$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/4acda3a4-e641-396a-9a6f-a18db1280ee8.roa File: 4acda3a4-e641-396a-9a6f-a18db1280ee8.roa (raw, json) Hash identifier: FLfM0JhyYsf6UMFKkE5BwhArJAgWyAFtcYuTGiGitrw= Subject key identifier: 3F:11:01:A0:DC:70:84:E2:53:93:83:43:F1:79:EF:A4:74:A0:58:C0 Certificate issuer: /CN=dccebd00-21a5-4af6-b51a-e1f651e635f7 Certificate serial: 010D0C9F4328584D651528ECC2FED0631317CB30 Authority key identifier: F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/4acda3a4-e641-396a-9a6f-a18db1280ee8.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 0 IP address blocks: 149.112.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:28:ec:c2:fe:d0:63:13:17:cb:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dccebd00-21a5-4af6-b51a-e1f651e635f7 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=2287a3a1-fb77-472c-b40e-39bd94b7d74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0b:87:3d:54:b6:4c:32:14:6e:18:d8:3a:37: 0b:f1:c5:a2:f9:6f:56:43:5e:69:3a:60:72:a8:60: dd:ca:62:0a:4f:66:13:a6:3b:22:b6:da:aa:cf:ba: 2e:ec:62:ed:c0:8e:9d:79:92:65:21:a3:83:01:7c: 5d:c7:13:00:c0:ab:40:b8:78:0e:4e:93:bc:b5:0b: cc:81:f6:bf:3f:2a:bd:a7:14:5f:05:ca:30:f9:f2: 8c:72:d6:5d:19:2c:b7:43:52:b7:65:07:53:69:73: 81:f2:06:98:29:64:e8:69:78:2b:59:bb:4e:eb:26: 22:aa:88:90:b0:de:23:23:a3:41:3f:27:96:64:be: 59:ae:82:fb:d3:1d:b7:92:6e:ea:c0:99:e0:ee:e7: 27:39:4a:e5:96:a4:c5:b2:30:6e:f5:70:d1:4d:da: a6:20:cc:e3:72:e1:39:42:53:45:b3:f2:46:b5:ea: 44:d1:bc:90:43:e1:47:78:5a:a0:d3:d6:0c:9a:ea: b2:d1:9f:20:4c:77:21:3f:e4:38:fd:25:5e:c3:e7: fb:ba:67:8b:d9:39:4a:c7:e9:49:f5:8c:6d:62:b0: fd:28:16:15:bd:c1:cd:d5:df:d8:b8:8b:3d:67:e2: dd:a6:10:6d:12:89:3f:a7:af:0a:a8:40:28:58:9b: bf:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:11:01:A0:DC:70:84:E2:53:93:83:43:F1:79:EF:A4:74:A0:58:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/4acda3a4-e641-396a-9a6f-a18db1280ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl X509v3 Authority Key Identifier: keyid:F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer sbgp-ipAddrBlock: critical IPv4: 149.112.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:86:0d:2e:55:d2:7a:36:77:c4:12:ce:49:3b:4e:50:31:fa: c8:53:34:7c:c3:28:64:60:51:fd:40:e1:cb:d9:e9:4e:6d:79: ec:47:99:4f:ac:44:2d:20:c5:b1:89:a1:fc:5a:2d:c5:c4:81: 50:fb:a9:b4:2e:d5:21:ff:8a:67:3e:45:d3:4e:4c:a3:5a:6d: 48:95:15:3e:60:43:b7:01:d4:c5:29:d2:cf:85:f7:28:12:ca: 7e:1b:84:ec:16:fb:e5:e2:bd:06:1e:6e:8b:9c:24:15:d5:9b: cb:dd:68:f4:f6:8a:9f:c8:88:7a:b1:5a:5f:6b:d2:4a:59:0b: bb:d4:dc:e9:34:ce:c6:42:f9:bd:1b:65:00:e9:00:7c:24:30: 1c:0b:08:cf:8b:94:a9:d2:e8:0d:3a:20:96:1e:d0:02:3a:f5: 80:fa:82:1f:36:a1:5e:1a:a8:fa:b9:3d:9a:8d:40:13:f2:44: 6c:ec:b4:bc:9d:20:98:d8:e1:3e:ff:b6:14:22:44:fc:81:7d: 3c:48:ba:0f:c1:f1:64:1b:f8:84:e8:32:a2:43:0e:bb:83:77: 14:36:c0:f7:ce:83:f6:6b:72:7a:c1:d0:d5:8a:39:56:98:24: 7b:40:54:a3:d7:f7:e7:21:57:5e:3b:2b:60:09:9c:67:e0:4f: ad:c4:09:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFSjswv7QYxMXyzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNjZWJkMDAtMjFhNS00YWY2LWI1MWEtZTFmNjUxZTYz NWY3MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk MjI4N2EzYTEtZmI3Ny00NzJjLWI0MGUtMzliZDk0YjdkNzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQuHPVS2TDIUbhjYOjcL8cWi+W9WQ15pOmBy qGDdymIKT2YTpjsittqqz7ou7GLtwI6deZJlIaODAXxdxxMAwKtAuHgOTpO8tQvM gfa/Pyq9pxRfBcow+fKMctZdGSy3Q1K3ZQdTaXOB8gaYKWToaXgrWbtO6yYiqoiQ sN4jI6NBPyeWZL5ZroL70x23km7qwJng7ucnOUrllqTFsjBu9XDRTdqmIMzjcuE5 QlNFs/JGtepE0byQQ+FHeFqg09YMmuqy0Z8gTHchP+Q4/SVew+f7umeL2TlKx+lJ 9YxtYrD9KBYVvcHN1d/YuIs9Z+LdphBtEok/p68KqEAoWJu/GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8RAaDccITiU5ODQ/F576R0oFjAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kY2Nl YmQwMC0yMWE1LTRhZjYtYjUxYS1lMWY2NTFlNjM1ZjcvNGFjZGEzYTQtZTY0MS0z OTZhLTlhNmYtYTE4ZGIxMjgwZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGNjZWJkMDAtMjFhNS00YWY2LWI1 MWEtZTFmNjUxZTYzNWY3L2RjY2ViZDAwLTIxYTUtNGFmNi1iNTFhLWUxZjY1MWU2 MzVmNy5jcmwwHwYDVR0jBBgwFoAU9IpUS8vYmgeJky6Dr29fBOHaqy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kY2NlYmQwMC0yMWE1LTRhZjYtYjUxYS1lMWY2 NTFlNjM1ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXByMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiGDS5V0no2d8QSzkk7TlAx+shTNHzDKGRgUf1A4cvZ6U5teexHmU+s RC0gxbGJofxaLcXEgVD7qbQu1SH/imc+RdNOTKNabUiVFT5gQ7cB1MUp0s+F9ygS yn4bhOwW++XivQYeboucJBXVm8vdaPT2ip/IiHqxWl9r0kpZC7vU3Ok0zsZC+b0b ZQDpAHwkMBwLCM+LlKnS6A06IJYe0AI69YD6gh82oV4aqPq5PZqNQBPyRGzstLyd IJjY4T7/thQiRPyBfTxIug/B8WQb+IToMqJDDruDdxQ2wPfOg/ZrcnrB0NWKOVaY JHtAVKPX9+chV147K2AJnGfgT63ECRs= -----END CERTIFICATE-----Generated at Tue Apr 7 19:41:25 2026 by rpki-client