$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/843b57ee-dc89-30f5-976d-312a26a10468.roa File: 843b57ee-dc89-30f5-976d-312a26a10468.roa (raw, json) Hash identifier: gVJCJQ05u2pSg9ytjbr8MFILjrWp1FkI7oE16Mt8z1c= Subject key identifier: 4B:61:BB:64:5D:9F:D6:03:02:16:DD:EE:6E:E8:7F:CF:3D:65:55:90 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584D7F53E3BFDD585F11C79FDE00 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/843b57ee-dc89-30f5-976d-312a26a10468.roa Signing time: Mon 13 Apr 2026 22:38:16 +0000 ROA not before: Mon 13 Apr 2026 22:38:16 +0000 ROA not after: Fri 29 May 2026 01:00:32 +0000 asID: 36137 IP address blocks: 107.149.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:53:e3:bf:dd:58:5f:11:c7:9f:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Apr 13 22:38:16 2026 GMT Not After : May 29 01:00:32 2026 GMT Subject: CN=f4ae7087-ecfc-4c7f-a7a9-89a4025d2a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:34:13:39:3b:b4:79:d3:45:9f:05:2e:38: 2a:8c:60:20:ef:ef:80:11:0a:3a:95:99:42:41:3c: 5e:44:23:d4:85:d3:2e:a9:21:31:2a:76:68:24:59: 31:ed:0d:85:93:f0:34:4d:15:ae:64:8b:91:57:46: 9e:fc:cc:46:5e:51:62:e1:5e:5b:dd:53:f4:91:e9: 5a:29:b8:1f:a1:5d:77:68:fa:dd:56:5d:24:ec:d9: 06:c9:f3:c7:71:cc:e0:94:a2:1e:85:0b:f3:7a:49: 88:ea:1b:07:63:e6:d1:53:67:18:e3:39:d8:da:12: d0:2d:0b:8d:29:65:32:2f:c7:65:97:cd:bc:40:a2: d3:90:a4:81:ec:32:1d:a0:fa:1b:20:77:4c:68:b9: a7:87:b1:f8:3d:2e:59:61:ef:61:c3:63:b2:63:92: 73:0b:e8:b9:da:41:cc:37:53:4e:a6:3f:ac:d4:94: bf:c0:45:49:e2:c6:06:c1:4f:c3:e7:f7:f3:9e:cf: 98:37:91:1b:64:60:7f:e5:eb:89:09:08:f3:9f:90: 4e:a0:70:de:a6:9b:03:97:fe:85:bf:00:47:ae:e6: dc:11:f2:a3:f1:6b:75:f6:0a:5e:45:2d:22:c0:26: 07:b6:12:35:81:fa:66:5f:5d:23:a0:ee:2b:c5:90: d5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:61:BB:64:5D:9F:D6:03:02:16:DD:EE:6E:E8:7F:CF:3D:65:55:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/843b57ee-dc89-30f5-976d-312a26a10468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:cb:6c:42:48:54:44:c8:2b:66:2f:6f:16:10:8d:52:5e:36: 02:aa:fd:d3:3f:94:23:c1:02:a8:82:76:fe:1a:26:3c:ab:06: 77:a4:39:19:2c:8d:f2:9e:2c:65:df:c4:4b:f5:f5:b1:9c:70: 0b:d2:19:0b:d5:0c:5e:af:4f:17:a2:0b:3e:01:e6:41:43:32: 12:5e:fc:b6:58:84:bc:6f:13:f1:5c:9a:1c:fe:e3:a3:f1:5a: ef:35:d2:0f:50:bf:2a:20:85:ff:85:ba:8a:66:e9:75:cb:e7: f4:97:6a:e3:a4:fe:45:52:2e:4f:b0:04:f0:d0:d6:97:3f:cb: df:47:31:3d:57:7c:cd:80:05:49:56:ca:e4:ec:43:d1:3d:28: 2b:94:d9:c1:e5:b9:09:b8:96:6f:a1:d9:38:bb:a3:12:10:01: b0:9c:1a:12:59:84:d2:97:c7:c7:56:33:11:35:3d:54:82:35: ec:80:ff:2c:ee:c1:14:1f:a9:0b:9c:03:27:a6:f1:97:ef:66: 40:21:51:a7:36:20:b2:34:eb:74:43:93:08:44:b5:6e:7c:cd: d8:f3:7d:da:86:9a:22:7c:f4:1e:10:6f:26:65:07:47:ae:12: 24:fa:d4:e4:b4:b3:44:14:09:00:c2:c9:b5:ca:28:09:2b:fa: 76:9b:dc:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/U+O/3VhfEcef3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDQxMzIyMzgxNloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZjRhZTcwODctZWNmYy00YzdmLWE3YTktODlhNDAyNWQyYThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFM0Ezk7tHnTRZ8FLjgqjGAg7++AEQo6lZlC QTxeRCPUhdMuqSExKnZoJFkx7Q2Fk/A0TRWuZIuRV0ae/MxGXlFi4V5b3VP0kela KbgfoV13aPrdVl0k7NkGyfPHcczglKIehQvzekmI6hsHY+bRU2cY4znY2hLQLQuN KWUyL8dll828QKLTkKSB7DIdoPobIHdMaLmnh7H4PS5ZYe9hw2OyY5JzC+i52kHM N1NOpj+s1JS/wEVJ4sYGwU/D5/fzns+YN5EbZGB/5euJCQjzn5BOoHDeppsDl/6F vwBHrubcEfKj8Wt19gpeRS0iwCYHthI1gfpmX10joO4rxZDVbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEthu2Rdn9YDAhbd7m7of889ZVWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvODQzYjU3ZWUtZGM4OS0z MGY1LTk3NmQtMzEyYTI2YTEwNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5XKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbLbEJIVETIK2YvbxYQjVJeNgKq/dM/lCPBAqiCdv4aJjyrBnekORks jfKeLGXfxEv19bGccAvSGQvVDF6vTxeiCz4B5kFDMhJe/LZYhLxvE/Fcmhz+46Px Wu810g9Qvyoghf+Fuopm6XXL5/SXauOk/kVSLk+wBPDQ1pc/y99HMT1XfM2ABUlW yuTsQ9E9KCuU2cHluQm4lm+h2Ti7oxIQAbCcGhJZhNKXx8dWMxE1PVSCNeyA/yzu wRQfqQucAyem8ZfvZkAhUac2ILI063RDkwhEtW58zdjzfdqGmiJ89B4QbyZlB0eu EiT61OS0s0QUCQDCybXKKAkr+nab3N0= -----END CERTIFICATE-----Generated at Fri Apr 17 18:33:16 2026 by rpki-client