$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/91e209b9-b6c8-3e97-9a5f-30eb162f680b.roa File: 91e209b9-b6c8-3e97-9a5f-30eb162f680b.roa (raw, json) Hash identifier: OoQWga4Tmcp8ObwgmcY93lqkpLS1upF428tWqBlONFk= Subject key identifier: 91:B4:73:8A:7F:FF:89:54:CC:93:19:A6:25:63:38:55:8A:EC:66:B9 Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584CA5F70A9146DF0606C5401880 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/91e209b9-b6c8-3e97-9a5f-30eb162f680b.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 3462 IP address blocks: 149.117.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:0a:91:46:df:06:06:c5:40:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=3d07b521-0fd9-47a8-a281-d0ac8640a8e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:19:0e:56:ae:12:a9:ea:2f:cc:ae:b7:9d:60: 54:f6:19:b2:9f:97:cc:5a:e6:38:85:fe:ab:db:07: e3:5a:b3:73:05:76:ea:40:18:72:a5:0c:df:ea:9a: 4e:83:b6:21:06:f3:0a:b5:77:d2:38:aa:9a:fb:d8: b8:0c:7a:65:41:85:eb:38:a9:14:67:76:83:51:18: 23:45:56:1b:d0:54:83:7a:2a:5e:d1:25:30:91:b6: f7:ce:2f:1b:ab:21:51:ab:4c:16:3a:50:4a:8d:16: 87:ce:f3:c6:8f:98:e0:55:7b:7b:e8:a7:94:52:f1: bd:3b:d7:46:6d:c9:28:fe:f8:b4:85:05:7d:e2:90: 44:ed:66:bd:13:f1:ff:c1:72:d8:9e:85:75:4a:7c: c7:35:4a:5b:4e:c4:b8:1c:b2:3b:42:2a:ba:ab:96: 4e:cc:e1:8b:c5:61:fb:c4:99:6e:2d:86:69:d3:90: da:00:21:27:55:80:86:ca:10:f7:40:59:c3:ae:d2: aa:de:a4:9f:c1:73:61:b2:71:46:8d:ad:55:af:80: 9a:65:cb:33:26:7e:49:36:f7:fc:19:46:13:ba:60: 58:e0:79:3a:37:6d:fb:3a:5d:e1:a8:ac:15:5d:50: 29:71:b6:45:45:90:d5:a0:c2:a9:2a:48:f0:a0:db: ee:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B4:73:8A:7F:FF:89:54:CC:93:19:A6:25:63:38:55:8A:EC:66:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/91e209b9-b6c8-3e97-9a5f-30eb162f680b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:47:07:cb:18:27:1f:d0:a2:c1:6e:82:d4:84:53:2e:08:67: 7f:14:ce:28:7e:58:c7:24:86:9c:c2:3e:94:d9:ee:12:56:4f: ba:a1:6b:bf:8c:7d:83:e3:07:21:38:98:7e:60:80:df:16:aa: 4e:37:e2:c8:5b:91:3e:11:c4:16:a6:cc:fa:17:8c:84:10:bd: 6f:27:b7:b2:78:41:d7:f4:5c:f2:e5:c7:21:ec:11:c8:50:94: ab:33:f3:d7:a6:99:df:01:2a:4f:b9:c0:a2:82:e4:f7:19:d8: 12:ab:1e:a4:2b:99:fd:53:fa:79:a1:cb:6b:1f:6a:73:86:52: e7:d2:55:20:cc:d4:0a:c8:1e:a5:6a:66:be:01:03:4f:67:a2: 58:01:8b:61:62:01:6b:24:71:9b:d0:e4:41:3d:db:fe:0c:19: 57:3f:c9:e6:2d:74:88:a6:70:89:a0:87:97:f0:61:e4:b6:77: cd:91:8e:90:e1:ea:20:7e:53:56:ad:e5:3f:8b:be:51:8b:77: c8:2f:1d:0e:91:9c:52:37:1a:ba:65:b5:fc:66:d2:50:e6:39: b5:c0:bf:2a:5b:26:04:2a:a6:9f:71:a9:61:1a:52:d6:21:76: 55:3c:83:e0:ca:1c:3b:2e:2b:37:3b:09:cc:bf:f4:37:ef:b2: 52:a1:f8:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9wqRRt8GBsVAGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk M2QwN2I1MjEtMGZkOS00N2E4LWEyODEtZDBhYzg2NDBhOGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBkOVq4SqeovzK63nWBU9hmyn5fMWuY4hf6r 2wfjWrNzBXbqQBhypQzf6ppOg7YhBvMKtXfSOKqa+9i4DHplQYXrOKkUZ3aDURgj RVYb0FSDeipe0SUwkbb3zi8bqyFRq0wWOlBKjRaHzvPGj5jgVXt76KeUUvG9O9dG bcko/vi0hQV94pBE7Wa9E/H/wXLYnoV1SnzHNUpbTsS4HLI7Qiq6q5ZOzOGLxWH7 xJluLYZp05DaACEnVYCGyhD3QFnDrtKq3qSfwXNhsnFGja1Vr4CaZcszJn5JNvf8 GUYTumBY4Hk6N237Ol3hqKwVXVApcbZFRZDVoMKpKkjwoNvuqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJG0c4p//4lUzJMZpiVjOFWK7Ga5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvOTFlMjA5YjktYjZjOC0z ZTk3LTlhNWYtMzBlYjE2MmY2ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdHB8sYJx/QosFugtSEUy4IZ38Uzih+WMckhpzCPpTZ7hJWT7qha7+M fYPjByE4mH5ggN8Wqk434shbkT4RxBamzPoXjIQQvW8nt7J4Qdf0XPLlxyHsEchQ lKsz89emmd8BKk+5wKKC5PcZ2BKrHqQrmf1T+nmhy2sfanOGUufSVSDM1ArIHqVq Zr4BA09nolgBi2FiAWskcZvQ5EE92/4MGVc/yeYtdIimcImgh5fwYeS2d82RjpDh 6iB+U1at5T+LvlGLd8gvHQ6RnFI3Grpltfxm0lDmObXAvypbJgQqpp9xqWEaUtYh dlU8g+DKHDsuKzc7Ccy/9DfvslKh+Hc= -----END CERTIFICATE-----Generated at Mon Feb 23 00:51:17 2026 by rpki-client