$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3acc875-a509-3b7a-b1bf-996d362e2ead.roa File: a3acc875-a509-3b7a-b1bf-996d362e2ead.roa (raw, json) Hash identifier: ZATcMPwSZzAeOv5BpxBtQd7ir2yOn0Q2TY0O5I6xELE= Subject key identifier: 5C:B3:AE:DF:31:49:0E:E2:76:60:15:F6:50:50:EC:C9:A6:BC:46:11 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584EA7901BCE03F0AF6BFE88EA40 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3acc875-a509-3b7a-b1bf-996d362e2ead.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 399195 IP address blocks: 107.149.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:1b:ce:03:f0:af:6b:fe:88:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=584d5b64-49f7-4a50-ae4d-2f72c1f8e51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:75:29:b0:c0:c5:3a:45:d1:4e:45:13:c4: 88:d9:85:53:84:8a:2e:0d:17:21:f0:6d:c4:2a:df: b8:87:33:6a:13:0c:52:f2:4b:f2:0f:53:4b:90:31: f0:1e:05:e3:e4:ce:87:cb:34:93:16:0e:f9:e0:36: 92:50:ac:a4:ff:d3:46:31:01:85:78:19:3a:cd:c6: 71:69:f7:a1:8a:b9:dc:3e:3c:98:87:c2:06:14:e8: bd:0b:e0:58:96:b2:ea:64:34:f1:19:75:fe:03:d3: d9:7a:eb:ac:6f:db:81:d7:1c:cc:db:14:57:17:e2: 06:2d:ac:c8:df:be:1a:1d:4e:d9:9c:89:92:bb:aa: 93:82:af:81:2e:07:94:b7:98:e0:6f:a6:9c:94:a1: 9d:13:bf:14:9b:bb:2d:9d:89:2b:4f:8a:e5:89:8b: 7f:35:00:6d:b4:90:8b:3f:c5:92:0e:67:04:31:2a: 72:bf:64:c0:da:e8:ef:1e:ed:01:71:39:1a:9c:04: 73:2c:e8:87:8b:e8:fa:dc:a4:02:43:fd:56:f9:31: c7:b0:6b:98:6d:54:d6:b0:8a:44:82:8d:cf:d7:28: f0:0f:bf:b8:66:6b:a1:39:38:d5:29:bc:d6:2d:82: 21:92:a9:92:5c:54:55:32:44:d3:6e:c1:b3:40:7c: 60:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B3:AE:DF:31:49:0E:E2:76:60:15:F6:50:50:EC:C9:A6:BC:46:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3acc875-a509-3b7a-b1bf-996d362e2ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:d3:75:62:3e:76:9e:cc:b7:2f:d5:50:c9:48:8c:b7:1b:25: a9:31:e6:da:08:f3:d8:6d:33:24:7e:bb:37:c4:c4:98:8a:5c: 9b:ee:fb:2e:c5:2a:bc:b7:76:72:c0:d1:0e:2f:b2:de:13:9f: ca:59:7e:24:1e:71:12:4d:a3:58:ca:4e:49:a7:be:f3:2c:7b: d8:22:e2:71:e9:eb:6a:71:c2:a8:6d:9c:f2:0e:47:bd:30:11: ad:03:9c:8d:11:b9:7b:9d:02:ff:3d:52:09:e8:90:d5:3e:0f: 34:2b:d5:b1:ce:26:ba:ef:36:63:7e:23:14:83:0c:35:15:97: 81:12:a2:64:74:0f:5c:9c:c1:a9:6d:8f:b0:8d:20:05:0d:6c: 8a:aa:54:d3:7d:04:a1:40:e8:24:a8:4d:df:f5:b3:03:27:2c: cc:ea:e9:f5:58:96:4f:57:ea:a2:0c:8e:e4:30:13:b0:8e:7b: 59:2f:be:df:8e:47:83:0b:f7:58:6a:0e:09:9e:6c:c3:21:b4: 2d:2e:68:60:8f:c7:58:11:dc:db:c2:a1:95:e1:56:21:89:60: ab:05:d9:cf:68:2d:35:81:07:2b:f3:1f:5f:a3:48:86:67:67: a8:45:c5:84:4d:e9:50:59:7c:29:5f:ee:5e:68:d2:89:59:d2: 37:d4:b4:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkBvOA/Cva/6I6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTg0ZDViNjQtNDlmNy00YTUwLWFlNGQtMmY3MmMxZjhlNTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqZ1KbDAxTpF0U5FE8SI2YVThIouDRch8G3E Kt+4hzNqEwxS8kvyD1NLkDHwHgXj5M6HyzSTFg754DaSUKyk/9NGMQGFeBk6zcZx afehirncPjyYh8IGFOi9C+BYlrLqZDTxGXX+A9PZeuusb9uB1xzM2xRXF+IGLazI 374aHU7ZnImSu6qTgq+BLgeUt5jgb6aclKGdE78Um7stnYkrT4rliYt/NQBttJCL P8WSDmcEMSpyv2TA2ujvHu0BcTkanARzLOiHi+j63KQCQ/1W+THHsGuYbVTWsIpE go3P1yjwD7+4ZmuhOTjVKbzWLYIhkqmSXFRVMkTTbsGzQHxgEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyzrt8xSQ7idmAV9lBQ7MmmvEYRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYTNhY2M4NzUtYTUwOS0z YjdhLWIxYmYtOTk2ZDM2MmUyZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5X4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPTdWI+dp7Mty/VUMlIjLcbJakx5toI89htMyR+uzfExJiKXJvu+y7F Kry3dnLA0Q4vst4Tn8pZfiQecRJNo1jKTkmnvvMse9gi4nHp62pxwqhtnPIOR70w Ea0DnI0RuXudAv89UgnokNU+DzQr1bHOJrrvNmN+IxSDDDUVl4ESomR0D1ycwalt j7CNIAUNbIqqVNN9BKFA6CSoTd/1swMnLMzq6fVYlk9X6qIMjuQwE7COe1kvvt+O R4ML91hqDgmebMMhtC0uaGCPx1gR3NvCoZXhViGJYKsF2c9oLTWBByvzH1+jSIZn Z6hFxYRN6VBZfClf7l5o0olZ0jfUtFM= -----END CERTIFICATE-----Generated at Wed Jul 29 09:09:57 2026 by rpki-client