$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/91e209b9-b6c8-3e97-9a5f-30eb162f680b.roa File: 91e209b9-b6c8-3e97-9a5f-30eb162f680b.roa (raw, json) Hash identifier: bqpqTd3uNQI9yL/lwH4v0v0d+TIfDRWSCPQL7PoN8ao= Subject key identifier: 9A:A2:2C:78:4F:87:E5:59:09:BF:3E:9E:41:B2:A0:E3:E3:F6:9B:A7 Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584D869556126B132E80F1CE90A0 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/91e209b9-b6c8-3e97-9a5f-30eb162f680b.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 3462 IP address blocks: 149.117.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:56:12:6b:13:2e:80:f1:ce:90:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=5d94cfdf-adf9-4af6-bc8f-3fbdc6349aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5d:5a:34:1b:89:d2:2e:d8:1b:a8:d9:6c:5e: 0a:d3:5c:de:37:ab:a8:d3:62:10:30:05:ff:d2:24: 81:e7:6b:49:32:40:e9:5d:0d:b5:bb:e7:ec:b1:77: 8c:be:37:48:78:99:9a:4d:51:11:f7:05:bc:24:8c: c9:51:51:30:5b:b5:e4:cc:53:77:67:21:cf:e1:b2: 1d:e1:5b:b4:1b:60:45:23:89:47:af:89:e3:09:60: 6d:d7:43:2c:9a:7c:ed:96:15:5d:d8:1c:ca:ca:de: 27:0c:5b:fc:39:15:55:d5:e7:1a:45:32:98:ef:d2: eb:d1:08:28:5c:86:6a:89:e3:df:ed:17:fa:0d:b2: 95:6c:9a:3d:ac:aa:52:ce:be:9f:25:2c:b2:bb:2c: 79:be:a1:30:5d:7e:27:2c:ea:57:47:b0:81:e4:47: 2b:2e:50:d8:10:f8:fb:ed:bb:9e:24:7a:0b:c6:fd: 8f:da:fe:63:c8:00:0c:1b:57:2a:97:3c:8b:c3:21: d1:15:f1:0a:a8:fb:b9:ec:04:a1:45:99:b7:2b:ef: 3e:3d:6d:a1:b1:f8:91:9f:46:3b:aa:da:70:56:10: c2:c5:e9:2c:5f:82:a9:b2:ce:72:0e:f1:df:3d:ee: 40:f5:88:35:5b:9d:5c:7e:2b:cd:57:f3:c3:b2:b3: 53:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A2:2C:78:4F:87:E5:59:09:BF:3E:9E:41:B2:A0:E3:E3:F6:9B:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/91e209b9-b6c8-3e97-9a5f-30eb162f680b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:88:32:cf:d0:b5:73:3f:94:68:f3:f3:ae:cf:1e:08:ab:44: cb:94:51:ec:46:44:af:19:93:0f:5a:50:86:3d:70:63:df:cf: 4a:52:0c:52:e7:72:87:18:79:3e:7c:ae:4e:18:1c:7a:3c:21: ed:b9:8d:40:d9:45:4d:48:d7:58:06:b0:89:9c:8a:cf:cc:11: 66:b6:1a:55:90:16:47:04:68:d7:11:83:a6:50:07:25:f0:91: 12:69:30:42:3a:d7:07:f7:87:e8:6f:20:35:e5:77:fe:0e:ae: ec:25:35:4b:fd:4c:45:9e:13:ab:04:d0:25:39:55:79:1b:9b: b1:8a:98:4b:1c:f6:51:ab:02:e7:d8:af:5a:99:95:98:91:e2: 60:e7:cf:a9:9b:d7:d7:e3:10:3a:de:d5:98:b7:f8:23:ad:dc: 4d:ab:8b:15:ae:62:b5:29:22:f5:47:30:d9:6a:68:82:07:21: 91:64:02:62:b2:a0:64:c2:6a:1b:54:7f:a9:6a:cf:61:f6:67: 7b:81:9e:a0:10:2b:fe:96:ae:a5:54:3f:4d:90:d1:50:36:14: d9:c9:fc:16:ef:b4:36:e8:3a:5b:8f:3a:e9:0f:a7:ed:db:fd: de:87:b6:46:e7:5e:b4:9e:b5:51:98:d3:88:8e:8f:db:1f:09: 82:ce:fc:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlVYSaxMugPHOkKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk NWQ5NGNmZGYtYWRmOS00YWY2LWJjOGYtM2ZiZGM2MzQ5YWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl1aNBuJ0i7YG6jZbF4K01zeN6uo02IQMAX/ 0iSB52tJMkDpXQ21u+fssXeMvjdIeJmaTVER9wW8JIzJUVEwW7XkzFN3ZyHP4bId 4Vu0G2BFI4lHr4njCWBt10MsmnztlhVd2BzKyt4nDFv8ORVV1ecaRTKY79Lr0Qgo XIZqiePf7Rf6DbKVbJo9rKpSzr6fJSyyuyx5vqEwXX4nLOpXR7CB5EcrLlDYEPj7 7bueJHoLxv2P2v5jyAAMG1cqlzyLwyHRFfEKqPu57AShRZm3K+8+PW2hsfiRn0Y7 qtpwVhDCxeksX4Kpss5yDvHfPe5A9Yg1W51cfivNV/PDsrNTWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqiLHhPh+VZCb8+nkGyoOPj9punMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvOTFlMjA5YjktYjZjOC0z ZTk3LTlhNWYtMzBlYjE2MmY2ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+IMs/QtXM/lGjz867PHgirRMuUUexGRK8Zkw9aUIY9cGPfz0pSDFLn cocYeT58rk4YHHo8Ie25jUDZRU1I11gGsImcis/MEWa2GlWQFkcEaNcRg6ZQByXw kRJpMEI61wf3h+hvIDXld/4OruwlNUv9TEWeE6sE0CU5VXkbm7GKmEsc9lGrAufY r1qZlZiR4mDnz6mb19fjEDre1Zi3+COt3E2rixWuYrUpIvVHMNlqaIIHIZFkAmKy oGTCahtUf6lqz2H2Z3uBnqAQK/6WrqVUP02Q0VA2FNnJ/BbvtDboOluPOukPp+3b /d6HtkbnXrSetVGY04iOj9sfCYLO/K4= -----END CERTIFICATE-----Generated at Fri Apr 17 09:52:32 2026 by rpki-client