$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/005371b9-ebe5-3e81-90f0-bf2462d9ca76.roa File: 005371b9-ebe5-3e81-90f0-bf2462d9ca76.roa (raw, json) Hash identifier: 1JL2z8NBDaRmPgtQ+P5gGJ/8vlUAo0g+P2Djb0OwETw= Subject key identifier: C1:32:74:AC:AE:27:70:E6:25:75:93:89:FB:8A:63:01:95:89:F7:68 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584B0D87388E067960B52B4C1900 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/005371b9-ebe5-3e81-90f0-bf2462d9ca76.roa Signing time: Mon 01 Sep 2025 18:45:40 +0000 ROA not before: Mon 01 Sep 2025 18:45:40 +0000 ROA not after: Sun 30 Nov 2025 19:45:40 +0000 asID: 394432 IP address blocks: 107.149.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0d:87:38:8e:06:79:60:b5:2b:4c:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Sep 1 18:45:40 2025 GMT Not After : Nov 30 19:45:40 2025 GMT Subject: CN=a0ed59b2-6e45-4f93-b4c7-50ea8e19ac6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:49:9a:27:7b:50:54:2c:8e:d5:20:93:b4:f1: 48:fa:13:fd:c2:6d:59:5d:4a:50:09:b0:cb:d9:9b: 5c:a8:f4:8a:6e:e2:43:4f:06:56:19:f2:35:88:fc: d4:20:3c:be:64:7c:55:8d:e7:46:28:45:09:bd:4a: 51:55:65:21:1d:5e:ec:82:1f:e7:47:b5:40:7e:bb: 9d:4e:61:f4:9a:e2:26:94:03:a7:f7:8d:3d:aa:6b: a3:bb:e1:f4:0a:ef:93:8b:7a:51:a7:db:bb:d0:da: 1b:e1:af:6a:b9:13:47:94:ea:ae:f0:a4:2a:05:76: c5:f3:a5:f7:f1:98:da:18:9c:5f:3d:7f:57:9c:73: 2b:56:9c:05:b2:45:5a:5d:ab:1e:cf:7e:57:4a:f0: 11:f1:d8:c7:e7:78:b9:6e:69:c7:46:bb:a4:17:20: d2:c0:bb:46:ee:d1:2c:b7:be:e2:4e:e3:86:76:df: 8c:c9:e9:52:95:6d:30:0a:f7:c3:4e:2a:f0:95:c1: 19:6f:ff:96:82:56:46:a6:b0:99:3e:8b:f2:34:bf: bf:0a:cc:f6:ec:a9:6c:c0:26:6d:b9:88:0d:cc:74: 8d:ad:b3:13:49:21:cd:ed:f0:c0:d5:97:96:28:0f: e1:e6:22:69:56:7e:38:68:e0:b3:a1:c7:a2:87:6f: 32:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:32:74:AC:AE:27:70:E6:25:75:93:89:FB:8A:63:01:95:89:F7:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/005371b9-ebe5-3e81-90f0-bf2462d9ca76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:26:b7:4f:65:49:c2:5d:de:be:2a:99:cc:de:ad:bd:b7:d4: 3d:ac:38:3c:25:2a:4d:78:9b:2a:53:df:4f:c3:7a:5a:0b:78: 58:49:f2:88:31:26:d2:14:80:e7:52:88:f7:a6:95:0b:24:e5: dc:b4:53:2a:88:7c:8a:c7:2f:74:1c:c9:d2:23:1c:fb:cb:02: 37:7b:ad:00:55:45:c5:5a:5b:ea:86:39:7e:24:55:00:cd:75: 62:7d:b8:f2:fc:63:7a:6f:66:86:d2:ed:2f:ec:00:7a:62:62: e9:60:85:f8:09:e4:69:9f:a2:2a:11:9b:e0:48:63:fd:80:a5: 0b:19:3b:bb:b8:0f:23:62:df:c2:77:38:41:c9:44:e9:48:0a: 84:d4:51:7a:0b:c5:f0:56:03:ef:53:01:a7:d7:35:fe:ec:1b: 90:3c:fd:ac:4a:7b:e6:1e:f9:e6:b7:70:bc:5b:26:67:82:62: 79:f3:67:c2:23:bd:2f:8b:c4:e9:73:83:f4:90:cd:5c:f3:fd: d0:54:72:fb:89:49:2f:ed:e0:a3:06:58:3c:98:d1:a4:8a:10: 27:66:95:36:72:85:78:d2:be:37:5e:f4:1f:db:88:a6:40:c9: 56:fc:ba:49:35:b6:ce:66:c5:71:e6:fe:64:18:79:d2:90:b5: cc:80:d0:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsNhziOBnlgtStMGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDkwMTE4NDU0MFoXDTI1MTEzMDE5NDU0MFowLzEtMCsGA1UEAxMk YTBlZDU5YjItNmU0NS00ZjkzLWI0YzctNTBlYThlMTlhYzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EmaJ3tQVCyO1SCTtPFI+hP9wm1ZXUpQCbDL 2ZtcqPSKbuJDTwZWGfI1iPzUIDy+ZHxVjedGKEUJvUpRVWUhHV7sgh/nR7VAfrud TmH0muImlAOn9409qmuju+H0Cu+Ti3pRp9u70Nob4a9quRNHlOqu8KQqBXbF86X3 8ZjaGJxfPX9XnHMrVpwFskVaXasez35XSvAR8djH53i5bmnHRrukFyDSwLtG7tEs t77iTuOGdt+MyelSlW0wCvfDTirwlcEZb/+WglZGprCZPovyNL+/Csz27KlswCZt uYgNzHSNrbMTSSHN7fDA1ZeWKA/h5iJpVn44aOCzoceih28ykwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEydKyuJ3DmJXWTifuKYwGVifdoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMDA1MzcxYjktZWJlNS0z ZTgxLTkwZjAtYmYyNDYyZDljYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5W8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8mt09lScJd3r4qmczerb231D2sODwlKk14mypT30/DeloLeFhJ8ogx JtIUgOdSiPemlQsk5dy0UyqIfIrHL3QcydIjHPvLAjd7rQBVRcVaW+qGOX4kVQDN dWJ9uPL8Y3pvZobS7S/sAHpiYulghfgJ5GmfoioRm+BIY/2ApQsZO7u4DyNi38J3 OEHJROlICoTUUXoLxfBWA+9TAafXNf7sG5A8/axKe+Ye+ea3cLxbJmeCYnnzZ8Ij vS+LxOlzg/SQzVzz/dBUcvuJSS/t4KMGWDyY0aSKECdmlTZyhXjSvjde9B/biKZA yVb8ukk1ts5mxXHm/mQYedKQtcyA0F8= -----END CERTIFICATE-----Generated at Sun Sep 7 12:33:35 2025 by rpki-client