$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/133bdf8b-94cc-3b4b-a2da-8f00947c052b.roa File: 133bdf8b-94cc-3b4b-a2da-8f00947c052b.roa (raw, json) Hash identifier: s7WyjjNW/UXvvxEphelW/hpHzRXbp+C5D5nZ+T2Xjtc= Subject key identifier: D5:AB:D6:DA:18:B1:D5:76:9A:C4:22:04:3B:DE:1F:6F:47:C2:A2:28 Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584CAE5EC7C3634CE9916AA8E680 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/133bdf8b-94cc-3b4b-a2da-8f00947c052b.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 394027 IP address blocks: 149.117.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:c7:c3:63:4c:e9:91:6a:a8:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=44868e27-50e3-4211-af91-f815acb369a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9a:1e:c0:ca:ce:2d:37:e7:14:a8:a1:c9:b1: fe:da:d0:f7:1e:4d:4f:fe:97:a1:ca:e1:cb:c5:70: 31:9a:8b:a3:4a:a6:84:ac:f3:9d:ee:c1:6a:5d:b0: 23:88:3b:74:a0:2f:4b:69:e4:c0:4c:c6:f9:8b:54: a4:9f:c9:82:91:b6:91:8c:78:a9:9b:00:1a:2f:3c: 1b:f8:a2:57:24:a9:01:71:f0:59:95:b7:90:92:ba: 0a:95:5d:b3:76:04:87:23:96:67:a0:db:ac:24:06: 3d:e6:e1:1a:8f:eb:5b:a3:09:90:5e:3b:34:34:cd: 9d:e2:70:b7:82:e5:c5:3e:87:7e:6c:82:22:87:98: 0b:8b:c1:e4:98:c7:36:0c:3b:fc:2d:8a:23:45:33: 39:e4:ed:91:07:a3:e2:3e:2d:3f:f8:1c:69:98:6c: a5:ae:7e:66:40:d7:e6:84:49:f9:5a:d5:c9:83:b1: d4:ec:4f:9f:26:2e:dd:b5:ee:a5:eb:76:cb:ef:04: 56:10:ea:4d:6f:d3:b0:26:f2:ac:44:1c:de:89:d6: 23:dc:e0:75:32:b8:d5:55:e6:10:e2:79:78:bc:f8: 53:3a:ff:87:9c:b1:2c:a4:1b:18:b8:71:60:30:55: 1f:57:d4:61:ef:17:52:d3:45:52:84:93:54:4a:1a: 99:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AB:D6:DA:18:B1:D5:76:9A:C4:22:04:3B:DE:1F:6F:47:C2:A2:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/133bdf8b-94cc-3b4b-a2da-8f00947c052b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:05:cc:d2:3b:49:ab:6e:29:17:3b:b2:ac:db:5c:c6:df:d3: 66:4b:bf:d5:27:14:05:ad:9f:1d:f6:0f:6c:1f:c4:b1:06:3f: 9c:14:e7:0d:f6:56:b5:b2:0b:dc:58:bb:d8:68:7a:61:9e:80: 36:09:64:56:49:1c:f2:32:b8:cb:74:f1:26:62:9d:cd:81:71: 46:b4:dc:1e:84:d1:d2:db:dc:87:3a:6c:cc:bc:51:0e:33:db: eb:03:6a:76:90:41:cc:70:d4:1b:d2:bc:bf:d2:5e:ff:9f:12: 54:aa:e9:04:b1:32:92:ee:22:9f:5c:31:27:f7:bf:4d:e4:ae: a5:1f:14:54:b3:23:78:05:0e:a0:71:39:45:ee:60:5c:8e:a9: ac:ef:b0:0f:58:9a:3f:f4:dc:e9:82:e9:26:b6:64:76:9a:a9: 6c:aa:2d:8d:5c:1f:eb:54:6e:84:44:63:4a:9c:73:c3:f2:50: 88:0c:00:21:4e:e3:f0:19:c7:c2:d3:89:f0:01:f1:9d:20:3d: fd:65:f7:c1:35:7d:8e:4a:8c:41:bf:55:48:ef:04:fb:7e:68: ee:c3:65:21:e8:09:b2:22:5e:71:40:2e:a3:28:c0:f5:95:dc: 43:b4:d3:c0:b7:a8:78:29:92:24:b3:bc:25:4f:c7:6b:07:ee: 4a:82:92:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXsfDY0zpkWqo5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NDQ4NjhlMjctNTBlMy00MjExLWFmOTEtZjgxNWFjYjM2OWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpoewMrOLTfnFKihybH+2tD3Hk1P/pehyuHL xXAxmoujSqaErPOd7sFqXbAjiDt0oC9LaeTATMb5i1Skn8mCkbaRjHipmwAaLzwb +KJXJKkBcfBZlbeQkroKlV2zdgSHI5ZnoNusJAY95uEaj+tbowmQXjs0NM2d4nC3 guXFPod+bIIih5gLi8HkmMc2DDv8LYojRTM55O2RB6PiPi0/+BxpmGylrn5mQNfm hEn5WtXJg7HU7E+fJi7dte6l63bL7wRWEOpNb9OwJvKsRBzeidYj3OB1MrjVVeYQ 4nl4vPhTOv+HnLEspBsYuHFgMFUfV9Rh7xdS00VShJNUShqZdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWr1toYsdV2msQiBDveH29HwqIoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvMTMzYmRmOGItOTRjYy0z YjRiLWEyZGEtOGYwMDk0N2MwNTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwFzNI7SatuKRc7sqzbXMbf02ZLv9UnFAWtnx32D2wfxLEGP5wU5w32 VrWyC9xYu9hoemGegDYJZFZJHPIyuMt08SZinc2BcUa03B6E0dLb3Ic6bMy8UQ4z 2+sDanaQQcxw1BvSvL/SXv+fElSq6QSxMpLuIp9cMSf3v03krqUfFFSzI3gFDqBx OUXuYFyOqazvsA9Ymj/03OmC6Sa2ZHaaqWyqLY1cH+tUboREY0qcc8PyUIgMACFO 4/AZx8LTifAB8Z0gPf1l98E1fY5KjEG/VUjvBPt+aO7DZSHoCbIiXnFALqMowPWV 3EO008C3qHgpkiSzvCVPx2sH7kqCkls= -----END CERTIFICATE-----Generated at Mon Feb 23 00:53:06 2026 by rpki-client