$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/2468da7a-22c9-3d02-82b7-e3469b49cdec.roa File: 2468da7a-22c9-3d02-82b7-e3469b49cdec.roa (raw, json) Hash identifier: dfJ3Q/rkIQS1RXtpwtAxij1Er/jw1UA5qLS/GBgViHA= Subject key identifier: 0B:20:A8:38:F5:9E:CE:39:8A:84:C3:8C:EB:3C:3A:12:3B:06:9B:7F Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584D87FA95D393930CC6E3EE9114 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/2468da7a-22c9-3d02-82b7-e3469b49cdec.roa Signing time: Fri 17 Apr 2026 01:00:27 +0000 ROA not before: Fri 17 Apr 2026 01:00:27 +0000 ROA not after: Thu 16 Jul 2026 01:00:27 +0000 asID: 7809 IP address blocks: 149.117.136.0/23 maxlen: 23 149.117.136.0/24 maxlen: 24 149.117.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:fa:95:d3:93:93:0c:c6:e3:ee:91:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Apr 17 01:00:27 2026 GMT Not After : Jul 16 01:00:27 2026 GMT Subject: CN=c42abd00-a3d8-4b6c-bff2-d97c2852c06a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a4:6d:f9:de:21:d4:3b:bc:87:e8:4a:27:4f: 0c:00:55:f3:3d:45:6f:b6:24:03:9a:28:6b:91:95: 54:9c:31:ac:54:10:60:e7:74:48:7d:c0:68:30:50: 2b:d2:e3:4a:c9:ec:89:a1:bb:6e:15:25:38:40:14: e7:e9:36:c7:8a:b3:85:07:35:5e:d0:67:0d:23:1b: 8f:af:f9:2c:a5:c0:72:58:49:85:5d:7a:79:26:12: 5a:7a:d3:9d:7a:6d:99:f7:27:db:8d:95:cb:64:8e: 46:d3:7e:6d:83:1c:4b:dd:a0:b6:ec:36:cf:9b:4e: ed:14:7e:d1:e4:13:dc:4c:2f:e0:70:46:b2:6f:da: 74:b5:c4:af:58:4e:10:95:bd:c5:9a:bf:1a:a9:d1: b1:33:ff:ed:71:86:a6:4e:e4:fa:09:d3:ea:85:12: 2f:22:67:30:e9:cc:20:40:5e:d1:a2:ed:ac:cd:8d: 0a:3d:a8:bf:81:d3:f0:2f:bf:23:40:48:d2:a3:8a: ae:fa:98:75:e3:12:ae:36:bb:5c:56:e2:ce:3a:44: 87:a1:b6:8b:05:ed:6b:59:94:2c:e6:84:fd:48:16: bd:05:c6:aa:89:bf:41:8c:a4:97:19:7e:35:e7:ee: 17:f3:ea:98:22:ca:bf:ce:be:e0:21:cd:4b:3d:fc: 66:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:20:A8:38:F5:9E:CE:39:8A:84:C3:8C:EB:3C:3A:12:3B:06:9B:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/2468da7a-22c9-3d02-82b7-e3469b49cdec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:b9:0b:8d:14:7b:b2:7e:f7:7d:5c:a0:b8:86:dc:be:df:e3: cb:81:a2:e6:aa:2d:38:0e:6d:b1:09:a9:ae:c3:51:9c:68:3a: 44:44:be:dc:4a:40:b9:1b:91:79:73:db:6b:3c:ee:8a:99:0a: ce:3b:6a:97:00:65:3d:c9:4c:c4:42:97:3e:4a:6e:96:eb:85: 17:f9:de:90:d3:eb:65:f2:80:16:0a:a9:45:89:ad:e5:f4:51: 88:0f:c4:53:e9:da:19:cc:a3:0a:a8:86:ae:32:19:c4:03:85: 9d:3e:db:a5:60:d4:aa:55:f6:5d:4b:87:e5:97:a3:80:02:5d: bf:e0:13:c0:91:c2:0d:9c:73:ab:c8:e0:5b:73:e1:4e:5c:f9: b3:5d:b9:cc:4b:fc:31:52:f1:08:e3:a3:97:4a:01:e2:78:33: 29:1b:e8:c8:0b:5f:0c:c8:1a:a4:83:3f:59:6e:57:71:5c:e1: 1f:d7:7a:e8:94:7a:5a:eb:0c:92:a4:55:14:98:06:c6:a6:51: e7:ff:b1:ec:15:72:38:6f:31:48:45:62:1d:38:a7:52:6a:e9: c5:2f:61:cd:fc:c1:3d:20:22:5c:c7:30:b5:3b:0d:37:c2:c5: d6:98:75:3d:34:1b:ba:cf:fb:db:92:94:16:7a:74:6e:22:ab: 73:3f:97:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2H+pXTk5MMxuPukRQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI2MDQxNzAxMDAyN1oXDTI2MDcxNjAxMDAyN1owLzEtMCsGA1UEAxMk YzQyYWJkMDAtYTNkOC00YjZjLWJmZjItZDk3YzI4NTJjMDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqRt+d4h1Du8h+hKJ08MAFXzPUVvtiQDmihr kZVUnDGsVBBg53RIfcBoMFAr0uNKyeyJobtuFSU4QBTn6TbHirOFBzVe0GcNIxuP r/kspcByWEmFXXp5JhJaetOdem2Z9yfbjZXLZI5G035tgxxL3aC27DbPm07tFH7R 5BPcTC/gcEayb9p0tcSvWE4Qlb3Fmr8aqdGxM//tcYamTuT6CdPqhRIvImcw6cwg QF7Rou2szY0KPai/gdPwL78jQEjSo4qu+ph14xKuNrtcVuLOOkSHobaLBe1rWZQs 5oT9SBa9Bcaqib9BjKSXGX415+4X8+qYIsq/zr7gIc1LPfxmcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsgqDj1ns45ioTDjOs8OhI7Bpt/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvMjQ2OGRhN2EtMjJjOS0z ZDAyLTgyYjctZTM0NjliNDljZGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlXWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACO5C40Ue7J+931coLiG3L7f48uBouaqLTgObbEJqa7DUZxoOkREvtxK QLkbkXlz22s87oqZCs47apcAZT3JTMRClz5KbpbrhRf53pDT62XygBYKqUWJreX0 UYgPxFPp2hnMowqohq4yGcQDhZ0+26Vg1KpV9l1Lh+WXo4ACXb/gE8CRwg2cc6vI 4Ftz4U5c+bNducxL/DFS8Qjjo5dKAeJ4Mykb6MgLXwzIGqSDP1luV3Fc4R/XeuiU elrrDJKkVRSYBsamUef/sewVcjhvMUhFYh04p1Jq6cUvYc38wT0gIlzHMLU7DTfC xdaYdT00G7rP+9uSlBZ6dG4iq3M/l9k= -----END CERTIFICATE-----Generated at Fri Apr 17 13:50:09 2026 by rpki-client