$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/4acda3a4-e641-396a-9a6f-a18db1280ee8.roa File: 4acda3a4-e641-396a-9a6f-a18db1280ee8.roa (raw, json) Hash identifier: JQDA1FQEvjr2ze+kgYomtlFDPSxmZZNJ20A7QaVo35g= Subject key identifier: 02:26:7F:6F:F8:5F:45:16:92:AF:6B:6D:E7:65:1A:73:71:30:85:65 Certificate issuer: /CN=dccebd00-21a5-4af6-b51a-e1f651e635f7 Certificate serial: 010D0C9F4328584AC2E1031E34F9BA80716B726C Authority key identifier: F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/4acda3a4-e641-396a-9a6f-a18db1280ee8.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 0 IP address blocks: 149.112.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e1:03:1e:34:f9:ba:80:71:6b:72:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dccebd00-21a5-4af6-b51a-e1f651e635f7 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=3a76704d-b96e-489b-b22e-210144e19cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ae:c2:bd:9f:43:66:d8:ec:71:f3:6d:32:da: f5:18:a2:15:f2:df:91:2b:19:b3:59:7b:d2:d4:2c: cc:0a:75:ff:fd:4a:bb:58:48:43:0f:a8:09:af:14: 96:2d:6e:d6:4f:ea:31:57:f7:9b:e4:35:e9:34:8c: 0b:e1:4b:c2:31:f2:5f:a3:bb:ae:35:31:83:0c:b9: 49:f9:d4:ea:47:bf:4f:18:68:bb:c5:59:3d:4a:59: 71:9c:40:0c:c9:0d:b3:c2:4a:02:11:3a:89:5a:b5: 73:d4:ac:4c:32:98:bc:5c:49:e0:72:4e:e7:e5:e6: c4:ec:56:e0:01:9f:6f:5f:62:06:fe:1c:d0:51:71: da:e0:aa:9b:7d:e3:a2:46:33:2c:c4:c7:77:31:26: da:25:32:a5:11:13:ce:e7:74:6f:f5:9e:ee:99:2b: 6e:46:cc:7e:31:ef:0e:5d:79:c7:50:74:c4:51:a6: 92:2b:67:77:a4:e0:1f:b4:30:37:e0:4f:ea:44:ff: 0b:91:63:b2:f1:fe:f4:92:99:3f:a6:42:9d:61:9d: e0:4f:bd:de:34:b1:22:d6:d0:61:79:a6:2b:a6:be: ef:8f:51:64:bc:d3:c1:29:2e:a1:de:65:ea:21:17: 89:a5:1b:f4:2f:29:72:8e:af:42:0d:cc:ce:41:17: c1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:26:7F:6F:F8:5F:45:16:92:AF:6B:6D:E7:65:1A:73:71:30:85:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/4acda3a4-e641-396a-9a6f-a18db1280ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl X509v3 Authority Key Identifier: keyid:F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer sbgp-ipAddrBlock: critical IPv4: 149.112.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:4d:59:cc:65:24:17:7d:c3:9f:c2:ea:f2:da:69:b5:18:40: db:d7:0f:2b:93:81:ba:34:5f:76:86:70:2b:86:49:c0:73:95: 6d:6a:7e:10:e7:00:6e:db:d1:cb:a1:74:29:86:8a:e4:cb:ac: 2f:30:0c:ca:9c:cc:00:6d:f8:99:ce:8a:6e:7d:a1:10:13:cd: 23:f4:44:5c:c2:e0:f0:d1:04:27:87:94:43:ef:49:ef:64:1f: ef:b6:a2:20:1c:56:a4:0b:c3:bd:6c:ff:45:10:b7:7e:62:cf: 4b:37:6c:e7:7c:8f:9c:f2:e3:9e:8d:66:e1:40:3c:d3:5a:6c: 09:62:97:b3:7e:8a:71:fa:e0:58:e6:40:de:31:a1:3c:bb:5b: fa:67:42:6c:6d:d8:57:33:e5:b7:00:a1:30:08:2a:53:7b:50: da:c2:6c:d4:0f:eb:71:ad:1e:9e:33:6e:7f:f1:c2:63:f7:21: ae:48:0a:2d:e6:39:8d:bf:15:51:1a:ad:2f:7a:36:0b:ee:71: 6f:b6:7c:b9:07:8a:a9:bb:70:ab:eb:2d:2d:c2:08:01:c8:56: 69:65:ac:dc:0b:60:6b:06:e9:ee:67:c6:67:5c:06:59:00:de: 80:d6:50:82:29:5e:d6:3b:ba:d2:f4:30:38:84:41:ed:af:2e: a3:5f:5d:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4QMeNPm6gHFrcmwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNjZWJkMDAtMjFhNS00YWY2LWI1MWEtZTFmNjUxZTYz NWY3MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk M2E3NjcwNGQtYjk2ZS00ODliLWIyMmUtMjEwMTQ0ZTE5Y2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq7CvZ9DZtjscfNtMtr1GKIV8t+RKxmzWXvS 1CzMCnX//Uq7WEhDD6gJrxSWLW7WT+oxV/eb5DXpNIwL4UvCMfJfo7uuNTGDDLlJ +dTqR79PGGi7xVk9SllxnEAMyQ2zwkoCETqJWrVz1KxMMpi8XEngck7n5ebE7Fbg AZ9vX2IG/hzQUXHa4KqbfeOiRjMsxMd3MSbaJTKlERPO53Rv9Z7umStuRsx+Me8O XXnHUHTEUaaSK2d3pOAftDA34E/qRP8LkWOy8f70kpk/pkKdYZ3gT73eNLEi1tBh eaYrpr7vj1FkvNPBKS6h3mXqIReJpRv0Lylyjq9CDczOQRfBlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAImf2/4X0UWkq9rbedlGnNxMIVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kY2Nl YmQwMC0yMWE1LTRhZjYtYjUxYS1lMWY2NTFlNjM1ZjcvNGFjZGEzYTQtZTY0MS0z OTZhLTlhNmYtYTE4ZGIxMjgwZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGNjZWJkMDAtMjFhNS00YWY2LWI1 MWEtZTFmNjUxZTYzNWY3L2RjY2ViZDAwLTIxYTUtNGFmNi1iNTFhLWUxZjY1MWU2 MzVmNy5jcmwwHwYDVR0jBBgwFoAU9IpUS8vYmgeJky6Dr29fBOHaqy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kY2NlYmQwMC0yMWE1LTRhZjYtYjUxYS1lMWY2 NTFlNjM1ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXByMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpNWcxlJBd9w5/C6vLaabUYQNvXDyuTgbo0X3aGcCuGScBzlW1qfhDn AG7b0cuhdCmGiuTLrC8wDMqczABt+JnOim59oRATzSP0RFzC4PDRBCeHlEPvSe9k H++2oiAcVqQLw71s/0UQt35iz0s3bOd8j5zy456NZuFAPNNabAlil7N+inH64Fjm QN4xoTy7W/pnQmxt2Fcz5bcAoTAIKlN7UNrCbNQP63GtHp4zbn/xwmP3Ia5ICi3m OY2/FVEarS96NgvucW+2fLkHiqm7cKvrLS3CCAHIVmllrNwLYGsG6e5nxmdcBlkA 3oDWUIIpXtY7utL0MDiEQe2vLqNfXXI= -----END CERTIFICATE-----Generated at Sat Aug 23 06:38:10 2025 by rpki-client