$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/4acda3a4-e641-396a-9a6f-a18db1280ee8.roa File: 4acda3a4-e641-396a-9a6f-a18db1280ee8.roa (raw, json) Hash identifier: kxlekYr5b4DF/Qlclt4kIPwl9Sb4x+H9gal08szA5lM= Subject key identifier: 5F:79:8E:D2:F1:F0:5B:7A:52:F2:3C:3D:33:81:84:7C:0C:51:26:36 Certificate issuer: /CN=dccebd00-21a5-4af6-b51a-e1f651e635f7 Certificate serial: 010D0C9F4328584EE7BCB87D70E187F006B4F5E0 Authority key identifier: F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/4acda3a4-e641-396a-9a6f-a18db1280ee8.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 0 IP address blocks: 149.112.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:b8:7d:70:e1:87:f0:06:b4:f5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dccebd00-21a5-4af6-b51a-e1f651e635f7 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=15e5a91d-3180-4666-ab80-dedbd50ffcb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:87:17:08:92:69:b4:67:9e:19:75:ce:68:13: 01:0a:32:8c:bd:5e:60:e7:51:a4:16:1e:4c:7d:2b: e1:92:14:9b:0d:12:61:8a:3b:9f:e6:1c:b2:44:52: 71:5c:a0:52:ff:7e:be:44:8b:8a:89:9a:7c:56:15: 54:3d:35:39:c7:7d:d5:8c:d5:70:e6:79:80:0d:73: 26:df:9a:60:ac:46:0d:0d:42:00:91:68:cb:b9:d7: 6a:c0:ac:65:70:1c:c6:2c:ee:5c:0c:45:f9:e2:03: a6:43:04:bc:ab:21:d4:87:31:49:60:3c:dd:2d:08: 08:12:cb:28:a0:08:b7:55:b7:a2:85:58:22:e7:b1: a1:d6:03:89:1f:57:d6:44:8c:4c:1f:0a:66:ce:f9: 14:30:ac:40:60:37:ab:f1:0a:fb:5f:df:28:ea:b9: 52:a6:7c:26:47:f6:12:ba:5c:2f:5c:d2:25:d4:16: 0b:65:59:e4:c4:40:00:80:f2:78:9f:be:2e:b2:fc: ae:eb:cd:87:b2:00:8c:dc:34:b2:81:db:35:be:a1: 62:cf:f1:15:f4:94:a6:9d:30:0b:2c:5b:77:68:c3: e1:83:6b:7b:58:e3:06:cd:8d:f0:c4:74:36:ec:30: b4:9d:0f:89:c8:7f:15:15:8f:e8:bb:58:b0:d7:9d: f9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:79:8E:D2:F1:F0:5B:7A:52:F2:3C:3D:33:81:84:7C:0C:51:26:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/4acda3a4-e641-396a-9a6f-a18db1280ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7/dccebd00-21a5-4af6-b51a-e1f651e635f7.crl X509v3 Authority Key Identifier: keyid:F4:8A:54:4B:CB:D8:9A:07:89:93:2E:83:AF:6F:5F:04:E1:DA:AB:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dccebd00-21a5-4af6-b51a-e1f651e635f7.cer sbgp-ipAddrBlock: critical IPv4: 149.112.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:97:e3:78:c2:e4:57:69:1a:f7:35:89:d9:76:a7:d8:e6:74: 2a:ab:2d:ee:26:5c:cd:23:b6:94:f1:aa:19:ba:b1:b7:08:e1: 34:08:94:7b:7c:1f:ee:46:ce:93:3e:b7:bd:e4:ea:e4:cb:66: 80:13:96:41:b7:32:c7:da:eb:83:b2:ef:8c:ff:2c:9d:2b:73: 81:d8:b2:ce:2b:b4:1e:24:01:05:9c:89:95:1d:37:2a:44:46: f4:8c:bc:aa:24:57:b0:30:95:08:61:77:8b:aa:b2:af:0e:9a: 66:05:14:61:1f:00:99:39:15:74:ae:4e:a6:3b:b4:ec:23:d1: 2f:58:f2:a4:2f:3b:1a:76:e8:f7:78:08:bc:ba:06:eb:39:69: 78:64:d8:44:2e:64:80:66:83:37:c1:18:02:bc:c2:47:56:4f: e8:0d:fd:68:2f:a5:56:e3:15:a4:bd:58:81:d2:58:66:64:07: 17:fc:24:47:c1:14:37:03:ed:22:2f:02:cf:7e:86:90:43:22: e7:47:9c:20:24:15:0f:00:d1:4d:22:ac:38:21:f3:2b:20:2c: 0c:2b:ce:2d:93:3c:8f:f0:3c:0a:6c:db:15:d6:20:1d:5e:41: c2:22:ad:d1:f7:71:07:63:fc:29:54:70:26:e7:0c:a3:33:02: 86:47:f9:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvLh9cOGH8Aa09eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNjZWJkMDAtMjFhNS00YWY2LWI1MWEtZTFmNjUxZTYz NWY3MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk MTVlNWE5MWQtMzE4MC00NjY2LWFiODAtZGVkYmQ1MGZmY2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4cXCJJptGeeGXXOaBMBCjKMvV5g51GkFh5M fSvhkhSbDRJhijuf5hyyRFJxXKBS/36+RIuKiZp8VhVUPTU5x33VjNVw5nmADXMm 35pgrEYNDUIAkWjLuddqwKxlcBzGLO5cDEX54gOmQwS8qyHUhzFJYDzdLQgIEsso oAi3VbeihVgi57Gh1gOJH1fWRIxMHwpmzvkUMKxAYDer8Qr7X98o6rlSpnwmR/YS ulwvXNIl1BYLZVnkxEAAgPJ4n74usvyu682HsgCM3DSygds1vqFiz/EV9JSmnTAL LFt3aMPhg2t7WOMGzY3wxHQ27DC0nQ+JyH8VFY/ou1iw1535dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF95jtLx8Ft6UvI8PTOBhHwMUSY2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kY2Nl YmQwMC0yMWE1LTRhZjYtYjUxYS1lMWY2NTFlNjM1ZjcvNGFjZGEzYTQtZTY0MS0z OTZhLTlhNmYtYTE4ZGIxMjgwZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGNjZWJkMDAtMjFhNS00YWY2LWI1 MWEtZTFmNjUxZTYzNWY3L2RjY2ViZDAwLTIxYTUtNGFmNi1iNTFhLWUxZjY1MWU2 MzVmNy5jcmwwHwYDVR0jBBgwFoAU9IpUS8vYmgeJky6Dr29fBOHaqy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kY2NlYmQwMC0yMWE1LTRhZjYtYjUxYS1lMWY2 NTFlNjM1ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXByMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKX43jC5FdpGvc1idl2p9jmdCqrLe4mXM0jtpTxqhm6sbcI4TQIlHt8 H+5GzpM+t73k6uTLZoATlkG3Msfa64Oy74z/LJ0rc4HYss4rtB4kAQWciZUdNypE RvSMvKokV7AwlQhhd4uqsq8OmmYFFGEfAJk5FXSuTqY7tOwj0S9Y8qQvOxp26Pd4 CLy6Bus5aXhk2EQuZIBmgzfBGAK8wkdWT+gN/WgvpVbjFaS9WIHSWGZkBxf8JEfB FDcD7SIvAs9+hpBDIudHnCAkFQ8A0U0irDgh8ysgLAwrzi2TPI/wPAps2xXWIB1e QcIirdH3cQdj/ClUcCbnDKMzAoZH+cs= -----END CERTIFICATE-----Generated at Fri Aug 21 23:09:42 2026 by rpki-client