$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/133bdf8b-94cc-3b4b-a2da-8f00947c052b.roa File: 133bdf8b-94cc-3b4b-a2da-8f00947c052b.roa (raw, json) Hash identifier: WBGJZQwIkCdWXT3UynYXOaRxUXZo9pIaVxC7Kdph9A4= Subject key identifier: 53:E5:65:70:3F:50:A3:02:3A:7F:89:04:3A:DD:40:FE:35:F8:47:1B Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584AEE269D1D36D501F3853795F0 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/133bdf8b-94cc-3b4b-a2da-8f00947c052b.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 394027 IP address blocks: 149.117.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:9d:1d:36:d5:01:f3:85:37:95:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=02f9ff04-5aa0-4a9d-bdab-55e13e1d088c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:fe:60:3d:47:b1:74:55:6f:f6:5f:c5:8f:46: 14:39:fc:96:6e:a1:04:ec:0e:44:b1:20:5b:9e:c9: b8:cb:2c:0d:3a:d7:58:af:c2:93:c0:55:0e:0a:40: bd:9a:d5:26:02:e5:e8:5f:a5:e8:40:3c:5e:2a:21: 65:67:2e:f4:0e:34:4b:1d:c8:e9:3d:4c:ad:5c:47: ff:51:70:5d:42:82:41:e5:f8:8a:86:09:04:3e:ab: 37:48:b3:26:14:3e:c9:89:a7:07:3f:ec:ae:bd:8d: 20:c1:ae:35:db:91:bb:34:8b:0c:5f:37:15:cb:7c: 97:09:87:8a:05:be:57:fd:a5:01:ec:a7:ed:f9:86: fd:25:56:d5:fe:7b:f3:39:6f:a3:09:5c:7e:79:5d: ca:1c:29:81:e1:fc:10:68:44:36:fd:e5:4f:a5:bb: a4:6f:1b:a8:d9:30:8a:02:1f:b1:3e:72:fb:01:99: c1:8b:71:72:49:02:97:b0:ca:56:73:be:81:91:5d: 18:7f:e3:99:3b:1f:4e:05:8d:4d:70:fd:9e:32:c2: 38:10:ee:b0:5a:3b:3a:5a:e1:b7:b2:f0:6b:bf:39: c8:37:c1:0e:b0:e9:2a:fd:1e:dd:a6:ab:93:b4:73: 11:ff:1b:1e:f9:e3:2a:3f:cd:06:ee:e4:df:77:bd: ff:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E5:65:70:3F:50:A3:02:3A:7F:89:04:3A:DD:40:FE:35:F8:47:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/133bdf8b-94cc-3b4b-a2da-8f00947c052b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:6c:a4:d2:7d:72:6d:f9:e4:0b:27:0c:ef:cc:45:6d:77:e0: 57:2b:55:ea:2e:75:26:0e:4b:95:91:03:3d:de:cb:9f:ce:c3: 3e:1f:e5:bd:53:cd:9e:78:91:99:c7:48:e3:41:e1:ed:99:77: f9:09:6c:89:8f:a7:15:c5:da:c1:b0:1c:2f:4c:80:0c:46:b8: 77:af:c5:dd:9f:a9:02:1b:55:bf:1d:76:f8:dc:97:3f:29:28: d8:c6:39:ed:84:0a:eb:ec:00:04:4c:40:91:67:10:32:d5:21: 3b:6b:d5:4c:c3:e2:44:db:d7:5a:83:d0:93:a1:11:c8:bf:18: 37:38:30:2f:88:37:5b:f0:b9:43:c0:88:3e:e6:66:2d:4e:a6: 6e:6d:35:9e:cc:b7:fb:51:65:f4:e5:45:65:b9:93:26:06:78: ad:bb:f1:ce:a4:22:f1:7b:e2:ac:1a:40:58:e4:f3:71:98:7d: 04:cc:66:eb:b5:78:34:69:ee:9d:81:bf:70:ca:6d:e7:72:83: f1:43:68:d1:b9:36:67:bb:e9:08:39:ac:85:93:be:d4:20:41: 79:ba:72:49:3d:99:c0:84:31:ba:90:84:3b:52:81:89:d0:66: 29:2a:92:3c:f7:90:60:ff:bb:45:13:ea:57:d0:02:16:b6:ac: 78:2b:f4:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJp0dNtUB84U3lfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk MDJmOWZmMDQtNWFhMC00YTlkLWJkYWItNTVlMTNlMWQwODhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/5gPUexdFVv9l/Fj0YUOfyWbqEE7A5EsSBb nsm4yywNOtdYr8KTwFUOCkC9mtUmAuXoX6XoQDxeKiFlZy70DjRLHcjpPUytXEf/ UXBdQoJB5fiKhgkEPqs3SLMmFD7JiacHP+yuvY0gwa4125G7NIsMXzcVy3yXCYeK Bb5X/aUB7Kft+Yb9JVbV/nvzOW+jCVx+eV3KHCmB4fwQaEQ2/eVPpbukbxuo2TCK Ah+xPnL7AZnBi3FySQKXsMpWc76BkV0Yf+OZOx9OBY1NcP2eMsI4EO6wWjs6WuG3 svBrvznIN8EOsOkq/R7dpquTtHMR/xse+eMqP80G7uTfd73/twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPlZXA/UKMCOn+JBDrdQP41+EcbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvMTMzYmRmOGItOTRjYy0z YjRiLWEyZGEtOGYwMDk0N2MwNTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBspNJ9cm355AsnDO/MRW134FcrVeoudSYOS5WRAz3ey5/Owz4f5b1T zZ54kZnHSONB4e2Zd/kJbImPpxXF2sGwHC9MgAxGuHevxd2fqQIbVb8ddvjclz8p KNjGOe2ECuvsAARMQJFnEDLVITtr1UzD4kTb11qD0JOhEci/GDc4MC+IN1vwuUPA iD7mZi1Opm5tNZ7Mt/tRZfTlRWW5kyYGeK278c6kIvF74qwaQFjk83GYfQTMZuu1 eDRp7p2Bv3DKbedyg/FDaNG5Nme76Qg5rIWTvtQgQXm6ckk9mcCEMbqQhDtSgYnQ Zikqkjz3kGD/u0UT6lfQAha2rHgr9HU= -----END CERTIFICATE-----Generated at Sat Aug 23 20:57:05 2025 by rpki-client