$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4733c78a-74b2-36ce-8265-e75f07c9798e.roa File: 4733c78a-74b2-36ce-8265-e75f07c9798e.roa (raw, json) Hash identifier: UA6SdalmU0oKJY3I+ZYox0iLcnnbcK0jpv74j3V5bx8= Subject key identifier: D2:FF:B2:66:D3:AD:5D:CA:AE:47:DA:23:08:99:AD:62:D1:99:A0:9E Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Certificate serial: 010D0C9F4328584E37646A140817FB3B0458C3C0 Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4733c78a-74b2-36ce-8265-e75f07c9798e.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 16509 IP address blocks: 192.175.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:6a:14:08:17:fb:3b:04:58:c3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=427f11e3-bae3-49e3-9ef1-b3848a251b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e6:c9:fa:2c:a4:65:00:2f:c1:1c:fa:2f:ec: 31:f6:81:13:5b:75:60:1b:b1:e0:1a:59:23:1c:ee: 77:2a:95:02:12:15:1d:9f:bb:0b:e2:e9:a6:b7:5e: e6:8c:cb:38:9f:60:bb:1c:95:e7:75:09:b5:e7:1b: 81:51:7e:3a:3b:11:ec:4a:75:5e:76:37:30:99:d7: 54:35:6d:78:55:d8:ed:d3:4c:22:ce:45:d5:8f:a6: 8e:8d:2d:a3:78:25:78:3b:c4:bc:e9:4e:91:b5:36: 0e:06:bc:47:be:67:b0:56:be:bc:f4:a5:24:e1:e9: 97:da:22:d5:bc:e7:08:c6:85:c1:a5:21:aa:cd:73: 11:70:c0:76:04:a1:7a:87:54:11:46:66:6e:c0:40: cc:9d:fe:a2:f3:4f:1d:a4:1e:a6:43:7b:74:ea:20: 7d:17:5c:e2:33:c8:88:a7:17:37:c1:7e:e4:6e:bc: af:52:77:cc:40:f3:f7:da:5e:95:e2:f8:2d:98:72: 2a:f7:28:b1:eb:bf:36:40:ed:c6:a2:04:1d:25:b6: ed:37:d9:a8:93:18:5b:3c:f0:f5:44:92:3b:7a:7c: ad:9a:a5:f9:09:42:e2:22:3e:10:1b:f5:72:e5:8c: 6e:87:f7:25:c6:e5:bb:74:73:41:f0:d8:51:78:85: 9c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FF:B2:66:D3:AD:5D:CA:AE:47:DA:23:08:99:AD:62:D1:99:A0:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/4733c78a-74b2-36ce-8265-e75f07c9798e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl X509v3 Authority Key Identifier: keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer sbgp-ipAddrBlock: critical IPv4: 192.175.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:1d:d4:03:43:12:5d:c9:fd:3c:1e:5f:0b:06:9f:fd:16:a6: f3:d6:ae:72:47:0e:80:12:85:4a:f8:be:0f:58:b7:ff:26:f4: 4b:94:e8:6b:6e:5e:e7:03:9c:81:fa:8b:1b:83:d4:0d:50:16: 57:9b:e8:e6:01:16:44:b8:65:ae:97:7c:d2:27:56:af:3d:8d: be:7d:93:7f:a6:e1:42:5f:aa:a9:9e:41:e7:aa:06:f9:98:7b: 91:ca:41:46:3d:ac:41:da:c1:dc:27:66:5a:02:fa:17:dd:dd: 80:d6:82:b6:cc:6d:2e:11:ce:78:a6:87:c5:db:d7:06:9d:7f: d5:c6:d9:14:66:2f:2e:cc:92:da:75:fc:78:92:13:15:fb:d6: 67:4b:80:7e:1f:ae:b5:f9:0f:f7:3f:96:79:ed:f2:c0:0c:09: 79:2a:6a:34:9d:eb:2c:36:2e:4e:8a:33:27:88:12:46:76:b2: b2:ad:d2:63:0f:7f:fc:d5:eb:72:b8:c5:6c:a6:e5:a7:9f:65: 5a:0c:f4:b4:6d:06:42:c1:b2:4b:48:71:87:8b:fd:47:0e:53: f0:96:55:22:5f:8a:71:05:1c:4f:8b:7c:a5:20:c2:00:60:a0: 7a:77:d7:0d:3f:23:7d:b0:dc:e3:6b:80:28:30:79:50:a2:5d: 7e:79:a9:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZGoUCBf7OwRYw8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjZGE4YTAtYTNjZC00MTY5LTk1MWUtYWI2ODM4ZDZk N2YwMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk NDI3ZjExZTMtYmFlMy00OWUzLTllZjEtYjM4NDhhMjUxYjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhObJ+iykZQAvwRz6L+wx9oETW3VgG7HgGlkj HO53KpUCEhUdn7sL4ummt17mjMs4n2C7HJXndQm15xuBUX46OxHsSnVedjcwmddU NW14Vdjt00wizkXVj6aOjS2jeCV4O8S86U6RtTYOBrxHvmewVr689KUk4emX2iLV vOcIxoXBpSGqzXMRcMB2BKF6h1QRRmZuwEDMnf6i808dpB6mQ3t06iB9F1ziM8iI pxc3wX7kbryvUnfMQPP32l6V4vgtmHIq9yix6782QO3GogQdJbbtN9mokxhbPPD1 RJI7enytmqX5CULiIj4QG/Vy5Yxuh/clxuW7dHNB8NhReIWcWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNL/smbTrV3KrkfaIwiZrWLRmaCeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNk YThhMC1hM2NkLTQxNjktOTUxZS1hYjY4MzhkNmQ3ZjAvNDczM2M3OGEtNzRiMi0z NmNlLTgyNjUtZTc1ZjA3Yzk3OThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmZjZGE4YTAtYTNjZC00MTY5LTk1 MWUtYWI2ODM4ZDZkN2YwL2ZmY2RhOGEwLWEzY2QtNDE2OS05NTFlLWFiNjgzOGQ2 ZDdmMC5jcmwwHwYDVR0jBBgwFoAUuunwIc1gU+J5R6d+X/PoDlObwL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNkYThhMC1hM2NkLTQxNjktOTUxZS1hYjY4 MzhkNmQ3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwK8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4d1ANDEl3J/TweXwsGn/0WpvPWrnJHDoAShUr4vg9Yt/8m9EuU6Gtu XucDnIH6ixuD1A1QFleb6OYBFkS4Za6XfNInVq89jb59k3+m4UJfqqmeQeeqBvmY e5HKQUY9rEHawdwnZloC+hfd3YDWgrbMbS4Rznimh8Xb1wadf9XG2RRmLy7Mktp1 /HiSExX71mdLgH4frrX5D/c/lnnt8sAMCXkqajSd6yw2Lk6KMyeIEkZ2srKt0mMP f/zV63K4xWym5aefZVoM9LRtBkLBsktIcYeL/UcOU/CWVSJfinEFHE+LfKUgwgBg oHp31w0/I32w3ONrgCgweVCiXX55qaM= -----END CERTIFICATE-----Generated at Mon Jun 22 22:52:06 2026 by rpki-client