$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/200dddb4-498e-3fbd-84af-46d9cc7fe2a6.roa File: 200dddb4-498e-3fbd-84af-46d9cc7fe2a6.roa (raw, json) Hash identifier: ACFgfMkARvk2NkRFPKT7b7wV+pkG4OTxx7dPLmBBt1I= Subject key identifier: 54:8E:6B:D0:B0:2C:58:C7:5D:CE:EB:41:87:D6:11:28:8C:6D:D6:21 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584A043CC99A3DB426CDF19CCF80 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/200dddb4-498e-3fbd-84af-46d9cc7fe2a6.roa Signing time: Thu 29 May 2025 18:06:28 +0000 ROA not before: Thu 29 May 2025 18:06:28 +0000 ROA not after: Wed 27 Aug 2025 18:06:28 +0000 asID: 398478 IP address blocks: 107.149.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:04:3c:c9:9a:3d:b4:26:cd:f1:9c:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: May 29 18:06:28 2025 GMT Not After : Aug 27 18:06:28 2025 GMT Subject: CN=a35668e1-8fbd-415e-9d14-9777ec8e5778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6f:22:fb:57:b7:5c:96:28:dc:cf:37:89:02: 27:b6:ef:c6:c0:0c:f6:65:8d:5d:e6:81:b9:3e:83: 3d:db:42:2c:1a:47:1a:9c:ad:6f:cd:cd:8f:47:88: d8:ae:ae:a8:a1:66:8c:67:60:3b:18:23:a3:bb:b3: 77:74:83:6a:bd:72:bd:c3:93:7d:f4:4f:ca:fb:48: b2:82:6a:ad:be:4c:d3:74:81:71:e0:e6:38:28:20: a0:24:ed:a9:ff:f3:55:15:34:69:d3:b0:3a:66:b7: 2c:c6:dc:6c:23:1f:00:d4:ee:ba:8b:a6:a9:a7:e5: d9:02:29:1d:50:e5:c8:01:b9:39:cc:b0:7e:e5:97: ed:df:7e:d1:c3:0f:e4:74:57:27:10:be:00:ba:e8: 88:ef:8d:12:29:59:86:c9:64:72:63:13:fa:f9:6d: a0:75:cc:73:d3:92:50:1c:03:da:0b:d3:01:f1:40: 36:2b:fd:5d:d3:69:dc:a6:be:d0:4e:b2:ba:6c:74: 71:8b:90:31:56:9d:7a:70:d4:38:be:59:ad:d0:0d: 03:07:b7:12:1e:8e:8e:cb:e3:fa:ad:25:ec:99:1c: 93:5a:87:0a:14:bf:a1:12:01:0a:66:59:88:a8:00: 1c:54:26:16:b6:d2:76:13:1b:47:7e:36:2b:6f:d3: c5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:8E:6B:D0:B0:2C:58:C7:5D:CE:EB:41:87:D6:11:28:8C:6D:D6:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/200dddb4-498e-3fbd-84af-46d9cc7fe2a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:5b:94:36:58:a2:fb:38:fc:2b:f2:13:4f:9f:74:4c:e1:da: 24:2a:f6:d4:e0:51:01:5e:45:03:eb:2d:5b:28:c8:10:e1:0c: 70:da:ce:da:35:f7:62:a3:3b:81:2b:d9:03:75:df:4e:a9:d9: 1a:cb:c0:99:90:a4:59:c9:e1:4d:7c:1f:d4:e6:e4:7e:bc:d1: d2:17:ce:0d:5f:e8:c8:4a:ce:9f:19:17:bb:36:4e:72:83:0e: cc:12:57:9a:1c:09:06:e0:60:7d:9b:2e:b0:97:1e:e8:0f:8e: 3c:49:bf:89:cc:bc:5d:21:62:76:5b:88:50:90:c5:f9:e2:e5: 50:29:86:06:8c:46:f6:4f:43:39:76:84:59:55:52:cf:e2:32: 0a:63:15:d8:93:aa:59:93:a1:32:c3:7f:10:c7:ef:96:12:13: 8a:1b:f6:71:9d:e7:f7:a5:ff:19:ac:e8:7d:b0:63:d3:ee:9a: f2:df:66:57:62:91:45:ec:48:4f:57:f5:f4:39:2c:a6:95:b2: 4f:54:45:21:a4:50:ae:ba:4d:38:ea:94:1c:f2:66:0e:1f:71: c6:5a:6e:34:f9:8a:6c:8a:fa:fd:7d:42:3c:db:ed:c7:9c:d2: c3:63:3d:a6:b2:3e:b6:52:8b:8c:bb:e4:35:7f:70:c9:09:66: 77:e3:3c:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoEPMmaPbQmzfGcz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDUyOTE4MDYyOFoXDTI1MDgyNzE4MDYyOFowLzEtMCsGA1UEAxMk YTM1NjY4ZTEtOGZiZC00MTVlLTlkMTQtOTc3N2VjOGU1Nzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr28i+1e3XJYo3M83iQIntu/GwAz2ZY1d5oG5 PoM920IsGkcanK1vzc2PR4jYrq6ooWaMZ2A7GCOju7N3dINqvXK9w5N99E/K+0iy gmqtvkzTdIFx4OY4KCCgJO2p//NVFTRp07A6ZrcsxtxsIx8A1O66i6app+XZAikd UOXIAbk5zLB+5Zft337Rww/kdFcnEL4AuuiI740SKVmGyWRyYxP6+W2gdcxz05JQ HAPaC9MB8UA2K/1d02ncpr7QTrK6bHRxi5AxVp16cNQ4vlmt0A0DB7cSHo6Oy+P6 rSXsmRyTWocKFL+hEgEKZlmIqAAcVCYWttJ2ExtHfjYrb9PFYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSOa9CwLFjHXc7rQYfWESiMbdYhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMjAwZGRkYjQtNDk4ZS0z ZmJkLTg0YWYtNDZkOWNjN2ZlMmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5WEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVblDZYovs4/CvyE0+fdEzh2iQq9tTgUQFeRQPrLVsoyBDhDHDazto1 92KjO4Er2QN1306p2RrLwJmQpFnJ4U18H9Tm5H680dIXzg1f6MhKzp8ZF7s2TnKD DswSV5ocCQbgYH2bLrCXHugPjjxJv4nMvF0hYnZbiFCQxfni5VAphgaMRvZPQzl2 hFlVUs/iMgpjFdiTqlmToTLDfxDH75YSE4ob9nGd5/el/xms6H2wY9PumvLfZldi kUXsSE9X9fQ5LKaVsk9URSGkUK66TTjqlBzyZg4fccZabjT5imyK+v19Qjzb7cec 0sNjPaayPrZSi4y75DV/cMkJZnfjPK0= -----END CERTIFICATE-----Generated at Sat Jun 7 07:52:57 2025 by rpki-client