$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/9d556077-1a33-38c1-83d3-f523ab48772e.roa File: 9d556077-1a33-38c1-83d3-f523ab48772e.roa (raw, json) Hash identifier: f0gkPWl2nt2JBevlnbYI3/NyObR+NP5TeayiPmdSZZk= Subject key identifier: 8C:6A:70:88:77:9D:5F:DC:5F:83:16:99:5C:33:44:25:8C:FC:2F:03 Certificate issuer: /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8 Certificate serial: 010D0C9F4328584D5E1A68DF2929EEAE0089FE80 Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/9d556077-1a33-38c1-83d3-f523ab48772e.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 0 IP address blocks: 149.112.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:68:df:29:29:ee:ae:00:89:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=be0f17cc-ea1c-43d1-bd13-15dbd5c16377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:55:85:f7:ed:1e:70:d1:71:1a:3d:2d:41:3a: 68:38:5f:63:13:60:ba:5a:c2:b4:90:f0:17:dc:c4: c4:4c:84:80:b7:3d:4a:db:de:a8:54:ae:16:6c:44: 13:80:f0:f5:f3:5c:0d:14:41:78:16:c0:ab:2b:03: bd:54:66:d7:18:98:43:4c:3c:c8:92:55:64:58:d8: ba:a5:32:90:13:a0:2f:48:1d:67:b0:02:c4:b7:cc: 85:69:91:14:84:67:a7:62:f2:54:b9:84:2d:76:c2: 40:4e:ad:a5:52:86:2c:bd:c8:7a:f1:fa:05:be:7b: 05:04:a1:b2:b8:b4:5b:56:6e:fe:fe:5e:2e:2f:bf: e7:d1:19:e5:98:ef:67:d9:ed:ae:f5:c7:64:c7:27: bc:66:8c:1b:d8:90:8b:3b:36:df:8a:70:c3:36:12: 3e:7b:44:5e:1a:90:b8:67:2e:43:4c:33:61:40:f7: 74:44:89:53:f1:17:ed:04:f2:c7:b2:39:52:30:53: 94:9a:f8:64:1e:70:41:d2:f0:0e:aa:a9:89:23:39: bc:b7:d2:08:14:37:a7:03:0e:a7:75:85:34:e7:ab: d1:86:9b:63:5f:db:6b:cd:9f:f4:30:f2:a1:58:29: ff:e8:b7:ab:df:f1:eb:19:0d:e8:94:fa:ce:57:39: b6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:6A:70:88:77:9D:5F:DC:5F:83:16:99:5C:33:44:25:8C:FC:2F:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/9d556077-1a33-38c1-83d3-f523ab48772e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl X509v3 Authority Key Identifier: keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer sbgp-ipAddrBlock: critical IPv4: 149.112.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:66:40:89:79:94:c7:42:a9:f1:04:5f:be:02:9d:77:59:fd: 89:7a:c7:bc:ae:69:44:f6:0a:0e:fe:a7:b4:76:b5:fc:50:1f: cd:ec:56:bf:98:79:f4:90:a2:7b:42:54:a2:b6:ab:66:77:c9: 18:af:9f:72:f8:4c:a6:c0:59:9a:f5:a6:93:6c:6e:13:c9:6d: d1:84:aa:4c:8f:3d:b8:3a:25:50:15:37:a5:4d:f8:1d:bb:d2: 8c:98:1b:0a:fa:f3:94:7a:73:7f:35:40:f5:98:35:fe:03:3c: 62:7a:f2:f0:41:b6:69:50:c3:19:94:c1:57:f6:1b:c3:77:1d: 72:bc:a6:57:7e:37:86:af:7e:6b:d2:7d:9d:90:f0:13:a2:60: 8e:5e:53:f3:90:45:e3:e0:05:38:21:cb:4e:bf:60:95:13:9d: a0:8d:fd:d9:12:a3:2a:68:7e:41:48:76:a9:70:58:01:af:e7: 60:40:05:92:c1:4d:2a:2c:ab:fd:45:98:7e:c4:13:d6:00:f8: 5c:e2:78:fa:9a:f9:aa:45:72:eb:8d:e6:22:50:cb:34:60:d9: 47:c6:38:d8:fc:73:6a:af:5c:bb:ef:a6:d9:fb:f9:fa:c9:c8: a9:e5:e7:7d:d4:24:68:2e:1a:69:75:aa:90:97:63:73:ca:f4: ea:21:a2:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmjfKSnurgCJ/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NhYTljMjctNmI2OC00NWE4LWI3NzctNGM3YjAwNDgy YWI4MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk YmUwZjE3Y2MtZWExYy00M2QxLWJkMTMtMTVkYmQ1YzE2Mzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1WF9+0ecNFxGj0tQTpoOF9jE2C6WsK0kPAX 3MTETISAtz1K296oVK4WbEQTgPD181wNFEF4FsCrKwO9VGbXGJhDTDzIklVkWNi6 pTKQE6AvSB1nsALEt8yFaZEUhGenYvJUuYQtdsJATq2lUoYsvch68foFvnsFBKGy uLRbVm7+/l4uL7/n0RnlmO9n2e2u9cdkxye8Zowb2JCLOzbfinDDNhI+e0ReGpC4 Zy5DTDNhQPd0RIlT8RftBPLHsjlSMFOUmvhkHnBB0vAOqqmJIzm8t9IIFDenAw6n dYU056vRhptjX9trzZ/0MPKhWCn/6Ler3/HrGQ3olPrOVzm2KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxqcIh3nV/cX4MWmVwzRCWM/C8DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jY2Fh OWMyNy02YjY4LTQ1YTgtYjc3Ny00YzdiMDA0ODJhYjgvOWQ1NTYwNzctMWEzMy0z OGMxLTgzZDMtZjUyM2FiNDg3NzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2NhYTljMjctNmI2OC00NWE4LWI3 NzctNGM3YjAwNDgyYWI4L2NjYWE5YzI3LTZiNjgtNDVhOC1iNzc3LTRjN2IwMDQ4 MmFiOC5jcmwwHwYDVR0jBBgwFoAUokHvW5pqS+aRVpyHiqhu3FSyf4YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jY2FhOWMyNy02YjY4LTQ1YTgtYjc3Ny00Yzdi MDA0ODJhYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXB3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANmQIl5lMdCqfEEX74CnXdZ/Yl6x7yuaUT2Cg7+p7R2tfxQH83sVr+Y efSQontCVKK2q2Z3yRivn3L4TKbAWZr1ppNsbhPJbdGEqkyPPbg6JVAVN6VN+B27 0oyYGwr685R6c381QPWYNf4DPGJ68vBBtmlQwxmUwVf2G8N3HXK8pld+N4avfmvS fZ2Q8BOiYI5eU/OQRePgBTghy06/YJUTnaCN/dkSoypofkFIdqlwWAGv52BABZLB TSosq/1FmH7EE9YA+FziePqa+apFcuuN5iJQyzRg2UfGONj8c2qvXLvvptn7+frJ yKnl533UJGguGml1qpCXY3PK9OohotU= -----END CERTIFICATE-----Generated at Tue Apr 7 19:41:05 2026 by rpki-client