$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0a936ef8-0cfb-3031-9c09-6fe1b1c31458.roa File: 0a936ef8-0cfb-3031-9c09-6fe1b1c31458.roa (raw, json) Hash identifier: 0ULf0QEzlekZEU6LcrHOCLmh0A+p3/L+ceClZL7CYe8= Subject key identifier: 43:55:45:5D:03:26:06:10:6D:90:B1:FB:FB:89:E4:08:FA:20:A3:F8 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584DE2B5EA855916EEBDA0705300 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0a936ef8-0cfb-3031-9c09-6fe1b1c31458.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 398823 IP address blocks: 107.148.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:ea:85:59:16:ee:bd:a0:70:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=68446041-95da-4014-8085-f2cb018732ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0a:47:f0:22:a1:8e:33:0a:19:0e:e7:f2:ba: bb:26:13:00:46:bd:e9:34:04:e4:97:57:db:d2:a9: 11:64:64:8d:1e:65:31:be:1d:56:08:e5:11:6d:68: d6:23:90:91:f0:be:0f:5a:f1:dd:58:cb:25:a1:b5: a2:12:9d:51:29:b4:1b:f1:83:3b:0c:02:3f:59:d5: e0:52:61:23:e7:2c:72:1a:73:d8:57:46:75:05:a3: 35:42:ba:8d:af:f1:80:9b:f3:c1:0a:b1:f3:ba:c7: 2f:7e:f9:01:de:1e:d6:8d:aa:f0:6d:6c:21:11:c0: ef:9b:55:75:54:99:5c:8d:7b:57:29:2c:1b:f6:4b: 55:75:6f:f5:ec:90:6d:df:e0:28:26:52:1e:de:ae: fe:c5:3a:e7:2c:36:27:5d:7e:08:e9:83:65:d0:5c: ea:1c:fb:fe:7f:97:2c:d3:c4:e0:f8:8c:14:97:ac: 41:78:61:04:58:20:45:3b:77:94:80:cc:89:3e:83: 1d:95:70:9c:c1:9b:8d:dd:41:91:e3:fd:e2:46:e4: 5c:86:38:29:c5:af:7a:4c:38:ad:c1:41:8c:9b:be: 61:81:3e:12:ab:a1:1d:e9:74:ee:d7:20:91:2b:cc: ff:5e:08:ba:6e:a8:52:31:8e:be:b7:b5:53:53:d8: 72:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:55:45:5D:03:26:06:10:6D:90:B1:FB:FB:89:E4:08:FA:20:A3:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0a936ef8-0cfb-3031-9c09-6fe1b1c31458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:2d:56:78:90:2a:f3:c2:bc:83:e2:01:7c:de:37:cf:a6:6a: db:f9:3c:b9:b7:3d:56:7e:c1:79:97:3b:45:a7:c7:a4:8f:89: b1:3c:ad:55:1e:b2:f0:7b:97:4e:92:2c:2e:bc:2e:71:b4:24: 1a:2d:24:b0:c9:61:77:db:ae:dc:da:5c:05:f6:f0:65:0a:ec: 72:d5:bd:ea:3b:15:e4:35:7b:f0:19:c2:f8:39:f3:c3:82:5d: 2d:de:d5:c7:3a:b1:a2:2a:3e:23:43:6a:47:76:81:60:30:d3: d4:d4:b0:2a:66:c2:03:31:9e:76:39:1a:95:3c:9a:4e:10:b2: 3a:c1:60:9a:02:6d:2a:a6:cb:27:b9:86:6b:78:41:4f:5b:2d: 06:d2:19:97:dc:89:d6:f4:3e:95:b9:dc:b9:d6:02:af:fd:c7: 66:9f:35:75:99:03:1c:21:97:e5:4d:b5:41:1a:d8:66:b8:be: 32:da:a7:82:87:79:e8:19:49:ab:ea:67:a0:bf:9b:41:c9:0b: b7:48:c3:55:e0:ce:7d:b4:cd:db:43:f3:5e:6a:16:51:9f:b1: 78:01:a5:77:03:7a:fa:6f:f2:9b:4b:d0:72:35:dc:42:48:1d: 70:a1:b7:2d:98:9e:d9:67:b5:32:9f:fe:16:b6:76:3f:a6:46: 8d:4b:08:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3iteqFWRbuvaBwUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk Njg0NDYwNDEtOTVkYS00MDE0LTgwODUtZjJjYjAxODczMmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ApH8CKhjjMKGQ7n8rq7JhMARr3pNATkl1fb 0qkRZGSNHmUxvh1WCOURbWjWI5CR8L4PWvHdWMslobWiEp1RKbQb8YM7DAI/WdXg UmEj5yxyGnPYV0Z1BaM1QrqNr/GAm/PBCrHzuscvfvkB3h7WjarwbWwhEcDvm1V1 VJlcjXtXKSwb9ktVdW/17JBt3+AoJlIe3q7+xTrnLDYnXX4I6YNl0FzqHPv+f5cs 08Tg+IwUl6xBeGEEWCBFO3eUgMyJPoMdlXCcwZuN3UGR4/3iRuRchjgpxa96TDit wUGMm75hgT4Sq6Ed6XTu1yCRK8z/Xgi6bqhSMY6+t7VTU9hybQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENVRV0DJgYQbZCx+/uJ5Aj6IKP4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMGE5MzZlZjgtMGNmYi0z MDMxLTljMDktNmZlMWIxYzMxNDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDa5QYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABotVniQKvPCvIPiAXzeN8+matv5PLm3PVZ+wXmXO0Wnx6SPibE8rVUe svB7l06SLC68LnG0JBotJLDJYXfbrtzaXAX28GUK7HLVveo7FeQ1e/AZwvg588OC XS3e1cc6saIqPiNDakd2gWAw09TUsCpmwgMxnnY5GpU8mk4QsjrBYJoCbSqmyye5 hmt4QU9bLQbSGZfcidb0PpW53LnWAq/9x2afNXWZAxwhl+VNtUEa2Ga4vjLap4KH eegZSavqZ6C/m0HJC7dIw1Xgzn20zdtD815qFlGfsXgBpXcDevpv8ptL0HI13EJI HXChty2YntlntTKf/ha2dj+mRo1LCIE= -----END CERTIFICATE-----Generated at Thu Jun 11 14:25:57 2026 by rpki-client