$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/d998a6bb-1899-3bae-9bd8-566373d838a1.roa File: d998a6bb-1899-3bae-9bd8-566373d838a1.roa (raw, json) Hash identifier: pBwlb8mMxSZkjhaaP2f4ZPtf2N9ZnCK/9J9/90irt8g= Subject key identifier: 40:F4:60:C9:DC:48:C7:79:00:E8:96:C5:2E:62:FF:8F:67:17:A7:73 Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584DD3E144A1365EACB37D73F740 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/d998a6bb-1899-3bae-9bd8-566373d838a1.roa Signing time: Thu 14 May 2026 05:31:01 +0000 ROA not before: Thu 14 May 2026 05:31:01 +0000 ROA not after: Wed 12 Aug 2026 05:31:01 +0000 asID: 53813 IP address blocks: 149.117.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:e1:44:a1:36:5e:ac:b3:7d:73:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: May 14 05:31:01 2026 GMT Not After : Aug 12 05:31:01 2026 GMT Subject: CN=d7e51c10-a1c1-429a-a180-b74fa61c1aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cf:99:73:fd:0d:eb:f5:31:18:2b:9e:a2:4c: a5:7d:a3:f0:16:5d:26:1c:fa:62:81:ac:bd:45:05: b5:21:ae:2b:92:fc:48:59:01:4b:a0:10:d9:d4:c6: 7d:61:3b:e5:47:03:f2:81:d1:52:cb:55:04:97:55: 1e:17:ef:7b:79:2d:92:ec:b5:b7:98:63:23:89:af: 64:04:42:6a:1e:bb:16:f6:db:9f:11:10:bf:ff:2b: 4a:7e:11:1e:9d:e0:3e:d1:21:19:9a:5b:6f:97:ed: a0:29:dc:93:ad:79:21:0a:4b:c1:f8:77:ae:50:6a: c2:72:5f:a6:40:62:4d:0d:12:f7:c0:00:55:b3:08: 5a:0d:79:a9:31:c7:43:c1:85:6b:2f:88:b0:2a:d9: a4:0a:56:ad:3a:b2:54:c7:05:47:02:3a:a7:8b:9c: 01:45:ff:a9:51:fc:83:86:bf:3a:39:d5:c0:e4:3d: 2c:80:38:8f:23:03:39:1e:3c:a5:26:d5:4e:6d:1f: 7c:90:6c:7d:a9:04:19:de:3e:67:c5:15:dc:5e:a9: 5f:4f:29:16:86:85:ad:33:06:21:f2:df:db:2e:23: d6:0b:0c:65:91:b1:92:bc:d1:47:a5:6f:80:95:c2: 83:f2:86:77:d0:d5:e1:90:1d:68:27:b1:2b:89:86: f0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F4:60:C9:DC:48:C7:79:00:E8:96:C5:2E:62:FF:8F:67:17:A7:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/d998a6bb-1899-3bae-9bd8-566373d838a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:91:05:59:17:31:9c:4f:79:4e:db:5a:c7:32:94:21:d3:eb: b0:53:04:36:16:e4:4d:bb:a1:44:5b:de:85:29:d2:33:07:92: b5:46:5a:00:ad:db:1d:25:ba:e4:38:6b:6d:c5:7f:8f:58:8a: b1:45:39:d4:52:3b:71:ac:19:b9:f0:3f:8d:40:0f:a1:c5:4e: 5b:42:89:08:68:35:d9:e7:f6:0c:c4:25:1f:ed:8f:47:dc:d7: 98:d7:74:35:dc:84:4a:4b:df:e3:48:45:90:c3:a6:c3:92:3b: 45:1e:81:10:05:b0:94:39:e2:8a:b1:9c:f2:ec:4c:d4:80:85: f6:09:3b:4a:0a:7d:8b:98:ea:18:69:7c:0c:66:d9:68:7a:f9: 60:6c:e7:88:39:6f:80:6f:90:fa:a1:28:f3:6e:2d:ed:18:12: 1e:2d:90:9b:a4:b0:81:b1:91:1b:4b:0a:ca:ec:91:65:f3:7d: 64:6d:23:1a:ca:9b:12:72:3b:ec:73:94:fe:38:72:66:56:8c: 1c:e1:11:e3:c0:b0:ec:4b:be:27:52:c7:c3:e0:56:82:4d:a7: 56:a5:13:49:91:62:29:5b:45:3e:99:f2:a3:63:30:06:17:bc: cf:fe:20:9c:ca:4b:e2:ed:4b:fe:ba:24:67:28:17:92:01:40: 43:aa:fb:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3T4UShNl6ss31z90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI2MDUxNDA1MzEwMVoXDTI2MDgxMjA1MzEwMVowLzEtMCsGA1UEAxMk ZDdlNTFjMTAtYTFjMS00MjlhLWExODAtYjc0ZmE2MWMxYWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs+Zc/0N6/UxGCueokylfaPwFl0mHPpigay9 RQW1Ia4rkvxIWQFLoBDZ1MZ9YTvlRwPygdFSy1UEl1UeF+97eS2S7LW3mGMjia9k BEJqHrsW9tufERC//ytKfhEeneA+0SEZmltvl+2gKdyTrXkhCkvB+HeuUGrCcl+m QGJNDRL3wABVswhaDXmpMcdDwYVrL4iwKtmkClatOrJUxwVHAjqni5wBRf+pUfyD hr86OdXA5D0sgDiPIwM5HjylJtVObR98kGx9qQQZ3j5nxRXcXqlfTykWhoWtMwYh 8t/bLiPWCwxlkbGSvNFHpW+AlcKD8oZ30NXhkB1oJ7EriYbwHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFED0YMncSMd5AOiWxS5i/49nF6dzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvZDk5OGE2YmItMTg5OS0z YmFlLTliZDgtNTY2MzczZDgzOGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXXmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+RBVkXMZxPeU7bWscylCHT67BTBDYW5E27oURb3oUp0jMHkrVGWgCt 2x0luuQ4a23Ff49YirFFOdRSO3GsGbnwP41AD6HFTltCiQhoNdnn9gzEJR/tj0fc 15jXdDXchEpL3+NIRZDDpsOSO0UegRAFsJQ54oqxnPLsTNSAhfYJO0oKfYuY6hhp fAxm2Wh6+WBs54g5b4BvkPqhKPNuLe0YEh4tkJuksIGxkRtLCsrskWXzfWRtIxrK mxJyO+xzlP44cmZWjBzhEePAsOxLvidSx8PgVoJNp1alE0mRYilbRT6Z8qNjMAYX vM/+IJzKS+LtS/66JGcoF5IBQEOq+0I= -----END CERTIFICATE-----Generated at Wed Jun 3 21:08:33 2026 by rpki-client