$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/200dddb4-498e-3fbd-84af-46d9cc7fe2a6.roa File: 200dddb4-498e-3fbd-84af-46d9cc7fe2a6.roa (raw, json) Hash identifier: iA5dYmha7WHnxEOGkBzSo/YwRrX2qZcLhzjTSvQm//E= Subject key identifier: EC:DF:EC:C2:6B:C7:C0:7F:FA:8B:47:5B:C2:41:B0:25:4C:42:31:31 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584AE461477012D88F7DE095E250 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/200dddb4-498e-3fbd-84af-46d9cc7fe2a6.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 398478 IP address blocks: 107.149.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:47:70:12:d8:8f:7d:e0:95:e2:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=eaa51b09-2f32-44fb-a49f-f336f015f0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8c:22:a3:85:a4:66:0e:cd:2c:1e:83:ee:7e: 54:82:99:ca:ea:d7:7d:65:97:48:c7:18:94:c8:e4: 29:1f:95:f7:0f:22:4a:44:84:f2:66:27:ab:78:84: 1a:21:e5:fc:40:90:64:72:0f:c8:e1:66:2a:67:94: 19:c2:10:fa:df:55:5b:bf:d5:94:d1:5a:ac:64:17: 8c:13:43:ec:b9:06:e7:00:24:19:70:9c:e0:d3:49: 1a:41:58:67:c2:cf:b8:1c:4b:39:81:d9:54:de:24: ce:80:15:31:e4:1e:d6:e0:4f:2c:9c:d9:7b:df:c1: 8d:62:95:93:85:8e:07:73:06:21:67:e1:99:6a:84: 0f:94:ff:b6:69:11:e7:68:70:28:37:17:05:c3:85: f0:3f:e4:63:d0:46:7e:7f:55:1c:7f:1b:1e:a3:f1: 89:c6:89:48:8e:f4:c7:d9:65:ef:fc:2c:5f:f8:24: b6:06:f4:40:f1:d4:5d:f8:b3:94:20:8e:bb:a3:f1: 70:fa:55:e4:e1:92:95:ff:29:40:ff:44:86:d1:6c: 76:63:6a:39:fc:a4:40:65:69:13:62:17:48:cb:d5: b3:57:0f:2c:f1:13:98:02:b7:85:03:6d:0b:59:d0: a9:0a:37:ea:7f:8a:28:ba:54:8c:ce:84:75:e0:3f: 7b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:DF:EC:C2:6B:C7:C0:7F:FA:8B:47:5B:C2:41:B0:25:4C:42:31:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/200dddb4-498e-3fbd-84af-46d9cc7fe2a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:b4:98:20:15:46:8a:b8:2e:2f:79:b6:a2:03:61:23:06:cf: 12:79:32:11:63:99:bc:e6:33:d7:61:3f:e6:97:cf:8f:5d:89: 4b:8c:01:a7:c2:32:29:e8:96:33:fd:2e:9b:e1:fd:0a:8f:1d: da:17:fe:68:99:3d:b3:88:ed:35:10:0e:7a:26:9e:77:c1:c6: cf:f8:3d:d3:d8:de:d0:67:17:97:38:f3:77:9c:05:bf:b8:45: e3:9b:6c:f1:f8:78:e9:25:b4:2d:d8:73:71:58:86:93:71:07: 93:9e:ff:c6:2f:a1:78:5e:69:bc:a9:80:d5:b4:c8:58:30:ce: 0b:32:e3:8d:3f:1d:58:57:fa:0f:b4:ed:2f:13:8a:41:5b:26: 87:ec:18:0d:09:7d:7e:a7:fa:96:0e:6b:da:3b:8f:28:26:00: 68:59:80:40:54:7d:cb:54:72:1d:3b:9f:c5:97:f8:65:49:c2: c2:45:cf:6e:1e:71:96:e6:80:9e:be:66:c7:25:9c:3c:55:6d: 4b:c5:c6:e4:7f:4c:c0:c8:aa:40:41:d5:2c:1f:41:9c:c1:8c: 92:a6:69:52:13:31:f7:eb:35:17:7c:ea:58:e9:a7:0f:22:64: 8a:94:68:c2:a5:df:87:20:ae:25:89:c8:34:43:cf:10:b5:9c: 46:de:32:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYUdwEtiPfeCV4lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk ZWFhNTFiMDktMmYzMi00NGZiLWE0OWYtZjMzNmYwMTVmMGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIwio4WkZg7NLB6D7n5UgpnK6td9ZZdIxxiU yOQpH5X3DyJKRITyZiereIQaIeX8QJBkcg/I4WYqZ5QZwhD631Vbv9WU0VqsZBeM E0PsuQbnACQZcJzg00kaQVhnws+4HEs5gdlU3iTOgBUx5B7W4E8snNl738GNYpWT hY4HcwYhZ+GZaoQPlP+2aRHnaHAoNxcFw4XwP+Rj0EZ+f1Ucfxseo/GJxolIjvTH 2WXv/Cxf+CS2BvRA8dRd+LOUII67o/Fw+lXk4ZKV/ylA/0SG0Wx2Y2o5/KRAZWkT YhdIy9WzVw8s8ROYAreFA20LWdCpCjfqf4ooulSMzoR14D976wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOzf7MJrx8B/+otHW8JBsCVMQjExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMjAwZGRkYjQtNDk4ZS0z ZmJkLTg0YWYtNDZkOWNjN2ZlMmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5WEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFO0mCAVRoq4Li95tqIDYSMGzxJ5MhFjmbzmM9dhP+aXz49diUuMAafC MinoljP9Lpvh/QqPHdoX/miZPbOI7TUQDnomnnfBxs/4PdPY3tBnF5c483ecBb+4 ReObbPH4eOkltC3Yc3FYhpNxB5Oe/8YvoXheabypgNW0yFgwzgsy440/HVhX+g+0 7S8TikFbJofsGA0JfX6n+pYOa9o7jygmAGhZgEBUfctUch07n8WX+GVJwsJFz24e cZbmgJ6+ZsclnDxVbUvFxuR/TMDIqkBB1SwfQZzBjJKmaVITMffrNRd86ljppw8i ZIqUaMKl34cgriWJyDRDzxC1nEbeMlE= -----END CERTIFICATE-----Generated at Sat Oct 25 04:44:20 2025 by rpki-client