$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/617776a5-4f1d-3bee-83f6-82761a838b43.roa File: 617776a5-4f1d-3bee-83f6-82761a838b43.roa (raw, json) Hash identifier: dRl7c126qPrO3LNA74h7SU4ZNj1K1R+omEwAepkWyQM= Subject key identifier: 91:2B:10:C9:B0:B0:26:82:EA:91:11:62:09:87:42:86:AF:FC:F9:E5 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584EA2DFB53E14D1B3D45895A380 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/617776a5-4f1d-3bee-83f6-82761a838b43.roa Signing time: Mon 27 Jul 2026 09:00:12 +0000 ROA not before: Mon 27 Jul 2026 09:00:12 +0000 ROA not after: Sun 25 Oct 2026 09:00:12 +0000 asID: 14618 IP address blocks: 108.186.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a2:df:b5:3e:14:d1:b3:d4:58:95:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jul 27 09:00:12 2026 GMT Not After : Oct 25 09:00:12 2026 GMT Subject: CN=c02b7116-da2e-40f7-b50c-c713e28098da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:62:d7:6b:f7:79:86:7a:c5:c9:90:d2:e1:4a: 15:08:c0:c0:65:aa:ae:55:35:a4:89:23:73:39:23: e6:22:0d:fd:6a:b3:fe:50:05:38:a1:b3:41:06:b9: cd:8a:59:a2:4a:e3:3c:e1:ec:90:0f:58:98:44:b0: f5:05:8d:51:51:03:36:81:3c:cb:27:e3:45:c6:9e: 18:07:69:08:73:eb:12:5d:05:2c:32:62:ab:d6:a1: dd:6a:21:68:dc:00:a8:fc:8f:02:06:1a:71:51:39: 67:32:d6:e6:2f:25:36:00:e7:ab:f8:c7:fb:ad:e7: dd:62:34:51:33:17:d2:05:a5:3a:d4:1e:4b:f3:69: ab:cd:30:4f:e4:c7:bb:cf:7c:00:b6:ca:f8:1c:74: 7b:fb:a1:a8:de:c8:2f:e4:34:9d:75:33:ec:f3:2d: be:78:40:2d:7f:8e:cd:6b:32:01:c7:82:0e:64:f7: 61:9f:8d:70:85:44:09:83:8d:d0:6f:8d:d6:b4:0a: 8a:9f:52:be:e8:ff:77:e9:ad:c3:5c:a3:90:fe:15: d5:07:a1:9f:51:db:9c:8c:09:15:f6:89:79:53:dc: 9e:31:4d:57:4a:fa:b8:68:61:64:e0:f2:15:e7:b0: bb:fe:94:a9:5e:76:bd:23:b8:4b:a2:7c:bf:57:40: 62:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2B:10:C9:B0:B0:26:82:EA:91:11:62:09:87:42:86:AF:FC:F9:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/617776a5-4f1d-3bee-83f6-82761a838b43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 108.186.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c6:87:18:8c:fe:b5:59:22:3f:21:da:c2:e3:34:44:a3:37: c0:80:e1:88:7e:7b:1d:06:c2:bb:01:82:d7:db:0b:e7:f3:ec: 84:84:bc:da:ad:5e:2b:98:86:6a:49:40:97:c9:ac:ea:43:4b: 15:25:d3:1c:17:fb:5c:2a:f0:36:60:a1:72:63:bb:e8:04:4a: 29:25:5e:0e:a7:35:94:71:d0:1f:bf:74:56:60:48:e2:20:3f: cb:c7:9d:00:1f:83:52:8e:6d:3e:59:41:6c:f1:8a:d5:ff:2d: 10:bb:1c:c9:a2:bf:9d:a7:08:89:e5:fc:14:e6:a1:d0:56:89: 1d:fb:0c:4a:c8:93:96:db:2a:cf:91:16:35:68:f2:db:ed:2d: e4:fd:8a:c3:78:fa:f0:74:b7:82:21:13:76:b5:ae:2e:f7:18: e1:39:e3:d4:7f:8b:0b:4d:a5:13:39:c0:a1:5b:c6:73:23:93: e3:97:d6:8d:05:e6:ac:0b:ee:a4:43:12:e0:9c:aa:7f:7a:18: a5:59:37:0e:73:77:be:6a:99:63:fe:d5:d0:17:18:77:9a:f9: 4a:84:e4:42:42:94:a7:6e:47:41:d3:33:ba:a7:b0:8b:4b:2e: 39:34:e7:08:a3:b0:1d:64:b7:ef:e7:cc:b5:16:16:5b:af:ba: 07:6f:1e:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6i37U+FNGz1FiVo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDcyNzA5MDAxMloXDTI2MTAyNTA5MDAxMlowLzEtMCsGA1UEAxMk YzAyYjcxMTYtZGEyZS00MGY3LWI1MGMtYzcxM2UyODA5OGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2LXa/d5hnrFyZDS4UoVCMDAZaquVTWkiSNz OSPmIg39arP+UAU4obNBBrnNilmiSuM84eyQD1iYRLD1BY1RUQM2gTzLJ+NFxp4Y B2kIc+sSXQUsMmKr1qHdaiFo3ACo/I8CBhpxUTlnMtbmLyU2AOer+Mf7refdYjRR MxfSBaU61B5L82mrzTBP5Me7z3wAtsr4HHR7+6Go3sgv5DSddTPs8y2+eEAtf47N azIBx4IOZPdhn41whUQJg43Qb43WtAqKn1K+6P936a3DXKOQ/hXVB6GfUducjAkV 9ol5U9yeMU1XSvq4aGFk4PIV57C7/pSpXna9I7hLony/V0Bi5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJErEMmwsCaC6pERYgmHQoav/PnlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNjE3Nzc2YTUtNGYxZC0z YmVlLTgzZjYtODI3NjFhODM4YjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLr/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTGhxiM/rVZIj8h2sLjNESjN8CA4Yh+ex0GwrsBgtfbC+fz7ISEvNqt XiuYhmpJQJfJrOpDSxUl0xwX+1wq8DZgoXJju+gESiklXg6nNZRx0B+/dFZgSOIg P8vHnQAfg1KObT5ZQWzxitX/LRC7HMmiv52nCInl/BTmodBWiR37DErIk5bbKs+R FjVo8tvtLeT9isN4+vB0t4IhE3a1ri73GOE549R/iwtNpRM5wKFbxnMjk+OX1o0F 5qwL7qRDEuCcqn96GKVZNw5zd75qmWP+1dAXGHea+UqE5EJClKduR0HTM7qnsItL Ljk05wijsB1kt+/nzLUWFluvugdvHnA= -----END CERTIFICATE-----Generated at Tue Jul 28 21:45:26 2026 by rpki-client