$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/2468da7a-22c9-3d02-82b7-e3469b49cdec.roa File: 2468da7a-22c9-3d02-82b7-e3469b49cdec.roa (raw, json) Hash identifier: xo/e5j9ld3vbK6FKJvRdqCdohYOXwPXiKsfo7/1lap4= Subject key identifier: 92:8C:1F:2C:6E:2E:03:2F:1E:1B:7D:A3:E3:3D:29:DB:0B:82:12:0C Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584A06D577351A490DA1F539B380 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/2468da7a-22c9-3d02-82b7-e3469b49cdec.roa Signing time: Fri 30 May 2025 16:25:43 +0000 ROA not before: Fri 30 May 2025 16:25:43 +0000 ROA not after: Thu 28 Aug 2025 16:25:43 +0000 asID: 7809 IP address blocks: 149.117.136.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:06:d5:77:35:1a:49:0d:a1:f5:39:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: May 30 16:25:43 2025 GMT Not After : Aug 28 16:25:43 2025 GMT Subject: CN=a63555e6-3c50-4f68-8b6b-7f3cfb30a082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:df:e4:62:16:f6:03:93:81:0b:a4:d7:49:8d: 5c:c7:97:7e:be:95:b5:bf:bf:9c:16:3c:4a:40:9e: 81:e3:41:08:58:82:4a:c4:9c:38:68:a6:11:28:27: cd:af:5f:5f:32:12:af:bb:6e:f6:8b:4a:ec:a9:ce: 0d:af:6b:ed:b4:c2:d6:6c:13:0b:48:7b:63:2c:01: 1b:59:04:2b:53:df:7e:69:10:e3:4a:e6:e4:3a:9d: aa:78:39:2d:5f:06:b7:d6:e6:24:6b:e1:e0:1e:57: e1:e2:50:f3:f4:50:d3:32:3f:9d:5a:c0:ba:33:84: 28:97:55:83:65:81:0d:50:ba:f1:a0:da:c8:df:65: d4:3c:a6:b1:02:1f:d1:95:b8:56:5e:d9:18:bd:50: 98:c0:2a:71:1f:ce:19:3b:ee:5f:26:de:7b:ef:51: 2a:fb:7e:c6:74:57:41:17:1d:7a:af:ab:aa:be:0d: b6:93:b1:66:4b:c4:0a:a7:72:d1:e2:bc:5c:ca:97: 03:ba:be:89:e6:cc:e7:e2:22:7f:5b:b5:75:b5:f3: 09:a2:b1:b0:f2:af:16:d8:0d:08:81:99:92:2c:ad: 25:5f:96:d0:fe:2c:78:35:7c:5a:e0:78:81:37:f3: e9:f6:ad:a3:74:49:7c:3a:9a:b9:6a:6f:56:69:8c: be:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8C:1F:2C:6E:2E:03:2F:1E:1B:7D:A3:E3:3D:29:DB:0B:82:12:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/2468da7a-22c9-3d02-82b7-e3469b49cdec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:f7:62:66:49:23:7c:0b:9d:f2:a9:aa:f9:fe:6f:8c:d7:26: ad:2b:72:62:3b:b2:67:b8:cc:e1:38:70:78:35:09:25:6e:b5: a9:97:c8:13:5c:63:81:ad:f8:66:91:35:f8:26:09:d6:65:6f: 49:39:b5:47:4a:11:a6:89:e7:ef:cd:d4:46:e6:91:19:62:b1: 4d:60:22:46:ab:51:20:c1:13:49:0d:c6:c9:a6:33:b0:10:a5: ff:64:ce:af:30:9d:0c:7b:0e:68:37:38:28:cf:50:54:41:73: 55:43:e7:d6:d1:1f:06:47:ea:e7:9c:80:37:18:29:16:46:19: a3:bb:21:b4:47:c0:fe:0a:95:c3:1c:a3:ca:b2:b4:89:b8:93: f9:f9:d8:9b:a3:bd:a5:af:df:4c:a8:01:4d:59:c0:0f:d3:d2: 60:a3:c5:cf:2b:e4:3a:7f:6d:34:94:10:44:b8:72:8b:d5:e6: 1f:cd:55:22:34:94:96:1a:be:96:7d:98:57:32:f2:eb:78:43: 50:e4:6b:f9:fa:ad:3f:92:ed:f2:a9:a7:00:0c:c4:73:67:74: 58:72:7e:ef:31:ae:d7:00:ab:84:91:46:f6:b8:c2:ab:d4:ae: 9c:9c:89:d8:f5:49:67:0b:82:10:ef:e2:2e:96:ae:15:f1:9d: c0:6d:10:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoG1Xc1GkkNofU5s4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI1MDUzMDE2MjU0M1oXDTI1MDgyODE2MjU0M1owLzEtMCsGA1UEAxMk YTYzNTU1ZTYtM2M1MC00ZjY4LThiNmItN2YzY2ZiMzBhMDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9/kYhb2A5OBC6TXSY1cx5d+vpW1v7+cFjxK QJ6B40EIWIJKxJw4aKYRKCfNr19fMhKvu272i0rsqc4Nr2vttMLWbBMLSHtjLAEb WQQrU99+aRDjSubkOp2qeDktXwa31uYka+HgHlfh4lDz9FDTMj+dWsC6M4Qol1WD ZYENULrxoNrI32XUPKaxAh/RlbhWXtkYvVCYwCpxH84ZO+5fJt5771Eq+37GdFdB Fx16r6uqvg22k7FmS8QKp3LR4rxcypcDur6J5szn4iJ/W7V1tfMJorGw8q8W2A0I gZmSLK0lX5bQ/ix4NXxa4HiBN/Pp9q2jdEl8Opq5am9WaYy+TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKMHyxuLgMvHht9o+M9KdsLghIMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvMjQ2OGRhN2EtMjJjOS0z ZDAyLTgyYjctZTM0NjliNDljZGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlXWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn3YmZJI3wLnfKpqvn+b4zXJq0rcmI7sme4zOE4cHg1CSVutamXyBNc Y4Gt+GaRNfgmCdZlb0k5tUdKEaaJ5+/N1EbmkRlisU1gIkarUSDBE0kNxsmmM7AQ pf9kzq8wnQx7Dmg3OCjPUFRBc1VD59bRHwZH6uecgDcYKRZGGaO7IbRHwP4KlcMc o8qytIm4k/n52JujvaWv30yoAU1ZwA/T0mCjxc8r5Dp/bTSUEES4covV5h/NVSI0 lJYavpZ9mFcy8ut4Q1Dka/n6rT+S7fKppwAMxHNndFhyfu8xrtcAq4SRRva4wqvU rpycidj1SWcLghDv4i6WrhXxncBtEAM= -----END CERTIFICATE-----Generated at Sun Jun 15 15:21:43 2025 by rpki-client