$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6ac87821-b301-373a-b50d-9f4aea8bd5a8.roa File: 6ac87821-b301-373a-b50d-9f4aea8bd5a8.roa (raw, json) Hash identifier: be2ucHJ9rVyddttEeY7Z+g6J0aIuCHVNDFbrN+DkeaI= Subject key identifier: 89:C0:19:81:78:FF:F0:EC:0B:86:B2:2D:A9:7C:15:1B:D6:8F:23:18 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584AA42B8E4C94CD37DF6DFD7600 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6ac87821-b301-373a-b50d-9f4aea8bd5a8.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 398823 IP address blocks: 107.149.232.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:8e:4c:94:cd:37:df:6d:fd:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=5ad3fcd5-410f-4390-90eb-7c50a30abbfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:23:50:36:ff:b5:b5:bc:e7:0e:01:62:fd:fa: d9:7e:21:2a:11:1c:17:05:48:f3:8c:fe:16:0e:d6: fc:d3:c5:27:8d:45:d7:57:80:7c:8b:bb:3a:22:f7: 67:6d:45:db:be:10:2f:dd:97:3d:0f:0d:d1:96:9c: f8:29:1a:49:ed:3d:78:3e:e8:5f:a5:5a:23:01:6e: d8:53:93:62:6d:74:dc:f4:79:3f:3f:c0:dd:2d:f5: 94:26:3b:eb:3d:40:21:ee:d2:19:f5:6f:98:80:ff: ba:78:f9:5e:33:9b:7b:30:dc:bc:12:df:a5:80:7c: 2f:9b:4e:73:eb:ee:19:4e:75:d8:24:11:51:a2:c2: 11:e1:f8:60:cf:46:e2:f1:cf:48:cc:3e:8f:3c:92: e5:55:97:00:f1:50:cd:7e:16:7e:ae:b5:37:3e:43: 10:08:81:ee:68:25:41:ee:40:50:57:cf:f2:f2:1f: 68:ec:1d:56:fa:f8:a8:98:77:2b:e5:c3:f3:17:96: 0b:b3:2a:db:29:fe:63:59:10:6b:60:a7:6a:b4:ec: 31:55:ba:f2:0b:2e:7d:3a:3c:13:fb:35:bc:5a:8b: 2c:98:ae:5e:95:c5:d4:2f:e5:1c:69:85:00:b3:f3: ee:29:62:77:63:5b:8b:77:dd:18:a6:c3:fd:f1:2f: 49:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C0:19:81:78:FF:F0:EC:0B:86:B2:2D:A9:7C:15:1B:D6:8F:23:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6ac87821-b301-373a-b50d-9f4aea8bd5a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:93:c2:c4:ba:8d:20:05:b1:a0:4b:52:dc:9e:6e:86:ed:a2: 75:b3:19:3a:0b:10:6f:c3:9e:04:20:54:53:48:00:78:b1:e7: b4:0c:2a:d7:4f:4a:80:82:37:a1:20:2d:e3:0b:f6:51:4c:45: 69:f2:ea:3e:cb:6b:6c:c5:1e:6b:33:47:8f:d4:25:68:01:c5: 0c:12:41:e4:df:86:27:0b:34:a0:f0:a9:0e:b6:72:b0:89:20: 69:11:a5:0e:88:a1:83:84:18:8d:2c:fb:c2:08:4c:f1:18:21: c4:6e:0d:8f:af:08:c5:a7:e0:79:e2:73:e2:14:c2:c2:e2:dd: 95:fe:fb:3b:c4:9e:1a:67:50:24:d4:3d:cf:bb:a9:d9:5b:e8: 83:b4:d5:6a:b8:01:eb:34:fc:4c:a1:10:90:9b:80:92:97:b5: 89:1c:7f:d5:5a:5a:ba:44:78:c4:72:a9:d5:08:42:71:de:29: 2b:a3:ea:26:7b:88:ea:b3:45:74:e3:d2:b3:73:16:47:8e:26: 35:72:9e:ca:e5:bc:ea:c1:b2:70:bd:53:e7:86:2d:fc:72:42: 43:3b:df:e8:2b:e5:f5:5a:5e:ac:67:b3:2e:8b:8f:16:1e:d7: e3:8e:b2:ea:dd:51:51:63:fa:55:af:76:70:97:3c:7f:c2:9e: 67:17:d2:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK45MlM033239dgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk NWFkM2ZjZDUtNDEwZi00MzkwLTkwZWItN2M1MGEzMGFiYmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiNQNv+1tbznDgFi/frZfiEqERwXBUjzjP4W Dtb808UnjUXXV4B8i7s6IvdnbUXbvhAv3Zc9Dw3Rlpz4KRpJ7T14PuhfpVojAW7Y U5NibXTc9Hk/P8DdLfWUJjvrPUAh7tIZ9W+YgP+6ePleM5t7MNy8Et+lgHwvm05z 6+4ZTnXYJBFRosIR4fhgz0bi8c9IzD6PPJLlVZcA8VDNfhZ+rrU3PkMQCIHuaCVB 7kBQV8/y8h9o7B1W+viomHcr5cPzF5YLsyrbKf5jWRBrYKdqtOwxVbryCy59OjwT +zW8WossmK5elcXUL+UcaYUAs/PuKWJ3Y1uLd90YpsP98S9JwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInAGYF4//DsC4ayLal8FRvWjyMYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNmFjODc4MjEtYjMwMS0z NzNhLWI1MGQtOWY0YWVhOGJkNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5XoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISTwsS6jSAFsaBLUtyebobtonWzGToLEG/DngQgVFNIAHix57QMKtdP SoCCN6EgLeML9lFMRWny6j7La2zFHmszR4/UJWgBxQwSQeTfhicLNKDwqQ62crCJ IGkRpQ6IoYOEGI0s+8IITPEYIcRuDY+vCMWn4Hnic+IUwsLi3ZX++zvEnhpnUCTU Pc+7qdlb6IO01Wq4Aes0/EyhEJCbgJKXtYkcf9VaWrpEeMRyqdUIQnHeKSuj6iZ7 iOqzRXTj0rNzFkeOJjVynsrlvOrBsnC9U+eGLfxyQkM73+gr5fVaXqxnsy6LjxYe 1+OOsurdUVFj+lWvdnCXPH/CnmcX0sw= -----END CERTIFICATE-----Generated at Mon Aug 4 16:01:22 2025 by rpki-client