$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5ce0da98-436b-3b66-92c2-df3f2a26b0fa.roa File: 5ce0da98-436b-3b66-92c2-df3f2a26b0fa.roa (raw, json) Hash identifier: 617bCfzVNHwInxjMPLNksGhrtjLcRKLj/cesTsCpAh4= Subject key identifier: 90:9B:D5:43:44:0D:CF:31:3A:C8:81:E8:E6:D5:F3:6B:FD:A1:1F:65 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584F20E2C4392DC8ADC01FD1F4C0 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5ce0da98-436b-3b66-92c2-df3f2a26b0fa.roa Signing time: Thu 10 Sep 2026 12:18:13 +0000 ROA not before: Thu 10 Sep 2026 12:18:13 +0000 ROA not after: Wed 09 Dec 2026 13:18:13 +0000 asID: 25198 IP address blocks: 107.149.36.0/24 maxlen: 24 108.186.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:e2:c4:39:2d:c8:ad:c0:1f:d1:f4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Sep 10 12:18:13 2026 GMT Not After : Dec 9 13:18:13 2026 GMT Subject: CN=0be755df-1b29-4168-a02b-7bec6a2dcb06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:84:46:a0:24:37:47:07:0d:ad:9a:73:76:c6: 75:81:7b:4d:9b:dc:b5:fa:c2:1b:7a:d8:f7:54:cd: 8b:b9:50:b8:7b:84:cd:3f:d2:19:03:f1:ce:d5:de: e7:03:09:af:d3:a5:b4:04:15:3f:1d:a3:a1:db:08: 47:b5:22:3c:64:fa:5a:2e:97:cd:64:d3:d6:7a:e6: 0d:f0:dd:1f:33:a5:54:e7:db:99:8d:23:e6:81:ee: 71:63:f2:0b:04:34:7f:23:6e:44:1b:2c:f0:2f:b7: ec:4e:4b:6a:57:d5:cf:4b:86:50:16:ce:d1:aa:99: 6d:cc:47:a9:5c:50:8a:f8:28:e4:5d:9b:40:02:68: f0:92:e2:d8:e2:2e:08:32:0a:68:f0:3d:b8:1d:05: ac:fe:8f:c4:05:f4:1d:e4:b3:d3:6d:62:4d:33:ae: 52:14:da:8e:50:e5:e2:66:d2:7b:ff:86:48:9e:bb: ce:68:64:55:db:ca:0f:63:53:dd:0e:61:bf:e3:e3: 6a:92:29:23:54:f0:4a:7e:d1:4c:9e:96:b0:d9:91: cd:20:6e:04:38:9a:ad:25:ba:50:27:9d:6f:34:be: c2:45:c4:97:1f:fb:66:13:b2:34:1b:a4:6f:27:aa: d9:67:9d:10:cd:23:1a:d5:28:5d:e8:48:9a:8b:2e: b4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9B:D5:43:44:0D:CF:31:3A:C8:81:E8:E6:D5:F3:6B:FD:A1:1F:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5ce0da98-436b-3b66-92c2-df3f2a26b0fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.36.0/24 108.186.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d1:5b:76:4c:ab:9b:79:22:3d:f1:eb:72:9b:6f:3f:f9:04: 6c:67:82:e9:9d:db:92:fb:84:59:24:af:a6:b9:70:8c:a9:ab: 86:bf:5f:55:6f:86:c2:64:be:27:6a:55:07:df:27:53:b6:df: de:6c:f2:9e:29:0a:80:0c:27:b2:63:6e:3b:76:cb:d9:b5:2f: 8f:b5:f2:38:de:87:07:84:0f:7d:62:5c:74:01:9c:ad:bd:8e: ff:83:da:f0:81:b9:f0:8c:24:71:cd:e6:bc:ef:4f:06:79:90: 86:8f:5e:6f:3b:79:b3:1b:c9:65:20:7a:70:f1:6d:93:23:6a: ae:ed:09:bf:9d:de:4e:58:e0:f4:7f:9c:e1:6a:62:98:72:46: f9:e4:a8:ee:f7:7a:34:03:14:2e:a2:9e:65:bd:ac:41:e2:d5: 22:90:b3:6d:b5:56:99:60:c8:f5:fa:94:54:b5:c3:b3:0e:73: 2a:fa:25:08:65:ed:8f:8c:ae:ef:96:5a:a3:39:fc:47:9b:79: af:7a:fc:1d:cf:0a:03:33:22:7a:71:60:17:00:a2:31:0b:07: 2d:0f:42:f8:2b:14:0f:d3:03:3c:a6:f8:1b:40:8e:fb:4c:38: cd:c2:d5:b1:25:40:1a:bd:a8:e8:25:ce:c5:3c:73:67:65:45: fa:e7:21:d8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8g4sQ5LcitwB/R9MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDkxMDEyMTgxM1oXDTI2MTIwOTEzMTgxM1owLzEtMCsGA1UEAxMk MGJlNzU1ZGYtMWIyOS00MTY4LWEwMmItN2JlYzZhMmRjYjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44RGoCQ3RwcNrZpzdsZ1gXtNm9y1+sIbetj3 VM2LuVC4e4TNP9IZA/HO1d7nAwmv06W0BBU/HaOh2whHtSI8ZPpaLpfNZNPWeuYN 8N0fM6VU59uZjSPmge5xY/ILBDR/I25EGyzwL7fsTktqV9XPS4ZQFs7RqpltzEep XFCK+CjkXZtAAmjwkuLY4i4IMgpo8D24HQWs/o/EBfQd5LPTbWJNM65SFNqOUOXi ZtJ7/4ZInrvOaGRV28oPY1PdDmG/4+NqkikjVPBKftFMnpaw2ZHNIG4EOJqtJbpQ J51vNL7CRcSXH/tmE7I0G6RvJ6rZZ50QzSMa1Shd6Eiaiy60JQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJCb1UNEDc8xOsiB6ObV82v9oR9lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNWNlMGRhOTgtNDM2Yi0z YjY2LTkyYzItZGYzZjJhMjZiMGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAa5UkAwQA bLrIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAELRW3ZMq5t5Ij3x63Kbbz/5BGxngumd25L7hFkkr6a5cIyp q4a/X1VvhsJkvidqVQffJ1O2395s8p4pCoAMJ7Jjbjt2y9m1L4+18jjehweED31i XHQBnK29jv+D2vCBufCMJHHN5rzvTwZ5kIaPXm87ebMbyWUgenDxbZMjaq7tCb+d 3k5Y4PR/nOFqYphyRvnkqO73ejQDFC6inmW9rEHi1SKQs221VplgyPX6lFS1w7MO cyr6JQhl7Y+Mru+WWqM5/Eebea96/B3PCgMzInpxYBcAojELBy0PQvgrFA/TAzym +BtAjvtMOM3C1bElQBq9qOglzsU8c2dlRfrnIdg= -----END CERTIFICATE-----Generated at Mon Sep 21 19:15:49 2026 by rpki-client