$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa File: ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa (raw, json) Hash identifier: 9PkEDd43q3Z2oNcl5OVW434L6eG/HeBQNwboCNrUxgg= Subject key identifier: 50:29:D1:DE:CE:25:DA:2E:4C:81:00:DF:15:D2:B1:F3:9C:9E:BA:D0 Certificate issuer: /CN=aa9d650e-309d-4772-a1ee-ed762e147583 Certificate serial: 010D0C9F4328584BABFD097AA7A2CA6AF39A5B80 Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 397635 IP address blocks: 149.117.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:09:7a:a7:a2:ca:6a:f3:9a:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=aae22781-005e-46da-86c4-4e17a56b59c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:91:29:e6:66:ff:f0:02:c8:4e:7c:68:b1:81: c7:94:64:e9:a6:fc:0a:fc:41:f7:53:47:7e:13:e5: 5c:2f:84:03:47:ba:8e:a9:b7:1a:7f:a1:7b:fa:ce: cd:b4:20:b6:e3:b2:e3:d7:5b:b6:84:47:7f:fc:df: 41:ae:17:b9:4f:06:98:2a:f7:fa:b3:51:a0:f9:71: 43:d8:ea:4b:bb:37:5f:b0:bd:27:a8:c3:e3:a7:ca: 29:3b:47:bb:08:7d:35:73:65:3a:d9:54:21:7c:50: 38:c7:07:d2:58:af:07:8d:76:99:a9:a0:8b:d8:d9: bd:c2:7c:89:d8:c6:a5:d1:82:63:a6:f7:b0:d0:2f: 18:29:85:b2:78:4b:a5:0f:3c:a5:39:8b:cd:e7:de: fa:d1:5f:56:c6:03:1e:d3:ff:e8:a0:67:69:11:8f: b2:56:6c:8e:57:4d:8f:f8:6b:71:62:1d:08:2d:34: 46:51:99:59:a7:82:33:e0:84:d0:9b:52:0d:ca:85: 8e:ea:c6:0a:5e:51:d3:cf:e2:37:a7:4f:e1:1b:12: e5:b3:6f:fa:59:a6:22:5a:f9:20:aa:0c:82:49:7c: 41:78:37:e6:4a:6b:5a:4f:99:ea:2d:4c:2a:66:67: 83:d7:d3:6b:09:8b:6f:0c:94:ec:f7:2d:a1:b6:75: 63:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:29:D1:DE:CE:25:DA:2E:4C:81:00:DF:15:D2:B1:F3:9C:9E:BA:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl X509v3 Authority Key Identifier: keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer sbgp-ipAddrBlock: critical IPv4: 149.117.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:cb:f6:fd:cf:6f:7e:4b:ee:81:79:c1:b1:ed:61:7c:cf:7b: cb:c8:83:be:fc:c6:aa:25:6d:35:f5:c9:f1:4a:8b:8d:51:2b: bf:b0:fc:1f:6c:4b:7b:bb:ff:b7:b8:72:9a:47:93:15:ca:aa: 46:64:cb:21:e4:d9:f0:0c:8f:83:c0:f1:74:97:16:fd:4b:c8: d9:6b:29:a3:a1:63:f3:71:c5:72:ca:5e:2b:43:83:79:82:4a: 4e:30:86:ba:78:3e:54:cc:aa:ee:66:0e:ed:b0:4a:48:26:b5: e4:fe:bc:51:99:b0:bf:84:c6:cc:b1:e0:dc:92:e5:25:d9:47: be:c6:16:80:c6:74:81:47:ee:62:6d:a8:e2:4d:db:ea:8b:1c: a4:95:dc:f3:67:e5:ea:83:be:c6:0e:19:ac:a6:3e:64:57:e2: ff:2f:8c:70:cf:a7:9a:aa:42:a0:86:4f:a2:93:54:5e:3d:91: c1:e3:07:99:a7:57:7c:67:1c:c2:15:fb:69:c9:ca:5f:27:e2: 57:cc:41:e0:ee:df:68:0c:f7:6f:e9:9e:c9:b6:9f:fe:40:97: 59:28:67:01:f0:50:59:b5:b0:7d:e4:f6:4c:55:3a:1f:d9:9b: c7:e8:4b:2c:7a:58:28:67:75:70:0e:f9:cc:06:56:83:60:82: c6:90:c8:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/Ql6p6LKavOaW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5ZDY1MGUtMzA5ZC00NzcyLWExZWUtZWQ3NjJlMTQ3 NTgzMB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk YWFlMjI3ODEtMDA1ZS00NmRhLTg2YzQtNGUxN2E1NmI1OWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJEp5mb/8ALITnxosYHHlGTppvwK/EH3U0d+ E+VcL4QDR7qOqbcaf6F7+s7NtCC247Lj11u2hEd//N9Brhe5TwaYKvf6s1Gg+XFD 2OpLuzdfsL0nqMPjp8opO0e7CH01c2U62VQhfFA4xwfSWK8HjXaZqaCL2Nm9wnyJ 2Mal0YJjpvew0C8YKYWyeEulDzylOYvN59760V9WxgMe0//ooGdpEY+yVmyOV02P +GtxYh0ILTRGUZlZp4Iz4ITQm1INyoWO6sYKXlHTz+I3p0/hGxLls2/6WaYiWvkg qgyCSXxBeDfmSmtaT5nqLUwqZmeD19NrCYtvDJTs9y2htnVjEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAp0d7OJdouTIEA3xXSsfOcnrrQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hYTlk NjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2MmUxNDc1ODMvZmYwMDg0YzYtYjVjYS0z ZjMzLTlhMDAtMjNhN2ZmZWY4MzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWE5ZDY1MGUtMzA5ZC00NzcyLWEx ZWUtZWQ3NjJlMTQ3NTgzL2FhOWQ2NTBlLTMwOWQtNDc3Mi1hMWVlLWVkNzYyZTE0 NzU4My5jcmwwHwYDVR0jBBgwFoAUencCh/DNiFExaNpq4tD1clhOOqwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hYTlkNjUwZS0zMDlkLTQ3NzItYTFlZS1lZDc2 MmUxNDc1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3L9v3Pb35L7oF5wbHtYXzPe8vIg778xqolbTX1yfFKi41RK7+w/B9s S3u7/7e4cppHkxXKqkZkyyHk2fAMj4PA8XSXFv1LyNlrKaOhY/NxxXLKXitDg3mC Sk4whrp4PlTMqu5mDu2wSkgmteT+vFGZsL+Exsyx4NyS5SXZR77GFoDGdIFH7mJt qOJN2+qLHKSV3PNn5eqDvsYOGaymPmRX4v8vjHDPp5qqQqCGT6KTVF49kcHjB5mn V3xnHMIV+2nJyl8n4lfMQeDu32gM92/pnsm2n/5Al1koZwHwUFm1sH3k9kxVOh/Z m8foSyx6WChndXAO+cwGVoNggsaQyME= -----END CERTIFICATE-----Generated at Wed Nov 5 03:05:16 2025 by rpki-client