$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0011c66e-a3a4-39de-b7ba-a4e9a03d5f3b.roa File: 0011c66e-a3a4-39de-b7ba-a4e9a03d5f3b.roa (raw, json) Hash identifier: Gpo3L52pmK5M6wq7XVo+bFUselQ8Fja62jMZgo9CmOc= Subject key identifier: 86:48:97:05:59:8A:5C:C0:5F:81:8E:62:89:A4:6D:44:79:BE:18:8A Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584A612B1A2F6A1B701D12A37498 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0011c66e-a3a4-39de-b7ba-a4e9a03d5f3b.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 398478 IP address blocks: 107.148.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:1a:2f:6a:1b:70:1d:12:a3:74:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=aff01df1-c970-43d1-abbf-5895f59aa6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ff:da:c5:16:77:f8:77:50:e6:37:d3:e2:c5: f8:81:9e:77:f1:35:47:7a:ea:58:6c:ac:46:67:64: 6c:68:b2:db:1b:6f:77:e7:4f:d4:6e:5a:e7:f9:f9: dc:d9:80:3a:55:6b:06:4d:06:7d:47:e1:57:f3:1a: b1:ee:8a:b2:ed:fc:d6:0f:e6:c1:27:c4:9a:4d:ba: 13:16:e3:02:15:63:3f:92:f8:26:a0:e6:54:4d:06: 27:d1:b4:4a:ba:6a:65:cc:be:17:e4:93:0b:17:1c: b4:9a:0c:41:71:ac:d9:47:f2:67:f5:e2:63:33:24: dd:fe:e4:31:b1:4d:08:22:5e:4e:d4:14:a6:e5:d6: 7c:47:83:5c:06:55:98:6c:8c:f5:2c:21:87:ea:9f: 9f:ab:f0:b7:b0:8c:cd:9c:1b:d7:a8:f1:1e:8e:e1: f7:d9:13:8d:e4:e2:44:ae:4a:9c:bc:8a:ca:c4:3a: 95:dc:77:25:2b:37:92:cf:20:c2:1f:4e:cd:cc:f0: 0c:75:f7:1a:db:76:94:c5:79:3f:4b:60:0b:92:79: 9f:bd:c0:98:f0:f4:b8:d7:dc:8e:4a:53:48:50:5d: 05:31:d3:6a:d9:e7:18:28:9b:81:43:1b:10:48:bd: ef:9f:5a:df:95:f9:54:6c:a3:21:89:6a:fa:3d:72: a9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:48:97:05:59:8A:5C:C0:5F:81:8E:62:89:A4:6D:44:79:BE:18:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0011c66e-a3a4-39de-b7ba-a4e9a03d5f3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:46:10:b5:82:6c:ad:28:e9:cb:01:74:55:74:b6:38:6c:46: 93:f3:88:36:e4:fa:c4:ac:9f:9c:b0:c5:af:cf:e2:9c:24:f5: 47:50:81:01:2d:0d:8c:8b:4e:9c:2a:76:15:7c:7d:12:d8:32: 32:64:21:1f:84:9f:3f:5e:4c:f7:90:e7:d0:ca:c3:b4:4d:4c: b1:59:d3:c2:68:24:30:40:94:f4:3e:ad:6f:dd:17:23:0d:2c: c0:c0:3b:fb:4f:b1:cf:d8:08:e6:4c:65:68:a9:ee:11:9d:1f: 78:34:cc:b9:cb:33:1e:16:1a:0a:24:e1:fc:8d:b5:7f:18:e1: 24:f1:2f:3f:82:79:d5:cc:9e:fd:ca:9b:e4:a4:16:ee:05:54: 52:bf:06:f0:71:61:0f:63:75:18:2a:a6:76:02:59:c8:ad:c3: 79:88:68:f6:4f:b7:1f:fc:50:84:32:bb:7b:e9:44:55:63:83: be:f5:ec:4d:48:94:03:90:91:37:49:0e:42:08:f2:32:4a:6b: cb:d9:f5:03:80:c1:c6:6a:d2:23:e3:89:0a:22:49:27:ce:ad: c3:17:c4:68:02:6c:6f:5a:43:ac:ba:02:62:4c:3b:94:d0:05: ae:1d:f3:e2:bd:9e:e4:a1:49:3a:95:aa:ab:19:ab:d2:2b:4e: 51:ce:83:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxovahtwHRKjdJgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk YWZmMDFkZjEtYzk3MC00M2QxLWFiYmYtNTg5NWY1OWFhNmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf/axRZ3+HdQ5jfT4sX4gZ538TVHeupYbKxG Z2RsaLLbG29350/Ublrn+fnc2YA6VWsGTQZ9R+FX8xqx7oqy7fzWD+bBJ8SaTboT FuMCFWM/kvgmoOZUTQYn0bRKumplzL4X5JMLFxy0mgxBcazZR/Jn9eJjMyTd/uQx sU0IIl5O1BSm5dZ8R4NcBlWYbIz1LCGH6p+fq/C3sIzNnBvXqPEejuH32RON5OJE rkqcvIrKxDqV3HclKzeSzyDCH07NzPAMdfca23aUxXk/S2ALknmfvcCY8PS419yO SlNIUF0FMdNq2ecYKJuBQxsQSL3vn1rflflUbKMhiWr6PXKpMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZIlwVZilzAX4GOYomkbUR5vhiKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMDAxMWM2NmUtYTNhNC0z OWRlLWI3YmEtYTRlOWEwM2Q1ZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5SAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtGELWCbK0o6csBdFV0tjhsRpPziDbk+sSsn5ywxa/P4pwk9UdQgQEt DYyLTpwqdhV8fRLYMjJkIR+Enz9eTPeQ59DKw7RNTLFZ08JoJDBAlPQ+rW/dFyMN LMDAO/tPsc/YCOZMZWip7hGdH3g0zLnLMx4WGgok4fyNtX8Y4STxLz+CedXMnv3K m+SkFu4FVFK/BvBxYQ9jdRgqpnYCWcitw3mIaPZPtx/8UIQyu3vpRFVjg7717E1I lAOQkTdJDkII8jJKa8vZ9QOAwcZq0iPjiQoiSSfOrcMXxGgCbG9aQ6y6AmJMO5TQ Ba4d8+K9nuShSTqVqqsZq9IrTlHOg+8= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:40 2025 by rpki-client