$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3c28e33c-4477-30d5-891c-2a23219d3d29.roa File: 3c28e33c-4477-30d5-891c-2a23219d3d29.roa (raw, json) Hash identifier: qT4CcS1xSAZ15eWzBayDkTkK6/GT0nwFKqXa5viXdqg= Subject key identifier: AC:1C:77:7F:3B:22:39:34:21:68:C3:BA:07:9B:5E:A8:8B:1D:1E:83 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584F1E2D0480107C76614E9EBB00 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3c28e33c-4477-30d5-891c-2a23219d3d29.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 402514 IP address blocks: 108.186.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2d:04:80:10:7c:76:61:4e:9e:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=68f3d162-c4e6-4259-b4bf-57edd835a46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f0:e1:4c:b1:02:93:c9:88:aa:0c:ea:48:8d: f4:90:41:59:b2:b8:9f:30:8b:98:bb:e1:48:72:9b: a2:1a:d4:26:cb:d7:a6:92:9d:32:5c:1e:af:4c:b4: 46:aa:86:63:78:21:e9:7c:f6:1e:ee:44:87:26:9e: 77:86:15:ac:7a:e7:5b:76:76:08:09:37:58:bf:0b: 64:83:87:79:be:1c:9c:2d:cd:42:18:de:ee:17:96: 8b:e7:a5:5e:f8:a3:52:95:73:f0:81:c4:6f:e2:81: b4:3a:c9:71:dd:21:96:38:64:a1:f3:7f:6b:5c:6d: a2:da:be:90:3d:45:32:7a:34:ed:fe:8f:18:18:31: 53:5f:0b:99:81:25:a1:d8:86:18:a9:3a:59:8f:17: 73:a0:89:ec:36:e3:7c:9d:31:2b:93:cf:02:76:c3: c1:b4:a4:d5:b1:d5:83:6a:61:31:4d:40:a9:43:cb: 93:ce:87:b6:12:eb:41:26:27:b1:67:3f:73:c7:96: 64:14:99:f9:08:2c:79:5c:b2:cd:46:97:f1:39:0f: 7d:40:0d:b2:be:b6:b3:63:76:a3:15:17:58:72:46: 6c:53:d3:94:3c:a5:18:65:30:8a:47:80:02:88:c3: aa:4b:ed:e7:ad:cd:f1:0a:c3:5d:5b:ab:d9:4e:0d: c3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1C:77:7F:3B:22:39:34:21:68:C3:BA:07:9B:5E:A8:8B:1D:1E:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3c28e33c-4477-30d5-891c-2a23219d3d29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 108.186.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:73:dc:01:38:a6:45:43:8b:b4:4e:be:0b:7a:10:0f:22:96: b2:b6:f4:a5:95:07:36:85:fc:59:d9:0d:25:db:82:d0:42:a0: b2:12:d0:7c:7e:85:b8:04:c6:ca:fb:c3:e4:fe:88:80:57:8f: ad:40:12:a6:b8:d7:22:b7:d3:ac:29:06:c4:b9:9f:5d:ed:75: 8f:4b:74:fb:78:7e:29:53:41:9a:f9:06:39:cc:d1:60:d4:d2: a1:2b:db:ce:1a:89:86:70:99:72:a8:40:27:99:25:e1:22:08: 05:ab:70:70:b2:2a:c9:30:44:11:56:92:4b:ca:72:ed:8a:00: c2:57:e5:33:99:e0:77:36:e9:03:c7:bc:b6:d2:4d:f4:86:4b: be:65:4f:38:34:10:62:9b:c6:a4:2a:a8:16:05:64:0a:da:91: 81:26:b6:89:72:65:ae:3d:fb:f0:64:b8:f9:1a:97:bc:ad:03: 09:34:20:64:6f:e2:bb:eb:fd:2f:ff:af:4a:53:69:65:5e:96: 32:2e:b9:3c:1e:27:cb:5d:89:93:de:38:4d:ad:b7:9c:7b:46: 1a:4c:ec:b2:35:d2:4f:60:53:a7:c0:d9:ab:b6:17:4e:b9:b6: 68:13:1f:e4:62:58:52:82:12:c9:fe:c5:5d:b1:d2:d8:04:23: 26:69:62:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLQSAEHx2YU6euwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk NjhmM2QxNjItYzRlNi00MjU5LWI0YmYtNTdlZGQ4MzVhNDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/DhTLECk8mIqgzqSI30kEFZsrifMIuYu+FI cpuiGtQmy9emkp0yXB6vTLRGqoZjeCHpfPYe7kSHJp53hhWseudbdnYICTdYvwtk g4d5vhycLc1CGN7uF5aL56Ve+KNSlXPwgcRv4oG0Oslx3SGWOGSh839rXG2i2r6Q PUUyejTt/o8YGDFTXwuZgSWh2IYYqTpZjxdzoInsNuN8nTErk88CdsPBtKTVsdWD amExTUCpQ8uTzoe2EutBJiexZz9zx5ZkFJn5CCx5XLLNRpfxOQ99QA2yvrazY3aj FRdYckZsU9OUPKUYZTCKR4ACiMOqS+3nrc3xCsNdW6vZTg3DzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwcd387Ijk0IWjDugebXqiLHR6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvM2MyOGUzM2MtNDQ3Ny0z MGQ1LTg5MWMtMmEyMzIxOWQzZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLqDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1z3AE4pkVDi7ROvgt6EA8ilrK29KWVBzaF/FnZDSXbgtBCoLIS0Hx+ hbgExsr7w+T+iIBXj61AEqa41yK306wpBsS5n13tdY9LdPt4filTQZr5BjnM0WDU 0qEr284aiYZwmXKoQCeZJeEiCAWrcHCyKskwRBFWkkvKcu2KAMJX5TOZ4Hc26QPH vLbSTfSGS75lTzg0EGKbxqQqqBYFZArakYEmtolyZa49+/BkuPkal7ytAwk0IGRv 4rvr/S//r0pTaWVeljIuuTweJ8tdiZPeOE2tt5x7RhpM7LI10k9gU6fA2au2F065 tmgTH+RiWFKCEsn+xV2x0tgEIyZpYjM= -----END CERTIFICATE-----Generated at Thu Sep 10 08:22:29 2026 by rpki-client