$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa File: 6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa (raw, json) Hash identifier: wu081ZhQn1oK07+eDuqQ5hwDCupwlVbcmwLAwz+WU9c= Subject key identifier: 09:FB:E5:46:38:D7:D6:CA:E7:93:6E:FE:A2:3D:3C:B6:07:26:16:49 Certificate issuer: /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Certificate serial: 010D0C9F4328584CB121B92B7EF7E68B1F707B00 Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 16509 IP address blocks: 192.175.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:b9:2b:7e:f7:e6:8b:1f:70:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=c1939b13-e54f-42c8-a7e0-050ba4b00afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:65:9e:bd:6d:11:54:54:a0:f6:84:d1:99:6b: b4:d4:0d:c9:ea:82:f4:da:44:ca:43:ca:dc:39:69: 97:3f:6e:cf:75:6d:35:4f:40:6f:47:fe:9a:08:8b: 7b:2d:5d:e3:f5:51:11:c2:19:0a:50:db:27:ca:4f: 6f:7a:01:0f:45:6c:0c:4a:ab:9b:00:fc:52:a7:69: f6:27:7d:df:76:3f:01:af:ad:3b:91:40:96:6f:9c: 26:c8:83:c3:4d:8b:9e:9a:68:16:ce:9a:02:7c:5d: 45:c7:f0:42:a1:fe:33:2c:57:cc:8a:a7:4a:9f:b3: 9f:e8:c6:2f:aa:92:a9:a0:cf:80:aa:59:6b:50:41: e8:25:fe:30:69:f8:3b:64:82:1a:0a:1d:0d:a5:08: 62:74:b2:77:48:84:c6:9b:ef:50:d7:7a:66:ad:c5: b3:7c:cf:ac:3c:8e:7a:9a:5a:2f:29:89:90:a0:62: 6f:89:95:ac:c8:04:61:56:25:c5:e8:48:f5:c7:1b: 4c:e8:a2:7a:1f:ee:d6:c1:3d:62:0a:87:dd:2e:a0: c4:6b:4b:43:3c:01:7a:89:c3:78:d5:b4:2a:be:ca: 70:0a:0a:fc:66:12:74:72:15:f6:a2:7e:8a:d4:cb: 6d:5c:64:ba:c9:b2:ff:1c:1c:89:bc:1c:f2:87:71: 9e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:FB:E5:46:38:D7:D6:CA:E7:93:6E:FE:A2:3D:3C:B6:07:26:16:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl X509v3 Authority Key Identifier: keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer sbgp-ipAddrBlock: critical IPv4: 192.175.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:78:28:bc:86:0a:f9:98:39:67:ea:bd:be:7f:bb:4f:e6:47: e8:e4:b5:6b:f6:e3:51:de:de:16:a8:62:27:56:fe:d9:c4:c1: b3:89:aa:bb:80:15:ec:ba:2c:ff:da:3b:72:3f:fc:dc:ac:ff: f3:d2:36:0d:34:d8:16:8d:da:1e:08:1a:67:62:4d:b1:3b:74: 17:11:da:73:9b:bd:0c:89:f0:8a:9c:80:6e:88:2c:43:85:3a: 98:b6:dc:91:f3:f8:6a:b7:00:0a:72:fb:b8:e6:7d:02:39:26: 86:28:cc:47:97:03:eb:b5:66:a7:38:1f:12:02:8d:59:48:6e: 02:2f:6a:24:bf:31:e3:df:41:ec:4d:b9:21:e0:1a:8c:39:97: c9:06:95:2a:32:d6:3b:f3:f3:03:31:53:ab:21:1a:29:5f:28: 50:4e:74:cc:76:0a:59:fe:bb:69:cb:18:fa:b2:5f:7e:11:c4: f0:a0:1c:e7:0d:fa:ad:df:1e:6d:f4:ad:a6:d9:b4:8e:e3:3b: 1b:65:77:70:2d:d4:e5:2c:1c:de:81:a0:db:63:f1:17:09:d3: ec:6a:0e:72:7a:c1:21:c2:ca:76:73:b6:5e:82:e9:13:7a:ea: c9:e0:b0:dd:d3:04:0d:41:c3:dc:ce:91:de:17:d1:e2:f5:d6: 6d:45:c9:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIbkrfvfmix9wewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1 YTA0MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk YzE5MzliMTMtZTU0Zi00MmM4LWE3ZTAtMDUwYmE0YjAwYWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWWevW0RVFSg9oTRmWu01A3J6oL02kTKQ8rc OWmXP27PdW01T0BvR/6aCIt7LV3j9VERwhkKUNsnyk9vegEPRWwMSqubAPxSp2n2 J33fdj8Br607kUCWb5wmyIPDTYuemmgWzpoCfF1Fx/BCof4zLFfMiqdKn7Of6MYv qpKpoM+AqllrUEHoJf4wafg7ZIIaCh0NpQhidLJ3SITGm+9Q13pmrcWzfM+sPI56 mlovKYmQoGJviZWsyARhViXF6Ej1xxtM6KJ6H+7WwT1iCofdLqDEa0tDPAF6icN4 1bQqvspwCgr8ZhJ0chX2on6K1MttXGS6ybL/HByJvBzyh3GeewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAn75UY419bK55Nu/qI9PLYHJhZJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNmUyZTZhZGMtYzk3OS0z ZTlhLWI1ZjUtNThjOWEzYzU4NDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwK8DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ54KLyGCvmYOWfqvb5/u0/mR+jktWv241He3haoYidW/tnEwbOJqruA Fey6LP/aO3I//Nys//PSNg002BaN2h4IGmdiTbE7dBcR2nObvQyJ8IqcgG6ILEOF Opi23JHz+Gq3AApy+7jmfQI5JoYozEeXA+u1Zqc4HxICjVlIbgIvaiS/MePfQexN uSHgGow5l8kGlSoy1jvz8wMxU6shGilfKFBOdMx2Cln+u2nLGPqyX34RxPCgHOcN +q3fHm30rabZtI7jOxtld3At1OUsHN6BoNtj8RcJ0+xqDnJ6wSHCynZztl6C6RN6 6sngsN3TBA1Bw9zOkd4X0eL11m1FyeI= -----END CERTIFICATE-----Generated at Mon Mar 2 08:19:21 2026 by rpki-client