$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa File: ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa (raw, json) Hash identifier: KIU3QKWAvmkQNmToDQRjUKfElTAZGzBq/Nqn5IJEZrs= Subject key identifier: 9C:D4:D8:31:D0:3D:99:05:75:E3:A8:B6:37:BA:D6:27:86:38:4C:43 Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584D6C0FB6524523F5388527A8D8 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 397635 IP address blocks: 149.117.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:b6:52:45:23:f5:38:85:27:a8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=9a1f2dad-8b7b-448b-90d8-c4c9eb27690e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:31:9c:e0:ed:ea:15:52:8c:1e:76:39:a2:1f: 81:99:aa:be:d4:5b:a7:e6:ca:6d:14:0b:fc:7c:bf: ad:5c:46:19:07:5e:9c:8a:1c:14:da:c4:3d:d8:7e: ed:b7:af:b9:ca:a3:89:49:db:26:67:b8:6d:0e:60: bd:fa:dd:65:1c:ed:26:b8:ba:c0:d4:3d:eb:a6:31: 73:95:90:1d:74:6c:99:1d:1c:7e:d5:85:46:45:45: 3f:4f:79:f4:95:64:52:35:51:e0:05:4d:dc:ce:db: b0:d7:7b:db:91:8f:44:ad:23:c2:ae:ce:38:64:9a: 8f:20:5b:ae:df:59:47:d7:5e:f6:f0:72:80:0d:f7: ee:08:87:72:66:3d:9f:7d:3f:e2:c3:bc:e6:27:43: c8:77:b7:28:51:53:25:ab:a5:93:c6:16:07:9a:56: be:13:f0:99:b4:8c:57:61:c2:0a:0b:ef:e0:30:eb: 7e:43:8b:5c:1f:65:2c:37:81:2d:7b:b1:ca:1a:0f: ba:c9:5d:47:d5:a4:28:ac:32:5c:46:f1:85:a1:4a: 78:ff:d8:13:ed:f9:bd:ec:28:a8:66:c3:74:ea:fe: 60:9b:61:f7:0e:74:e2:f4:69:4b:13:97:66:46:40: 43:47:d9:ac:64:80:1b:a9:b3:92:c1:1a:30:5e:df: 65:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D4:D8:31:D0:3D:99:05:75:E3:A8:B6:37:BA:D6:27:86:38:4C:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:06:a4:2b:da:49:9e:de:78:f7:e3:4a:ef:48:f7:b7:61:8c: 2b:b1:e2:09:92:ef:2d:7f:da:ea:a4:1e:db:45:ad:67:bc:e4: 4b:c3:fc:56:fb:11:1b:11:62:dd:e3:eb:71:96:55:93:ce:b6: 3e:b0:83:ca:a4:fb:fa:06:79:90:24:07:20:25:ae:9c:3d:f6: 1b:f9:c5:f4:08:0b:95:ed:f7:10:54:6c:ea:1c:ae:86:35:48: f0:93:1e:45:df:74:bd:2c:68:7d:56:8f:c6:14:54:d7:e7:79: 65:ca:24:9c:2b:05:89:28:6c:09:03:b5:fb:bd:dc:49:42:f7: f3:95:9d:78:a7:c4:7d:7c:a5:45:a3:7a:3a:af:7a:15:f5:53: 7f:ea:11:ff:9f:29:d1:a2:d5:91:53:d5:40:ee:96:2e:97:e8: 00:27:c5:be:52:db:79:40:76:57:f1:4e:33:c3:f0:91:49:8e: 44:67:97:b7:f4:df:79:20:11:bd:4e:c6:98:85:d2:33:42:fb: 51:8d:fc:96:40:b2:7c:c9:22:d6:c5:38:e4:16:7e:94:97:cc: d4:94:47:5b:71:4c:e4:c6:ca:a9:88:db:9f:d7:b1:7e:fe:ef: f7:90:1c:04:8c:78:43:f0:7d:1d:b7:9f:12:dd:ca:1c:92:74: 6c:15:57:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD7ZSRSP1OIUnqNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk OWExZjJkYWQtOGI3Yi00NDhiLTkwZDgtYzRjOWViMjc2OTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TGc4O3qFVKMHnY5oh+Bmaq+1Fun5sptFAv8 fL+tXEYZB16cihwU2sQ92H7tt6+5yqOJSdsmZ7htDmC9+t1lHO0muLrA1D3rpjFz lZAddGyZHRx+1YVGRUU/T3n0lWRSNVHgBU3cztuw13vbkY9ErSPCrs44ZJqPIFuu 31lH11728HKADffuCIdyZj2ffT/iw7zmJ0PId7coUVMlq6WTxhYHmla+E/CZtIxX YcIKC+/gMOt+Q4tcH2UsN4Ete7HKGg+6yV1H1aQorDJcRvGFoUp4/9gT7fm97Cio ZsN06v5gm2H3DnTi9GlLE5dmRkBDR9msZIAbqbOSwRowXt9lvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzU2DHQPZkFdeOotje61ieGOExDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvZmYwMDg0YzYtYjVjYS0z ZjMzLTlhMDAtMjNhN2ZmZWY4MzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUGpCvaSZ7eePfjSu9I97dhjCux4gmS7y1/2uqkHttFrWe85EvD/Fb7 ERsRYt3j63GWVZPOtj6wg8qk+/oGeZAkByAlrpw99hv5xfQIC5Xt9xBUbOocroY1 SPCTHkXfdL0saH1Wj8YUVNfneWXKJJwrBYkobAkDtfu93ElC9/OVnXinxH18pUWj ejqvehX1U3/qEf+fKdGi1ZFT1UDuli6X6AAnxb5S23lAdlfxTjPD8JFJjkRnl7f0 33kgEb1OxpiF0jNC+1GN/JZAsnzJItbFOOQWfpSXzNSUR1txTOTGyqmI25/XsX7+ 7/eQHASMeEPwfR23nxLdyhySdGwVV4o= -----END CERTIFICATE-----Generated at Fri Apr 17 11:27:14 2026 by rpki-client