$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/9d556077-1a33-38c1-83d3-f523ab48772e.roa File: 9d556077-1a33-38c1-83d3-f523ab48772e.roa (raw, json) Hash identifier: P7Zr1UZB8reb8zvTMMCn93gfPa3cyBt/lq5NkUfc1o0= Subject key identifier: 5C:82:A5:57:51:59:9E:52:9C:26:CA:63:5F:BD:0B:A4:DD:19:2D:AB Certificate issuer: /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8 Certificate serial: 010D0C9F4328584B9CA22F70BA557C28DCF6BA80 Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/9d556077-1a33-38c1-83d3-f523ab48772e.roa Signing time: Thu 23 Oct 2025 01:00:31 +0000 ROA not before: Thu 23 Oct 2025 01:00:31 +0000 ROA not after: Wed 21 Jan 2026 02:00:31 +0000 asID: 0 IP address blocks: 149.112.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:a2:2f:70:ba:55:7c:28:dc:f6:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8 Validity Not Before: Oct 23 01:00:31 2025 GMT Not After : Jan 21 02:00:31 2026 GMT Subject: CN=e9500c52-bf48-4571-8695-47cf22369878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5f:0b:56:5e:d6:2f:71:01:b2:99:38:35:a9: e9:b3:47:38:b0:79:ca:55:ed:fc:73:7f:25:0e:8c: 31:34:b9:3c:15:31:ba:98:e9:f8:e0:9d:e5:b7:1a: 6c:6b:2c:2b:84:40:b9:56:b8:d4:f9:73:3c:87:b9: df:1f:8a:9e:2c:8a:3a:4b:fd:5a:2d:cf:0a:1f:9f: e5:ec:32:f4:cb:b9:64:0c:73:7d:fa:29:58:b4:43: 7e:29:79:96:66:65:91:2d:b6:14:1a:d5:ed:88:ef: 8f:b9:24:53:25:8b:7f:48:85:c0:a2:7e:04:78:f7: 81:46:24:d4:4a:07:85:42:26:7b:da:c6:af:f9:e5: a8:fb:27:56:10:d0:f2:4c:73:d8:66:5b:dd:a6:02: 9d:04:da:c7:88:b2:85:68:78:fc:22:56:1f:a9:bc: 13:cf:3f:69:6e:20:63:1c:0a:17:3e:76:b0:1f:d5: b0:8f:c9:21:e0:bc:7a:bb:a3:3a:8d:07:de:2f:8b: ed:df:95:15:82:e8:6e:64:c7:85:16:0b:b0:ee:22: 79:97:dd:47:36:4c:c1:20:14:4b:8c:89:dc:40:ad: 2a:f7:f1:18:d2:43:47:6f:cf:cc:0d:71:6f:b2:e7: 72:bc:00:94:92:8f:8b:b1:58:2b:55:7b:43:a0:23: fa:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:82:A5:57:51:59:9E:52:9C:26:CA:63:5F:BD:0B:A4:DD:19:2D:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/9d556077-1a33-38c1-83d3-f523ab48772e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl X509v3 Authority Key Identifier: keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer sbgp-ipAddrBlock: critical IPv4: 149.112.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:62:e0:eb:a0:ff:62:07:6f:7d:de:6a:6c:90:3a:ca:4b:5d: 61:ee:a2:20:27:0d:20:22:1c:f0:bd:2e:81:bc:c5:7a:42:6f: f5:10:ba:ab:48:0d:c0:b0:36:6d:6f:0d:15:3e:da:b5:a1:80: 76:74:0d:bc:9e:bc:08:ab:85:90:49:73:14:83:64:af:bb:14: d7:66:de:5b:0a:88:84:92:3f:28:4d:d7:ca:56:13:64:ee:01: 93:92:02:68:72:02:de:c5:1e:c8:7e:bc:25:4d:79:52:13:22: 86:be:78:63:20:9e:4d:68:4b:41:af:28:69:7a:91:14:8f:74: 25:de:d8:73:ea:81:db:80:05:61:dc:29:a1:70:4e:77:bf:19: 05:8b:6e:59:3c:ee:26:fd:ad:40:29:60:c0:63:4b:0a:1f:18: a9:8e:4d:83:ee:2f:8e:2c:86:13:51:2e:0b:a4:6f:13:66:20: d4:77:83:e0:d1:d9:b3:c5:9d:9b:75:7c:ba:47:c1:e9:7e:b0: ad:cf:20:7b:7a:49:42:2c:8e:a9:83:73:04:96:b8:1a:5f:65: 08:80:fb:71:05:a3:5a:9b:55:2b:3e:e2:3b:d7:c2:82:83:b8: 3f:df:9a:55:f5:e2:f8:0f:43:02:87:29:9a:59:27:5e:ac:ff: a3:9b:bd:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEucoi9wulV8KNz2uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NhYTljMjctNmI2OC00NWE4LWI3NzctNGM3YjAwNDgy YWI4MB4XDTI1MTAyMzAxMDAzMVoXDTI2MDEyMTAyMDAzMVowLzEtMCsGA1UEAxMk ZTk1MDBjNTItYmY0OC00NTcxLTg2OTUtNDdjZjIyMzY5ODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV8LVl7WL3EBspk4Nanps0c4sHnKVe38c38l DowxNLk8FTG6mOn44J3ltxpsaywrhEC5VrjU+XM8h7nfH4qeLIo6S/1aLc8KH5/l 7DL0y7lkDHN9+ilYtEN+KXmWZmWRLbYUGtXtiO+PuSRTJYt/SIXAon4EePeBRiTU SgeFQiZ72sav+eWo+ydWENDyTHPYZlvdpgKdBNrHiLKFaHj8IlYfqbwTzz9pbiBj HAoXPnawH9Wwj8kh4Lx6u6M6jQfeL4vt35UVguhuZMeFFguw7iJ5l91HNkzBIBRL jIncQK0q9/EY0kNHb8/MDXFvsudyvACUko+LsVgrVXtDoCP6qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyCpVdRWZ5SnCbKY1+9C6TdGS2rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jY2Fh OWMyNy02YjY4LTQ1YTgtYjc3Ny00YzdiMDA0ODJhYjgvOWQ1NTYwNzctMWEzMy0z OGMxLTgzZDMtZjUyM2FiNDg3NzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2NhYTljMjctNmI2OC00NWE4LWI3 NzctNGM3YjAwNDgyYWI4L2NjYWE5YzI3LTZiNjgtNDVhOC1iNzc3LTRjN2IwMDQ4 MmFiOC5jcmwwHwYDVR0jBBgwFoAUokHvW5pqS+aRVpyHiqhu3FSyf4YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jY2FhOWMyNy02YjY4LTQ1YTgtYjc3Ny00Yzdi MDA0ODJhYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXB3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJi4Oug/2IHb33eamyQOspLXWHuoiAnDSAiHPC9LoG8xXpCb/UQuqtI DcCwNm1vDRU+2rWhgHZ0DbyevAirhZBJcxSDZK+7FNdm3lsKiISSPyhN18pWE2Tu AZOSAmhyAt7FHsh+vCVNeVITIoa+eGMgnk1oS0GvKGl6kRSPdCXe2HPqgduABWHc KaFwTne/GQWLblk87ib9rUApYMBjSwofGKmOTYPuL44shhNRLgukbxNmINR3g+DR 2bPFnZt1fLpHwel+sK3PIHt6SUIsjqmDcwSWuBpfZQiA+3EFo1qbVSs+4jvXwoKD uD/fmlX14vgPQwKHKZpZJ16s/6ObvWc= -----END CERTIFICATE-----Generated at Wed Nov 5 17:52:12 2025 by rpki-client