$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/9a6c4241-4967-3a10-984a-6f62096d0f3c.roa File: 9a6c4241-4967-3a10-984a-6f62096d0f3c.roa (raw, json) Hash identifier: FAERpM0G8ORCs1Gs4/rsBQxWqSd15s952/xSt08lrnk= Subject key identifier: 78:9C:B8:CD:D7:C5:C5:7C:C5:4A:D1:A8:5E:70:D6:C3:38:1E:70:DC Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584E3CF9C1453C46C4583E441780 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/9a6c4241-4967-3a10-984a-6f62096d0f3c.roa Signing time: Sat 20 Jun 2026 21:00:12 +0000 ROA not before: Sat 20 Jun 2026 21:00:12 +0000 ROA not after: Fri 18 Sep 2026 21:00:12 +0000 asID: 22616 IP address blocks: 149.117.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3c:f9:c1:45:3c:46:c4:58:3e:44:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Jun 20 21:00:12 2026 GMT Not After : Sep 18 21:00:12 2026 GMT Subject: CN=d7c29521-2c7c-43c7-83ba-c28446fac972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d0:72:5d:19:13:54:e6:c6:17:09:f8:2a:e0: 77:22:b5:99:24:23:cd:4e:de:76:6b:1a:56:17:3c: c0:08:16:94:80:ba:15:ea:83:90:7c:7b:8d:de:c6: 74:e5:3f:8a:37:ec:f2:c3:37:11:10:a3:13:df:2b: c3:3b:ad:3b:f8:76:e0:b1:44:f3:3a:d1:2b:51:3a: 53:3c:8a:15:67:a8:6c:45:df:51:61:73:45:a0:fa: 84:8a:8b:a8:20:66:e0:e2:5b:01:88:9b:84:e5:27: 23:a2:36:00:9f:24:5d:e4:6c:50:1b:2b:40:c1:a0: 99:db:86:e5:e9:f3:b8:8a:67:aa:33:c2:2d:66:a4: 21:47:68:9e:8c:09:75:b1:ec:45:b2:af:70:33:6c: a2:8c:de:e4:ee:3e:c7:b0:3c:43:a9:76:83:7e:c5: cb:fd:61:46:aa:c1:cb:49:3f:18:53:dc:02:28:14: 29:e3:14:1c:29:60:20:bb:e7:36:81:84:99:bd:e3: 60:c6:28:d0:49:e6:b1:a2:3e:7a:f3:45:ec:72:8f: b8:8a:6e:a6:c4:4c:4f:d7:98:82:7c:85:94:ca:ba: c2:2f:d6:9f:15:18:aa:8a:89:21:3a:d3:86:71:e3: 81:7f:f9:a5:64:6d:07:3e:59:46:06:08:a8:4d:b7: 97:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:9C:B8:CD:D7:C5:C5:7C:C5:4A:D1:A8:5E:70:D6:C3:38:1E:70:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/9a6c4241-4967-3a10-984a-6f62096d0f3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c0:c7:34:92:28:df:a7:7a:b8:2c:6f:5d:d6:37:6a:77:c2: 18:c6:b9:f9:0c:1c:d1:68:e3:2f:69:e7:0e:45:6c:08:df:9f: be:15:c3:3b:9a:87:d4:41:ce:d1:02:49:a3:c0:7b:02:6c:88: 71:cf:de:c4:8c:9c:97:cd:cb:b8:1b:60:27:e6:e1:f0:a5:a2: 45:10:d2:76:a8:61:6d:4b:ce:5b:ac:25:e3:ac:f6:15:c8:27: 9a:16:d8:88:28:45:6a:1c:23:95:03:a4:df:f7:2e:e8:75:3d: ce:e3:04:a8:af:c5:ca:00:93:65:29:85:bb:74:78:96:ba:c6: 06:2d:03:ab:6b:e4:20:14:e2:37:f8:7f:88:87:9b:02:f0:0e: 64:23:35:0d:5b:1f:79:42:4c:91:75:29:15:f7:68:24:47:d8: 15:65:51:f9:5e:3c:0c:12:4d:d4:a0:9b:7c:4a:72:99:81:a8: 08:98:eb:65:88:bf:50:a0:9b:df:40:80:9b:27:83:3c:e5:1e: 4b:e7:49:ba:cd:b5:0b:b1:b5:8c:48:6e:39:d7:a8:c9:fa:b0: 5e:9f:fd:00:49:16:13:f9:a9:6f:be:f9:7f:12:28:15:cb:4f: 1f:98:cb:cc:00:19:f2:22:e5:37:12:66:db:07:83:9c:09:8f: f2:df:62:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE48+cFFPEbEWD5EF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI2MDYyMDIxMDAxMloXDTI2MDkxODIxMDAxMlowLzEtMCsGA1UEAxMk ZDdjMjk1MjEtMmM3Yy00M2M3LTgzYmEtYzI4NDQ2ZmFjOTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttByXRkTVObGFwn4KuB3IrWZJCPNTt52axpW FzzACBaUgLoV6oOQfHuN3sZ05T+KN+zywzcREKMT3yvDO607+HbgsUTzOtErUTpT PIoVZ6hsRd9RYXNFoPqEiouoIGbg4lsBiJuE5ScjojYAnyRd5GxQGytAwaCZ24bl 6fO4imeqM8ItZqQhR2iejAl1sexFsq9wM2yijN7k7j7HsDxDqXaDfsXL/WFGqsHL ST8YU9wCKBQp4xQcKWAgu+c2gYSZveNgxijQSeaxoj5680Xsco+4im6mxExP15iC fIWUyrrCL9afFRiqiokhOtOGceOBf/mlZG0HPllGBgioTbeXPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHicuM3XxcV8xUrRqF5w1sM4HnDcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvOWE2YzQyNDEtNDk2Ny0z YTEwLTk4NGEtNmY2MjA5NmQwZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHAxzSSKN+nergsb13WN2p3whjGufkMHNFo4y9p5w5FbAjfn74Vwzua h9RBztECSaPAewJsiHHP3sSMnJfNy7gbYCfm4fClokUQ0naoYW1LzlusJeOs9hXI J5oW2IgoRWocI5UDpN/3Luh1Pc7jBKivxcoAk2Uphbt0eJa6xgYtA6tr5CAU4jf4 f4iHmwLwDmQjNQ1bH3lCTJF1KRX3aCRH2BVlUflePAwSTdSgm3xKcpmBqAiY62WI v1Cgm99AgJsngzzlHkvnSbrNtQuxtYxIbjnXqMn6sF6f/QBJFhP5qW+++X8SKBXL Tx+Yy8wAGfIi5TcSZtsHg5wJj/LfYn8= -----END CERTIFICATE-----Generated at Tue Jul 21 22:43:56 2026 by rpki-client