$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5cf1f111-e41d-37e8-898c-61939fe4a9bd.roa File: 5cf1f111-e41d-37e8-898c-61939fe4a9bd.roa (raw, json) Hash identifier: nyreV8nqCm46sDfO20g0Tg1kRMK+etOJdK1EYBjUFfQ= Subject key identifier: F1:DD:E0:C3:63:65:7D:C8:9F:0A:8A:FA:B1:4B:9C:7F:C1:FB:E6:36 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584D7A052CD5DD4534D700B1E360 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5cf1f111-e41d-37e8-898c-61939fe4a9bd.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 398823 IP address blocks: 107.148.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:2c:d5:dd:45:34:d7:00:b1:e3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=6ed67e7a-ba38-4358-ad4e-b01369b79478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:01:21:53:56:c3:10:88:98:7c:de:01:4e:d1: 0c:80:28:7f:8f:97:66:80:9f:f5:84:06:3a:b1:39: 8e:54:79:f4:17:dc:6a:83:ce:b4:9a:ac:3f:37:cc: 90:c5:24:5c:90:f1:8c:a0:90:bd:98:6c:7e:fa:40: 9f:34:c2:95:99:32:4f:db:5f:73:a8:ce:c8:14:31: 5e:70:0c:dd:0a:cd:da:f5:a5:70:5b:b4:53:a2:3f: 34:1b:8d:39:87:c4:4f:1b:92:72:97:50:37:20:5a: 96:b6:d4:d7:39:5e:4a:e9:9e:7b:f7:e4:74:6a:57: e0:a2:6c:e3:ab:85:8b:94:ce:6a:36:ec:69:4c:30: 70:4c:bc:0c:ec:7e:b8:7a:e5:fb:e6:20:32:1c:d5: 5d:1b:75:1b:8c:9b:2f:a9:96:cc:03:3b:da:90:24: 58:33:b8:30:ef:0d:3d:69:f4:c7:c6:87:c9:d2:21: b9:b9:3c:69:1f:ab:7d:c9:75:20:9b:2d:9f:09:5e: b3:54:08:f0:18:20:e1:00:3a:a8:6a:9c:6b:89:e9: 9b:34:21:d1:1b:2a:6a:63:3f:fc:08:5b:5a:6f:d5: 7b:d9:1e:dc:de:a2:d1:d3:23:c5:99:f7:eb:ca:ac: 1c:95:d3:8f:5f:9b:53:7d:0e:e2:e3:d5:e1:71:49: a6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:DD:E0:C3:63:65:7D:C8:9F:0A:8A:FA:B1:4B:9C:7F:C1:FB:E6:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5cf1f111-e41d-37e8-898c-61939fe4a9bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.134.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:08:a9:3d:35:e0:1b:21:05:2a:1c:e7:74:0f:c0:8d:3a:a5: 96:a5:c2:41:ba:95:4c:e6:3a:a9:cf:69:cc:2d:e5:54:e2:a4: 7f:78:e9:d1:81:06:76:38:c5:2b:a9:ce:a3:9f:26:a8:00:5b: 96:87:ec:67:79:a3:fd:c2:14:8e:45:67:7b:02:1d:9f:a9:85: a5:d1:f9:86:7b:7e:20:47:57:3c:78:0e:39:4e:62:fc:2e:26: 39:37:69:85:e0:8c:0b:fd:0d:a3:e3:b9:0f:5d:70:76:24:59: 95:e0:15:3f:aa:fd:b9:68:98:2a:cd:b8:2c:8e:ad:d9:c6:2a: 94:f2:9e:39:c5:73:aa:e4:04:ce:87:4e:15:c6:ad:dc:3b:9e: 5b:25:b8:ee:72:5d:16:70:65:f6:b0:eb:ec:2b:f0:5e:e9:89: 2f:bc:8d:2c:d8:83:c6:d2:c3:49:ef:a1:13:0f:0f:12:0b:5c: 70:b9:80:eb:66:c9:66:5f:2b:7c:4d:b8:6a:77:c8:f4:de:4c: 7d:fe:0a:0b:8b:80:25:d9:4e:ca:5b:c4:76:85:cd:6b:d4:65: ce:f3:15:06:c4:21:ba:94:da:48:b4:a8:43:ac:5d:93:62:b7: 10:b8:3a:6b:38:e3:a6:c0:d8:9e:7b:34:b3:64:0c:92:8c:7b: 2b:40:3f:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BSzV3UU01wCx42AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk NmVkNjdlN2EtYmEzOC00MzU4LWFkNGUtYjAxMzY5Yjc5NDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAEhU1bDEIiYfN4BTtEMgCh/j5dmgJ/1hAY6 sTmOVHn0F9xqg860mqw/N8yQxSRckPGMoJC9mGx++kCfNMKVmTJP219zqM7IFDFe cAzdCs3a9aVwW7RToj80G405h8RPG5Jyl1A3IFqWttTXOV5K6Z579+R0alfgomzj q4WLlM5qNuxpTDBwTLwM7H64euX75iAyHNVdG3UbjJsvqZbMAzvakCRYM7gw7w09 afTHxofJ0iG5uTxpH6t9yXUgmy2fCV6zVAjwGCDhADqoapxriembNCHRGypqYz/8 CFtab9V72R7c3qLR0yPFmffryqwcldOPX5tTfQ7i49XhcUmmTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHd4MNjZX3InwqK+rFLnH/B++Y2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNWNmMWYxMTEtZTQxZC0z N2U4LTg5OGMtNjE5MzlmZTRhOWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5SGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIIqT014BshBSoc53QPwI06pZalwkG6lUzmOqnPacwt5VTipH946dGB BnY4xSupzqOfJqgAW5aH7Gd5o/3CFI5FZ3sCHZ+phaXR+YZ7fiBHVzx4DjlOYvwu Jjk3aYXgjAv9DaPjuQ9dcHYkWZXgFT+q/blomCrNuCyOrdnGKpTynjnFc6rkBM6H ThXGrdw7nlsluO5yXRZwZfaw6+wr8F7piS+8jSzYg8bSw0nvoRMPDxILXHC5gOtm yWZfK3xNuGp3yPTeTH3+CguLgCXZTspbxHaFzWvUZc7zFQbEIbqU2ki0qEOsXZNi txC4Oms446bA2J57NLNkDJKMeytAP1c= -----END CERTIFICATE-----Generated at Fri Apr 17 18:37:05 2026 by rpki-client