$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3905e242-41f7-346c-95b8-b9f9059f425b.roa File: 3905e242-41f7-346c-95b8-b9f9059f425b.roa (raw, json) Hash identifier: 88GoAQTGx56KUvg8P2fDYRjmQ77Xoa8UCpmEKfOTNbM= Subject key identifier: E7:61:29:51:F0:B5:36:C4:D1:13:07:E8:22:8A:5C:7A:00:7E:CD:C3 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584EA79019A628D1156DACF90240 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3905e242-41f7-346c-95b8-b9f9059f425b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 398823 IP address blocks: 107.148.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:19:a6:28:d1:15:6d:ac:f9:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1d463b20-e3c9-49e0-9045-45fa003d1589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:35:22:7d:62:e5:a3:e7:dd:63:40:f4:2d:7e: ad:96:c9:07:ae:5f:81:ce:46:cb:76:64:8d:9b:b3: 70:dd:2b:4d:f0:49:c3:8f:6f:cf:75:4e:8d:e7:1c: 95:a3:5a:a4:6c:56:32:62:d4:37:7d:78:1d:62:61: ca:7e:c3:4b:66:6f:8a:f1:cd:34:e0:11:aa:5f:fe: f4:c5:75:85:d6:23:14:f7:ba:23:99:88:4a:9d:0f: 9b:e6:95:f6:71:8a:69:8f:0d:ce:fb:07:d3:58:0c: ae:9b:42:38:08:34:4e:2f:3c:39:20:1d:b9:e4:4d: 6c:06:38:ea:e9:ba:0f:c2:c8:e1:cf:3b:bf:d0:be: 01:8b:29:59:db:55:97:c0:89:61:d1:70:76:a0:a5: 62:7b:85:c9:44:0c:ef:59:47:0e:05:e1:ba:14:ab: cc:73:86:98:21:7d:e0:66:bd:73:e8:36:ff:95:63: bb:28:5d:d8:4a:52:04:31:0b:1a:84:e6:51:de:c5: de:d5:36:7f:e5:0e:0b:99:b2:02:d6:a7:87:f5:f1: 9f:2b:48:ff:d9:ae:b0:74:c3:f0:a7:9b:9c:e2:08: 88:2b:d3:26:dd:7e:07:d8:e9:d2:40:df:ac:e9:d4: 93:ae:23:07:7c:83:0b:bb:7f:af:c6:09:a9:72:72: 40:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:61:29:51:F0:B5:36:C4:D1:13:07:E8:22:8A:5C:7A:00:7E:CD:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3905e242-41f7-346c-95b8-b9f9059f425b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:93:ad:6c:aa:b1:da:fe:be:0d:bd:ba:b8:c2:14:3b:e4:b8: 43:83:5e:92:4e:97:03:a1:4e:1d:3a:1b:84:17:df:e1:59:5f: 9d:a9:08:e3:63:0d:58:8e:43:c8:2e:f2:3c:ec:31:9d:07:d1: b0:5f:09:6a:ce:23:85:8a:66:7b:80:c0:1b:e1:d8:a6:5a:a4: f0:bb:9e:14:2e:a8:1f:fa:16:e8:eb:90:43:22:f1:ea:33:06: 84:10:ed:b1:80:33:67:0f:44:dc:8e:17:b2:96:f7:ce:2a:6e: 17:6e:00:70:c3:6e:e4:67:e1:9b:f0:5e:8c:be:54:2c:7b:a1: ee:a4:50:01:c1:de:da:04:c6:b2:17:a1:37:26:dd:1d:4f:60: 27:9b:ad:26:59:99:19:cf:b1:a1:ae:7e:c1:27:01:4e:d0:51: c8:2b:93:8d:46:e6:b2:bd:0b:1a:d6:5d:32:29:bb:d1:de:43: d6:bd:0f:fc:51:fb:30:db:58:03:bc:61:17:08:0d:ce:d4:35: 35:5d:6e:85:47:86:56:f5:1d:5a:8f:47:68:aa:10:aa:36:cc: e9:53:9d:45:5d:68:70:51:9e:92:46:50:34:9c:e5:22:ae:66: 95:e9:ac:f9:51:1b:c8:32:42:eb:00:69:22:c1:55:2d:b8:39: db:df:07:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkBmmKNEVbaz5AkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWQ0NjNiMjAtZTNjOS00OWUwLTkwNDUtNDVmYTAwM2QxNTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDUifWLlo+fdY0D0LX6tlskHrl+BzkbLdmSN m7Nw3StN8EnDj2/PdU6N5xyVo1qkbFYyYtQ3fXgdYmHKfsNLZm+K8c004BGqX/70 xXWF1iMU97ojmYhKnQ+b5pX2cYppjw3O+wfTWAyum0I4CDROLzw5IB255E1sBjjq 6boPwsjhzzu/0L4BiylZ21WXwIlh0XB2oKVie4XJRAzvWUcOBeG6FKvMc4aYIX3g Zr1z6Db/lWO7KF3YSlIEMQsahOZR3sXe1TZ/5Q4LmbIC1qeH9fGfK0j/2a6wdMPw p5uc4giIK9Mm3X4H2OnSQN+s6dSTriMHfIMLu3+vxgmpcnJAAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdhKVHwtTbE0RMH6CKKXHoAfs3DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMzkwNWUyNDItNDFmNy0z NDZjLTk1YjgtYjlmOTA1OWY0MjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5RWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2TrWyqsdr+vg29urjCFDvkuEODXpJOlwOhTh06G4QX3+FZX52pCONj DViOQ8gu8jzsMZ0H0bBfCWrOI4WKZnuAwBvh2KZapPC7nhQuqB/6FujrkEMi8eoz BoQQ7bGAM2cPRNyOF7KW984qbhduAHDDbuRn4ZvwXoy+VCx7oe6kUAHB3toExrIX oTcm3R1PYCebrSZZmRnPsaGufsEnAU7QUcgrk41G5rK9CxrWXTIpu9HeQ9a9D/xR +zDbWAO8YRcIDc7UNTVdboVHhlb1HVqPR2iqEKo2zOlTnUVdaHBRnpJGUDSc5SKu ZpXprPlRG8gyQusAaSLBVS24OdvfBwI= -----END CERTIFICATE-----Generated at Wed Jul 29 11:24:43 2026 by rpki-client