$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/9d556077-1a33-38c1-83d3-f523ab48772e.roa File: 9d556077-1a33-38c1-83d3-f523ab48772e.roa (raw, json) Hash identifier: 7jLn/a5yc42X9CZW5CdsSJfKVzow8D0eZTgda+4DNdI= Subject key identifier: 46:2A:86:69:3C:A2:2D:78:E6:6F:99:16:AF:4A:E3:24:B9:DB:37:D9 Certificate issuer: /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8 Certificate serial: 010D0C9F4328584ABBE62B2D1F3567D1FAE6D1A0 Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/9d556077-1a33-38c1-83d3-f523ab48772e.roa Signing time: Sun 03 Aug 2025 13:00:40 +0000 ROA not before: Sun 03 Aug 2025 13:00:40 +0000 ROA not after: Sat 01 Nov 2025 13:00:40 +0000 asID: 0 IP address blocks: 149.112.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:bb:e6:2b:2d:1f:35:67:d1:fa:e6:d1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8 Validity Not Before: Aug 3 13:00:40 2025 GMT Not After : Nov 1 13:00:40 2025 GMT Subject: CN=79c7fab4-15dd-4af7-a13a-3d63a5c9fde9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:79:ed:85:c2:5a:17:0d:4c:67:0d:fb:7e:db: 28:53:24:4a:00:14:0c:58:1a:a2:83:92:e5:5d:d6: 50:3b:af:a4:18:84:f4:34:f1:c8:92:bf:55:59:fc: 77:e7:7a:6f:db:90:2f:75:d7:56:73:fa:a9:6a:4e: bd:02:ed:86:20:62:35:4f:13:7b:fb:f3:6a:8d:d0: 1f:ad:6b:bf:63:6b:ff:e1:8d:6c:e4:bd:54:d9:67: 93:85:f7:19:ee:3c:8e:48:83:17:83:2a:f1:d5:f5: 37:17:11:ef:ff:7e:4a:1c:1d:e5:69:e3:ec:cc:a0: b8:bd:f1:2b:17:f9:66:d4:eb:96:40:26:1d:7c:46: 0b:6c:39:db:64:30:7c:be:8f:9c:7e:68:1b:94:69: 6c:22:48:3f:4b:88:f2:13:f8:f7:c1:dc:73:9f:5b: 9a:46:9b:7e:eb:d9:97:fb:ce:c2:60:71:bb:a6:2b: af:41:5a:d2:3e:19:6a:52:0c:4e:73:c4:5d:db:73: 56:13:a3:27:92:0e:54:18:36:1e:42:d3:98:ed:5d: d7:5a:61:e2:06:3e:1d:ab:fe:15:15:6e:f3:a7:db: b9:76:8b:98:70:0c:96:1d:0c:48:3f:eb:69:40:48: 3b:64:f0:83:52:14:18:5d:10:83:f1:d5:f7:1d:36: 36:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2A:86:69:3C:A2:2D:78:E6:6F:99:16:AF:4A:E3:24:B9:DB:37:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/9d556077-1a33-38c1-83d3-f523ab48772e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl X509v3 Authority Key Identifier: keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer sbgp-ipAddrBlock: critical IPv4: 149.112.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d8:a9:fc:90:d6:82:3d:40:80:ea:77:b8:1a:2c:cc:10:4c: 2c:f4:d6:1e:5c:63:21:bd:10:df:8b:59:c7:a2:ad:ee:d6:cb: 91:98:4d:33:1a:74:5c:4f:dc:1e:0e:64:df:d4:9a:71:02:b4: 42:a0:61:6f:b7:24:4b:b8:14:b3:67:be:da:03:39:ce:dc:88: 62:85:80:d9:64:dc:9d:c2:f4:c6:f0:d6:08:7e:83:6a:26:6d: 11:2d:28:70:51:3d:59:dd:2d:6d:3b:75:b1:f4:59:45:ca:46: d4:04:65:30:37:10:32:56:24:2c:e6:37:48:2d:a4:43:31:cc: 32:66:83:f4:98:b0:21:d1:2a:24:37:3e:87:cc:5b:ed:0e:99: 2b:ca:e8:5e:72:03:e6:ee:a6:d7:6d:cb:ce:a0:21:9f:f9:d0: 4b:b8:d4:62:9c:b7:f7:d8:e2:18:7b:86:af:6c:7a:ef:83:a3: 06:e5:47:e9:87:e3:37:49:f3:ab:e5:fb:32:de:76:8b:e4:73: e1:7b:23:58:e5:b5:2e:30:22:cb:fc:f6:7f:e5:90:92:66:7a: e6:69:12:8d:77:c9:a7:be:21:79:d4:91:e4:67:f1:c6:88:ee: 6b:da:41:9e:47:6e:7d:7c:fe:ca:28:50:a3:59:38:b5:4b:fe: 35:b5:2b:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq75istHzVn0frm0aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NhYTljMjctNmI2OC00NWE4LWI3NzctNGM3YjAwNDgy YWI4MB4XDTI1MDgwMzEzMDA0MFoXDTI1MTEwMTEzMDA0MFowLzEtMCsGA1UEAxMk NzljN2ZhYjQtMTVkZC00YWY3LWExM2EtM2Q2M2E1YzlmZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHnthcJaFw1MZw37ftsoUyRKABQMWBqig5Ll XdZQO6+kGIT0NPHIkr9VWfx353pv25AvdddWc/qpak69Au2GIGI1TxN7+/NqjdAf rWu/Y2v/4Y1s5L1U2WeThfcZ7jyOSIMXgyrx1fU3FxHv/35KHB3laePszKC4vfEr F/lm1OuWQCYdfEYLbDnbZDB8vo+cfmgblGlsIkg/S4jyE/j3wdxzn1uaRpt+69mX +87CYHG7piuvQVrSPhlqUgxOc8Rd23NWE6Mnkg5UGDYeQtOY7V3XWmHiBj4dq/4V FW7zp9u5douYcAyWHQxIP+tpQEg7ZPCDUhQYXRCD8dX3HTY2rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYqhmk8oi145m+ZFq9K4yS52zfZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jY2Fh OWMyNy02YjY4LTQ1YTgtYjc3Ny00YzdiMDA0ODJhYjgvOWQ1NTYwNzctMWEzMy0z OGMxLTgzZDMtZjUyM2FiNDg3NzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2NhYTljMjctNmI2OC00NWE4LWI3 NzctNGM3YjAwNDgyYWI4L2NjYWE5YzI3LTZiNjgtNDVhOC1iNzc3LTRjN2IwMDQ4 MmFiOC5jcmwwHwYDVR0jBBgwFoAUokHvW5pqS+aRVpyHiqhu3FSyf4YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jY2FhOWMyNy02YjY4LTQ1YTgtYjc3Ny00Yzdi MDA0ODJhYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXB3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHYqfyQ1oI9QIDqd7gaLMwQTCz01h5cYyG9EN+LWceire7Wy5GYTTMa dFxP3B4OZN/UmnECtEKgYW+3JEu4FLNnvtoDOc7ciGKFgNlk3J3C9Mbw1gh+g2om bREtKHBRPVndLW07dbH0WUXKRtQEZTA3EDJWJCzmN0gtpEMxzDJmg/SYsCHRKiQ3 PofMW+0OmSvK6F5yA+buptdty86gIZ/50Eu41GKct/fY4hh7hq9seu+DowblR+mH 4zdJ86vl+zLedovkc+F7I1jltS4wIsv89n/lkJJmeuZpEo13yae+IXnUkeRn8caI 7mvaQZ5Hbn18/sooUKNZOLVL/jW1K70= -----END CERTIFICATE-----Generated at Wed Aug 6 19:36:50 2025 by rpki-client