLThkMDUtNTAzYTA4MTRmODk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXX4X+6I7l7nqj4WzYdapMhWxRXT9Qmt/3KJ bSfdRRG+Bt5+TP1aiWTo+gc8n8hXPKFZMT3s1WDkvM+lEehSNuLs0ghSwylWqzsj HY+sD0Mjga3N4uqbl780Mox+dXESfp6HTqm2tOypHCisysRHjUI2fNXjOOa965tF Kh/LWI72anWstZnTUe4AwPGTkGzLcrGviK3n8/PJBqRyGKEJPD9ATu5DKFdQwN4k MNGThUhjA3VLa//KkJHkXgq2yejjVA2qF41Fsp9LcWFT9hFd/0rDZnleG/A1zlD9 RFq2aXk8eeof9rxXL2/HE65sFxrNrnww5/o2umGmQ5ERiE4/wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAObwRXNlusjnE/bRDwx68QQ6+BCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNk YThhMC1hM2NkLTQxNjktOTUxZS1hYjY4MzhkNmQ3ZjAvY2M5NzMyMDYtMDVhYi0z YjZkLTk3MzktNTgxNjA1YzI5NzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmZjZGE4YTAtYTNjZC00MTY5LTk1 MWUtYWI2ODM4ZDZkN2YwL2ZmY2RhOGEwLWEzY2QtNDE2OS05NTFlLWFiNjgzOGQ2 ZDdmMC5jcmwwHwYDVR0jBBgwFoAUuunwIc1gU+J5R6d+X/PoDlObwL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNkYThhMC1hM2NkLTQxNjktOTUxZS1hYjY4 MzhkNmQ3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwK8FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFs0uNoS4dw3k3OT6nOXSEzmLfOQZoyFq7A9lLmpO25oUSHzRT5ZmHmh jS3ympN1M23m7l7JTNgxVH6qyfY4Fbm3Rrupf/tWvtWCnPaVSRYKrdIIo/uUKM42 7lW/JjLcmfl5ZwKq/C0/vM90Ny1Jx8crVdDEZtiuDC7IK4h8Q69wE9+w6bOOakur C+VYM2gnPHp16N90N77EhYXB+m/7XUCO2b1qpy8uRfn13cnuKNevem/zR/5s7fYE Ft7SkIUiCkyoo/1nBlGOHI5J04hP7FNPj4zkMwAu8KnUAkj80r0DKZ+8yQCwOm9Y CjitPNUTofYuqKRmXD/GOam78opEits= -----END CERTIFICATE-----Generated at Wed Nov 5 10:37:59 2025 by rpki-client