$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/9a6c4241-4967-3a10-984a-6f62096d0f3c.roa File: 9a6c4241-4967-3a10-984a-6f62096d0f3c.roa (raw, json) Hash identifier: IxyhZG8o4ZMxYtZed3BCdFeUc9PfOgbxRso0DOUBUuc= Subject key identifier: 8D:54:A3:25:57:54:84:61:C3:83:C7:2C:5A:CB:4B:F2:D7:F2:12:A2 Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584B9BC7B2A1C29ECBD0BBAA8280 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/9a6c4241-4967-3a10-984a-6f62096d0f3c.roa Signing time: Wed 22 Oct 2025 17:40:22 +0000 ROA not before: Wed 22 Oct 2025 17:40:22 +0000 ROA not after: Tue 20 Jan 2026 18:40:22 +0000 asID: 22616 IP address blocks: 149.117.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:c7:b2:a1:c2:9e:cb:d0:bb:aa:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Oct 22 17:40:22 2025 GMT Not After : Jan 20 18:40:22 2026 GMT Subject: CN=d6f6c6e8-ff74-4109-8ce1-5631c0975061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:98:d0:2e:ca:3a:1b:7d:1f:95:ce:1c:15:02: 0c:0e:91:59:a4:09:08:8e:98:24:59:bf:4e:5e:68: 18:fa:45:70:01:65:11:65:f0:ea:6b:ea:9e:d7:ff: 53:08:63:9e:ea:55:44:69:04:8d:13:4d:8e:7a:ad: 89:42:b4:84:66:6d:32:80:13:df:14:b2:cd:0e:82: f2:98:4f:2d:bf:56:e5:be:31:cb:30:8d:f4:f8:ad: 2a:de:d0:b1:a0:8f:8c:30:5f:95:e4:0e:9d:0b:11: d9:8f:c0:fa:92:80:88:72:30:4a:cb:82:a1:10:17: 6b:cf:8a:9d:ea:73:96:f9:a0:ff:d8:43:62:f1:ac: af:c9:d0:05:49:c8:36:c0:93:8b:c2:7c:c2:08:6f: cd:e2:d7:53:90:ac:da:1e:17:13:dd:11:c2:75:b3: 55:7f:85:ed:46:b0:79:ef:b2:cc:1b:e2:21:f4:5e: 4d:be:ab:60:b8:21:36:dc:3e:9b:31:be:dd:9d:11: 7f:5c:b7:0a:2a:6f:33:fb:66:e0:e8:bb:ae:79:97: 9c:76:62:aa:86:f2:71:bf:3c:49:fa:7c:da:8c:7c: 94:ee:a8:00:3a:0f:9b:9b:d8:ee:17:49:0f:e2:0c: bd:eb:44:47:34:10:b8:29:d0:d9:d1:63:61:76:f9: 62:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:54:A3:25:57:54:84:61:C3:83:C7:2C:5A:CB:4B:F2:D7:F2:12:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/9a6c4241-4967-3a10-984a-6f62096d0f3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:61:13:38:07:e3:b7:9d:31:d3:b3:21:51:52:74:b4:5d:0e: 4c:e2:17:de:10:8b:ab:fc:9c:41:26:27:f1:7a:19:c0:a9:82: 62:af:74:b4:1f:d3:1c:cd:cb:8f:8f:a6:e8:8a:16:93:e8:55: c9:f1:20:d4:69:1b:d5:28:c4:cd:11:4b:2f:3c:1e:0f:a5:91: cd:47:97:9b:1e:26:f3:a8:05:bd:53:4e:ae:9d:24:7a:dc:e8: cd:0a:b8:cd:38:56:73:1c:f9:9b:db:f5:d0:65:b3:34:15:23: 99:15:9b:14:b3:92:b9:a9:7a:63:3b:db:ac:eb:d4:99:a9:90: da:07:ee:7f:d8:07:a9:1b:03:72:3a:c1:e7:2f:9d:4c:7a:7f: 87:75:04:88:23:15:ab:7b:16:37:2c:3f:b0:6a:a4:34:07:21: a2:ed:db:d8:e1:a9:15:b7:5e:d5:df:83:9f:0c:b1:d9:68:b5: 32:6d:b0:85:c5:fb:a1:6f:21:19:2a:7c:48:97:a7:b1:11:04: 94:d6:c5:56:40:d6:f3:48:29:23:a3:d7:ca:39:31:c3:ca:79: 0a:36:57:23:31:97:f4:0c:b8:15:c6:5d:1f:4b:fe:c7:42:58: 5d:72:a6:b6:29:92:c8:59:61:c3:0a:14:c6:4e:90:c7:8b:6c: d7:29:64:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEubx7Khwp7L0LuqgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI1MTAyMjE3NDAyMloXDTI2MDEyMDE4NDAyMlowLzEtMCsGA1UEAxMk ZDZmNmM2ZTgtZmY3NC00MTA5LThjZTEtNTYzMWMwOTc1MDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpjQLso6G30flc4cFQIMDpFZpAkIjpgkWb9O XmgY+kVwAWURZfDqa+qe1/9TCGOe6lVEaQSNE02Oeq2JQrSEZm0ygBPfFLLNDoLy mE8tv1blvjHLMI30+K0q3tCxoI+MMF+V5A6dCxHZj8D6koCIcjBKy4KhEBdrz4qd 6nOW+aD/2ENi8ayvydAFScg2wJOLwnzCCG/N4tdTkKzaHhcT3RHCdbNVf4XtRrB5 77LMG+Ih9F5NvqtguCE23D6bMb7dnRF/XLcKKm8z+2bg6LuueZecdmKqhvJxvzxJ +nzajHyU7qgAOg+bm9juF0kP4gy960RHNBC4KdDZ0WNhdvlixwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1UoyVXVIRhw4PHLFrLS/LX8hKiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvOWE2YzQyNDEtNDk2Ny0z YTEwLTk4NGEtNmY2MjA5NmQwZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAphEzgH47edMdOzIVFSdLRdDkziF94Qi6v8nEEmJ/F6GcCpgmKvdLQf 0xzNy4+PpuiKFpPoVcnxINRpG9UoxM0RSy88Hg+lkc1Hl5seJvOoBb1TTq6dJHrc 6M0KuM04VnMc+Zvb9dBlszQVI5kVmxSzkrmpemM726zr1JmpkNoH7n/YB6kbA3I6 wecvnUx6f4d1BIgjFat7FjcsP7BqpDQHIaLt29jhqRW3XtXfg58MsdlotTJtsIXF +6FvIRkqfEiXp7ERBJTWxVZA1vNIKSOj18o5McPKeQo2VyMxl/QMuBXGXR9L/sdC WF1yprYpkshZYcMKFMZOkMeLbNcpZMA= -----END CERTIFICATE-----Generated at Wed Nov 5 07:06:19 2025 by rpki-client