$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/64a58cd9-618f-36de-b1e1-3260b3f71931.roa File: 64a58cd9-618f-36de-b1e1-3260b3f71931.roa (raw, json) Hash identifier: GZsXVKSnHl4T1HptAxPiX9btKlKOiQeVYdYRV+WK64g= Subject key identifier: 44:9A:A6:21:41:89:96:8F:50:C4:88:1C:06:E7:E9:60:26:20:C8:86 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584BBCDAE56B40F42B677846EE80 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/64a58cd9-618f-36de-b1e1-3260b3f71931.roa Signing time: Mon 03 Nov 2025 14:00:38 +0000 ROA not before: Mon 03 Nov 2025 14:00:38 +0000 ROA not after: Sun 01 Feb 2026 14:00:38 +0000 asID: 36137 IP address blocks: 107.149.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bc:da:e5:6b:40:f4:2b:67:78:46:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Nov 3 14:00:38 2025 GMT Not After : Feb 1 14:00:38 2026 GMT Subject: CN=d96135b1-1f8d-4c13-ae30-5b166356b309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2e:58:63:af:c6:ae:d5:c5:79:78:1d:40:d3: 60:49:15:fc:22:fa:8d:3d:3a:71:2e:f5:4b:72:1f: bc:2c:d8:26:55:fc:f0:bf:c4:53:9b:f0:8b:4c:5b: 1d:38:4c:b4:bd:09:b7:51:67:84:ea:92:1f:3d:00: 9d:28:1b:5e:c0:a9:ef:c6:3c:5a:32:76:03:1a:36: 95:06:d1:cd:7f:94:b0:1c:c5:05:5b:55:96:07:8f: cd:0a:d8:61:01:34:2f:e6:a3:42:6f:0f:0b:fa:77: 37:07:2c:4c:48:ad:7a:c7:d6:74:6c:3d:71:68:55: 11:df:d4:dc:53:c8:da:ca:be:a6:23:3d:a9:bb:b7: c8:9f:9d:1d:a8:ba:5b:32:a5:f9:9f:6c:c9:9e:a1: 9f:77:cc:e2:b9:77:67:4c:09:ac:e7:2a:35:59:5f: 9d:23:a8:ca:05:fa:f3:c7:84:2d:04:68:d2:6e:c2: c8:fa:c0:d2:01:6f:18:08:78:bc:aa:68:30:91:f5: 14:1a:f4:e6:d9:86:08:01:eb:f3:86:d6:6e:a5:51: a7:83:10:a1:2c:bb:1e:9f:96:87:13:58:15:cc:ec: 59:09:ae:20:74:f8:14:16:c3:90:1b:55:a5:78:3d: cf:e6:c4:35:d1:36:71:52:7c:ec:6e:5a:c6:e7:30: 19:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9A:A6:21:41:89:96:8F:50:C4:88:1C:06:E7:E9:60:26:20:C8:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/64a58cd9-618f-36de-b1e1-3260b3f71931.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:8d:66:55:03:0f:7f:0e:4d:ff:db:8d:2a:cb:e9:41:57:88: 69:ec:da:2c:94:98:08:51:fd:9f:37:97:34:e3:a4:4a:e9:dd: 43:3f:22:e4:28:a4:e4:b2:02:81:98:55:a2:a5:f9:ab:6a:d8: db:7e:b9:44:ee:4c:7a:dd:ed:a3:16:73:1a:ec:d6:1d:72:04: 5d:d8:28:7f:d3:8b:09:a8:ca:d9:bc:fa:fa:1e:1c:75:94:96: 68:b9:e8:f8:56:06:47:27:d3:81:bb:7f:c4:c2:f5:5f:5f:b9: 97:4d:57:13:f6:c8:4a:0d:34:03:65:ba:40:2d:c6:53:e0:3b: 3b:c9:c3:e5:ef:0b:f4:c5:8f:4c:6c:86:0c:7e:bc:5f:67:ef: c8:0e:79:7e:af:d2:05:d9:f3:ea:15:20:b1:be:ec:e6:5f:12: f4:04:16:b2:1e:7b:aa:71:b9:9e:58:a6:4a:0d:fc:47:cc:b2: 30:4a:85:a8:28:87:3d:b3:3d:2d:34:b7:ad:78:2b:38:21:46: 71:0e:bb:02:4a:fc:df:d6:62:58:bf:54:52:ab:f3:5d:5a:ea: 92:ff:50:79:98:7c:70:5f:ec:e4:7f:d0:39:05:e9:59:20:3a: f3:8a:ba:f6:8f:56:c9:b1:d4:92:72:ec:e9:43:07:78:ec:1f: ac:d0:33:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu82uVrQPQrZ3hG7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MTEwMzE0MDAzOFoXDTI2MDIwMTE0MDAzOFowLzEtMCsGA1UEAxMk ZDk2MTM1YjEtMWY4ZC00YzEzLWFlMzAtNWIxNjYzNTZiMzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky5YY6/GrtXFeXgdQNNgSRX8IvqNPTpxLvVL ch+8LNgmVfzwv8RTm/CLTFsdOEy0vQm3UWeE6pIfPQCdKBtewKnvxjxaMnYDGjaV BtHNf5SwHMUFW1WWB4/NCthhATQv5qNCbw8L+nc3ByxMSK16x9Z0bD1xaFUR39Tc U8jayr6mIz2pu7fIn50dqLpbMqX5n2zJnqGfd8ziuXdnTAms5yo1WV+dI6jKBfrz x4QtBGjSbsLI+sDSAW8YCHi8qmgwkfUUGvTm2YYIAevzhtZupVGngxChLLsen5aH E1gVzOxZCa4gdPgUFsOQG1WleD3P5sQ10TZxUnzsblrG5zAZgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESapiFBiZaPUMSIHAbn6WAmIMiGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNjRhNThjZDktNjE4Zi0z NmRlLWIxZTEtMzI2MGIzZjcxOTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5W4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSNZlUDD38OTf/bjSrL6UFXiGns2iyUmAhR/Z83lzTjpErp3UM/IuQo pOSyAoGYVaKl+atq2Nt+uUTuTHrd7aMWcxrs1h1yBF3YKH/Tiwmoytm8+voeHHWU lmi56PhWBkcn04G7f8TC9V9fuZdNVxP2yEoNNANlukAtxlPgOzvJw+XvC/TFj0xs hgx+vF9n78gOeX6v0gXZ8+oVILG+7OZfEvQEFrIee6pxuZ5YpkoN/EfMsjBKhago hz2zPS00t614KzghRnEOuwJK/N/WYli/VFKr811a6pL/UHmYfHBf7OR/0DkF6Vkg OvOKuvaPVsmx1JJy7OlDB3jsH6zQMxE= -----END CERTIFICATE-----Generated at Wed Nov 5 04:36:01 2025 by rpki-client