$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/ae3ecb03-3475-3973-b7f8-bf1a95ae6ee0.roa File: ae3ecb03-3475-3973-b7f8-bf1a95ae6ee0.roa (raw, json) Hash identifier: k2H1dnLTTCBfi69KOJMAumnrSskAnZ1k+nTS456+R5Y= Subject key identifier: 18:9D:50:4C:F2:81:8E:86:7D:87:FF:D5:86:3C:36:69:9E:7A:F6:95 Certificate issuer: /CN=c768f2c1-f55b-4ae8-a44c-b9b6062d3744 Certificate serial: 010D0C9F4328584F0C030C333A0CD812F5D32200 Authority key identifier: EE:4F:45:A3:B5:11:B2:C3:B7:83:36:11:41:5E:BA:95:F6:CB:6D:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/ae3ecb03-3475-3973-b7f8-bf1a95ae6ee0.roa Signing time: Thu 03 Sep 2026 00:51:17 +0000 ROA not before: Thu 03 Sep 2026 00:51:17 +0000 ROA not after: Wed 02 Dec 2026 01:51:17 +0000 asID: 53813 IP address blocks: 149.24.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0c:03:0c:33:3a:0c:d8:12:f5:d3:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c768f2c1-f55b-4ae8-a44c-b9b6062d3744 Validity Not Before: Sep 3 00:51:17 2026 GMT Not After : Dec 2 01:51:17 2026 GMT Subject: CN=9c2e3fa0-6dee-4e8e-acbc-e0bce50f89db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0f:8a:ea:36:bc:86:fb:11:9a:46:d6:af:23: 01:8a:32:51:16:99:91:b6:7d:11:03:f3:54:8e:93: 3e:04:38:81:78:bc:dc:7d:57:44:29:16:29:d8:40: aa:b1:ad:12:96:09:ef:62:aa:84:79:7e:6b:5e:81: cb:2d:a2:5d:7a:23:94:7b:c2:75:8a:f4:b2:8e:86: a2:ae:ba:f3:a5:b6:0e:b0:6b:6f:47:7c:b7:8c:b4: a4:cf:ce:7c:f8:bd:b2:9a:f4:13:d7:56:73:28:fe: f2:ea:1a:88:60:17:fc:91:46:36:92:3e:61:ae:8f: da:5c:d9:82:54:22:0d:43:d7:98:2c:14:eb:29:75: e4:94:0a:9e:08:64:d4:6a:38:c2:be:65:cb:d8:6e: 1a:b5:7a:0d:e9:df:58:d4:62:c6:79:40:55:04:e0: 81:93:2e:6c:71:f7:e5:cf:71:2a:8f:5d:38:d7:75: 5a:39:60:95:01:39:93:4d:c0:35:3d:7a:25:7b:68: e5:02:4b:73:d3:97:96:34:b8:81:3a:46:11:0e:4f: 4e:2e:c5:36:c6:82:8c:b9:eb:f2:9d:36:d1:16:47: d8:3c:cf:f6:59:39:d8:76:18:3d:2c:00:3f:d8:64: 2d:22:8e:9b:ec:4f:59:50:44:c4:c3:96:af:73:31: 18:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9D:50:4C:F2:81:8E:86:7D:87:FF:D5:86:3C:36:69:9E:7A:F6:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/ae3ecb03-3475-3973-b7f8-bf1a95ae6ee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.crl X509v3 Authority Key Identifier: keyid:EE:4F:45:A3:B5:11:B2:C3:B7:83:36:11:41:5E:BA:95:F6:CB:6D:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c768f2c1-f55b-4ae8-a44c-b9b6062d3744.cer sbgp-ipAddrBlock: critical IPv4: 149.24.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:83:b6:52:59:bf:13:cc:a2:aa:37:29:c3:94:f5:ec:b5:11: 0f:96:00:7f:e8:c3:4d:2c:fb:94:11:b3:e9:ae:0a:6d:ac:44: 01:50:62:29:70:53:61:c1:c0:ce:52:bc:49:57:3c:21:da:24: f8:ff:19:39:f8:5a:88:8a:d4:f1:e6:cc:9b:db:64:6d:08:ee: bd:0a:bc:59:f1:97:3e:23:f6:18:ce:05:36:5b:6c:31:93:e3: fe:17:48:7a:46:fb:04:22:10:f4:f1:df:36:6a:f6:9d:13:0c: f2:5c:af:01:67:29:28:bd:08:5c:2b:d0:e9:e2:d4:1c:dd:76: 55:5f:7d:94:0b:9d:86:d5:9d:6a:54:30:e6:cc:05:6a:cc:76: 96:01:27:9f:c4:ca:2d:04:f4:77:a8:76:d5:11:8d:84:b0:ba: 14:c9:2c:2d:7a:ed:d9:d1:f3:39:b9:d9:ec:cc:de:c2:0d:99: 20:75:1b:08:23:64:59:07:0a:0a:bf:80:52:c7:e4:0f:1b:e9: d2:15:78:67:74:1f:a4:fd:d4:cc:e6:c5:16:c4:23:ca:c3:f0: 77:a6:e6:b8:c3:08:f2:fb:4d:da:31:32:0e:4c:13:a8:91:db: 79:a3:d6:72:8c:c6:eb:fd:de:b6:8b:ca:19:aa:78:9d:fd:fa: e6:6a:42:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8MAwwzOgzYEvXTIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc2OGYyYzEtZjU1Yi00YWU4LWE0NGMtYjliNjA2MmQz NzQ0MB4XDTI2MDkwMzAwNTExN1oXDTI2MTIwMjAxNTExN1owLzEtMCsGA1UEAxMk OWMyZTNmYTAtNmRlZS00ZThlLWFjYmMtZTBiY2U1MGY4OWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA+K6ja8hvsRmkbWryMBijJRFpmRtn0RA/NU jpM+BDiBeLzcfVdEKRYp2ECqsa0SlgnvYqqEeX5rXoHLLaJdeiOUe8J1ivSyjoai rrrzpbYOsGtvR3y3jLSkz858+L2ymvQT11ZzKP7y6hqIYBf8kUY2kj5hro/aXNmC VCINQ9eYLBTrKXXklAqeCGTUajjCvmXL2G4atXoN6d9Y1GLGeUBVBOCBky5scffl z3Eqj10413VaOWCVATmTTcA1PXole2jlAktz05eWNLiBOkYRDk9OLsU2xoKMuevy nTbRFkfYPM/2WTnYdhg9LAA/2GQtIo6b7E9ZUETEw5avczEYDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBidUEzygY6GfYf/1YY8NmmeevaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNzY4 ZjJjMS1mNTViLTRhZTgtYTQ0Yy1iOWI2MDYyZDM3NDQvYWUzZWNiMDMtMzQ3NS0z OTczLWI3ZjgtYmYxYTk1YWU2ZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzc2OGYyYzEtZjU1Yi00YWU4LWE0 NGMtYjliNjA2MmQzNzQ0L2M3NjhmMmMxLWY1NWItNGFlOC1hNDRjLWI5YjYwNjJk Mzc0NC5jcmwwHwYDVR0jBBgwFoAU7k9Fo7URssO3gzYRQV66lfbLbZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jNzY4ZjJjMS1mNTViLTRhZTgtYTQ0Yy1iOWI2 MDYyZDM3NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRhfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyDtlJZvxPMoqo3KcOU9ey1EQ+WAH/ow00s+5QRs+muCm2sRAFQYilw U2HBwM5SvElXPCHaJPj/GTn4WoiK1PHmzJvbZG0I7r0KvFnxlz4j9hjOBTZbbDGT 4/4XSHpG+wQiEPTx3zZq9p0TDPJcrwFnKSi9CFwr0Oni1BzddlVffZQLnYbVnWpU MObMBWrMdpYBJ5/Eyi0E9HeodtURjYSwuhTJLC167dnR8zm52ezM3sINmSB1Gwgj ZFkHCgq/gFLH5A8b6dIVeGd0H6T91MzmxRbEI8rD8Hem5rjDCPL7TdoxMg5ME6iR 23mj1nKMxuv93raLyhmqeJ39+uZqQtY= -----END CERTIFICATE-----Generated at Sat Sep 19 14:06:29 2026 by rpki-client