$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/8d1a1226-fd95-3745-96b5-e43dfde89699.roa File: 8d1a1226-fd95-3745-96b5-e43dfde89699.roa (raw, json) Hash identifier: kZnIIiVNJgt571MEYNNpd8mOI8wsnfKyr3VcdxcHQTM= Subject key identifier: D0:3E:9D:8D:52:9D:F5:F4:92:21:07:75:53:3A:9D:F4:F0:58:AF:38 Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Certificate serial: 010D0C9F4328584B8EACBDFBA6C3DFAA85738A40 Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/8d1a1226-fd95-3745-96b5-e43dfde89699.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 14618 IP address blocks: 192.190.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:bd:fb:a6:c3:df:aa:85:73:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=51fa2366-12f2-4a7b-a903-7539dd32c8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:95:7b:96:d6:ef:e9:e1:51:26:4a:4b:03:6d: 04:4e:40:71:3f:a9:50:6f:5b:af:9e:84:e2:c0:04: b3:d1:bc:34:fb:85:a1:8e:1b:00:26:5c:ec:f5:5a: 13:42:25:38:07:e3:2c:b7:31:83:37:76:d4:b7:57: 12:4b:9d:5d:d7:0a:2c:69:3a:4e:10:07:a7:0a:2d: 11:03:57:89:c5:95:38:f4:53:11:6f:43:ba:02:c6: 4e:e0:25:f6:55:fe:51:ef:83:b3:e8:bc:d4:87:65: 5b:a9:16:53:05:aa:c2:38:5c:0b:6c:fa:1d:14:85: 42:16:39:f6:f4:31:80:72:38:be:1e:73:27:15:7c: a9:d6:5c:8d:43:32:e7:94:8a:de:69:2a:09:bf:ff: b2:0d:db:e5:c5:2f:8d:9a:bc:95:52:18:78:fc:04: d5:fd:1f:f3:1f:65:da:25:0e:27:10:a0:ca:04:18: 94:45:1f:92:23:45:c3:5f:50:0e:b4:2a:a2:03:b7: 5a:fa:a9:7d:d1:57:27:41:85:e1:41:c6:09:cf:4d: 85:cb:6d:e6:21:86:23:34:25:c3:43:72:75:61:0f: 9e:7c:d1:99:74:25:aa:f3:ef:13:ab:bf:34:d6:91: 17:e2:25:03:0d:8e:26:33:29:5f:26:7b:44:b1:d6: ee:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3E:9D:8D:52:9D:F5:F4:92:21:07:75:53:3A:9D:F4:F0:58:AF:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/8d1a1226-fd95-3745-96b5-e43dfde89699.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl X509v3 Authority Key Identifier: keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer sbgp-ipAddrBlock: critical IPv4: 192.190.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:aa:a7:b2:ee:55:95:8b:a3:ad:8d:16:f4:c2:9c:f3:bb:14: d9:69:95:95:d2:9b:ff:48:11:cd:b5:17:4b:bd:86:cc:bb:05: 54:c9:fb:fd:60:bb:7d:28:e5:66:8f:ad:08:19:0a:72:ee:c5: 85:e7:7d:d9:50:4d:35:b9:21:be:c2:cc:dc:82:bb:cc:ce:eb: 8b:a5:3e:e6:f0:78:e0:f1:5b:67:7d:f1:71:29:01:43:99:c3: b5:5e:5a:13:78:8b:87:e7:ca:fe:fc:cc:2c:da:fa:15:63:f6: b4:5c:a0:23:b0:5e:ca:0e:0d:9e:97:28:9e:52:35:44:0f:24: c9:ff:33:73:3c:9e:ea:81:da:ec:56:12:42:d0:27:cc:80:94: d3:36:d0:23:3c:1f:b5:dd:a7:a1:e9:d2:27:fb:b7:b0:e1:82: e1:8a:6a:d7:8c:5a:74:dc:d8:d8:37:7a:ef:96:28:47:5f:39: d1:fc:c0:59:5f:c7:8b:bb:62:ff:4e:d7:a3:03:bb:86:73:65: 7f:54:10:c6:54:68:52:c8:9a:16:86:30:e8:c6:44:9b:8a:ec: a3:31:65:99:16:33:6b:d3:c7:15:1b:38:40:cc:c4:ff:54:1b: ec:c9:b4:4b:e7:e9:03:87:c8:46:79:7c:06:9f:2f:8c:18:f7: cd:be:a2:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrL37psPfqoVzikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjZGE4YTAtYTNjZC00MTY5LTk1MWUtYWI2ODM4ZDZk N2YwMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NTFmYTIzNjYtMTJmMi00YTdiLWE5MDMtNzUzOWRkMzJjOGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopV7ltbv6eFRJkpLA20ETkBxP6lQb1uvnoTi wASz0bw0+4WhjhsAJlzs9VoTQiU4B+MstzGDN3bUt1cSS51d1wosaTpOEAenCi0R A1eJxZU49FMRb0O6AsZO4CX2Vf5R74Oz6LzUh2VbqRZTBarCOFwLbPodFIVCFjn2 9DGAcji+HnMnFXyp1lyNQzLnlIreaSoJv/+yDdvlxS+NmryVUhh4/ATV/R/zH2Xa JQ4nEKDKBBiURR+SI0XDX1AOtCqiA7da+ql90VcnQYXhQcYJz02Fy23mIYYjNCXD Q3J1YQ+efNGZdCWq8+8Tq7801pEX4iUDDY4mMylfJntEsdbudQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNA+nY1SnfX0kiEHdVM6nfTwWK84MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNk YThhMC1hM2NkLTQxNjktOTUxZS1hYjY4MzhkNmQ3ZjAvOGQxYTEyMjYtZmQ5NS0z NzQ1LTk2YjUtZTQzZGZkZTg5Njk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmZjZGE4YTAtYTNjZC00MTY5LTk1 MWUtYWI2ODM4ZDZkN2YwL2ZmY2RhOGEwLWEzY2QtNDE2OS05NTFlLWFiNjgzOGQ2 ZDdmMC5jcmwwHwYDVR0jBBgwFoAUuunwIc1gU+J5R6d+X/PoDlObwL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNkYThhMC1hM2NkLTQxNjktOTUxZS1hYjY4 MzhkNmQ3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL6ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeqp7LuVZWLo62NFvTCnPO7FNlplZXSm/9IEc21F0u9hsy7BVTJ+/1g u30o5WaPrQgZCnLuxYXnfdlQTTW5Ib7CzNyCu8zO64ulPubweODxW2d98XEpAUOZ w7VeWhN4i4fnyv78zCza+hVj9rRcoCOwXsoODZ6XKJ5SNUQPJMn/M3M8nuqB2uxW EkLQJ8yAlNM20CM8H7Xdp6Hp0if7t7DhguGKateMWnTc2Ng3eu+WKEdfOdH8wFlf x4u7Yv9O16MDu4ZzZX9UEMZUaFLImhaGMOjGRJuK7KMxZZkWM2vTxxUbOEDMxP9U G+zJtEvn6QOHyEZ5fAafL4wY982+ouE= -----END CERTIFICATE-----Generated at Mon Oct 20 02:13:27 2025 by rpki-client