$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/39cf7394-6892-3201-b148-f346c4594aff.roa File: 39cf7394-6892-3201-b148-f346c4594aff.roa (raw, json) Hash identifier: kCRzFwOLJ7adyfFIfyTXVp9R6VkdU+BVOAbem1jUML4= Subject key identifier: 9E:F0:FF:35:95:74:0B:E7:E6:D9:34:15:A1:BA:4B:54:C0:C8:E1:B6 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584A612B1A82F23DE32763BB8480 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/39cf7394-6892-3201-b148-f346c4594aff.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 394432 IP address blocks: 107.149.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:1a:82:f2:3d:e3:27:63:bb:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=cd72f59b-4c58-4aca-a20b-d56d4a35c7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:97:de:53:63:c3:09:17:d8:a6:a4:2a:76:ba: 2f:96:94:c1:46:18:e0:b3:bf:b9:44:d7:c6:32:ef: f1:06:ff:6b:84:4c:38:8c:03:1c:2a:86:52:2a:22: 80:64:03:18:8e:d7:88:31:52:44:c8:2d:c6:bf:3f: 6b:af:09:09:08:bf:b6:1f:87:db:89:4f:8b:b8:75: 31:e9:04:70:c9:8f:3b:06:f4:20:39:fc:54:21:f8: c8:42:00:aa:c0:d5:91:d1:7c:cf:37:cd:ad:9c:3c: 62:34:1c:24:48:9e:d6:7b:0e:c0:da:72:31:59:f4: ce:ef:ec:4d:e5:49:47:47:85:d5:b5:a2:8d:08:3c: 12:d0:94:5f:a9:05:e8:8d:cd:1f:a9:39:b0:c7:a9: 97:65:27:4e:fd:08:07:36:9c:46:69:31:09:20:1d: 45:ae:dc:df:55:7b:c8:50:10:93:6f:9e:60:26:1c: 13:a8:0c:16:59:b9:b7:6d:99:e0:32:4b:14:d2:f3: ef:5c:c2:9a:b6:88:97:36:3f:0a:e0:e1:fd:19:5e: 45:9c:35:5d:09:21:c8:52:57:b4:69:51:37:d3:82: e0:58:44:ff:17:ce:6c:6f:35:3a:03:78:77:b9:1d: 54:aa:a6:60:23:42:f7:b5:14:70:5c:ec:9b:39:e0: 23:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F0:FF:35:95:74:0B:E7:E6:D9:34:15:A1:BA:4B:54:C0:C8:E1:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/39cf7394-6892-3201-b148-f346c4594aff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:97:fc:1c:3d:15:b8:27:99:52:e9:c2:bf:7f:54:f2:6c:35: 4b:e8:eb:e0:1c:1f:0a:19:56:3e:cd:7a:26:3c:9d:9c:0f:7a: d7:f1:af:bc:87:a0:d2:8e:8e:7b:90:f6:36:11:a7:21:31:80: f1:35:2f:ca:7d:db:9d:2a:54:63:b7:2c:13:6a:e7:74:4f:e9: a6:0e:a1:e8:fd:c7:ff:9c:2a:94:5d:3d:d2:11:45:82:2b:80: 47:1c:b3:bb:4d:bf:ee:dd:ba:04:9f:b4:d4:03:10:a3:4d:ea: 0b:82:f9:5a:ca:46:36:73:d4:34:47:bb:9c:90:38:f6:e9:79: 6e:78:57:c0:21:4d:73:3a:c2:ba:d4:18:a7:cc:f2:fc:d5:3d: 90:16:b7:ea:ff:c2:bc:83:65:aa:ec:53:32:6e:df:89:0e:8e: d5:5b:19:2a:cf:86:de:10:b4:fd:60:02:c0:d8:f1:ce:53:5d: 54:e4:61:a5:0a:ac:25:4b:08:4b:6a:30:64:3c:9d:33:9d:f6: f4:82:5b:2d:be:b1:6c:36:61:5f:40:bd:bf:a8:67:d8:af:f6: 8f:95:c5:28:1f:b2:12:76:aa:cd:5e:c9:dc:f8:81:cf:32:6f: 82:c3:e8:d2:9b:84:f5:bd:4c:40:02:7b:30:f5:58:3c:7b:f5: 78:ef:a5:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxqC8j3jJ2O7hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk Y2Q3MmY1OWItNGM1OC00YWNhLWEyMGItZDU2ZDRhMzVjN2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJfeU2PDCRfYpqQqdrovlpTBRhjgs7+5RNfG Mu/xBv9rhEw4jAMcKoZSKiKAZAMYjteIMVJEyC3Gvz9rrwkJCL+2H4fbiU+LuHUx 6QRwyY87BvQgOfxUIfjIQgCqwNWR0XzPN82tnDxiNBwkSJ7Wew7A2nIxWfTO7+xN 5UlHR4XVtaKNCDwS0JRfqQXojc0fqTmwx6mXZSdO/QgHNpxGaTEJIB1FrtzfVXvI UBCTb55gJhwTqAwWWbm3bZngMksU0vPvXMKatoiXNj8K4OH9GV5FnDVdCSHIUle0 aVE304LgWET/F85sbzU6A3h3uR1UqqZgI0L3tRRwXOybOeAjaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7w/zWVdAvn5tk0FaG6S1TAyOG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMzljZjczOTQtNjg5Mi0z MjAxLWIxNDgtZjM0NmM0NTk0YWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5XCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiX/Bw9FbgnmVLpwr9/VPJsNUvo6+AcHwoZVj7NeiY8nZwPetfxr7yH oNKOjnuQ9jYRpyExgPE1L8p9250qVGO3LBNq53RP6aYOoej9x/+cKpRdPdIRRYIr gEccs7tNv+7dugSftNQDEKNN6guC+VrKRjZz1DRHu5yQOPbpeW54V8AhTXM6wrrU GKfM8vzVPZAWt+r/wryDZarsUzJu34kOjtVbGSrPht4QtP1gAsDY8c5TXVTkYaUK rCVLCEtqMGQ8nTOd9vSCWy2+sWw2YV9Avb+oZ9iv9o+VxSgfshJ2qs1eydz4gc8y b4LD6NKbhPW9TEACezD1WDx79XjvpX8= -----END CERTIFICATE-----Generated at Mon Jul 21 08:03:23 2025 by rpki-client