$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/8d147fcb-3c1b-307f-a86c-ccafb727a4fa.roa File: 8d147fcb-3c1b-307f-a86c-ccafb727a4fa.roa (raw, json) Hash identifier: JBspQRCrhmT6Sz0RmUDCti6WR/yU4FUH5nlYHXN+/Dw= Subject key identifier: CB:AE:B0:C2:0B:CA:8F:11:56:06:40:71:01:B2:C4:B0:F2:BF:8F:FB Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584EA7881F10A8548EF3EA5A6A40 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/8d147fcb-3c1b-307f-a86c-ccafb727a4fa.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 53813 IP address blocks: 149.117.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:1f:10:a8:54:8e:f3:ea:5a:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=eb48c6da-e448-41bc-b133-db4073464b8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:48:33:dd:ae:9b:74:59:74:94:fe:2d:8d:47: 60:fa:d4:77:da:22:4a:5b:6d:60:e0:9b:2c:c7:9e: 4c:00:c4:2f:98:d7:d7:e7:7c:0a:b6:52:ef:d7:bf: 55:0e:16:ea:8c:3d:02:67:46:30:f0:09:cc:85:71: 31:ec:a5:2b:8a:46:46:a0:bb:6a:92:38:9a:10:48: 3f:6e:21:62:14:d5:d4:a1:fc:f6:1c:42:5a:6d:94: a8:5c:44:e8:3b:62:3f:9d:af:db:d2:3c:fa:28:37: 11:a5:d9:2c:61:ff:43:d5:fe:4d:8c:59:a4:2e:ea: 22:61:42:9e:1b:43:01:b7:ec:a7:cc:d8:b2:8e:14: 81:88:2d:7d:5b:e7:82:13:54:eb:84:fa:21:fd:37: 34:26:a5:51:be:fe:be:f5:ea:3a:84:92:43:80:29: 5e:10:8d:16:49:31:e2:a1:e9:b2:24:dd:ac:98:c3: cc:92:ec:20:9f:6c:b0:e3:b2:e5:a3:a3:f8:79:9f: 04:e0:06:08:53:6a:71:09:a5:c7:58:05:d5:b1:1c: f4:52:71:03:6d:a3:12:e8:6a:31:c8:27:4b:70:cf: 1c:2d:27:b4:cf:ff:81:64:bd:bf:0e:40:2f:d7:f3: 50:8d:83:aa:aa:6a:b1:2b:4f:5d:a7:c0:c6:97:ae: cc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AE:B0:C2:0B:CA:8F:11:56:06:40:71:01:B2:C4:B0:F2:BF:8F:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/8d147fcb-3c1b-307f-a86c-ccafb727a4fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:2b:d0:c8:b5:d8:e0:93:99:34:d8:da:00:26:3b:7c:32:7b: e7:ef:62:b0:7d:2b:70:bb:47:56:2d:4c:a7:d0:c8:0e:88:40: 7d:3b:06:dc:c4:49:37:ba:69:5a:74:2b:9e:16:4a:16:f0:02: f5:6f:9a:50:b6:1c:de:6f:39:2d:90:60:13:b7:c8:c1:c6:dc: 6a:df:11:00:77:ad:17:76:d2:d8:d3:96:28:c9:53:52:2e:56: 7c:f9:8a:f7:19:91:a4:9c:cc:f1:61:20:0e:44:d9:64:89:ea: 50:fd:53:ee:6e:5d:94:f1:84:d0:20:5b:20:de:9d:5d:75:b8: f3:f8:aa:86:06:98:db:54:69:e5:30:1a:65:03:9c:aa:29:4c: cc:28:4c:5a:75:29:0c:9f:26:a8:16:c4:8d:28:11:6e:81:71: 2b:15:0d:4b:22:9f:1e:43:47:4b:a0:a9:1b:c2:0a:eb:f9:ce: 4d:08:49:e2:18:8b:e9:2b:0a:f9:ad:96:86:b3:e6:7e:73:48: 4d:e4:8a:56:f2:da:80:0f:de:3f:00:cd:8d:b0:c1:69:fa:c8: 9f:30:fd:f9:94:6f:83:c2:e4:82:e6:43:e7:d3:e5:89:ad:ad: 1a:dc:31:d5:ac:cd:7d:b6:39:53:66:3e:04:80:0f:41:6f:e1: fe:bb:94:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niB8QqFSO8+paakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWI0OGM2ZGEtZTQ0OC00MWJjLWIxMzMtZGI0MDczNDY0YjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0gz3a6bdFl0lP4tjUdg+tR32iJKW21g4Jss x55MAMQvmNfX53wKtlLv179VDhbqjD0CZ0Yw8AnMhXEx7KUrikZGoLtqkjiaEEg/ biFiFNXUofz2HEJabZSoXEToO2I/na/b0jz6KDcRpdksYf9D1f5NjFmkLuoiYUKe G0MBt+ynzNiyjhSBiC19W+eCE1TrhPoh/Tc0JqVRvv6+9eo6hJJDgCleEI0WSTHi oemyJN2smMPMkuwgn2yw47Llo6P4eZ8E4AYIU2pxCaXHWAXVsRz0UnEDbaMS6Gox yCdLcM8cLSe0z/+BZL2/DkAv1/NQjYOqqmqxK09dp8DGl67MNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuusMILyo8RVgZAcQGyxLDyv4/7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvOGQxNDdmY2ItM2MxYi0z MDdmLWE4NmMtY2NhZmI3MjdhNGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXXnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8r0Mi12OCTmTTY2gAmO3wye+fvYrB9K3C7R1YtTKfQyA6IQH07BtzE STe6aVp0K54WShbwAvVvmlC2HN5vOS2QYBO3yMHG3GrfEQB3rRd20tjTlijJU1Iu Vnz5ivcZkaSczPFhIA5E2WSJ6lD9U+5uXZTxhNAgWyDenV11uPP4qoYGmNtUaeUw GmUDnKopTMwoTFp1KQyfJqgWxI0oEW6BcSsVDUsinx5DR0ugqRvCCuv5zk0ISeIY i+krCvmtloaz5n5zSE3kilby2oAP3j8AzY2wwWn6yJ8w/fmUb4PC5ILmQ+fT5Ymt rRrcMdWszX22OVNmPgSAD0Fv4f67lMg= -----END CERTIFICATE-----Generated at Sat Sep 5 03:54:01 2026 by rpki-client