$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0a42edbc-40bf-3af9-9a7d-46261c33a241.roa File: 0a42edbc-40bf-3af9-9a7d-46261c33a241.roa (raw, json) Hash identifier: ioPmix+AC5gWC0t2A+BB/9vGj68CLfzvX8SuTA3wYrE= Subject key identifier: B6:63:A6:21:FF:4B:05:17:2D:CF:EB:01:A4:E6:FC:72:70:71:D1:21 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584A612B1AA62A6F7DC127768700 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0a42edbc-40bf-3af9-9a7d-46261c33a241.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 398823 IP address blocks: 107.149.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:1a:a6:2a:6f:7d:c1:27:76:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=c7fa9dd6-68ff-407c-860e-567476db6603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:10:18:d3:38:57:0d:c7:0b:c6:81:ba:7e:76: 87:b4:28:e6:b9:06:7e:6b:9c:f6:01:9e:1b:3a:c5: 6a:2e:54:c2:ae:df:41:56:19:ff:34:8a:8e:a5:41: c0:eb:8d:77:c2:99:93:39:d8:1b:7b:f7:78:63:11: 36:5a:6f:9d:20:8f:6b:51:47:8c:04:1b:b7:31:f0: 19:b5:7a:21:cf:6a:73:f0:fa:53:ab:85:6f:65:f5: 99:b5:ad:51:31:72:05:c3:73:8e:fa:1c:91:8d:1b: 04:d8:14:de:7c:f5:bc:9a:37:b2:3f:b7:5c:6d:f2: 50:32:2b:f0:ea:11:dc:35:67:52:e9:73:04:ce:44: a1:a9:90:4d:42:29:8f:32:ee:09:d9:45:7a:27:48: 0d:c7:d6:9b:97:33:9e:6f:92:ed:ea:b8:f1:80:68: 06:d0:15:f4:f4:68:38:32:5a:26:96:0f:3b:39:fd: 11:e9:ba:bf:81:c2:5d:8e:fa:21:c7:9e:d6:79:be: 26:ea:68:8a:ac:1b:9b:d3:ad:cc:27:9b:af:9b:95: 2f:4a:0b:1d:d2:79:b7:88:3e:94:22:0a:43:f8:ce: c8:9a:a1:a0:b6:7e:0f:15:fe:6c:75:00:77:18:6a: 4a:38:4c:b2:a9:b5:56:bc:8e:9d:7b:b8:fe:b3:11: 02:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:63:A6:21:FF:4B:05:17:2D:CF:EB:01:A4:E6:FC:72:70:71:D1:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0a42edbc-40bf-3af9-9a7d-46261c33a241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ad:cc:6a:55:9a:14:3b:1b:ca:46:24:77:a6:ea:bf:50:43: 24:5a:f2:a3:67:f2:30:51:66:6f:2c:3b:bb:e3:bc:5a:76:f9: 60:31:18:03:82:75:2d:fb:59:50:5f:ca:13:d5:30:7a:76:48: 2d:74:e1:f4:1c:1b:07:b9:08:88:9c:07:1f:36:11:ab:67:e5: a9:33:a1:29:cc:29:d7:75:ea:0d:65:2d:58:85:c2:9c:a1:b0: f6:d7:fb:1e:06:8c:17:57:e1:de:78:df:c6:5a:7a:a3:60:82: 52:7a:92:51:67:a2:66:de:74:1d:1d:13:22:20:86:24:32:73: 83:12:ca:98:70:0d:15:af:0d:03:e7:1f:07:f6:2e:6b:fb:c9: e9:10:e9:80:ce:85:9a:f7:99:e4:3f:85:41:d1:95:a0:39:6f: 0d:80:4b:22:bc:01:30:12:2e:37:fe:57:57:e1:a7:5c:ff:c6: ea:c4:fe:24:98:8d:80:85:b0:67:6b:7f:3d:73:44:84:b6:b0: e5:8c:2d:f2:29:9d:c0:ba:19:2e:ad:5f:d6:4a:41:e6:5c:78: 49:2a:5a:23:3d:e1:77:91:48:96:f5:33:35:eb:a6:01:8c:9a: 7e:ed:90:99:8a:ac:ac:3c:e0:f2:48:0c:da:fc:bc:5b:33:d0: 8f:a5:51:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxqmKm99wSd2hwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk YzdmYTlkZDYtNjhmZi00MDdjLTg2MGUtNTY3NDc2ZGI2NjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxAY0zhXDccLxoG6fnaHtCjmuQZ+a5z2AZ4b OsVqLlTCrt9BVhn/NIqOpUHA6413wpmTOdgbe/d4YxE2Wm+dII9rUUeMBBu3MfAZ tXohz2pz8PpTq4VvZfWZta1RMXIFw3OO+hyRjRsE2BTefPW8mjeyP7dcbfJQMivw 6hHcNWdS6XMEzkShqZBNQimPMu4J2UV6J0gNx9ablzOeb5Lt6rjxgGgG0BX09Gg4 Mlomlg87Of0R6bq/gcJdjvohx57Web4m6miKrBub063MJ5uvm5UvSgsd0nm3iD6U IgpD+M7ImqGgtn4PFf5sdQB3GGpKOEyyqbVWvI6de7j+sxECjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZjpiH/SwUXLc/rAaTm/HJwcdEhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMGE0MmVkYmMtNDBiZi0z YWY5LTlhN2QtNDYyNjFjMzNhMjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5XGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGtzGpVmhQ7G8pGJHem6r9QQyRa8qNn8jBRZm8sO7vjvFp2+WAxGAOC dS37WVBfyhPVMHp2SC104fQcGwe5CIicBx82Eatn5akzoSnMKdd16g1lLViFwpyh sPbX+x4GjBdX4d5438ZaeqNgglJ6klFnombedB0dEyIghiQyc4MSyphwDRWvDQPn Hwf2Lmv7yekQ6YDOhZr3meQ/hUHRlaA5bw2ASyK8ATASLjf+V1fhp1z/xurE/iSY jYCFsGdrfz1zRIS2sOWMLfIpncC6GS6tX9ZKQeZceEkqWiM94XeRSJb1MzXrpgGM mn7tkJmKrKw84PJIDNr8vFsz0I+lUdw= -----END CERTIFICATE-----Generated at Mon Jul 21 08:03:28 2025 by rpki-client