$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa File: ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa (raw, json) Hash identifier: wCKLR8KKnOCkV8cdWFukcicJSW7iU2BS5+g6imm/UFQ= Subject key identifier: 9B:45:F7:84:55:A1:26:ED:40:8F:18:E9:EE:4F:11:E1:EA:B6:CC:D9 Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584E4C548F4F111559DC35D6F5E0 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 397635 IP address blocks: 149.117.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:8f:4f:11:15:59:dc:35:d6:f5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=5328b9b2-2fe4-4dae-b333-ad641cd9027b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e7:ff:78:15:e4:34:d3:91:1f:33:3c:a4:d8: 1b:09:96:13:8f:5d:58:ea:c9:82:06:24:c9:3e:ee: 95:48:23:c6:d1:bf:11:19:57:2a:80:b4:4f:9b:7d: 31:61:09:3d:d1:16:5d:53:93:b5:a8:ac:03:dc:3c: fa:dc:0f:36:78:ea:d2:91:20:5d:d0:8c:42:84:49: b7:11:b6:8b:c5:55:d6:85:f1:9a:4b:f3:70:3e:d4: 7f:df:2e:a0:d7:4c:56:63:bb:05:62:ea:50:d1:dd: 15:55:63:31:0e:de:58:bd:fb:22:d7:58:ac:9b:dd: f3:d2:21:42:d6:a4:c7:12:38:a1:84:97:fd:99:61: 5d:e6:64:94:53:8e:20:10:10:97:2d:1c:73:db:0d: 1f:08:b4:5b:b6:f0:c9:39:53:52:6d:36:f4:36:99: ff:59:5c:8a:29:40:50:9b:74:e0:01:0d:7a:67:f1: 55:c8:cf:62:63:4d:ce:c7:5d:c2:7e:4c:c9:a8:75: 53:f0:22:89:21:fa:a7:a3:7f:8f:80:87:d9:7c:73: 93:6b:bb:0f:d6:1b:23:eb:0a:2f:35:8c:60:47:d4: 2b:57:03:6e:4e:41:72:36:5e:d4:a4:30:cf:c0:1d: e6:1e:04:0f:62:35:51:ec:ac:70:38:04:fc:bc:0b: 7d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:45:F7:84:55:A1:26:ED:40:8F:18:E9:EE:4F:11:E1:EA:B6:CC:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:c3:14:b2:51:63:4f:c2:3c:ea:64:a8:de:73:cf:91:b3:a7: c2:ed:4f:67:08:e7:ff:5e:94:82:44:5b:78:61:a7:87:b0:fe: ed:e7:2a:ad:b5:41:ee:8e:c3:8c:ab:48:09:7a:d9:ea:60:a8: 3f:46:ad:a8:85:19:db:36:40:81:8a:2f:5f:83:7c:e0:61:e3: ee:56:1e:59:64:c0:a7:9b:ff:08:0b:1c:86:0c:73:5e:5e:d9: e1:4f:75:3d:9f:68:f9:a4:08:c6:39:e4:e6:82:db:ea:f7:f3: f2:e5:94:dc:26:57:c3:a0:f3:8b:bd:00:05:c6:6a:d3:f1:85: 64:1c:16:4a:41:e6:a3:cd:f0:1f:a2:58:83:a5:f9:ab:86:ab: 2c:ef:84:c0:df:c1:f9:58:47:e6:a9:fa:5f:b1:12:0d:6e:0f: 51:0d:f5:2c:78:64:c3:a2:1a:a8:53:40:4c:e2:76:31:9a:49: b4:70:49:95:71:db:21:e3:e9:36:c8:9f:90:b6:76:7d:23:1f: 4d:15:52:1e:66:42:86:94:cf:13:f8:d0:f9:14:ec:05:68:be: 9b:ed:87:2e:08:52:93:1c:33:48:6a:a3:45:fc:f9:d7:2b:88: 81:60:16:a7:41:26:c2:aa:2c:b0:f8:6f:d5:c2:d9:7b:e2:b3: 5b:ad:74:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVI9PERVZ3DXW9eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk NTMyOGI5YjItMmZlNC00ZGFlLWIzMzMtYWQ2NDFjZDkwMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuf/eBXkNNORHzM8pNgbCZYTj11Y6smCBiTJ Pu6VSCPG0b8RGVcqgLRPm30xYQk90RZdU5O1qKwD3Dz63A82eOrSkSBd0IxChEm3 EbaLxVXWhfGaS/NwPtR/3y6g10xWY7sFYupQ0d0VVWMxDt5Yvfsi11ism93z0iFC 1qTHEjihhJf9mWFd5mSUU44gEBCXLRxz2w0fCLRbtvDJOVNSbTb0Npn/WVyKKUBQ m3TgAQ16Z/FVyM9iY03Ox13CfkzJqHVT8CKJIfqno3+PgIfZfHOTa7sP1hsj6wov NYxgR9QrVwNuTkFyNl7UpDDPwB3mHgQPYjVR7KxwOAT8vAt9DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtF94RVoSbtQI8Y6e5PEeHqtszZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvZmYwMDg0YzYtYjVjYS0z ZjMzLTlhMDAtMjNhN2ZmZWY4MzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvDFLJRY0/CPOpkqN5zz5Gzp8LtT2cI5/9elIJEW3hhp4ew/u3nKq21 Qe6Ow4yrSAl62epgqD9GraiFGds2QIGKL1+DfOBh4+5WHllkwKeb/wgLHIYMc15e 2eFPdT2faPmkCMY55OaC2+r38/LllNwmV8Og84u9AAXGatPxhWQcFkpB5qPN8B+i WIOl+auGqyzvhMDfwflYR+ap+l+xEg1uD1EN9Sx4ZMOiGqhTQEzidjGaSbRwSZVx 2yHj6TbIn5C2dn0jH00VUh5mQoaUzxP40PkU7AVovpvthy4IUpMcM0hqo0X8+dcr iIFgFqdBJsKqLLD4b9XC2Xvis1utdIY= -----END CERTIFICATE-----Generated at Tue Jul 21 20:50:40 2026 by rpki-client