$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/239f9ee1-7d02-3155-ac48-c07b2ad31858.roa File: 239f9ee1-7d02-3155-ac48-c07b2ad31858.roa (raw, json) Hash identifier: euzhdPxdV41gBao0ZbyNL3LXqhXSjv5EeG/8Cqet10U= Subject key identifier: E7:FE:F9:84:A5:DA:B0:48:CF:EE:95:41:EB:DE:23:74:86:D6:17:15 Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584CAE5EB954693D03859A8AF680 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/239f9ee1-7d02-3155-ac48-c07b2ad31858.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 54651 IP address blocks: 149.117.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:b9:54:69:3d:03:85:9a:8a:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=a82a43dd-2f05-4018-89b8-1f09463c6db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:19:f3:3b:0d:3d:c7:99:5e:ae:13:69:e7:e1: f1:ae:4a:dc:f4:f7:9d:0a:2e:36:a4:90:e8:82:71: 2b:b9:ee:9f:cd:80:05:75:bd:d4:42:e5:45:e3:65: b0:7c:fd:a4:d8:d9:96:4e:25:95:b9:17:ce:5a:7a: 47:ce:bb:6e:d6:a7:6e:be:17:45:46:0a:b2:12:a2: 40:f5:c6:34:da:e2:24:f1:26:bf:61:45:19:73:87: ab:5e:6f:9a:83:ba:a9:8f:8a:5b:8d:f0:eb:0d:67: 3e:7a:db:db:06:80:d0:fd:4f:c2:51:fb:67:4c:fc: 19:30:8d:78:22:ad:7a:71:8c:a4:2f:52:dc:a2:92: 20:05:d4:ad:2a:57:27:af:0b:35:29:32:68:82:7d: 36:6f:79:78:15:7b:fa:7a:92:0a:34:84:99:77:bd: 80:f3:e6:e0:d9:07:33:89:20:0a:28:5e:72:a0:94: d5:9d:01:0a:6c:ad:fe:1b:56:2d:e7:67:8c:a9:37: b6:ea:60:a8:0a:e2:f0:82:9f:ac:a1:6a:94:14:26: 85:56:34:df:b9:40:4e:79:ef:78:4f:cb:1c:bd:9f: 76:2f:b5:27:32:b1:3c:60:93:cf:d5:f2:89:98:ad: d6:b6:69:a3:93:7c:5e:6a:3a:d4:4f:e6:1d:58:b6: 4d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FE:F9:84:A5:DA:B0:48:CF:EE:95:41:EB:DE:23:74:86:D6:17:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/239f9ee1-7d02-3155-ac48-c07b2ad31858.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:06:7f:31:0a:0b:3f:f1:5e:00:f0:ac:ec:da:a4:aa:f2:3a: 05:14:b6:3b:b7:e8:a3:54:31:af:02:8b:f0:80:31:6c:cd:23: 7c:2a:50:49:17:88:de:24:b4:69:fe:bd:5f:91:57:14:2c:e9: 85:f3:2c:83:bd:2d:cf:ee:2d:6c:3d:e4:2c:48:5b:d7:68:e1: f7:eb:c4:0c:a6:c0:1d:aa:30:e1:c8:dd:54:28:1e:37:a0:88: ac:bc:c6:10:ef:03:4f:8e:5e:e3:40:93:74:51:d6:0a:64:c4: 19:25:2c:33:70:31:8e:1e:33:5a:0e:05:55:48:ee:9f:fd:af: 8f:83:40:c5:91:37:c2:cc:f6:13:d7:2a:9e:94:d1:0c:4d:ef: d1:88:c2:3c:f5:25:52:25:c6:56:86:a7:2e:bf:7b:82:d1:ae: d1:07:e6:b6:39:fd:be:63:92:10:77:4a:b6:84:3a:62:2b:91: 70:8c:13:5c:88:40:b5:2d:35:d9:58:a0:a7:18:ca:59:ef:85: 66:87:ca:af:04:e3:a9:5f:42:be:08:52:69:cf:22:90:a6:57: 89:15:92:10:11:b6:fd:67:a7:a2:89:60:c3:59:6c:81:eb:28: 07:49:0e:24:b0:bf:cc:7c:2e:2c:f1:55:36:ca:06:9a:fd:f6: 73:f4:44:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXrlUaT0DhZqK9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTgyYTQzZGQtMmYwNS00MDE4LTg5YjgtMWYwOTQ2M2M2ZGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RnzOw09x5lerhNp5+Hxrkrc9PedCi42pJDo gnErue6fzYAFdb3UQuVF42WwfP2k2NmWTiWVuRfOWnpHzrtu1qduvhdFRgqyEqJA 9cY02uIk8Sa/YUUZc4erXm+ag7qpj4pbjfDrDWc+etvbBoDQ/U/CUftnTPwZMI14 Iq16cYykL1LcopIgBdStKlcnrws1KTJogn02b3l4FXv6epIKNISZd72A8+bg2Qcz iSAKKF5yoJTVnQEKbK3+G1Yt52eMqTe26mCoCuLwgp+soWqUFCaFVjTfuUBOee94 T8scvZ92L7UnMrE8YJPP1fKJmK3Wtmmjk3xeajrUT+YdWLZNtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOf++YSl2rBIz+6VQeveI3SG1hcVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvMjM5ZjllZTEtN2QwMi0z MTU1LWFjNDgtYzA3YjJhZDMxODU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXVEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIGfzEKCz/xXgDwrOzapKryOgUUtju36KNUMa8Ci/CAMWzNI3wqUEkX iN4ktGn+vV+RVxQs6YXzLIO9Lc/uLWw95CxIW9do4ffrxAymwB2qMOHI3VQoHjeg iKy8xhDvA0+OXuNAk3RR1gpkxBklLDNwMY4eM1oOBVVI7p/9r4+DQMWRN8LM9hPX Kp6U0QxN79GIwjz1JVIlxlaGpy6/e4LRrtEH5rY5/b5jkhB3SraEOmIrkXCME1yI QLUtNdlYoKcYylnvhWaHyq8E46lfQr4IUmnPIpCmV4kVkhARtv1np6KJYMNZbIHr KAdJDiSwv8x8LizxVTbKBpr99nP0RFc= -----END CERTIFICATE-----Generated at Mon Feb 23 00:52:19 2026 by rpki-client