$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/8d147fcb-3c1b-307f-a86c-ccafb727a4fa.roa File: 8d147fcb-3c1b-307f-a86c-ccafb727a4fa.roa (raw, json) Hash identifier: 2MmF/8DuhYQ3Uxj4Iwi5kiQ10WeNmno6qSNESiLn5Fs= Subject key identifier: 4E:33:2C:6A:A3:61:A7:0E:F1:15:60:3E:D7:58:7D:5B:48:15:DA:87 Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584F498B8E933CCAF53027E04B20 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/8d147fcb-3c1b-307f-a86c-ccafb727a4fa.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 53813 IP address blocks: 149.117.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:8e:93:3c:ca:f5:30:27:e0:4b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=051dd69c-1aa1-47e2-a9d7-87eaa5dc8178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6e:9f:c1:3f:c4:3b:45:d9:6b:32:c5:6f:23: b6:a3:a0:81:47:55:0e:49:2f:6e:8d:9b:27:d6:cc: 3d:1e:f6:c8:c8:62:08:66:33:95:77:f1:eb:f9:17: 18:ce:40:14:27:2f:5c:1d:4c:5e:00:07:3e:6b:4f: 18:ca:12:9d:02:7b:7d:7a:5e:ac:5d:b0:c0:ce:7d: 6c:ec:b3:4c:b9:d8:5e:58:81:14:d6:c4:70:f6:9f: 10:77:f0:b8:c1:a8:00:d3:a6:c6:e2:a6:e6:9d:93: 73:1b:13:2c:3d:76:aa:3b:78:74:92:b1:d9:af:2b: 88:87:04:65:12:dd:c1:ee:3f:d4:67:25:53:62:90: d1:60:be:b1:ad:0c:71:a9:5a:18:7f:01:b2:ac:61: 70:b6:e5:ae:2c:50:c9:dc:db:e1:03:c1:b7:1b:c1: 3c:c4:5a:3e:5f:08:fd:06:e3:bc:de:92:2d:9e:bc: 64:03:57:ee:c6:ae:64:5e:82:3b:69:6f:c0:50:19: 3d:ce:51:31:99:cd:fc:89:0f:b8:31:96:a0:93:ec: 6d:ca:1d:27:21:8b:6d:c2:8b:c8:ef:b0:74:8d:0f: ab:eb:28:52:72:48:c1:3c:39:15:ec:8f:25:a9:95: bd:57:c8:95:bf:de:57:5f:0b:0d:86:c5:52:c7:31: 9e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:33:2C:6A:A3:61:A7:0E:F1:15:60:3E:D7:58:7D:5B:48:15:DA:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/8d147fcb-3c1b-307f-a86c-ccafb727a4fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:25:a2:9c:b5:76:a8:b5:16:e7:62:8c:75:f3:b4:d8:ac:2f: f1:53:0c:f0:ac:87:70:59:e5:72:85:2c:0f:d2:42:56:1e:c5: 9a:9d:68:c6:54:a6:19:61:a9:27:e1:17:70:de:6f:38:40:43: bf:41:11:d4:01:cb:d3:5b:3d:e8:42:d1:d1:11:96:62:00:cd: 30:3a:b0:6c:99:f4:6d:fc:02:70:6f:f5:56:98:2a:fb:4a:1a: 32:47:3b:61:f5:f7:f1:b4:b7:76:32:97:be:5e:85:0a:89:57: a9:07:60:08:a8:79:25:2f:c7:74:15:28:bf:31:0b:30:2e:19: 49:be:c6:d7:cb:a9:41:11:68:a4:5e:6b:5c:db:d0:81:bd:96: b9:ac:f1:91:36:1f:92:70:0c:6f:98:ca:ef:a1:79:d2:87:32: bf:c4:0c:08:bd:dc:a3:79:41:38:70:ef:87:8f:a8:ef:a6:31: f5:9d:c6:3c:72:27:12:11:be:50:2c:5c:f2:84:85:c2:ef:db: d9:f6:07:03:37:33:49:15:90:07:e4:c3:40:82:8d:c7:44:5b: aa:79:26:7c:d4:96:11:e1:a4:13:f7:06:c2:c8:78:0a:6a:a9: a4:b5:01:16:59:60:8f:e4:68:e2:66:05:f1:24:8b:88:33:72: 7b:7b:13:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji46TPMr1MCfgSyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDUxZGQ2OWMtMWFhMS00N2UyLWE5ZDctODdlYWE1ZGM4MTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr26fwT/EO0XZazLFbyO2o6CBR1UOSS9ujZsn 1sw9HvbIyGIIZjOVd/Hr+RcYzkAUJy9cHUxeAAc+a08YyhKdAnt9el6sXbDAzn1s 7LNMudheWIEU1sRw9p8Qd/C4wagA06bG4qbmnZNzGxMsPXaqO3h0krHZryuIhwRl Et3B7j/UZyVTYpDRYL6xrQxxqVoYfwGyrGFwtuWuLFDJ3NvhA8G3G8E8xFo+Xwj9 BuO83pItnrxkA1fuxq5kXoI7aW/AUBk9zlExmc38iQ+4MZagk+xtyh0nIYttwovI 77B0jQ+r6yhSckjBPDkV7I8lqZW9V8iVv95XXwsNhsVSxzGe8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4zLGqjYacO8RVgPtdYfVtIFdqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvOGQxNDdmY2ItM2MxYi0z MDdmLWE4NmMtY2NhZmI3MjdhNGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXXnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMlopy1dqi1FudijHXztNisL/FTDPCsh3BZ5XKFLA/SQlYexZqdaMZU phlhqSfhF3DebzhAQ79BEdQBy9NbPehC0dERlmIAzTA6sGyZ9G38AnBv9VaYKvtK GjJHO2H19/G0t3Yyl75ehQqJV6kHYAioeSUvx3QVKL8xCzAuGUm+xtfLqUERaKRe a1zb0IG9lrms8ZE2H5JwDG+Yyu+hedKHMr/EDAi93KN5QThw74ePqO+mMfWdxjxy JxIRvlAsXPKEhcLv29n2BwM3M0kVkAfkw0CCjcdEW6p5JnzUlhHhpBP3BsLIeApq qaS1ARZZYI/kaOJmBfEki4gzcnt7EwY= -----END CERTIFICATE-----Generated at Fri Sep 25 06:33:33 2026 by rpki-client