$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/2468da7a-22c9-3d02-82b7-e3469b49cdec.roa File: 2468da7a-22c9-3d02-82b7-e3469b49cdec.roa (raw, json) Hash identifier: LMXjdpBtN1WB1IEj/kgJVz9l+1YEqSCEBMOK0LDEYBw= Subject key identifier: 03:89:6F:2D:C3:EB:BB:B7:9E:04:D4:E6:19:57:0F:3F:D4:44:22:48 Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584AAB915E4FE22DF3262CDF7A80 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/2468da7a-22c9-3d02-82b7-e3469b49cdec.roa Signing time: Fri 30 May 2025 16:25:43 +0000 ROA not before: Fri 30 May 2025 16:25:43 +0000 ROA not after: Thu 28 Aug 2025 16:25:43 +0000 asID: 7809 IP address blocks: 149.117.136.0/23 maxlen: 23 149.117.136.0/24 maxlen: 24 149.117.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ab:91:5e:4f:e2:2d:f3:26:2c:df:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: May 30 16:25:43 2025 GMT Not After : Aug 28 16:25:43 2025 GMT Subject: CN=15a2dd81-5559-4fcb-8940-980bb0cbc625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:be:18:eb:26:95:1e:ea:c3:52:85:09:99:79: a8:21:47:a2:7e:91:16:f1:40:fc:5e:36:03:a4:0d: 02:02:08:6c:fc:08:23:0e:cc:79:ff:e3:f2:87:8d: 2b:05:e4:d0:f6:98:3d:83:38:29:32:bf:21:2a:e4: eb:32:14:83:68:be:f7:ef:fe:85:0c:96:f9:eb:59: 89:36:e8:5a:42:a6:47:b7:05:76:9c:4e:b2:9c:a5: 82:c2:9b:4e:16:7d:93:e3:f7:22:94:36:6f:a2:9f: 9a:f3:2f:72:8d:50:9f:0f:cb:a2:66:72:30:35:a3: 42:22:8f:31:ed:2e:94:48:85:4a:45:64:5d:42:90: 35:0a:57:bb:d6:aa:88:fc:8b:e6:31:4f:23:35:e5: b6:78:f7:0c:17:c5:6d:b8:03:5e:0a:d2:cb:4f:28: 45:66:e2:1c:7e:a6:5f:23:b5:9d:ab:21:fe:8e:09: 3d:14:43:d2:ff:12:be:2d:08:c8:13:01:d7:ae:4a: 24:d2:ac:6f:55:74:39:1e:bb:e0:67:29:24:4b:e4: 8a:4c:f3:71:92:a9:c7:d1:9b:bf:16:6e:87:aa:d4: c8:a4:d1:2f:67:7c:45:96:16:33:04:c9:fd:4d:8f: d6:b0:13:f8:a7:7b:88:18:0d:5e:03:f7:33:ee:61: 05:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:89:6F:2D:C3:EB:BB:B7:9E:04:D4:E6:19:57:0F:3F:D4:44:22:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/2468da7a-22c9-3d02-82b7-e3469b49cdec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:4c:0c:b3:98:da:21:2b:25:fa:e6:68:2e:27:f9:af:3c:69: 77:49:7d:d5:88:d3:b3:98:fb:b7:56:33:8d:2a:ba:0d:44:c9: 1f:7f:13:97:a6:8d:7b:08:4f:99:2d:76:bd:95:3b:77:88:7d: dd:f7:76:56:76:68:73:a1:1a:b3:9d:ca:ba:ed:de:f6:23:4e: 38:ff:22:27:f5:84:e6:5c:c0:71:1e:90:f5:9a:11:0b:42:1b: fb:33:2b:ab:cc:60:26:16:0a:7d:01:7a:ad:6b:ac:89:95:c1: 82:8d:c8:11:46:02:fc:98:e3:ef:9d:76:81:f5:af:d1:42:49: e7:ce:0d:0b:ab:0d:07:20:5b:da:fe:61:3b:e5:6c:77:07:3e: dd:87:70:41:34:c4:b5:48:3b:b9:f4:de:4b:ea:f7:78:89:1d: 2c:c4:fb:9c:18:34:47:4e:dd:0c:5b:af:de:42:8f:43:ed:ed: 26:96:4a:c0:9c:7b:62:58:c7:9c:20:03:63:4e:f1:2b:06:7d: 17:40:99:94:30:c4:01:38:1c:d7:9e:c8:ed:69:5d:45:07:21: 37:59:96:b2:41:20:bc:86:ba:06:53:bc:a7:89:7f:ab:37:bf: a1:a3:55:f7:cb:24:dc:b8:2a:9a:a7:99:45:70:5c:77:a5:54: e8:4c:55:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrkV5P4i3zJizfeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI1MDUzMDE2MjU0M1oXDTI1MDgyODE2MjU0M1owLzEtMCsGA1UEAxMk MTVhMmRkODEtNTU1OS00ZmNiLTg5NDAtOTgwYmIwY2JjNjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr4Y6yaVHurDUoUJmXmoIUeifpEW8UD8XjYD pA0CAghs/AgjDsx5/+Pyh40rBeTQ9pg9gzgpMr8hKuTrMhSDaL737/6FDJb561mJ NuhaQqZHtwV2nE6ynKWCwptOFn2T4/cilDZvop+a8y9yjVCfD8uiZnIwNaNCIo8x 7S6USIVKRWRdQpA1Cle71qqI/IvmMU8jNeW2ePcMF8VtuANeCtLLTyhFZuIcfqZf I7WdqyH+jgk9FEPS/xK+LQjIEwHXrkok0qxvVXQ5HrvgZykkS+SKTPNxkqnH0Zu/ Fm6HqtTIpNEvZ3xFlhYzBMn9TY/WsBP4p3uIGA1eA/cz7mEFVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOJby3D67u3ngTU5hlXDz/URCJIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvMjQ2OGRhN2EtMjJjOS0z ZDAyLTgyYjctZTM0NjliNDljZGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlXWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlMDLOY2iErJfrmaC4n+a88aXdJfdWI07OY+7dWM40qug1EyR9/E5em jXsIT5ktdr2VO3eIfd33dlZ2aHOhGrOdyrrt3vYjTjj/Iif1hOZcwHEekPWaEQtC G/szK6vMYCYWCn0Beq1rrImVwYKNyBFGAvyY4++ddoH1r9FCSefODQurDQcgW9r+ YTvlbHcHPt2HcEE0xLVIO7n03kvq93iJHSzE+5wYNEdO3Qxbr95Cj0Pt7SaWSsCc e2JYx5wgA2NO8SsGfRdAmZQwxAE4HNeeyO1pXUUHITdZlrJBILyGugZTvKeJf6s3 v6GjVffLJNy4KpqnmUVwXHelVOhMVUg= -----END CERTIFICATE-----Generated at Mon Aug 4 14:08:24 2025 by rpki-client