$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/20eb23d6-783b-3901-ad5e-e73f76ba72e3.roa File: 20eb23d6-783b-3901-ad5e-e73f76ba72e3.roa (raw, json) Hash identifier: /bugNfjN94gDDLofraPBHhGIiI01cRTykud3041f0Ec= Subject key identifier: B7:6D:4E:07:FF:79:EF:1D:EA:82:06:FB:02:42:F7:53:1A:D3:9D:2A Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584EA788B7C86E5D42A727B021A8 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/20eb23d6-783b-3901-ad5e-e73f76ba72e3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 29802 IP address blocks: 108.186.162.0/24 maxlen: 24 108.186.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Aug 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:b7:c8:6e:5d:42:a7:27:b0:21:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8a90a6b9-77c9-4c44-8b3d-2eb9de21daa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2c:f9:e9:e7:78:ba:f6:c0:07:1e:ae:c2:f5: aa:1c:61:68:3d:a9:59:7c:c8:2a:4f:da:9f:2d:0e: 67:3e:6e:6a:47:70:1a:ad:e2:60:84:4f:7f:a5:d8: bd:33:74:69:1f:a9:b9:5d:b8:6d:3d:44:bc:40:b3: f3:f2:c7:28:09:35:36:61:f3:5e:a6:ec:b9:46:8d: f3:ff:c6:f7:ce:4e:6f:39:fb:aa:b3:7d:ab:dd:83: de:f9:79:8b:c6:6d:1d:ff:96:2e:85:a9:29:a9:6d: 72:25:51:1a:08:16:af:4b:f3:d1:06:14:86:26:19: 3a:2b:37:f6:91:30:35:b9:6f:43:dc:43:e2:59:e6: 83:63:9e:d5:e8:ef:75:40:ff:9d:d4:6b:ef:13:42: 18:80:a6:2c:5f:1c:cb:d3:14:25:61:e9:9c:1e:f1: 7b:47:09:1d:ab:dc:47:d0:6d:50:c5:7c:16:a9:b1: 2c:e6:1a:84:b6:6d:a2:29:bb:a4:0e:7c:6e:3c:9a: b3:20:d5:e0:fa:bd:68:3d:72:8b:69:dd:e5:ac:0f: 1f:15:14:7f:74:1b:3e:d9:36:74:e4:7f:1f:36:5b: 3b:3e:67:c7:f3:a7:3c:39:99:30:00:09:7b:92:52: d0:0c:60:c5:57:94:55:14:6a:bf:1c:05:36:03:a2: 73:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6D:4E:07:FF:79:EF:1D:EA:82:06:FB:02:42:F7:53:1A:D3:9D:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/20eb23d6-783b-3901-ad5e-e73f76ba72e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 108.186.162.0/24 108.186.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:86:0b:76:a9:9f:45:40:92:40:59:2c:d8:0d:34:81:a7:69: ad:56:e1:6e:f5:41:7a:a0:9d:ea:33:2c:fa:af:af:48:d9:0a: 2b:78:85:4b:8b:ab:60:47:4f:4a:8e:40:84:5e:f7:4e:5a:82: 47:d2:30:d1:2c:99:a8:a2:d7:8e:ca:42:48:d3:a9:49:d7:b4: 26:9a:f4:8e:b7:55:92:9e:95:02:59:2d:d5:6c:13:eb:19:a2: e0:ca:0d:f4:0d:fd:ac:33:62:00:ce:76:15:2a:a9:f5:d8:d1: 87:af:da:31:3f:88:11:52:9d:32:eb:cb:3f:2c:ba:ac:37:e0: f5:8c:19:57:ad:45:43:1d:36:10:31:6c:d2:de:2e:3f:16:13: 13:32:21:9b:b7:af:9a:6b:93:00:90:fc:0c:77:a5:93:49:3e: a5:40:d6:8c:15:a6:3c:62:44:7e:32:e4:27:af:d7:9f:a9:7b: 37:93:19:67:e4:d2:fe:d3:7a:3c:6d:0a:9a:fb:67:23:4b:f3: ff:52:76:26:36:0d:d3:92:4a:d2:1b:04:69:2f:98:e1:74:f1: 2c:12:37:02:2a:db:fc:c1:0e:de:ef:a4:90:59:f2:50:fc:eb: e6:ea:bb:15:e7:fb:8d:44:99:13:26:64:c9:66:39:f8:e3:d9: a4:5e:52:47 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6niLfIbl1CpyewIagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGE5MGE2YjktNzdjOS00YzQ0LThiM2QtMmViOWRlMjFkYWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSz56ed4uvbABx6uwvWqHGFoPalZfMgqT9qf LQ5nPm5qR3AareJghE9/pdi9M3RpH6m5XbhtPUS8QLPz8scoCTU2YfNepuy5Ro3z /8b3zk5vOfuqs32r3YPe+XmLxm0d/5YuhakpqW1yJVEaCBavS/PRBhSGJhk6Kzf2 kTA1uW9D3EPiWeaDY57V6O91QP+d1GvvE0IYgKYsXxzL0xQlYemcHvF7Rwkdq9xH 0G1QxXwWqbEs5hqEtm2iKbukDnxuPJqzINXg+r1oPXKLad3lrA8fFRR/dBs+2TZ0 5H8fNls7PmfH86c8OZkwAAl7klLQDGDFV5RVFGq/HAU2A6JzswIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFLdtTgf/ee8d6oIG+wJC91Ma050qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMjBlYjIzZDYtNzgzYi0z OTAxLWFkNWUtZTczZjc2YmE3MmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbLqiAwQA bLqrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFyGC3apn0VAkkBZLNgNNIGnaa1W4W71QXqgneozLPqvr0jZ Cit4hUuLq2BHT0qOQIRe905agkfSMNEsmaii147KQkjTqUnXtCaa9I63VZKelQJZ LdVsE+sZouDKDfQN/awzYgDOdhUqqfXY0Yev2jE/iBFSnTLryz8suqw34PWMGVet RUMdNhAxbNLeLj8WExMyIZu3r5prkwCQ/Ax3pZNJPqVA1owVpjxiRH4y5Cev15+p ezeTGWfk0v7TejxtCpr7ZyNL8/9SdiY2DdOSStIbBGkvmOF08SwSNwIq2/zBDt7v pJBZ8lD86+bquxXn+41EmRMmZMlmOfjj2aReUkc= -----END CERTIFICATE-----Generated at Mon Aug 24 01:48:41 2026 by rpki-client