$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0a42edbc-40bf-3af9-9a7d-46261c33a241.roa File: 0a42edbc-40bf-3af9-9a7d-46261c33a241.roa (raw, json) Hash identifier: UKQJBFXz646pASOYVgD/+ZcGcyV5IwO0PZZ/hwlMq4M= Subject key identifier: 19:52:2A:E6:0E:DE:E9:D3:A2:07:3F:4E:F7:02:49:C4:B9:FF:33:67 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584EA7901B10D4B880F8D204E780 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0a42edbc-40bf-3af9-9a7d-46261c33a241.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 398823 IP address blocks: 107.149.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:1b:10:d4:b8:80:f8:d2:04:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=839841cd-5c1e-4bdd-91a9-8ceae7bc097d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:98:1e:a3:bd:07:5c:7d:57:30:14:91:8a:68: 51:70:5b:88:bf:a8:a5:2f:f7:ee:84:31:58:a0:1d: 6c:b2:d4:55:9d:e4:b1:3a:aa:62:1b:02:7b:1a:82: 98:7d:b8:fa:bf:65:85:ed:9d:cf:57:ef:9f:68:6e: dc:e3:bf:ae:e7:d5:73:78:da:e7:19:27:f7:37:78: 2b:f0:65:e4:cf:8e:d6:61:5e:4d:04:09:1d:3b:a4: 22:7b:72:24:21:a1:9c:96:8d:70:10:72:06:fe:01: e6:d4:13:68:08:a9:5c:56:27:60:02:f2:e7:4c:5f: 97:b6:63:d9:1c:27:3f:7e:13:bf:15:fb:03:02:ee: 0f:28:5f:d2:27:6e:5d:f3:3f:24:a4:85:31:72:ed: fa:66:f7:b0:85:08:c2:ad:ac:8d:93:78:34:d5:28: 50:ea:61:a3:47:db:39:d5:a9:b0:b3:d2:bd:3b:23: 93:02:80:a2:8a:1d:39:cf:7e:73:f8:63:a6:77:83: 9a:dd:fa:a9:80:15:7f:3e:12:d0:67:7e:eb:b7:8a: 01:fa:fd:a2:ef:f1:3b:93:06:5d:08:ae:1e:e9:13: 88:7d:26:20:80:fe:0a:3d:19:15:0a:b7:24:01:fb: b7:aa:57:bd:e1:55:2e:a1:e3:2a:8a:74:62:b1:a1: 9b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:52:2A:E6:0E:DE:E9:D3:A2:07:3F:4E:F7:02:49:C4:B9:FF:33:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0a42edbc-40bf-3af9-9a7d-46261c33a241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:e1:51:2a:81:e1:f5:09:c1:c6:8a:6f:04:6f:3d:bf:71:b5: 16:d8:00:62:fc:9e:6f:76:44:7c:84:09:a5:d5:50:60:a0:76: 06:75:a2:83:94:cc:20:dc:c2:0d:29:2d:b7:54:2a:24:07:f1: b3:72:0d:ea:5b:0c:c0:84:e2:5f:60:16:e0:25:5d:cc:17:f5: b4:5c:b8:68:f4:1a:a0:d5:fa:4b:3e:69:7d:30:9f:d4:d2:5f: 48:c6:89:53:84:e5:1d:19:15:0c:fe:8a:9d:f3:1b:55:1a:88: 51:b8:c7:63:be:ca:db:02:77:ca:5d:00:81:4f:4a:5e:c3:8b: 4e:e5:e0:45:6f:b5:67:a3:ae:37:78:e4:1e:35:14:45:47:76: 0d:12:c3:16:30:9a:c8:7b:90:87:4f:4c:df:4e:85:bc:ea:e8: 75:3b:60:89:8c:c6:a2:f5:8e:a0:7e:5d:52:36:0b:e0:3b:57: c1:fb:41:a0:03:6d:5c:90:41:7c:8f:3d:73:f1:05:60:b3:35: 59:6a:0b:0d:1b:d6:a9:d4:ad:57:1c:d0:1e:2c:cd:0c:9b:1d: f4:73:12:cb:2d:0e:83:1a:e4:64:0d:dc:ed:9d:85:6c:1f:0b: 86:74:c7:a8:f5:b5:35:60:d4:6e:77:20:b1:73:6b:b5:7d:4d: 8d:c2:d8:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkBsQ1LiA+NIE54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODM5ODQxY2QtNWMxZS00YmRkLTkxYTktOGNlYWU3YmMwOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZgeo70HXH1XMBSRimhRcFuIv6ilL/fuhDFY oB1sstRVneSxOqpiGwJ7GoKYfbj6v2WF7Z3PV++faG7c47+u59VzeNrnGSf3N3gr 8GXkz47WYV5NBAkdO6Qie3IkIaGclo1wEHIG/gHm1BNoCKlcVidgAvLnTF+XtmPZ HCc/fhO/FfsDAu4PKF/SJ25d8z8kpIUxcu36ZvewhQjCrayNk3g01ShQ6mGjR9s5 1amws9K9OyOTAoCiih05z35z+GOmd4Oa3fqpgBV/PhLQZ37rt4oB+v2i7/E7kwZd CK4e6ROIfSYggP4KPRkVCrckAfu3qle94VUuoeMqinRisaGbeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlSKuYO3unTogc/TvcCScS5/zNnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMGE0MmVkYmMtNDBiZi0z YWY5LTlhN2QtNDYyNjFjMzNhMjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5XGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzhUSqB4fUJwcaKbwRvPb9xtRbYAGL8nm92RHyECaXVUGCgdgZ1ooOU zCDcwg0pLbdUKiQH8bNyDepbDMCE4l9gFuAlXcwX9bRcuGj0GqDV+ks+aX0wn9TS X0jGiVOE5R0ZFQz+ip3zG1UaiFG4x2O+ytsCd8pdAIFPSl7Di07l4EVvtWejrjd4 5B41FEVHdg0SwxYwmsh7kIdPTN9Ohbzq6HU7YImMxqL1jqB+XVI2C+A7V8H7QaAD bVyQQXyPPXPxBWCzNVlqCw0b1qnUrVcc0B4szQybHfRzEsstDoMa5GQN3O2dhWwf C4Z0x6j1tTVg1G53ILFza7V9TY3C2G0= -----END CERTIFICATE-----Generated at Wed Jul 29 06:49:41 2026 by rpki-client