$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/40e8cab8-a1ff-3e92-aa1a-d0ffe18ca800.roa File: 40e8cab8-a1ff-3e92-aa1a-d0ffe18ca800.roa (raw, json) Hash identifier: e92tSumsLDWb+xFq2GKkqtQc2q8yY6xGd2G3G+j418g= Subject key identifier: 5D:E1:9A:B0:C2:7D:E0:A3:23:E8:C5:0A:01:18:D3:7C:A6:28:0D:07 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584F4986F070F4BC2068758CD200 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/40e8cab8-a1ff-3e92-aa1a-d0ffe18ca800.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23532 IP address blocks: 108.186.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:f0:70:f4:bc:20:68:75:8c:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=caa93d93-ad30-4bb4-bdc2-71844b5635ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a3:fa:ee:0b:5e:d8:79:b7:62:ba:52:54:d3: 9c:72:6a:36:97:31:2a:9b:15:ba:9d:40:0c:7d:71: 14:d5:42:d5:b0:53:88:7f:96:a0:10:f5:6d:cd:d1: 34:86:5d:62:41:34:4c:08:3d:8e:50:81:e7:8c:39: 32:8d:d5:13:9b:1e:b7:9c:de:55:6d:2c:58:42:70: 12:42:a4:42:4e:dc:80:ec:64:3a:da:2b:f1:92:7e: bc:f3:18:18:ec:b9:d1:e0:45:64:7b:8f:9d:a8:98: 4f:86:ca:4b:9e:b8:fc:b9:48:1e:fa:8e:2c:81:02: e9:6f:c0:f0:60:20:a8:78:87:3a:8e:c5:12:74:56: 7e:9e:10:bc:6f:b1:a1:ff:74:46:e1:ce:22:93:68: 0e:6a:0f:22:b9:8c:b6:44:9a:9f:ff:be:6e:db:82: 04:11:5c:0a:1a:fa:42:96:2a:63:c7:74:23:57:03: d1:22:59:8c:14:47:1f:02:5d:c9:af:a7:84:e3:3d: c9:8b:a1:79:8e:51:de:5e:68:db:90:7f:55:d2:f0: 38:14:6c:59:bd:2a:d3:e9:e6:af:4c:dd:16:39:cb: d0:0d:ef:6c:2d:d0:96:21:0c:04:8d:a1:35:fe:5c: 87:ce:ce:0e:7b:33:09:65:2b:1b:15:37:90:92:46: 7a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E1:9A:B0:C2:7D:E0:A3:23:E8:C5:0A:01:18:D3:7C:A6:28:0D:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/40e8cab8-a1ff-3e92-aa1a-d0ffe18ca800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 108.186.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:67:b4:13:57:ca:83:b2:53:d8:91:93:0f:99:e5:67:12:ca: 74:18:87:ab:e9:5f:1d:ab:16:43:e1:f6:dd:ec:92:21:b8:6c: 5e:95:5d:c1:f1:5c:f1:b6:52:9b:e7:35:29:e3:89:8c:79:08: 75:50:22:f0:13:0b:a5:f0:68:11:8f:72:d8:0a:19:63:9a:83: 48:79:1b:15:9a:93:f8:f5:6e:84:42:90:98:58:d0:8f:98:1d: 8c:76:0e:5e:07:b7:52:2e:cf:9d:0d:4b:65:9f:df:a4:ab:f1: bd:27:2b:1f:2a:68:c4:c8:91:9c:0f:05:bd:89:81:c4:21:8e: 38:27:0a:bd:77:18:f1:8d:9b:a6:aa:54:e6:52:21:79:57:bd: d3:38:41:41:f2:7f:a4:1b:b5:f1:09:60:fd:c6:83:db:2e:f9: ea:fe:13:57:e5:55:6c:16:e7:96:43:8c:d3:94:cb:bd:0c:ab: da:5b:c9:77:e8:06:d9:00:86:ba:45:0b:72:3e:45:c3:3d:24: 20:bb:73:8c:7e:76:86:22:8b:a3:c4:a1:59:d7:34:2f:3f:34: ba:51:1b:12:5a:fe:7c:bf:36:54:83:c8:6f:08:e3:c1:a8:a9: 12:bf:44:36:06:c1:d9:94:01:ce:ee:f7:29:10:a2:21:2b:ba: 88:fa:f0:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhvBw9LwgaHWM0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2FhOTNkOTMtYWQzMC00YmI0LWJkYzItNzE4NDRiNTYzNWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6P67gte2Hm3YrpSVNOccmo2lzEqmxW6nUAM fXEU1ULVsFOIf5agEPVtzdE0hl1iQTRMCD2OUIHnjDkyjdUTmx63nN5VbSxYQnAS QqRCTtyA7GQ62ivxkn688xgY7LnR4EVke4+dqJhPhspLnrj8uUge+o4sgQLpb8Dw YCCoeIc6jsUSdFZ+nhC8b7Gh/3RG4c4ik2gOag8iuYy2RJqf/75u24IEEVwKGvpC lipjx3QjVwPRIlmMFEcfAl3Jr6eE4z3Ji6F5jlHeXmjbkH9V0vA4FGxZvSrT6eav TN0WOcvQDe9sLdCWIQwEjaE1/lyHzs4OezMJZSsbFTeQkkZ6TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3hmrDCfeCjI+jFCgEY03ymKA0HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNDBlOGNhYjgtYTFmZi0z ZTkyLWFhMWEtZDBmZmUxOGNhODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbLpkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdntBNXyoOyU9iRkw+Z5WcSynQYh6vpXx2rFkPh9t3skiG4bF6VXcHx XPG2UpvnNSnjiYx5CHVQIvATC6XwaBGPctgKGWOag0h5GxWak/j1boRCkJhY0I+Y HYx2Dl4Ht1Iuz50NS2Wf36Sr8b0nKx8qaMTIkZwPBb2JgcQhjjgnCr13GPGNm6aq VOZSIXlXvdM4QUHyf6QbtfEJYP3Gg9su+er+E1flVWwW55ZDjNOUy70Mq9pbyXfo BtkAhrpFC3I+RcM9JCC7c4x+doYii6PEoVnXNC8/NLpRGxJa/ny/NlSDyG8I48Go qRK/RDYGwdmUAc7u9ykQoiEruoj68AE= -----END CERTIFICATE-----Generated at Mon Oct 26 06:22:41 2026 by rpki-client