$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/edb23b91-d765-3a18-a66d-bbe4f8ea5fa3.roa File: edb23b91-d765-3a18-a66d-bbe4f8ea5fa3.roa (raw, json) Hash identifier: P8lbscDdOYoIIjnYUk8UwJid3yvyMZZk8P7yXB6WQvk= Subject key identifier: C0:96:6D:98:1F:EC:F5:F7:09:71:2B:42:B0:C9:65:01:EB:23:97:36 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584C5EC69C4CCD320377D49DC080 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/edb23b91-d765-3a18-a66d-bbe4f8ea5fa3.roa Signing time: Wed 31 Dec 2025 14:00:38 +0000 ROA not before: Wed 31 Dec 2025 14:00:38 +0000 ROA not after: Tue 31 Mar 2026 13:00:38 +0000 asID: 398823 IP address blocks: 107.148.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5e:c6:9c:4c:cd:32:03:77:d4:9d:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Dec 31 14:00:38 2025 GMT Not After : Mar 31 13:00:38 2026 GMT Subject: CN=60743ac5-2747-4038-955d-728e1a820126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:53:3a:31:85:99:b2:50:d2:d6:23:b8:65:7f: 05:1b:02:9d:76:33:46:63:d9:74:48:61:98:f1:40: 4d:aa:3a:2b:fe:c3:33:e4:4d:9d:01:b4:63:67:5e: 10:d9:55:f4:a0:f6:8a:7f:49:4f:58:f4:76:c6:c6: e9:55:5c:fe:f4:83:34:18:fb:c3:c5:73:8c:6c:94: b8:c0:99:f0:8a:47:19:ab:31:40:5d:59:b0:52:df: 8d:1e:9d:4d:fe:ed:a3:c2:66:f9:24:b1:3e:28:b0: 6c:fe:68:01:95:11:ca:11:d0:43:4a:e2:86:4e:16: 56:19:b3:f5:b9:9a:19:56:17:29:a8:d4:dc:55:1d: 5b:d3:a8:49:e2:c7:da:fa:5b:ce:52:4c:ce:38:aa: 22:15:2e:80:e8:18:57:77:4d:cc:a8:8d:d9:db:d5: b7:7c:5b:0d:31:bc:5b:0c:f4:bd:dc:3d:4c:5d:3d: ea:dc:50:16:22:d6:dc:a3:45:ee:4f:d7:89:48:da: 41:ab:85:8f:07:6b:0f:a8:eb:d7:9c:5a:84:ce:4c: 6a:39:d6:e5:0a:e9:84:86:d3:52:5b:75:2c:0f:d8: d0:a1:7c:28:79:26:56:df:f4:19:2a:1d:12:38:e6: ed:a5:7b:c2:1c:74:b8:28:61:d0:72:03:67:ce:34: 95:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:96:6D:98:1F:EC:F5:F7:09:71:2B:42:B0:C9:65:01:EB:23:97:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/edb23b91-d765-3a18-a66d-bbe4f8ea5fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:6b:3a:f2:8b:53:e9:40:b0:91:4f:17:81:30:fb:63:af:6c: f7:8c:75:9e:41:2a:08:f8:85:68:c1:d6:ce:a1:da:cf:27:b4: f8:84:37:e4:30:0b:24:bd:24:44:da:11:22:7c:a7:bd:5f:32: 3e:55:69:b5:4c:59:a8:29:4f:c7:7d:67:2e:78:6d:3a:78:f8: 8f:c1:81:49:3e:2f:1c:85:3a:d2:ae:56:fb:b1:d3:77:1e:a2: 1e:21:c2:f0:a3:de:d3:33:bf:01:dd:49:51:18:05:3b:12:12: a9:d7:22:ee:4b:fa:76:cd:7d:3f:bb:0e:eb:96:fe:ae:03:8a: 2e:76:48:bb:79:91:c7:72:08:1a:db:9a:01:c9:49:52:dc:cf: 0e:10:5b:75:fe:e1:a1:d6:1e:09:f2:cb:2f:ef:81:19:2a:91: c7:da:6b:b3:88:e4:d2:35:0e:e8:04:a1:8b:5e:ab:81:fa:45: 1f:a9:51:62:66:b3:2f:bc:af:2f:65:5e:89:b8:d6:8c:1c:9c: 75:23:91:88:0b:41:20:32:28:53:f3:e8:18:e0:96:55:8b:f3: a6:82:67:c6:57:f3:11:0c:7d:73:7d:d1:74:14:8c:98:5b:c7: 35:c5:51:8e:7e:80:63:03:e1:c2:1b:39:1b:da:0a:08:9b:21: 85:17:67:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExexpxMzTIDd9SdwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MTIzMTE0MDAzOFoXDTI2MDMzMTEzMDAzOFowLzEtMCsGA1UEAxMk NjA3NDNhYzUtMjc0Ny00MDM4LTk1NWQtNzI4ZTFhODIwMTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VM6MYWZslDS1iO4ZX8FGwKddjNGY9l0SGGY 8UBNqjor/sMz5E2dAbRjZ14Q2VX0oPaKf0lPWPR2xsbpVVz+9IM0GPvDxXOMbJS4 wJnwikcZqzFAXVmwUt+NHp1N/u2jwmb5JLE+KLBs/mgBlRHKEdBDSuKGThZWGbP1 uZoZVhcpqNTcVR1b06hJ4sfa+lvOUkzOOKoiFS6A6BhXd03MqI3Z29W3fFsNMbxb DPS93D1MXT3q3FAWItbco0XuT9eJSNpBq4WPB2sPqOvXnFqEzkxqOdblCumEhtNS W3UsD9jQoXwoeSZW3/QZKh0SOObtpXvCHHS4KGHQcgNnzjSV6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCWbZgf7PX3CXErQrDJZQHrI5c2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvZWRiMjNiOTEtZDc2NS0z YTE4LWE2NmQtYmJlNGY4ZWE1ZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5RYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhrOvKLU+lAsJFPF4Ew+2OvbPeMdZ5BKgj4hWjB1s6h2s8ntPiEN+Qw CyS9JETaESJ8p71fMj5VabVMWagpT8d9Zy54bTp4+I/BgUk+LxyFOtKuVvux03ce oh4hwvCj3tMzvwHdSVEYBTsSEqnXIu5L+nbNfT+7DuuW/q4Dii52SLt5kcdyCBrb mgHJSVLczw4QW3X+4aHWHgnyyy/vgRkqkcfaa7OI5NI1DugEoYteq4H6RR+pUWJm sy+8ry9lXom41owcnHUjkYgLQSAyKFPz6BjgllWL86aCZ8ZX8xEMfXN90XQUjJhb xzXFUY5+gGMD4cIbORvaCgibIYUXZ0s= -----END CERTIFICATE-----Generated at Mon Mar 2 01:13:23 2026 by rpki-client