$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/75321a74-4f0c-3885-90c2-7b2610a86a64.roa File: 75321a74-4f0c-3885-90c2-7b2610a86a64.roa (raw, json) Hash identifier: hRJtx+RaetgPXjZfmz8QIJDOKJcoLDBYYxAwuy6SZb8= Subject key identifier: 14:25:E1:D5:39:08:C1:AB:FA:E5:0E:C6:CD:CC:7B:1D:24:FF:31:30 Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584EA7881F1B831DEDD09376F100 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/75321a74-4f0c-3885-90c2-7b2610a86a64.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 62044 IP address blocks: 149.117.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:1f:1b:83:1d:ed:d0:93:76:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d14ae357-dfdb-4bc5-8f3c-3726c545c620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:77:f7:0c:f8:17:9d:de:61:2e:6e:d4:8a:07: 71:09:fb:bc:24:9f:28:f7:90:d5:07:2f:ed:89:c7: be:63:03:19:28:1d:b0:3e:a4:7f:52:ba:eb:50:25: b0:2f:27:ca:67:ef:c7:b9:99:42:4c:f1:c7:89:5a: a1:dc:df:6d:0b:2b:07:56:6d:bd:7c:5c:5b:68:b2: d7:be:fe:88:4b:42:15:99:94:2f:2b:52:84:7e:5c: 67:c4:68:d0:32:7f:29:76:30:69:f3:28:43:1b:c3: 8f:c7:65:82:19:98:84:a4:d6:6c:29:28:ee:13:30: 3e:7d:41:7b:1c:59:20:d9:a8:fb:3e:56:5d:20:e4: 2e:3f:64:d2:80:d6:89:80:06:b2:ae:a7:24:5e:e0: 63:bd:46:c4:0c:73:e8:3c:07:d8:dd:d7:02:07:6c: 40:88:a8:63:83:ae:db:88:ad:f6:fc:3d:5b:8d:c3: af:fc:06:0b:1c:95:48:60:0e:3a:69:63:44:74:b4: 0b:b3:66:a8:49:b8:26:ff:11:c6:4e:be:c3:42:55: fc:79:99:28:08:1c:c9:7c:e9:6e:cb:22:33:e2:8d: 54:c3:a4:c8:9a:0b:c0:5c:40:fe:37:08:0d:b6:02: 96:f6:6c:a9:c2:8b:9d:ef:78:e1:3c:07:f6:fa:30: 5f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:25:E1:D5:39:08:C1:AB:FA:E5:0E:C6:CD:CC:7B:1D:24:FF:31:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/75321a74-4f0c-3885-90c2-7b2610a86a64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:5e:52:2e:c2:11:94:b6:43:32:1e:da:3d:65:c7:3d:8a:ac: a2:a4:e7:bc:2d:76:3e:5f:fc:53:c7:c2:83:ed:56:fa:0e:0a: fd:1e:77:56:15:14:77:c8:07:9f:4d:e8:a2:77:d2:33:62:9c: 1f:cb:5e:be:83:04:74:a6:72:36:0d:3a:03:34:99:85:2b:89: c4:8a:08:73:18:32:ae:68:da:29:35:df:47:c7:ab:86:19:64: 75:ae:1b:19:14:3b:84:d4:54:13:3f:33:fe:f5:7c:6e:ff:e5: 9e:22:24:49:29:b7:e0:29:b3:7e:e9:df:32:0c:e5:d2:57:9a: 62:c2:4f:a1:b0:88:62:ea:df:ea:f7:2f:b9:7b:df:1e:e8:94: c3:6f:ff:bd:46:7b:e1:46:61:34:1f:ce:f8:8d:e8:10:1a:bf: e5:69:bd:b6:dc:df:46:f4:f5:72:41:8e:49:6e:17:df:10:f0: 29:d7:45:46:25:d1:2a:b5:86:61:a9:fe:a5:69:81:9a:93:31: 2d:5d:32:ea:89:85:f4:10:8e:f1:db:09:af:14:43:89:23:09: c8:84:39:1b:68:f0:43:2c:74:13:d3:e0:29:8b:28:1a:a9:14: 72:84:73:a0:1d:f6:c9:33:62:ee:f6:44:56:13:bc:8f:31:64: 41:cb:c7:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niB8bgx3t0JN28QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDE0YWUzNTctZGZkYi00YmM1LThmM2MtMzcyNmM1NDVjNjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHf3DPgXnd5hLm7UigdxCfu8JJ8o95DVBy/t ice+YwMZKB2wPqR/UrrrUCWwLyfKZ+/HuZlCTPHHiVqh3N9tCysHVm29fFxbaLLX vv6IS0IVmZQvK1KEflxnxGjQMn8pdjBp8yhDG8OPx2WCGZiEpNZsKSjuEzA+fUF7 HFkg2aj7PlZdIOQuP2TSgNaJgAayrqckXuBjvUbEDHPoPAfY3dcCB2xAiKhjg67b iK32/D1bjcOv/AYLHJVIYA46aWNEdLQLs2aoSbgm/xHGTr7DQlX8eZkoCBzJfOlu yyIz4o1Uw6TImgvAXED+NwgNtgKW9mypwoud73jhPAf2+jBfiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQl4dU5CMGr+uUOxs3Mex0k/zEwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvNzUzMjFhNzQtNGYwYy0z ODg1LTkwYzItN2IyNjEwYTg2YTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXWnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpeUi7CEZS2QzIe2j1lxz2KrKKk57wtdj5f/FPHwoPtVvoOCv0ed1YV FHfIB59N6KJ30jNinB/LXr6DBHSmcjYNOgM0mYUricSKCHMYMq5o2ik130fHq4YZ ZHWuGxkUO4TUVBM/M/71fG7/5Z4iJEkpt+Aps37p3zIM5dJXmmLCT6GwiGLq3+r3 L7l73x7olMNv/71Ge+FGYTQfzviN6BAav+Vpvbbc30b09XJBjkluF98Q8CnXRUYl 0Sq1hmGp/qVpgZqTMS1dMuqJhfQQjvHbCa8UQ4kjCciEORto8EMsdBPT4CmLKBqp FHKEc6Ad9skzYu72RFYTvI8xZEHLx/g= -----END CERTIFICATE-----Generated at Sat Sep 5 07:38:12 2026 by rpki-client