$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa File: ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa (raw, json) Hash identifier: Ocuvv5qC87RZhZW+DivquntkE27ZHbxN9xpdpzaBW7A= Subject key identifier: A4:95:47:1F:7C:C7:28:59:99:40:B6:9E:E3:77:A4:71:DC:9C:C9:BA Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584F90A3088FFC29C99BF7485A60 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 397635 IP address blocks: 149.117.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:08:8f:fc:29:c9:9b:f7:48:5a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=6b59eacf-24f8-4b45-967e-953f17dd2df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ba:9b:3a:ab:b9:e6:be:0d:2c:aa:a8:33:f0: f4:7f:e3:2f:00:ac:57:42:e7:7f:c2:07:0f:1c:f2: 7b:bd:16:17:13:0b:89:b7:d5:59:3a:d8:59:f9:72: 7a:5a:8b:fd:87:8c:5e:23:17:fc:44:c6:24:8d:3c: de:94:1f:ca:41:c1:bc:44:6a:8b:ac:93:54:77:9f: 27:f0:83:b8:24:90:3e:d5:c8:6b:72:e9:6a:6b:67: 21:3e:27:39:2f:9c:9c:aa:6a:f5:cf:aa:1d:de:42: 05:9a:e9:96:7c:83:4f:12:10:90:85:77:48:a8:27: 0f:5d:ed:d8:e8:96:e5:28:fb:15:ca:ed:65:ac:6e: 24:ac:9b:0b:b6:28:4b:83:79:9f:83:cd:23:7b:70: ec:ea:b2:25:4a:5e:49:1e:dc:cd:bd:f2:5c:3f:bb: 57:9a:75:72:4b:07:38:d3:b7:70:ce:6e:cd:11:cd: 5a:54:52:af:0e:fe:1e:77:22:5b:4a:f9:fa:76:96: 82:28:d1:b6:1a:36:4f:d8:e7:b6:26:91:4d:da:01: 3e:cf:27:2a:fb:f1:3a:68:a2:96:25:16:67:8d:6b: e6:e0:01:de:26:a9:de:09:0a:1f:f4:97:50:cd:22: e8:5a:46:7f:9c:a4:40:3f:57:34:8e:79:68:6a:7f: 1f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:95:47:1F:7C:C7:28:59:99:40:B6:9E:E3:77:A4:71:DC:9C:C9:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a0:a1:54:9d:ee:96:89:62:3c:fd:db:44:99:87:08:2d:e9: c1:dd:59:44:d0:f0:4f:1c:a1:4b:42:50:32:ee:68:8a:5d:71: f0:41:41:f0:e9:1f:7c:da:ca:f8:ce:2f:d7:53:ad:f6:c6:0f: cf:92:31:2c:69:54:21:bf:11:c2:c1:87:79:80:ee:39:0d:05: fc:fb:a8:eb:7b:8e:27:b1:1a:8b:b5:4c:8c:1c:db:85:20:01: 40:26:0d:b6:82:d8:32:47:0e:f0:9e:3a:ba:3b:a1:50:6a:ef: 0e:e8:8b:24:4c:c3:74:21:fa:68:8b:8a:45:f7:14:b7:b8:32: de:9b:19:4b:c7:95:6c:1a:a2:31:41:e4:4d:56:be:7e:24:97: b3:9e:4e:45:71:f8:29:cc:57:ec:f0:6c:77:3f:8f:89:82:49: 39:09:8a:1a:6e:b9:b7:c3:68:aa:61:47:5f:b0:c4:1c:ab:a8: 10:f3:da:f4:15:59:c8:8f:33:ca:d7:01:48:98:7a:09:b9:ce: ac:f6:1e:5f:5a:ac:37:17:83:33:f9:93:7a:96:5d:4e:9a:e0: d0:85:06:c5:bb:a5:cc:7e:45:d8:5a:7f:8f:a3:3b:47:f9:ad: fa:bf:b4:a9:d4:a0:fa:ab:43:af:1e:3b:d8:11:16:dd:29:04: 96:b3:96:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QowiP/CnJm/dIWmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk NmI1OWVhY2YtMjRmOC00YjQ1LTk2N2UtOTUzZjE3ZGQyZGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirqbOqu55r4NLKqoM/D0f+MvAKxXQud/wgcP HPJ7vRYXEwuJt9VZOthZ+XJ6Wov9h4xeIxf8RMYkjTzelB/KQcG8RGqLrJNUd58n 8IO4JJA+1chrculqa2chPic5L5ycqmr1z6od3kIFmumWfINPEhCQhXdIqCcPXe3Y 6JblKPsVyu1lrG4krJsLtihLg3mfg80je3Ds6rIlSl5JHtzNvfJcP7tXmnVySwc4 07dwzm7NEc1aVFKvDv4edyJbSvn6dpaCKNG2GjZP2Oe2JpFN2gE+zycq+/E6aKKW JRZnjWvm4AHeJqneCQof9JdQzSLoWkZ/nKRAP1c0jnloan8foQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSVRx98xyhZmUC2nuN3pHHcnMm6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvZmYwMDg0YzYtYjVjYS0z ZjMzLTlhMDAtMjNhN2ZmZWY4MzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmgoVSd7paJYjz920SZhwgt6cHdWUTQ8E8coUtCUDLuaIpdcfBBQfDp H3zayvjOL9dTrfbGD8+SMSxpVCG/EcLBh3mA7jkNBfz7qOt7jiexGou1TIwc24Ug AUAmDbaC2DJHDvCeOro7oVBq7w7oiyRMw3Qh+miLikX3FLe4Mt6bGUvHlWwaojFB 5E1Wvn4kl7OeTkVx+CnMV+zwbHc/j4mCSTkJihpuubfDaKphR1+wxByrqBDz2vQV WciPM8rXAUiYegm5zqz2Hl9arDcXgzP5k3qWXU6a4NCFBsW7pcx+Rdhaf4+jO0f5 rfq/tKnUoPqrQ68eO9gRFt0pBJazlt8= -----END CERTIFICATE-----Generated at Mon Oct 26 21:12:29 2026 by rpki-client