$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4f36d1c9-033d-349b-9046-cecacf32d7de.roa File: 4f36d1c9-033d-349b-9046-cecacf32d7de.roa (raw, json) Hash identifier: JX1Hpdqt1RnMBsFAUd69n7U0/d4XGSexeYbt3f6Rbrg= Subject key identifier: A7:0C:76:9E:82:D7:92:EB:8B:34:9E:25:8E:A8:24:DC:54:0C:43:04 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584B41E71D3440508A06169E5DC0 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4f36d1c9-033d-349b-9046-cecacf32d7de.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 398993 IP address blocks: 107.149.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:1d:34:40:50:8a:06:16:9e:5d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=5509deb4-cbaf-42e6-9aaf-f8601dbd3cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ec:9a:d1:45:13:a2:9d:3d:dc:1f:a7:cb:2e: 63:f5:04:94:7a:91:20:ed:af:47:d4:fb:5f:70:36: ab:f8:f6:38:7f:4f:c6:41:84:17:ee:82:5c:fd:80: 4a:53:b4:b5:54:59:6f:bc:52:48:61:96:c3:55:e7: 57:cd:65:a3:2a:34:27:31:a8:33:a8:d8:bc:6f:40: 2a:a4:7a:31:75:74:e0:54:22:7d:68:73:7d:85:57: 4a:5b:a5:b2:3d:64:5c:ec:6f:52:86:99:c8:ec:0f: 4a:ef:60:76:8a:51:f2:2f:54:1e:74:40:b1:80:ed: db:fe:12:11:f1:71:c5:6e:61:ad:f7:cb:c2:80:e2: 39:9f:3c:f6:03:07:0d:98:c0:23:80:bb:34:d2:ad: 18:96:db:98:de:e3:8b:65:bf:6d:6d:ee:ac:e5:d9: 58:bf:15:29:de:e2:52:98:c5:06:32:30:e1:08:81: 57:83:9b:9c:d5:a9:9f:3d:b2:af:38:5e:d1:aa:63: 1c:72:c5:78:06:76:b8:ed:8e:1c:0c:6b:78:06:f2: 91:5a:3c:ec:40:19:95:b8:89:66:d7:18:68:81:c2: a8:ac:e3:9e:bb:38:9d:51:02:05:24:d9:5a:39:47: c4:63:ce:55:df:b5:4d:7f:30:e7:0e:92:1e:9f:e2: 7e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0C:76:9E:82:D7:92:EB:8B:34:9E:25:8E:A8:24:DC:54:0C:43:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4f36d1c9-033d-349b-9046-cecacf32d7de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:a3:a1:08:8e:83:ad:6a:61:a5:a5:81:09:f8:57:22:a0:0d: 0a:7c:77:90:e2:55:fe:a7:fe:1b:5d:1a:da:e4:21:4f:d4:ea: f8:85:a4:09:e1:e9:fb:8a:e1:33:1f:6a:af:a9:1f:be:17:cd: 5d:f0:98:08:e2:43:47:be:15:fc:e4:4a:5b:c3:09:ef:2b:83: 81:e4:df:2f:1d:46:86:48:85:12:a0:21:ad:2a:b2:89:f5:af: 58:0c:08:c4:f4:38:c3:65:5f:c8:b1:e9:87:84:ee:4d:bc:28: 52:2a:6c:00:e0:ec:94:c1:bc:ab:2e:ae:0f:62:28:ec:91:e3: d9:ec:6c:77:e6:9d:3d:01:44:c1:13:63:d8:71:54:f6:b8:33: 23:70:5b:3c:8d:22:9d:b3:ce:8a:f4:7c:79:aa:ab:2e:18:74: 26:13:c7:33:2e:a1:c8:22:ca:b4:e7:6b:68:dd:68:15:31:40: 38:7c:08:a4:90:9a:22:0b:d8:f8:54:f7:13:6c:3d:0c:d7:99: 76:9e:5e:75:45:2c:8c:a0:9c:4c:68:b0:0a:cf:fc:f4:32:9f: 25:49:84:2e:5b:52:c1:7d:f9:fe:2b:e6:85:42:97:f3:de:49: cc:ab:0e:de:1b:f1:c0:50:79:bc:62:1c:d9:53:e1:a7:8b:15: 24:25:82:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5x00QFCKBhaeXcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NTUwOWRlYjQtY2JhZi00MmU2LTlhYWYtZjg2MDFkYmQzY2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeya0UUTop093B+nyy5j9QSUepEg7a9H1Ptf cDar+PY4f0/GQYQX7oJc/YBKU7S1VFlvvFJIYZbDVedXzWWjKjQnMagzqNi8b0Aq pHoxdXTgVCJ9aHN9hVdKW6WyPWRc7G9ShpnI7A9K72B2ilHyL1QedECxgO3b/hIR 8XHFbmGt98vCgOI5nzz2AwcNmMAjgLs00q0YltuY3uOLZb9tbe6s5dlYvxUp3uJS mMUGMjDhCIFXg5uc1amfPbKvOF7RqmMccsV4Bna47Y4cDGt4BvKRWjzsQBmVuIlm 1xhogcKorOOeuzidUQIFJNlaOUfEY85V37VNfzDnDpIen+J+OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcMdp6C15LrizSeJY6oJNxUDEMEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNGYzNmQxYzktMDMzZC0z NDliLTkwNDYtY2VjYWNmMzJkN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5X7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESjoQiOg61qYaWlgQn4VyKgDQp8d5DiVf6n/htdGtrkIU/U6viFpAnh 6fuK4TMfaq+pH74XzV3wmAjiQ0e+FfzkSlvDCe8rg4Hk3y8dRoZIhRKgIa0qson1 r1gMCMT0OMNlX8ix6YeE7k28KFIqbADg7JTBvKsurg9iKOyR49nsbHfmnT0BRMET Y9hxVPa4MyNwWzyNIp2zzor0fHmqqy4YdCYTxzMuocgiyrTna2jdaBUxQDh8CKSQ miIL2PhU9xNsPQzXmXaeXnVFLIygnExosArP/PQynyVJhC5bUsF9+f4r5oVCl/Pe ScyrDt4b8cBQebxiHNlT4aeLFSQlgqE= -----END CERTIFICATE-----Generated at Sat Oct 25 04:44:21 2025 by rpki-client