$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/239f9ee1-7d02-3155-ac48-c07b2ad31858.roa File: 239f9ee1-7d02-3155-ac48-c07b2ad31858.roa (raw, json) Hash identifier: vaYRi2hbNClKY2CtYp2TJpwYk/jBiQSJyFhGpe1Bn4k= Subject key identifier: CB:2F:67:F7:62:90:D9:1E:0A:39:76:5A:9E:5A:E7:84:41:E7:C2:AB Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584AEE269BF6DFAB772B61F8EF40 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/239f9ee1-7d02-3155-ac48-c07b2ad31858.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 54651 IP address blocks: 149.117.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:9b:f6:df:ab:77:2b:61:f8:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=e4caba1c-aabc-4266-aa38-01009e2f28af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:82:c3:ab:16:7f:18:18:00:13:a6:f8:15:74: 80:9c:77:b5:d8:89:8e:42:e0:a4:50:3a:05:68:cd: cd:99:93:1d:24:85:a4:a2:16:7b:4c:8f:e9:3b:d7: 0b:cd:36:97:45:93:01:84:e1:bd:a8:60:5a:ca:b3: 52:be:47:62:3e:67:35:3a:31:7f:97:78:6f:51:c6: 27:db:1d:c1:8c:47:68:81:7c:f7:c6:c3:bb:2e:74: 50:4f:c4:ea:ad:21:01:43:42:b7:ed:bc:70:a2:a3: 86:29:34:ea:08:52:f7:e0:23:46:8e:21:65:6a:1c: 22:1d:31:74:92:b9:e5:f9:92:0d:71:46:26:cd:6f: 89:d9:83:ab:cd:b2:16:87:c4:b4:01:cc:93:3d:dc: 04:3f:b3:04:f7:10:17:e9:2d:8f:4b:6c:fe:93:1b: 11:a6:be:11:ca:62:97:dd:84:66:ea:e4:78:48:ef: 45:e1:f8:39:db:71:4c:0d:c8:89:c4:e1:a7:b5:35: 1c:7b:90:7c:fe:50:23:4b:2c:83:d5:c2:cb:36:c6: 5b:20:6d:d2:ec:2f:c3:8f:32:98:38:e2:99:56:9c: 0a:43:88:8b:28:60:04:a4:ee:4b:18:10:d9:b5:03: a4:12:3f:a5:5c:54:89:00:b1:4d:c4:64:07:7a:8e: 9d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:2F:67:F7:62:90:D9:1E:0A:39:76:5A:9E:5A:E7:84:41:E7:C2:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/239f9ee1-7d02-3155-ac48-c07b2ad31858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:6e:ac:4e:29:b7:3c:be:81:eb:1d:39:cf:6d:c7:a2:a6:91: 20:f7:f6:b4:92:32:a9:c1:96:68:84:2b:1b:92:55:86:1d:2c: e0:15:86:69:6b:5c:32:c8:ae:ac:dc:b0:18:d0:c4:51:c2:c3: 2b:a0:ac:3d:75:9f:c8:23:04:11:17:94:2e:0a:3f:02:67:29: 3a:13:0a:69:f4:b3:30:20:58:c0:85:85:e2:32:03:ae:7c:d0: 88:2c:a2:a5:f8:97:0e:5f:a1:ad:d3:81:31:fa:96:f3:0c:77: 89:13:7b:00:21:16:3c:e2:01:c2:14:9c:4e:69:1a:9f:20:34: 14:07:2c:55:8e:18:87:f5:f1:e4:39:94:9b:06:42:5f:78:5d: 67:62:62:5c:28:f0:28:46:f3:99:45:46:6f:a4:eb:88:65:5f: bd:cc:4c:1d:58:eb:53:29:fe:95:e6:a4:a1:ea:b6:f7:bb:c1: d8:cc:7a:66:78:79:39:c6:47:92:b4:ae:2e:35:50:1d:b7:d6: bf:7d:7f:ff:2e:86:01:67:12:7e:b0:36:d7:04:7c:0d:35:99: 6b:f8:60:73:7c:6f:b1:62:0a:c8:c5:ed:8b:b6:98:02:2a:fe: 07:48:0c:c1:32:4b:20:9a:47:fd:b4:d3:5f:04:92:f5:e4:db: 5c:c1:10:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruJpv236t3K2H470AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk ZTRjYWJhMWMtYWFiYy00MjY2LWFhMzgtMDEwMDllMmYyOGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlILDqxZ/GBgAE6b4FXSAnHe12ImOQuCkUDoF aM3NmZMdJIWkohZ7TI/pO9cLzTaXRZMBhOG9qGBayrNSvkdiPmc1OjF/l3hvUcYn 2x3BjEdogXz3xsO7LnRQT8TqrSEBQ0K37bxwoqOGKTTqCFL34CNGjiFlahwiHTF0 krnl+ZINcUYmzW+J2YOrzbIWh8S0AcyTPdwEP7ME9xAX6S2PS2z+kxsRpr4RymKX 3YRm6uR4SO9F4fg523FMDciJxOGntTUce5B8/lAjSyyD1cLLNsZbIG3S7C/DjzKY OOKZVpwKQ4iLKGAEpO5LGBDZtQOkEj+lXFSJALFNxGQHeo6dkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsvZ/dikNkeCjl2Wp5a54RB58KrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvMjM5ZjllZTEtN2QwMi0z MTU1LWFjNDgtYzA3YjJhZDMxODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNurE4ptzy+gesdOc9tx6KmkSD39rSSMqnBlmiEKxuSVYYdLOAVhmlr XDLIrqzcsBjQxFHCwyugrD11n8gjBBEXlC4KPwJnKToTCmn0szAgWMCFheIyA658 0IgsoqX4lw5foa3TgTH6lvMMd4kTewAhFjziAcIUnE5pGp8gNBQHLFWOGIf18eQ5 lJsGQl94XWdiYlwo8ChG85lFRm+k64hlX73MTB1Y61Mp/pXmpKHqtve7wdjMemZ4 eTnGR5K0ri41UB231r99f/8uhgFnEn6wNtcEfA01mWv4YHN8b7FiCsjF7Yu2mAIq /gdIDMEySyCaR/20018EkvXk21zBED0= -----END CERTIFICATE-----Generated at Sat Aug 23 20:56:41 2025 by rpki-client