$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3dc8f288-a2d8-37a3-91bd-d79eb8a909ac.roa File: 3dc8f288-a2d8-37a3-91bd-d79eb8a909ac.roa (raw, json) Hash identifier: 2ZIyXjwmdCk5uIqNXsTP6wD7ujyCVrai+nKVZTA2DJc= Subject key identifier: 20:5A:FC:4D:30:3B:A4:F9:80:1C:5D:2C:5A:00:59:04:A6:A9:29:4C Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584EE390517D6A82F7D8B2FBBD80 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3dc8f288-a2d8-37a3-91bd-d79eb8a909ac.roa Signing time: Wed 19 Aug 2026 13:07:47 +0000 ROA not before: Wed 19 Aug 2026 13:07:47 +0000 ROA not after: Tue 17 Nov 2026 14:07:47 +0000 asID: 16509 IP address blocks: 107.148.249.0/24 maxlen: 24 107.149.44.0/24 maxlen: 24 107.149.51.0/24 maxlen: 24 107.149.183.0/24 maxlen: 24 108.186.73.0/24 maxlen: 24 108.186.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:90:51:7d:6a:82:f7:d8:b2:fb:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Aug 19 13:07:47 2026 GMT Not After : Nov 17 14:07:47 2026 GMT Subject: CN=279a4188-72bc-45c8-b28e-eeab12ee5da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:6c:2e:16:27:2b:46:d4:f5:f6:6e:a2:de: c5:64:e5:7d:0a:e3:4b:87:f8:44:0a:1e:af:fa:28: b9:50:5e:c0:7d:27:76:3f:19:6f:83:f4:08:f9:9d: 31:75:71:b7:fd:4b:e9:74:96:76:97:b1:f6:72:64: 68:77:37:d6:a8:c7:68:17:b5:90:44:0e:83:dd:09: 7f:41:4f:b1:27:e3:b2:07:bc:c0:fd:a4:a7:26:68: 0d:c2:19:2a:16:4b:26:96:55:f7:05:33:cd:f3:b6: 73:1c:09:de:a0:53:7e:b1:20:12:d8:30:f2:6a:67: 8e:4e:73:6d:05:32:08:35:9b:e7:fa:b3:85:9b:de: 49:55:b8:70:53:0f:06:c9:c3:87:a8:ee:14:8d:63: fe:65:06:30:9b:72:4f:53:e5:29:5f:1e:cf:0c:0a: 44:4c:1e:d6:df:4f:bb:d6:0e:d3:15:7f:3d:2f:46: 88:ca:e9:85:76:1a:1a:8d:4c:09:32:b4:53:c5:f2: 41:a0:ad:48:95:d4:3a:c9:28:ed:da:59:2f:27:67: 73:b2:f9:a4:9e:b1:78:3a:04:c4:6f:d9:2f:93:0a: 27:63:26:d9:95:c0:50:86:be:3e:25:0b:e6:73:8a: e3:79:54:66:6c:95:b5:df:bb:84:f1:aa:c9:98:63: 4d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5A:FC:4D:30:3B:A4:F9:80:1C:5D:2C:5A:00:59:04:A6:A9:29:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3dc8f288-a2d8-37a3-91bd-d79eb8a909ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.249.0/24 107.149.44.0/24 107.149.51.0/24 107.149.183.0/24 108.186.73.0/24 108.186.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:a6:05:92:6d:0f:a6:ec:57:b1:36:2d:d0:83:9d:63:3d:e9: a6:b1:66:7e:3f:ac:36:d9:cb:bf:e1:17:c2:56:5f:cc:9e:7f: ec:68:7e:02:97:57:83:ae:de:11:59:da:8f:42:dc:8a:b1:1d: 1b:6c:9e:dc:1d:c7:53:96:a7:2a:08:1e:f6:64:95:c2:b6:b6: cc:71:85:1e:b0:01:8d:7e:db:bc:ba:f9:96:77:b8:21:dc:f9: 09:86:8f:28:fc:b4:14:44:d3:ff:aa:f1:7a:22:d7:bd:98:cb: 03:85:c8:98:75:62:18:e1:b3:47:67:32:12:62:d8:73:a3:b9: 32:9c:a7:78:02:ca:13:31:b4:27:bf:c3:bf:cd:af:dd:87:0c: ba:7b:c0:51:b9:e4:16:34:c5:f4:60:09:44:8b:94:26:b4:1e: e8:fd:aa:2e:20:60:76:a0:57:83:be:18:8c:c4:56:ce:2b:c2: 29:3e:61:3d:83:ff:b9:a0:45:5b:f7:99:a8:64:fd:0b:a1:1b: 44:dc:6d:b6:2d:7b:f2:a2:a2:29:84:94:26:15:31:3a:70:79: 64:40:4c:93:df:f7:e1:0c:d8:70:43:9c:f3:78:81:9d:19:23: 39:22:50:c5:56:b6:4e:39:55:fa:f5:02:99:9f:f2:b5:16:3f: 93:e3:c7:a2 -----BEGIN CERTIFICATE----- MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWE7jkFF9aoL32LL7vYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDgxOTEzMDc0N1oXDTI2MTExNzE0MDc0N1owLzEtMCsGA1UEAxMk Mjc5YTQxODgtNzJiYy00NWM4LWIyOGUtZWVhYjEyZWU1ZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxtsLhYnK0bU9fZuot7FZOV9CuNLh/hECh6v +ii5UF7AfSd2Pxlvg/QI+Z0xdXG3/UvpdJZ2l7H2cmRodzfWqMdoF7WQRA6D3Ql/ QU+xJ+OyB7zA/aSnJmgNwhkqFksmllX3BTPN87ZzHAneoFN+sSAS2DDyameOTnNt BTIINZvn+rOFm95JVbhwUw8GycOHqO4UjWP+ZQYwm3JPU+UpXx7PDApETB7W30+7 1g7TFX89L0aIyumFdhoajUwJMrRTxfJBoK1IldQ6ySjt2lkvJ2dzsvmknrF4OgTE b9kvkwonYybZlcBQhr4+JQvmc4rjeVRmbJW137uE8arJmGNNQwIDAQABo4IDczCC A28wHQYDVR0OBBYEFCBa/E0wO6T5gBxdLFoAWQSmqSlMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvM2RjOGYyODgtYTJkOC0z N2EzLTkxYmQtZDc5ZWI4YTkwOWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAa5T5AwQA a5UsAwQAa5UzAwQAa5W3AwQAbLpJAwQAbLr5MFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIemBZJtD6bsV7E2 LdCDnWM96aaxZn4/rDbZy7/hF8JWX8yef+xofgKXV4Ou3hFZ2o9C3IqxHRtsntwd x1OWpyoIHvZklcK2tsxxhR6wAY1+27y6+ZZ3uCHc+QmGjyj8tBRE0/+q8Xoi172Y ywOFyJh1Yhjhs0dnMhJi2HOjuTKcp3gCyhMxtCe/w7/Nr92HDLp7wFG55BY0xfRg CUSLlCa0Huj9qi4gYHagV4O+GIzEVs4rwik+YT2D/7mgRVv3mahk/QuhG0TcbbYt e/KioimElCYVMTpweWRATJPf9+EM2HBDnPN4gZ0ZIzkiUMVWtk45Vfr1Apmf8rUW P5Pjx6I= -----END CERTIFICATE-----Generated at Thu Sep 10 10:11:45 2026 by rpki-client