$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/66c3ccdc-8e6c-32e6-9299-14efbc883724.roa File: 66c3ccdc-8e6c-32e6-9299-14efbc883724.roa (raw, json) Hash identifier: BteQligpyKGCpgdQdc5R/j0GUsX9BcUnf8u9oj0jFEY= Subject key identifier: D2:DB:31:17:40:41:69:5B:39:47:D3:88:20:04:F5:C9:C1:D3:E1:45 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584A612B18DDB2F0C5317FA2C860 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/66c3ccdc-8e6c-32e6-9299-14efbc883724.roa Signing time: Wed 02 Jul 2025 01:00:49 +0000 ROA not before: Wed 02 Jul 2025 01:00:49 +0000 ROA not after: Tue 30 Sep 2025 01:00:49 +0000 asID: 398823 IP address blocks: 107.148.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:2b:18:dd:b2:f0:c5:31:7f:a2:c8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jul 2 01:00:49 2025 GMT Not After : Sep 30 01:00:49 2025 GMT Subject: CN=bb5d67ff-a604-4983-9c1c-c61663bf7596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4d:b5:8b:6b:87:60:ae:04:37:b3:94:1c:84: e0:ca:08:d0:e0:22:56:fe:fe:54:f0:24:49:73:7a: fb:9c:43:eb:09:5b:04:67:b8:bb:fd:6c:ca:52:3a: a1:7b:c2:6e:13:28:7f:55:1d:5b:b7:27:76:77:91: 64:fd:a3:db:af:a6:70:19:b5:d0:fe:7c:a3:7b:7b: d5:91:5b:bd:79:3f:a4:16:df:77:e0:19:64:61:7d: ee:ea:e4:63:1e:ae:d0:37:59:bc:04:36:9e:a5:8c: e1:d5:d2:98:a9:72:ea:fb:dc:2d:02:c2:75:bc:d0: 7a:48:6a:a7:ae:66:ed:2b:49:19:c2:70:fe:21:2b: 5c:13:5b:2a:81:3a:9f:10:4f:ba:d7:37:01:55:24: bd:66:f4:55:d8:82:22:bc:1f:f2:e4:80:6a:4b:9c: d7:54:e1:4f:30:50:83:a5:81:41:7b:e0:83:44:eb: 54:2d:25:66:29:c4:4d:e7:55:77:ca:19:c7:a6:8f: bf:3e:d8:55:ca:49:97:7a:7e:ab:61:63:97:1d:5b: c7:11:51:f7:b2:d3:71:27:9f:cd:f8:1e:6a:e2:1b: 9b:07:c0:be:44:bf:06:4b:aa:72:f4:b2:95:57:55: 76:79:02:81:e4:fb:59:a0:37:16:25:1c:0a:b5:d1: 1f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DB:31:17:40:41:69:5B:39:47:D3:88:20:04:F5:C9:C1:D3:E1:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/66c3ccdc-8e6c-32e6-9299-14efbc883724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:65:c5:02:77:e8:63:ce:14:42:76:2a:0f:c5:6f:33:75:f3: 66:dc:2d:b8:2e:86:7e:d3:de:ac:4c:0b:16:89:0d:65:14:47: 42:76:2f:b5:62:a6:01:b0:3b:4a:1b:2c:66:1a:a8:da:ac:7e: e0:07:4d:44:a3:a5:20:1c:13:43:f5:2c:85:b2:00:43:86:05: 0f:45:31:98:c3:d6:b4:bb:41:b4:1a:1d:4b:6e:07:90:62:73: 4b:58:ff:9e:a6:64:1e:2f:e0:cd:a6:1c:fc:3f:c0:27:a9:53: c3:c3:59:ce:bc:c7:be:56:8a:fa:22:52:e5:39:af:61:31:6e: bd:c0:ac:c1:0a:d5:00:26:0f:5f:2c:ff:4c:26:64:80:75:29: 7c:67:c6:75:99:e0:04:72:e1:26:50:75:8c:47:00:9e:e4:ed: 7f:8c:c9:93:af:90:dd:2c:10:f5:ef:e8:d6:a5:bb:4d:50:6e: c5:0f:52:0f:84:01:66:8f:66:05:32:94:5d:f2:4a:55:d8:ce: 36:fc:1e:47:0e:25:c5:56:8f:ee:e9:13:11:d4:6a:3a:79:dd: 4a:28:61:1a:b7:22:f7:ad:26:26:32:aa:c9:91:24:36:7e:16: ab:45:04:80:6a:e2:14:3e:7b:28:78:74:b9:5c:3f:88:a2:98: 43:e7:3c:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxjdsvDFMX+iyGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk YmI1ZDY3ZmYtYTYwNC00OTgzLTljMWMtYzYxNjYzYmY3NTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU21i2uHYK4EN7OUHITgygjQ4CJW/v5U8CRJ c3r7nEPrCVsEZ7i7/WzKUjqhe8JuEyh/VR1btyd2d5Fk/aPbr6ZwGbXQ/nyje3vV kVu9eT+kFt934BlkYX3u6uRjHq7QN1m8BDaepYzh1dKYqXLq+9wtAsJ1vNB6SGqn rmbtK0kZwnD+IStcE1sqgTqfEE+61zcBVSS9ZvRV2IIivB/y5IBqS5zXVOFPMFCD pYFBe+CDROtULSVmKcRN51V3yhnHpo+/PthVykmXen6rYWOXHVvHEVH3stNxJ5/N +B5q4hubB8C+RL8GS6py9LKVV1V2eQKB5PtZoDcWJRwKtdEfpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLbMRdAQWlbOUfTiCAE9cnB0+FFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNjZjM2NjZGMtOGU2Yy0z MmU2LTkyOTktMTRlZmJjODgzNzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDa5QQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVlxQJ36GPOFEJ2Kg/FbzN182bcLbguhn7T3qxMCxaJDWUUR0J2L7Vi pgGwO0obLGYaqNqsfuAHTUSjpSAcE0P1LIWyAEOGBQ9FMZjD1rS7QbQaHUtuB5Bi c0tY/56mZB4v4M2mHPw/wCepU8PDWc68x75WivoiUuU5r2Exbr3ArMEK1QAmD18s /0wmZIB1KXxnxnWZ4ARy4SZQdYxHAJ7k7X+MyZOvkN0sEPXv6Nalu01QbsUPUg+E AWaPZgUylF3ySlXYzjb8HkcOJcVWj+7pExHUajp53UooYRq3IvetJiYyqsmRJDZ+ FqtFBIBq4hQ+eyh4dLlcP4iimEPnPHw= -----END CERTIFICATE-----Generated at Mon Jul 21 18:10:13 2025 by rpki-client