$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3e3eba54-8049-3233-a294-8d2fdcdaf96c.roa File: 3e3eba54-8049-3233-a294-8d2fdcdaf96c.roa (raw, json) Hash identifier: rQhYJBd6Hrq8jbkO82Slhm67H48iXtc8z/oHAe0SZ0A= Subject key identifier: 9B:0C:72:98:B8:0C:BD:77:74:69:0C:F8:77:9E:73:EB:C5:26:36:46 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584EFA5A8D5491F8125C3A7AAF80 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3e3eba54-8049-3233-a294-8d2fdcdaf96c.roa Signing time: Thu 27 Aug 2026 17:03:03 +0000 ROA not before: Thu 27 Aug 2026 17:03:03 +0000 ROA not after: Wed 25 Nov 2026 18:03:03 +0000 asID: 203090 IP address blocks: 108.186.129.0/24 maxlen: 24 108.186.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fa:5a:8d:54:91:f8:12:5c:3a:7a:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Aug 27 17:03:03 2026 GMT Not After : Nov 25 18:03:03 2026 GMT Subject: CN=39e4980e-d03a-438f-b7bb-76b66323df90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ac:8e:44:25:29:68:c1:4f:54:7c:0d:38:1f: 10:02:8f:1c:4c:e1:16:ed:44:1e:80:eb:43:b6:ab: cf:d8:28:7b:01:9d:ce:52:30:0a:c2:d0:22:16:97: 61:98:4c:ba:b7:8d:b9:74:ba:cb:d9:22:2a:0a:ff: 80:0f:3e:f5:2f:2c:68:7f:23:2a:91:66:be:2a:c8: 02:63:d7:d2:82:b5:e9:ca:cd:46:21:f6:fc:2d:4c: fd:3d:1e:db:36:51:a2:15:f4:47:c6:1e:95:b0:ed: 5d:9b:48:f5:f5:4d:c6:61:91:36:2c:7c:43:c1:54: ad:57:61:b7:58:7b:8f:2b:da:38:03:61:fe:14:57: bd:92:8e:16:ce:6c:f2:b9:44:04:b8:70:41:56:e0: 49:ab:32:82:3c:b0:7b:ec:0a:23:25:48:66:46:6b: 3f:d2:91:33:c6:8e:11:e6:98:76:0c:94:e4:68:ee: 60:1b:17:14:ad:73:a0:e9:c9:1f:8f:70:19:2c:99: 6f:5b:f0:4b:f4:77:f2:0e:8a:7a:22:7c:f4:0d:53: 5b:8d:e5:46:fd:6f:ae:fc:64:ab:8f:bf:99:99:e1: af:66:b0:19:ba:cc:2e:59:59:18:61:f9:d0:86:4d: 2d:f8:0f:9b:f1:ad:5d:c2:d6:38:f5:eb:a2:4f:bc: 13:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:0C:72:98:B8:0C:BD:77:74:69:0C:F8:77:9E:73:EB:C5:26:36:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3e3eba54-8049-3233-a294-8d2fdcdaf96c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 108.186.129.0/24 108.186.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b1:d9:90:d4:fe:bc:c3:a0:ef:2e:b1:30:59:2b:d3:b7:87: 85:a3:e9:e0:3b:27:59:7c:06:2e:ec:df:e1:83:06:eb:c7:53: d7:ab:9f:8c:01:42:a9:97:3b:5e:21:df:40:d8:f2:cb:9f:c5: a5:03:36:0b:5e:03:23:d5:4b:cb:67:ae:9f:96:8e:35:0d:51: a2:2a:58:7e:d8:38:56:01:b7:95:e4:e3:06:63:3f:22:1e:65: 18:04:0e:77:da:e7:0b:0c:23:9f:e4:a4:e4:f2:39:8e:c9:a4: 31:42:5b:9e:dc:47:48:5d:52:b9:8c:58:83:a3:2d:40:e3:d0: c7:f7:d4:fe:5a:da:ec:a5:20:2f:d6:73:1a:9c:8f:be:32:0f: 4f:00:1e:89:de:33:2c:b4:47:dc:fe:1c:b9:44:52:34:45:cb: d8:d1:81:09:c9:d9:54:48:de:30:11:3d:21:bd:ee:35:5e:54: e5:93:1e:26:58:ff:86:ac:a6:71:49:46:0e:e8:18:b9:c1:97: 1d:a1:38:db:67:a9:29:f0:ee:98:62:bc:25:39:73:5d:44:ac: ad:dc:62:cb:b3:1d:75:da:58:4e:7f:ba:41:71:3d:2d:40:6c: 74:91:ba:f1:7a:a3:6c:6b:44:33:63:99:4a:75:1a:73:6f:ac: 58:ce:47:d0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE76Wo1UkfgSXDp6r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDgyNzE3MDMwM1oXDTI2MTEyNTE4MDMwM1owLzEtMCsGA1UEAxMk MzllNDk4MGUtZDAzYS00MzhmLWI3YmItNzZiNjYzMjNkZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKyORCUpaMFPVHwNOB8QAo8cTOEW7UQegOtD tqvP2Ch7AZ3OUjAKwtAiFpdhmEy6t425dLrL2SIqCv+ADz71LyxofyMqkWa+KsgC Y9fSgrXpys1GIfb8LUz9PR7bNlGiFfRHxh6VsO1dm0j19U3GYZE2LHxDwVStV2G3 WHuPK9o4A2H+FFe9ko4WzmzyuUQEuHBBVuBJqzKCPLB77AojJUhmRms/0pEzxo4R 5ph2DJTkaO5gGxcUrXOg6ckfj3AZLJlvW/BL9HfyDop6Inz0DVNbjeVG/W+u/GSr j7+ZmeGvZrAZuswuWVkYYfnQhk0t+A+b8a1dwtY49euiT7wTHQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFJsMcpi4DL13dGkM+Heec+vFJjZGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvM2UzZWJhNTQtODA0OS0z MjMzLWEyOTQtOGQyZmRjZGFmOTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbLqBAwQA bLrYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIex2ZDU/rzDoO8usTBZK9O3h4Wj6eA7J1l8Bi7s3+GDBuvH U9ern4wBQqmXO14h30DY8sufxaUDNgteAyPVS8tnrp+WjjUNUaIqWH7YOFYBt5Xk 4wZjPyIeZRgEDnfa5wsMI5/kpOTyOY7JpDFCW57cR0hdUrmMWIOjLUDj0Mf31P5a 2uylIC/Wcxqcj74yD08AHoneMyy0R9z+HLlEUjRFy9jRgQnJ2VRI3jARPSG97jVe VOWTHiZY/4aspnFJRg7oGLnBlx2hONtnqSnw7phivCU5c11ErK3cYsuzHXXaWE5/ ukFxPS1AbHSRuvF6o2xrRDNjmUp1GnNvrFjOR9A= -----END CERTIFICATE-----Generated at Tue Sep 1 02:08:51 2026 by rpki-client