$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/91e209b9-b6c8-3e97-9a5f-30eb162f680b.roa File: 91e209b9-b6c8-3e97-9a5f-30eb162f680b.roa (raw, json) Hash identifier: +PBp3ZVj6BzdEhVthHdEiZ1AEoG+OK4L7Y+uppHMQto= Subject key identifier: 32:A1:EE:67:19:32:55:35:01:A0:B6:AB:01:27:9E:D1:38:46:0E:59 Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584E66DA17BAE9F1AEEB399D7580 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/91e209b9-b6c8-3e97-9a5f-30eb162f680b.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 3462 IP address blocks: 149.117.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:17:ba:e9:f1:ae:eb:39:9d:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=e8a25e05-90cb-43b4-bc15-0ceceb13b28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ab:6b:0e:f4:13:41:9d:04:39:57:0f:61:3d: de:74:8c:57:72:9b:25:c3:9e:9e:f8:48:0b:1d:fc: 9e:75:16:35:18:9e:35:30:cd:57:71:c0:39:f8:83: 58:f3:44:50:39:34:8e:85:97:58:b0:33:e3:75:71: 6e:78:f4:fe:7a:95:7d:1d:f8:6f:80:d4:01:54:2c: b5:94:e9:3e:ca:a3:70:ee:cf:50:1b:f0:e2:a0:49: d6:2c:5c:c1:5a:e4:f5:7d:bd:22:eb:dd:36:ae:e7: 83:bf:fc:b4:63:5f:ec:c9:b2:fd:61:5d:9e:58:0c: ed:fd:f6:07:80:a0:82:67:04:f4:cc:3e:49:93:13: e4:b6:dc:97:7b:35:8d:de:a6:08:93:2e:4e:74:aa: 5d:49:30:35:d6:74:65:be:4d:65:ba:b1:78:cc:7b: ec:ec:97:49:3e:22:83:16:16:ce:b9:f1:8a:c3:73: 5c:22:12:72:61:e8:8f:36:0d:91:86:e5:47:bf:8a: 20:af:86:f1:b9:18:fd:6b:97:f2:8f:5e:7b:92:b2: ee:9c:d3:a3:52:a9:c3:cf:df:d0:c7:0e:10:37:28: 0a:1a:4b:ea:e0:36:a3:08:ff:0d:2f:64:1f:b8:ad: 0f:28:cc:e4:26:ee:6b:6d:0c:24:d2:0e:af:2d:05: b4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A1:EE:67:19:32:55:35:01:A0:B6:AB:01:27:9E:D1:38:46:0E:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/91e209b9-b6c8-3e97-9a5f-30eb162f680b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:82:7d:0f:2d:c9:e1:75:e1:f8:89:61:6f:21:75:59:cd:b3: bb:dc:4b:54:8c:5f:a8:59:de:6a:8d:45:e3:38:34:a5:3c:c3: 29:71:f9:fd:f1:07:3d:4b:c4:40:ef:5d:cd:ec:19:9d:97:95: cd:48:c1:8d:0b:b9:bb:37:26:7a:a8:97:7e:9d:79:77:3b:47: e9:76:a0:ec:67:50:68:4c:c7:2d:a9:15:af:ad:28:c7:90:6a: 24:eb:27:42:5d:53:90:4d:d5:31:70:cd:7c:c8:61:c8:7e:54: ef:16:85:f6:4c:2c:0b:a0:84:e9:00:e1:c6:bd:5e:ac:cb:9c: 87:6b:c3:0b:e5:9e:9d:8b:fd:94:ac:c2:ff:13:a6:c7:b7:00: 4d:59:86:e1:60:2f:ca:95:1e:0d:2c:7e:53:ba:3d:78:1c:00: ba:da:1d:66:bd:19:04:52:93:f1:79:5b:db:00:c0:3d:e1:8a: 36:e2:a6:66:f2:07:c8:0b:78:19:e6:b6:66:3a:37:89:d0:68: b9:76:11:e0:1e:4b:71:de:ba:35:a1:6d:c6:3a:55:5d:7c:5e: 9c:8f:2b:a7:ba:fb:b5:b9:ad:8d:1a:c0:11:63:68:61:b2:82: 67:0b:9b:b7:e2:95:0d:7a:01:5a:b7:16:79:33:41:1d:c3:e3: a9:ef:30:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2he66fGu6zmddYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk ZThhMjVlMDUtOTBjYi00M2I0LWJjMTUtMGNlY2ViMTNiMjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6trDvQTQZ0EOVcPYT3edIxXcpslw56e+EgL HfyedRY1GJ41MM1XccA5+INY80RQOTSOhZdYsDPjdXFuePT+epV9HfhvgNQBVCy1 lOk+yqNw7s9QG/DioEnWLFzBWuT1fb0i6902rueDv/y0Y1/sybL9YV2eWAzt/fYH gKCCZwT0zD5JkxPkttyXezWN3qYIky5OdKpdSTA11nRlvk1lurF4zHvs7JdJPiKD FhbOufGKw3NcIhJyYeiPNg2RhuVHv4ogr4bxuRj9a5fyj157krLunNOjUqnDz9/Q xw4QNygKGkvq4DajCP8NL2QfuK0PKMzkJu5rbQwk0g6vLQW0YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKh7mcZMlU1AaC2qwEnntE4Rg5ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvOTFlMjA5YjktYjZjOC0z ZTk3LTlhNWYtMzBlYjE2MmY2ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaCfQ8tyeF14fiJYW8hdVnNs7vcS1SMX6hZ3mqNReM4NKU8wylx+f3x Bz1LxEDvXc3sGZ2Xlc1IwY0Lubs3Jnqol36deXc7R+l2oOxnUGhMxy2pFa+tKMeQ aiTrJ0JdU5BN1TFwzXzIYch+VO8WhfZMLAughOkA4ca9XqzLnIdrwwvlnp2L/ZSs wv8Tpse3AE1ZhuFgL8qVHg0sflO6PXgcALraHWa9GQRSk/F5W9sAwD3hijbipmby B8gLeBnmtmY6N4nQaLl2EeAeS3HeujWhbcY6VV18XpyPK6e6+7W5rY0awBFjaGGy gmcLm7filQ16AVq3FnkzQR3D46nvMKM= -----END CERTIFICATE-----Generated at Tue Jul 21 20:03:59 2026 by rpki-client