$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a5cbb1e0-a88d-3e5a-a22e-442a62b6d59c.roa File: a5cbb1e0-a88d-3e5a-a22e-442a62b6d59c.roa (raw, json) Hash identifier: GJPa+r5Shr6CkS8nI64goWUg4wBydUySSYD9LE2bGN4= Subject key identifier: 18:A7:B2:4F:08:B3:0A:B3:30:FB:13:0E:D5:7F:13:0C:3A:5B:EF:8E Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584D667A585EB249ABC94B83F880 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a5cbb1e0-a88d-3e5a-a22e-442a62b6d59c.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 54600 IP address blocks: 107.149.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:58:5e:b2:49:ab:c9:4b:83:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=f8322724-86db-4158-8958-f8940bb2f1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:03:fe:e0:25:8c:e6:5e:fa:1e:25:e2:8f:19: d2:cc:1d:2b:ba:14:d6:ae:07:3e:0f:02:ed:8f:e1: a2:a5:22:b5:0e:b2:9d:b9:01:7e:ef:05:a3:96:5f: d9:df:bd:e8:f4:f9:53:d7:8c:3b:f6:8d:4a:c2:f5: 6a:bd:e4:bb:fa:5c:91:f5:3e:f3:92:33:9f:e5:c0: 08:cb:74:25:7a:df:fe:a9:47:d0:4d:99:fa:5e:1e: 07:99:bd:c0:d6:45:58:b8:5c:12:d3:8f:78:c6:0d: 1c:60:b2:f2:f4:6e:d9:a4:41:b6:db:26:03:a3:62: 13:fa:f0:d2:4f:a7:04:d2:4c:43:92:11:e3:b2:39: 60:40:33:ac:cb:5f:2a:e2:a7:e4:cc:08:08:5c:22: 53:95:e8:f9:da:5b:6b:c2:93:b0:0f:5c:e2:da:63: c4:0d:01:38:dc:18:29:23:3d:bb:40:15:fe:9f:76: 87:82:59:c8:88:7c:dd:f3:9e:1f:71:76:34:87:9c: 99:95:f6:5b:b9:82:a7:3c:f9:13:2c:ae:01:a7:af: 9d:c5:f6:26:ac:45:92:6c:5d:12:c2:b3:c2:c3:c7: b1:e0:f8:62:a7:f4:91:eb:1a:a5:f1:e1:26:2b:14: f8:71:e8:b1:bb:f5:bd:2b:9d:99:50:94:8a:6f:d7: 56:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:A7:B2:4F:08:B3:0A:B3:30:FB:13:0E:D5:7F:13:0C:3A:5B:EF:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a5cbb1e0-a88d-3e5a-a22e-442a62b6d59c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e4:03:65:e7:64:86:ac:8c:9d:63:9d:84:b1:53:05:b5:62: 25:76:b0:d2:79:69:dd:7c:22:0d:58:92:71:aa:55:3b:1c:11: bf:d1:e5:ef:c8:61:cf:2e:38:5c:90:21:aa:12:cb:ce:2c:d8: a2:b5:54:4d:8d:e5:1a:93:cd:e2:bf:df:21:e7:82:ad:f3:d5: f4:6b:3c:8a:c9:3c:3f:33:c2:22:79:81:d4:e9:77:ba:2b:e7: ab:c2:4e:4d:27:23:fb:a1:30:c6:b5:5e:43:8a:34:12:56:ca: 88:cd:f1:bf:28:d5:0b:09:ec:e6:06:9e:7f:d5:c9:45:c1:89: a7:63:28:21:4b:5f:be:9a:74:da:ba:16:c3:81:c5:f8:ca:9f: cc:4b:d2:d9:d9:23:58:1f:94:7a:f5:e9:00:14:5c:ea:db:3b: 81:bd:f5:5f:6b:77:37:9e:28:21:b2:11:86:51:22:8f:50:27: 9d:af:7d:c7:4c:dd:7d:3e:7a:f8:76:9e:da:73:fe:8d:66:75: d5:e4:f0:3b:6b:52:62:31:68:85:4e:2a:91:ea:8c:8a:26:55: 5f:ee:4a:75:3f:35:b7:36:5c:70:7f:04:88:e2:42:a6:4b:91: 24:61:60:89:8f:17:89:ec:12:a7:fe:db:da:37:7e:ba:04:b1: e4:22:c3:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1melheskmryUuD+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk ZjgzMjI3MjQtODZkYi00MTU4LTg5NTgtZjg5NDBiYjJmMWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwP+4CWM5l76HiXijxnSzB0ruhTWrgc+DwLt j+GipSK1DrKduQF+7wWjll/Z373o9PlT14w79o1KwvVqveS7+lyR9T7zkjOf5cAI y3Qlet/+qUfQTZn6Xh4Hmb3A1kVYuFwS0494xg0cYLLy9G7ZpEG22yYDo2IT+vDS T6cE0kxDkhHjsjlgQDOsy18q4qfkzAgIXCJTlej52ltrwpOwD1zi2mPEDQE43Bgp Iz27QBX+n3aHglnIiHzd854fcXY0h5yZlfZbuYKnPPkTLK4Bp6+dxfYmrEWSbF0S wrPCw8ex4Phip/SR6xql8eEmKxT4ceixu/W9K52ZUJSKb9dWUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBinsk8IswqzMPsTDtV/Eww6W++OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYTVjYmIxZTAtYTg4ZC0z ZTVhLWEyMmUtNDQyYTYyYjZkNTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5XSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITkA2XnZIasjJ1jnYSxUwW1YiV2sNJ5ad18Ig1YknGqVTscEb/R5e/I Yc8uOFyQIaoSy84s2KK1VE2N5RqTzeK/3yHngq3z1fRrPIrJPD8zwiJ5gdTpd7or 56vCTk0nI/uhMMa1XkOKNBJWyojN8b8o1QsJ7OYGnn/VyUXBiadjKCFLX76adNq6 FsOBxfjKn8xL0tnZI1gflHr16QAUXOrbO4G99V9rdzeeKCGyEYZRIo9QJ52vfcdM 3X0+evh2ntpz/o1mddXk8DtrUmIxaIVOKpHqjIomVV/uSnU/Nbc2XHB/BIjiQqZL kSRhYImPF4nsEqf+29o3froEseQiw7w= -----END CERTIFICATE-----Generated at Fri Apr 17 15:06:12 2026 by rpki-client