$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/2533bef4-81c9-396a-8da4-1b0483ca5475.roa File: 2533bef4-81c9-396a-8da4-1b0483ca5475.roa (raw, json) Hash identifier: G75j63Gc9XWLxnLOfwxKWMd7j2AzQTw2FCbx0hL9GVc= Subject key identifier: 0D:FF:01:D7:EA:2E:B8:1D:E5:61:77:F7:19:49:24:9D:73:F2:B3:87 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584D32DC58ABAE9BD7E7909D5940 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/2533bef4-81c9-396a-8da4-1b0483ca5475.roa Signing time: Tue 17 Mar 2026 13:15:58 +0000 ROA not before: Tue 17 Mar 2026 13:15:58 +0000 ROA not after: Mon 15 Jun 2026 13:15:58 +0000 asID: 398478 IP address blocks: 107.148.36.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:dc:58:ab:ae:9b:d7:e7:90:9d:59:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Mar 17 13:15:58 2026 GMT Not After : Jun 15 13:15:58 2026 GMT Subject: CN=992c18e3-ef91-4d64-bff9-8de208f1ce2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:74:57:22:72:74:6d:b5:f8:71:89:48:af:e9: 69:2c:99:93:51:12:3a:f4:52:1a:a1:a2:be:e2:43: c9:4a:28:68:87:eb:2f:e6:d1:fa:20:d0:31:34:31: 1b:0b:f9:9a:73:f5:d7:c7:0f:59:e0:6a:c9:6e:42: 01:ca:9f:71:25:0d:d0:65:f1:33:8e:d1:b8:6c:60: 5c:27:63:25:0f:76:79:41:5a:10:07:3e:02:eb:0d: 3d:93:ef:08:47:7d:41:99:07:72:43:d3:df:fd:c9: 42:6d:bf:18:5d:19:9c:3c:ba:8b:36:ca:42:03:2e: b9:3a:8a:47:c0:ef:ba:67:60:4d:e9:57:55:1c:3d: dc:79:13:39:cf:24:26:60:97:80:d2:c9:fa:8b:3a: 6a:5f:ff:60:1a:e6:72:fe:b6:ff:a3:68:49:f7:5b: 68:9e:d8:c9:2a:82:dc:72:17:0d:a5:a2:0e:6b:df: ff:44:c3:6a:a3:2b:d1:15:4c:33:21:11:50:16:f8: 59:f1:1d:43:39:20:09:db:d4:a2:b6:81:16:ce:07: 62:c8:75:fd:f3:1c:93:10:b4:4a:dd:59:52:07:58: 75:db:0b:c3:71:7d:55:90:57:98:86:09:52:7e:7e: bd:a7:8e:0b:d1:71:5a:fb:e5:57:a9:7b:6e:2a:bd: 54:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FF:01:D7:EA:2E:B8:1D:E5:61:77:F7:19:49:24:9D:73:F2:B3:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/2533bef4-81c9-396a-8da4-1b0483ca5475.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:a5:5c:d0:69:c5:59:19:1b:c8:b9:53:f1:de:8c:96:ec:08: 88:95:ab:bc:ae:42:4b:b7:28:60:7d:76:57:5d:8f:20:bf:e4: 7a:bf:93:7d:79:dd:b3:58:e3:b3:34:24:41:b2:7d:1e:29:24: c9:8f:c9:19:48:31:cc:89:4a:31:2d:be:ba:8f:20:d6:fb:fb: 4c:c7:74:db:80:f5:fc:77:9a:d3:5e:5e:ee:60:7e:90:89:ff: a4:54:43:59:08:84:ec:a8:35:7a:01:65:f7:f8:47:0f:2a:85: 14:94:70:59:ac:11:17:eb:06:00:d4:90:75:18:b6:69:b9:43: 05:57:90:d5:ed:f7:c0:f7:14:78:69:6f:3d:69:ec:b1:3d:bb: e1:24:b5:6c:69:b5:ce:43:9b:f6:82:a6:47:42:5d:4e:27:de: d0:09:a6:36:1a:49:84:24:2e:20:a0:07:7e:d3:99:4e:3f:04: 88:07:cf:c7:41:96:61:0a:83:cd:b1:4b:89:ee:7f:e9:9e:df: 6d:2e:0c:10:cc:80:1c:3a:01:ec:9e:88:c3:f9:db:9b:0f:b4: 2c:f3:e1:1d:17:fe:f4:5b:65:89:a5:85:53:9c:b2:d5:8e:3b: f5:46:ad:6d:f4:8d:e5:43:f1:40:91:4b:62:b9:b8:df:c1:4b: c4:37:d1:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0y3FirrpvX55CdWUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDMxNzEzMTU1OFoXDTI2MDYxNTEzMTU1OFowLzEtMCsGA1UEAxMk OTkyYzE4ZTMtZWY5MS00ZDY0LWJmZjktOGRlMjA4ZjFjZTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXRXInJ0bbX4cYlIr+lpLJmTURI69FIaoaK+ 4kPJSihoh+sv5tH6INAxNDEbC/mac/XXxw9Z4GrJbkIByp9xJQ3QZfEzjtG4bGBc J2MlD3Z5QVoQBz4C6w09k+8IR31BmQdyQ9Pf/clCbb8YXRmcPLqLNspCAy65OopH wO+6Z2BN6VdVHD3ceRM5zyQmYJeA0sn6izpqX/9gGuZy/rb/o2hJ91tontjJKoLc chcNpaIOa9//RMNqoyvRFUwzIRFQFvhZ8R1DOSAJ29SitoEWzgdiyHX98xyTELRK 3VlSB1h12wvDcX1VkFeYhglSfn69p44L0XFa++VXqXtuKr1UTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3/AdfqLrgd5WF39xlJJJ1z8rOHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMjUzM2JlZjQtODFjOS0z OTZhLThkYTQtMWIwNDgzY2E1NDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5QkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2lXNBpxVkZG8i5U/HejJbsCIiVq7yuQku3KGB9dlddjyC/5Hq/k315 3bNY47M0JEGyfR4pJMmPyRlIMcyJSjEtvrqPINb7+0zHdNuA9fx3mtNeXu5gfpCJ /6RUQ1kIhOyoNXoBZff4Rw8qhRSUcFmsERfrBgDUkHUYtmm5QwVXkNXt98D3FHhp bz1p7LE9u+EktWxptc5Dm/aCpkdCXU4n3tAJpjYaSYQkLiCgB37TmU4/BIgHz8dB lmEKg82xS4nuf+me320uDBDMgBw6AeyeiMP525sPtCzz4R0X/vRbZYmlhVOcstWO O/VGrW30jeVD8UCRS2K5uN/BS8Q30Xs= -----END CERTIFICATE-----Generated at Sun Mar 22 04:30:02 2026 by rpki-client