$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/843b57ee-dc89-30f5-976d-312a26a10468.roa File: 843b57ee-dc89-30f5-976d-312a26a10468.roa (raw, json) Hash identifier: wkrCeooidXaSqMU0ytdnXtfk8cKxz8kMowmSB0t7Hyc= Subject key identifier: 01:B3:D8:7A:C6:92:E5:46:85:00:D1:9B:DE:B3:1A:87:1B:24:4C:1E Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584DE2B5EBCE6C1E26CFE44BD000 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/843b57ee-dc89-30f5-976d-312a26a10468.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 36137 IP address blocks: 107.149.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:eb:ce:6c:1e:26:cf:e4:4b:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=1961da9a-f04c-48f1-ae31-2d762cf9e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:50:1c:78:a2:4c:e1:3c:53:17:54:1d:6a:2d: 7b:63:8b:87:45:8e:30:5c:69:a8:ae:56:82:57:55: 4d:86:43:04:77:7b:7c:b6:fa:0f:71:af:86:97:20: b9:ce:5e:47:21:83:aa:8b:8c:7c:a4:59:68:5a:9a: 25:89:c0:64:7f:5a:18:99:1a:69:f8:6d:83:b1:7f: e7:e3:c6:b2:29:7b:e6:5d:3e:cd:f0:9b:d1:e5:6d: a4:d2:8d:54:0e:87:8f:e4:59:48:c3:9c:a7:c2:64: fc:a1:b3:36:39:4d:24:07:de:bc:c7:aa:d1:db:09: 02:7d:78:86:9e:8b:77:a7:df:5a:23:02:43:90:f9: 82:ab:89:c2:20:66:75:6d:61:2e:ed:af:85:ad:99: c8:d8:b6:01:c8:e7:0e:5d:21:12:b3:ff:25:9c:bd: 31:89:5e:c5:82:cb:21:c5:27:a9:03:45:7d:8d:93: 30:85:80:08:01:76:ce:9f:dc:2b:a2:7f:ec:52:35: 84:1d:45:6f:9f:86:c5:c5:33:d5:5c:a5:d5:d7:2a: 9f:13:5f:07:38:03:a0:4b:41:9d:bb:bb:fe:44:8d: 2d:dd:d3:80:d1:a0:ed:a4:d0:c6:7f:63:f0:ab:aa: 81:04:53:f9:13:32:af:f3:f6:73:03:df:71:24:84: d3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B3:D8:7A:C6:92:E5:46:85:00:D1:9B:DE:B3:1A:87:1B:24:4C:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/843b57ee-dc89-30f5-976d-312a26a10468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:9d:0d:a9:2c:e2:9a:ff:87:54:98:3c:dd:73:10:93:b7:85: e9:5b:d8:a9:54:02:8c:55:dd:fd:e7:14:bb:47:be:52:bc:ea: 18:5b:22:6a:56:b2:f9:ca:9a:27:84:1f:22:56:86:4b:b4:33: bd:ba:00:64:dc:e9:6a:91:83:d8:88:fa:f1:a5:1e:11:93:2f: df:1b:d1:6c:5f:bf:1f:13:4d:47:e6:be:4e:f2:35:57:e6:2e: e1:99:44:b7:b9:e7:52:04:a2:78:aa:eb:dd:9d:ab:38:50:2d: fd:42:4d:53:be:9e:29:b6:19:11:d3:c0:7d:76:2c:cf:96:d4: a7:c5:bb:80:62:95:39:03:bd:5d:ed:8f:80:a6:fe:39:9b:17: 41:3a:32:0f:bf:7b:36:a0:38:75:d4:61:de:71:1e:a2:5e:a1: 68:27:5c:ba:07:d4:b7:72:f4:ae:2f:24:cc:d7:79:4b:44:c2: 31:f9:aa:53:b3:43:88:d8:e1:d2:dd:3e:d6:01:48:90:e7:02: 31:22:2d:cc:29:a1:7a:6e:00:02:d3:b0:5a:1f:a7:91:72:bc: 40:97:f7:f8:91:42:e5:b0:2f:6b:14:a1:f3:5a:95:84:42:f2: 22:46:2d:ba:eb:10:bd:d5:15:2a:10:14:d5:6b:24:fb:28:1a: f8:8c:d9:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3itevObB4mz+RL0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk MTk2MWRhOWEtZjA0Yy00OGYxLWFlMzEtMmQ3NjJjZjllMGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1AceKJM4TxTF1Qdai17Y4uHRY4wXGmorlaC V1VNhkMEd3t8tvoPca+GlyC5zl5HIYOqi4x8pFloWpolicBkf1oYmRpp+G2DsX/n 48ayKXvmXT7N8JvR5W2k0o1UDoeP5FlIw5ynwmT8obM2OU0kB968x6rR2wkCfXiG not3p99aIwJDkPmCq4nCIGZ1bWEu7a+FrZnI2LYByOcOXSESs/8lnL0xiV7Fgssh xSepA0V9jZMwhYAIAXbOn9wron/sUjWEHUVvn4bFxTPVXKXV1yqfE18HOAOgS0Gd u7v+RI0t3dOA0aDtpNDGf2Pwq6qBBFP5EzKv8/ZzA99xJITTPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGz2HrGkuVGhQDRm96zGocbJEweMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvODQzYjU3ZWUtZGM4OS0z MGY1LTk3NmQtMzEyYTI2YTEwNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5XKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJidDaks4pr/h1SYPN1zEJO3helb2KlUAoxV3f3nFLtHvlK86hhbImpW svnKmieEHyJWhku0M726AGTc6WqRg9iI+vGlHhGTL98b0Wxfvx8TTUfmvk7yNVfm LuGZRLe551IEoniq692dqzhQLf1CTVO+nim2GRHTwH12LM+W1KfFu4BilTkDvV3t j4Cm/jmbF0E6Mg+/ezagOHXUYd5xHqJeoWgnXLoH1Ldy9K4vJMzXeUtEwjH5qlOz Q4jY4dLdPtYBSJDnAjEiLcwpoXpuAALTsFofp5FyvECX9/iRQuWwL2sUofNalYRC 8iJGLbrrEL3VFSoQFNVrJPsoGviM2Qk= -----END CERTIFICATE-----Generated at Sat Jun 13 23:45:26 2026 by rpki-client