$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6ac87821-b301-373a-b50d-9f4aea8bd5a8.roa File: 6ac87821-b301-373a-b50d-9f4aea8bd5a8.roa (raw, json) Hash identifier: V91R2q0oHTFXTqYfkNYCSFykh+sj5LPCpaqkOpjP7v0= Subject key identifier: 04:61:0F:7A:23:B6:ED:79:1F:8E:B8:4F:A1:65:8F:E2:2F:A4:5A:D0 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584C7331EA4F4EBFB319B66E9D00 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6ac87821-b301-373a-b50d-9f4aea8bd5a8.roa Signing time: Fri 02 Jan 2026 14:00:39 +0000 ROA not before: Fri 02 Jan 2026 14:00:39 +0000 ROA not after: Thu 02 Apr 2026 13:00:39 +0000 asID: 398823 IP address blocks: 107.149.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:73:31:ea:4f:4e:bf:b3:19:b6:6e:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jan 2 14:00:39 2026 GMT Not After : Apr 2 13:00:39 2026 GMT Subject: CN=676fab24-4fe4-408d-a177-e0c45b5bb463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f6:2f:f0:9c:c5:40:88:b9:d7:79:9e:9d:f3: 1e:8a:e1:0b:95:4c:79:39:66:ae:70:99:18:cf:1a: a2:68:3e:8c:01:49:3d:c1:e1:ec:c3:7f:d1:f1:e0: ee:32:a2:40:1a:4b:01:93:72:c1:4c:6f:76:0d:f4: d3:b4:0c:51:56:f1:e1:d6:b1:da:90:d6:94:7c:5f: c3:35:15:ae:28:5b:5a:37:3b:95:bd:58:fb:84:82: cf:cc:46:a0:72:da:4c:0f:23:bd:73:be:fb:de:2a: 52:01:9e:53:e8:f3:58:bb:fb:da:20:bf:cb:74:5b: 76:5b:44:c4:ae:cb:bf:98:71:c6:7e:d6:8b:10:4e: 81:54:82:4e:02:c3:e2:96:9e:43:2c:54:b1:2a:a9: 44:66:9c:4d:d3:ad:a6:a3:33:77:04:cb:26:53:b4: 97:f2:5f:f7:f5:6e:9a:0b:1c:77:5f:5c:ad:4c:58: 5f:79:0a:3a:7e:81:a9:f0:7b:21:ef:e5:4e:bd:8b: 72:bd:d3:bc:3c:0b:2c:a2:50:33:1b:ba:32:a4:52: 5a:0b:34:b5:99:bf:57:53:a5:fd:30:5b:f5:e5:a1: 04:d5:4d:81:a4:a5:2f:d2:f3:74:72:ee:86:bc:3f: 85:fa:29:69:ea:aa:2c:a5:0f:d8:74:34:9d:8f:2a: b0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:61:0F:7A:23:B6:ED:79:1F:8E:B8:4F:A1:65:8F:E2:2F:A4:5A:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6ac87821-b301-373a-b50d-9f4aea8bd5a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:6f:9f:f1:ab:54:a1:5e:7d:7a:f3:1f:35:a8:d7:bc:09:4c: e4:79:6a:df:80:93:92:4d:d1:3a:10:f8:75:7c:86:2a:70:48: cf:e8:f0:0e:96:c2:0b:b7:24:e0:f5:53:3f:2e:ab:16:72:84: fe:20:02:53:74:91:ea:ab:0f:da:a6:e1:26:83:bb:8e:1d:62: ac:fe:37:0a:d3:73:e3:9f:70:ce:f2:3e:3a:cc:49:ce:94:a4: 77:18:cd:c9:88:80:00:87:b6:64:16:39:b6:97:e5:95:ea:1a: 9d:df:d1:bf:68:21:5a:8c:29:fb:f6:f2:52:20:7a:0d:a5:45: 6e:b7:b2:89:ba:0b:a8:28:a9:ee:8d:0a:da:72:c7:64:6c:6e: 87:1d:e2:b7:ca:dc:2c:d8:5b:72:5f:55:bc:b4:a8:23:8c:37: 72:1d:0b:bd:a3:14:70:51:33:33:80:c2:51:86:00:e2:6d:ac: 6a:8d:2d:3b:15:5e:39:ac:3f:bb:1f:41:b0:45:25:5e:9d:95: 65:42:3b:b3:da:e6:85:34:40:5b:36:4f:8d:64:d2:4e:ce:d6: 98:54:a2:43:6c:ee:5e:61:cf:a9:16:7e:d4:01:c6:a9:42:39: c1:0d:85:75:1c:91:9c:04:8b:05:c7:bc:64:9e:52:1a:33:ca: 3d:71:4f:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExzMepPTr+zGbZunQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDEwMjE0MDAzOVoXDTI2MDQwMjEzMDAzOVowLzEtMCsGA1UEAxMk Njc2ZmFiMjQtNGZlNC00MDhkLWExNzctZTBjNDViNWJiNDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/Yv8JzFQIi513menfMeiuELlUx5OWaucJkY zxqiaD6MAUk9weHsw3/R8eDuMqJAGksBk3LBTG92DfTTtAxRVvHh1rHakNaUfF/D NRWuKFtaNzuVvVj7hILPzEagctpMDyO9c7773ipSAZ5T6PNYu/vaIL/LdFt2W0TE rsu/mHHGftaLEE6BVIJOAsPilp5DLFSxKqlEZpxN062mozN3BMsmU7SX8l/39W6a Cxx3X1ytTFhfeQo6foGp8Hsh7+VOvYtyvdO8PAssolAzG7oypFJaCzS1mb9XU6X9 MFv15aEE1U2BpKUv0vN0cu6GvD+F+ilp6qospQ/YdDSdjyqwJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARhD3ojtu15H464T6Flj+IvpFrQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNmFjODc4MjEtYjMwMS0z NzNhLWI1MGQtOWY0YWVhOGJkNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5XoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJvn/GrVKFefXrzHzWo17wJTOR5at+Ak5JN0ToQ+HV8hipwSM/o8A6W wgu3JOD1Uz8uqxZyhP4gAlN0keqrD9qm4SaDu44dYqz+NwrTc+OfcM7yPjrMSc6U pHcYzcmIgACHtmQWObaX5ZXqGp3f0b9oIVqMKfv28lIgeg2lRW63som6C6goqe6N Ctpyx2Rsbocd4rfK3CzYW3JfVby0qCOMN3IdC72jFHBRMzOAwlGGAOJtrGqNLTsV XjmsP7sfQbBFJV6dlWVCO7Pa5oU0QFs2T41k0k7O1phUokNs7l5hz6kWftQBxqlC OcENhXUckZwEiwXHvGSeUhozyj1xT6w= -----END CERTIFICATE-----Generated at Mon Mar 2 13:24:38 2026 by rpki-client