$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/e166da70-cd6f-3535-9152-db1a15e7146b.roa File: e166da70-cd6f-3535-9152-db1a15e7146b.roa (raw, json) Hash identifier: N9hcNGXoioYrIs5SWNIP+pDtjm+wTRQUCm4Ly3nbnBE= Subject key identifier: 4C:0B:0A:B8:A7:5E:5D:6D:0A:54:B9:AE:2E:C9:20:2B:AA:E6:40:C5 Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584F49736CB3CD11353D81CC8680 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/e166da70-cd6f-3535-9152-db1a15e7146b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22616 IP address blocks: 149.117.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:6c:b3:cd:11:35:3d:81:cc:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5e99db2d-c868-4323-952f-4d1047ee96e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9c:a3:9c:1c:f6:5a:5d:1f:51:6e:ac:57:02: a9:a6:a7:cb:0b:92:f9:ca:3e:ff:7d:f2:ca:d2:5a: f1:52:db:c4:2e:12:6d:a7:f3:16:0c:9a:b6:35:3e: a6:ea:2e:4f:ac:97:18:02:61:d5:5f:c8:7e:a6:4c: bc:fb:db:76:82:9d:8f:f8:db:aa:c6:96:a2:a5:b2: 0c:99:a5:35:d4:4a:75:7a:4b:e7:28:fa:a8:a7:72: 5d:17:70:8a:80:f5:48:71:72:78:43:a5:26:f4:a6: b3:e0:5e:8c:ef:ca:67:f2:2e:27:00:59:d1:9b:02: 5c:82:14:9b:df:41:3b:78:b8:a5:ec:11:ae:a7:9b: bc:d6:8b:fe:af:8a:94:2d:53:83:80:54:de:ba:52: db:c9:d3:05:06:d0:9c:2d:c1:6f:b5:d8:23:4a:42: 44:f7:7b:2c:ad:15:af:06:43:0a:20:db:f6:8d:92: b2:29:5b:00:b0:b8:4f:6e:4b:26:14:d7:7d:b0:3d: 2b:9a:ef:5e:fd:7c:84:16:14:cc:f1:ec:1c:06:02: b4:84:91:db:01:24:f6:08:0c:cc:76:17:39:91:2e: 8f:89:79:bd:47:bf:8a:6f:f9:94:24:f3:ee:aa:9c: be:fc:49:91:72:36:f0:8b:0b:6a:e4:46:43:51:54: 75:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0B:0A:B8:A7:5E:5D:6D:0A:54:B9:AE:2E:C9:20:2B:AA:E6:40:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/e166da70-cd6f-3535-9152-db1a15e7146b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:26:6d:03:b5:15:33:64:e4:5c:05:0a:48:8f:c8:88:44:22: e1:da:92:7a:3c:8d:84:ab:5d:11:c8:3d:60:36:56:e1:e4:d4: 85:03:e8:30:d2:11:32:f8:a0:e8:79:a0:22:19:24:0a:65:8e: 66:92:c9:d0:90:15:77:b9:68:45:ee:f9:2b:1f:40:ca:52:81: 96:68:2b:92:04:3b:6b:3a:32:39:b2:3a:14:52:9e:92:30:89: 1f:47:cc:4f:4e:b7:e1:4c:35:3d:4e:2f:47:aa:0c:d5:5b:06: b8:b2:46:78:61:27:c2:6d:0c:ab:98:a4:c3:a7:20:be:5c:fb: b5:0c:a6:c5:03:9d:bd:4b:a1:91:c8:f8:a4:fc:58:9a:6e:ff: 4d:02:a5:89:46:49:72:cc:68:58:0e:b5:5c:64:69:66:c9:03: dd:d0:94:fa:f2:02:8c:5d:d1:bc:97:71:06:68:6b:b3:ed:b3: a1:ac:cd:07:a7:c1:27:cb:c1:7d:d6:1f:76:a4:f6:08:71:82: fe:42:78:84:8b:51:a0:42:2f:05:20:b0:4e:ac:ba:2e:cb:ec: f1:3f:df:4e:62:6a:6e:e5:9e:0d:dd:71:b9:44:c0:09:7a:68: 30:b8:46:33:7b:e1:30:b2:19:82:6a:49:45:de:33:76:62:42: 97:3a:53:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc2yzzRE1PYHMhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWU5OWRiMmQtYzg2OC00MzIzLTk1MmYtNGQxMDQ3ZWU5NmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pyjnBz2Wl0fUW6sVwKppqfLC5L5yj7/ffLK 0lrxUtvELhJtp/MWDJq2NT6m6i5PrJcYAmHVX8h+pky8+9t2gp2P+NuqxpaipbIM maU11Ep1ekvnKPqop3JdF3CKgPVIcXJ4Q6Um9Kaz4F6M78pn8i4nAFnRmwJcghSb 30E7eLil7BGup5u81ov+r4qULVODgFTeulLbydMFBtCcLcFvtdgjSkJE93ssrRWv BkMKINv2jZKyKVsAsLhPbksmFNd9sD0rmu9e/XyEFhTM8ewcBgK0hJHbAST2CAzM dhc5kS6PiXm9R7+Kb/mUJPPuqpy+/EmRcjbwiwtq5EZDUVR1XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwLCrinXl1tClS5ri7JICuq5kDFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvZTE2NmRhNzAtY2Q2Zi0z NTM1LTkxNTItZGIxYTE1ZTcxNDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXVmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcmbQO1FTNk5FwFCkiPyIhEIuHakno8jYSrXRHIPWA2VuHk1IUD6DDS ETL4oOh5oCIZJApljmaSydCQFXe5aEXu+SsfQMpSgZZoK5IEO2s6MjmyOhRSnpIw iR9HzE9Ot+FMNT1OL0eqDNVbBriyRnhhJ8JtDKuYpMOnIL5c+7UMpsUDnb1LoZHI +KT8WJpu/00CpYlGSXLMaFgOtVxkaWbJA93QlPryAoxd0byXcQZoa7Pts6GszQen wSfLwX3WH3ak9ghxgv5CeISLUaBCLwUgsE6sui7L7PE/305iam7lng3dcblEwAl6 aDC4RjN74TCyGYJqSUXeM3ZiQpc6U7M= -----END CERTIFICATE-----Generated at Fri Sep 25 20:07:24 2026 by rpki-client