$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/86de18c8-b996-366f-8e98-bd1b350b8c46.roa File: 86de18c8-b996-366f-8e98-bd1b350b8c46.roa (raw, json) Hash identifier: bpEnNWXz1phqYKU3HgvK95uvpXc9OxRTmZegMkW1jJ0= Subject key identifier: BB:38:8F:50:6F:7A:A9:0F:48:12:1B:96:59:11:C9:08:62:E0:82:4F Certificate issuer: /CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Certificate serial: 010D0C9F4328584E37646A208330C6A30D9D1F80 Authority key identifier: BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/86de18c8-b996-366f-8e98-bd1b350b8c46.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 14618 IP address blocks: 192.175.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:6a:20:83:30:c6:a3:0d:9d:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffcda8a0-a3cd-4169-951e-ab6838d6d7f0 Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=bad1bbd0-c395-40f1-984a-dbc9d3243781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:07:ba:3e:9f:6a:8b:43:7d:09:90:94:a6:54: 29:78:1e:01:83:47:78:29:23:58:63:da:36:41:ba: 2d:37:ed:cd:0d:1d:8a:07:af:3e:dc:ed:0e:93:a9: 72:9b:76:ab:7a:a0:b0:22:79:d6:e1:c5:44:07:de: 49:8d:2c:6f:5e:d0:a6:c6:f6:ac:87:47:8d:6b:83: 64:d9:29:a0:2d:5a:6c:ea:07:5e:ac:94:09:79:ac: 43:cd:4e:17:84:63:c8:6d:b8:01:36:a1:63:6e:67: 94:21:59:16:91:c7:9a:b6:e3:79:c1:01:4f:c1:22: e4:bd:16:33:b8:00:3f:ac:4b:c5:32:c0:7b:71:92: 65:23:02:ff:cf:0a:1f:88:a1:2c:90:cc:08:37:bc: 79:0c:d3:24:39:d0:28:86:87:e0:2f:d3:a5:bc:9a: 90:fd:c6:4a:fa:65:d0:d1:f6:20:5d:73:60:d7:38: 61:bc:72:27:a5:39:99:fa:74:66:3f:ce:04:06:ea: 14:c4:d1:76:80:e8:3d:15:2c:8f:94:d5:83:f1:f7: 02:3b:35:37:de:c1:e6:5c:80:5d:1e:ac:ab:ea:a5: 6e:a6:26:ac:dc:ab:33:23:3c:47:a3:71:5e:fd:a7: 25:b6:b6:52:3b:b4:2e:83:0f:5e:6e:be:6e:30:3d: ae:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:38:8F:50:6F:7A:A9:0F:48:12:1B:96:59:11:C9:08:62:E0:82:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/86de18c8-b996-366f-8e98-bd1b350b8c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.crl X509v3 Authority Key Identifier: keyid:BA:E9:F0:21:CD:60:53:E2:79:47:A7:7E:5F:F3:E8:0E:53:9B:C0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ffcda8a0-a3cd-4169-951e-ab6838d6d7f0.cer sbgp-ipAddrBlock: critical IPv4: 192.175.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:1a:d3:a3:8c:02:47:22:2f:d2:30:09:ec:39:42:c1:36:dc: 22:62:b0:d2:76:79:a3:10:13:d5:d6:d6:fe:1e:75:fa:70:d9: af:15:6b:dd:05:9e:b2:fd:28:52:30:ac:de:c4:04:69:d7:92: 6d:1a:71:ab:31:1f:34:aa:3f:83:bc:d1:c7:3d:a9:3d:18:a5: 12:6f:81:2d:e7:a6:6a:ae:ca:17:86:4b:d1:eb:54:fd:d6:f1: 94:2b:4d:9c:b5:3f:50:f6:6f:44:0e:58:35:35:be:27:0a:28: 0e:63:20:88:bf:85:1f:18:ad:88:9e:0d:16:89:c8:4c:60:0b: 58:78:66:33:24:2a:95:67:a5:53:04:57:e0:98:55:62:69:c2: d8:40:b2:62:aa:9d:84:8a:14:56:9a:49:2a:89:eb:d1:90:37: 36:51:c5:1a:0f:e3:28:fc:85:7e:aa:70:32:9e:e3:cf:6a:0d: 09:6e:b1:8e:f4:44:12:71:f0:10:86:af:e3:4a:fc:bf:27:c0: 73:49:9d:2d:76:30:12:82:70:4a:bc:45:ef:8f:65:de:c5:9a: d2:50:44:6c:3b:b6:d3:ca:ff:53:86:0b:fe:e3:ca:16:8a:24: e2:50:b5:35:ae:0f:46:ce:b4:32:2f:a1:13:39:97:52:38:f4: cc:c0:98:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZGoggzDGow2dH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZjZGE4YTAtYTNjZC00MTY5LTk1MWUtYWI2ODM4ZDZk N2YwMB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk YmFkMWJiZDAtYzM5NS00MGYxLTk4NGEtZGJjOWQzMjQzNzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ae6Pp9qi0N9CZCUplQpeB4Bg0d4KSNYY9o2 QbotN+3NDR2KB68+3O0Ok6lym3areqCwInnW4cVEB95JjSxvXtCmxvash0eNa4Nk 2SmgLVps6gderJQJeaxDzU4XhGPIbbgBNqFjbmeUIVkWkceatuN5wQFPwSLkvRYz uAA/rEvFMsB7cZJlIwL/zwofiKEskMwIN7x5DNMkOdAohofgL9OlvJqQ/cZK+mXQ 0fYgXXNg1zhhvHInpTmZ+nRmP84EBuoUxNF2gOg9FSyPlNWD8fcCOzU33sHmXIBd Hqyr6qVupias3KszIzxHo3Fe/acltrZSO7Qugw9ebr5uMD2uCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLs4j1BveqkPSBIbllkRyQhi4IJPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNk YThhMC1hM2NkLTQxNjktOTUxZS1hYjY4MzhkNmQ3ZjAvODZkZTE4YzgtYjk5Ni0z NjZmLThlOTgtYmQxYjM1MGI4YzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmZjZGE4YTAtYTNjZC00MTY5LTk1 MWUtYWI2ODM4ZDZkN2YwL2ZmY2RhOGEwLWEzY2QtNDE2OS05NTFlLWFiNjgzOGQ2 ZDdmMC5jcmwwHwYDVR0jBBgwFoAUuunwIc1gU+J5R6d+X/PoDlObwL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZmNkYThhMC1hM2NkLTQxNjktOTUxZS1hYjY4 MzhkNmQ3ZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwK8EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEga06OMAkciL9IwCew5QsE23CJisNJ2eaMQE9XW1v4edfpw2a8Va90F nrL9KFIwrN7EBGnXkm0acasxHzSqP4O80cc9qT0YpRJvgS3npmquyheGS9HrVP3W 8ZQrTZy1P1D2b0QOWDU1vicKKA5jIIi/hR8YrYieDRaJyExgC1h4ZjMkKpVnpVME V+CYVWJpwthAsmKqnYSKFFaaSSqJ69GQNzZRxRoP4yj8hX6qcDKe489qDQlusY70 RBJx8BCGr+NK/L8nwHNJnS12MBKCcEq8Re+PZd7FmtJQRGw7ttPK/1OGC/7jyhaK JOJQtTWuD0bOtDIvoRM5l1I49MzAmJY= -----END CERTIFICATE-----Generated at Mon Jun 22 22:52:07 2026 by rpki-client