$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/2468da7a-22c9-3d02-82b7-e3469b49cdec.roa File: 2468da7a-22c9-3d02-82b7-e3469b49cdec.roa (raw, json) Hash identifier: OUIyabaUUuvwh+tS1RtR0KG5c8s8XGz1IoOwzRD5y1A= Subject key identifier: 31:8B:25:89:25:68:1E:83:90:D2:95:D8:71:84:A8:E6:AD:D3:A4:61 Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584CA75C70045D4F4049E85ED700 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/2468da7a-22c9-3d02-82b7-e3469b49cdec.roa Signing time: Mon 26 Jan 2026 14:00:41 +0000 ROA not before: Mon 26 Jan 2026 14:00:41 +0000 ROA not after: Sun 26 Apr 2026 13:00:41 +0000 asID: 7809 IP address blocks: 149.117.136.0/23 maxlen: 23 149.117.136.0/24 maxlen: 24 149.117.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:5c:70:04:5d:4f:40:49:e8:5e:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Jan 26 14:00:41 2026 GMT Not After : Apr 26 13:00:41 2026 GMT Subject: CN=10b940f5-9736-4da6-99bc-b27a5621478c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:37:2f:bc:5a:d6:14:c7:77:a7:5c:d4:c3:0a: 0a:7c:e2:09:d9:e7:f9:df:6e:04:05:de:83:11:8a: d2:b8:55:44:75:ed:f3:92:69:49:9a:93:da:44:43: d7:92:00:f0:a3:cd:10:df:9d:c1:fb:24:a9:06:c9: 2c:44:0c:c7:99:ba:d1:fc:e3:16:d6:54:74:88:a3: d7:9f:61:2c:ee:2f:2f:bd:b0:c0:f3:c0:74:8a:e5: 66:18:63:64:8e:08:5a:48:6b:83:52:eb:a1:0b:e1: 6d:f5:5d:fe:bf:12:58:45:eb:38:1a:a9:05:96:94: 6e:0f:d3:4c:11:7a:22:7d:31:46:e6:b5:c6:e3:cf: 1c:08:8d:13:ed:2e:6c:42:a3:49:5c:1f:0e:76:ef: 78:68:86:ac:22:5b:21:be:19:1c:02:19:43:2e:50: 86:7a:78:93:9f:10:d2:2d:ff:3e:02:e5:46:85:83: 35:5d:ca:f9:75:51:e0:0d:a5:68:6f:46:43:95:dc: 9c:c7:e3:d2:d6:cd:c6:89:7c:e8:80:cb:d8:aa:d2: 8b:32:73:31:6a:a2:6a:89:4c:6d:6d:dc:19:91:d6: 67:19:7c:29:9f:11:0d:0a:82:26:8f:c4:18:a8:ac: 9a:37:e1:f6:09:8a:63:0e:3c:ed:4f:e0:31:f5:c7: eb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8B:25:89:25:68:1E:83:90:D2:95:D8:71:84:A8:E6:AD:D3:A4:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/2468da7a-22c9-3d02-82b7-e3469b49cdec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:d3:fd:04:d1:e6:02:49:14:1e:ca:f8:cc:b4:3b:b6:13:6d: e5:8c:54:fe:20:5a:39:d8:8b:be:cc:28:67:34:7f:30:5f:51: ea:31:72:47:ea:78:b0:60:98:4a:5a:28:1d:d4:a7:41:48:d0: 2f:f6:0f:95:9c:ce:f7:84:99:0e:44:b8:2c:1e:a3:ef:8f:29: c1:f5:96:03:8c:7a:52:82:8c:60:dd:9f:b7:a5:3a:c1:fa:2a: 2a:bc:e4:cf:d7:1e:5a:bd:61:23:a6:cb:dc:d2:54:f2:1d:d6: 3e:83:92:b0:6b:bd:51:c8:6d:80:50:61:45:d0:80:7a:da:2f: 67:96:7d:05:74:bf:45:36:b7:91:d4:3f:3b:d5:aa:99:df:13: c2:95:7f:fb:c9:c0:03:f0:07:76:30:d0:df:7a:63:18:93:41: d0:36:1c:62:47:ed:bd:19:2a:e1:4e:59:a1:40:02:1a:8f:8b: 87:13:52:8c:37:db:14:0d:0b:5e:54:af:79:97:a4:5d:7d:86: cf:b4:8d:45:40:85:35:ec:ca:59:c1:23:07:35:00:96:8c:60: 28:10:d7:9a:a1:8f:23:f5:7f:41:b2:c0:75:e1:14:03:65:50: 35:79:97:5e:18:14:9c:4f:78:fb:1c:b0:22:22:b0:d1:55:fc: 91:7f:97:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEynXHAEXU9ASehe1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI2MDEyNjE0MDA0MVoXDTI2MDQyNjEzMDA0MVowLzEtMCsGA1UEAxMk MTBiOTQwZjUtOTczNi00ZGE2LTk5YmMtYjI3YTU2MjE0NzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzcvvFrWFMd3p1zUwwoKfOIJ2ef5324EBd6D EYrSuFVEde3zkmlJmpPaREPXkgDwo80Q353B+ySpBsksRAzHmbrR/OMW1lR0iKPX n2Es7i8vvbDA88B0iuVmGGNkjghaSGuDUuuhC+Ft9V3+vxJYRes4GqkFlpRuD9NM EXoifTFG5rXG488cCI0T7S5sQqNJXB8Odu94aIasIlshvhkcAhlDLlCGeniTnxDS Lf8+AuVGhYM1Xcr5dVHgDaVob0ZDldycx+PS1s3GiXzogMvYqtKLMnMxaqJqiUxt bdwZkdZnGXwpnxENCoImj8QYqKyaN+H2CYpjDjztT+Ax9cfrdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGLJYklaB6DkNKV2HGEqOat06RhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvMjQ2OGRhN2EtMjJjOS0z ZDAyLTgyYjctZTM0NjliNDljZGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlXWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/T/QTR5gJJFB7K+My0O7YTbeWMVP4gWjnYi77MKGc0fzBfUeoxckfq eLBgmEpaKB3Up0FI0C/2D5WczveEmQ5EuCweo++PKcH1lgOMelKCjGDdn7elOsH6 Kiq85M/XHlq9YSOmy9zSVPId1j6DkrBrvVHIbYBQYUXQgHraL2eWfQV0v0U2t5HU PzvVqpnfE8KVf/vJwAPwB3Yw0N96YxiTQdA2HGJH7b0ZKuFOWaFAAhqPi4cTUow3 2xQNC15Ur3mXpF19hs+0jUVAhTXsylnBIwc1AJaMYCgQ15qhjyP1f0GywHXhFANl UDV5l14YFJxPePscsCIisNFV/JF/l3s= -----END CERTIFICATE-----Generated at Mon Feb 23 00:51:17 2026 by rpki-client