$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/538f37f8-040e-3e20-a524-0fbf425aebc9.roa File: 538f37f8-040e-3e20-a524-0fbf425aebc9.roa (raw, json) Hash identifier: g/SO4zZJ0AjSkCnBgCA+IaXYw4rCMPpcPgVGmu/z3nQ= Subject key identifier: 13:5A:9A:60:8E:22:9C:7B:92:E9:20:BE:D5:CF:15:0F:AC:0D:AC:29 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584F8B0DA013789E4C9CCC1EDD80 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/538f37f8-040e-3e20-a524-0fbf425aebc9.roa Signing time: Sun 18 Oct 2026 13:00:12 +0000 ROA not before: Sun 18 Oct 2026 13:00:12 +0000 ROA not after: Sat 16 Jan 2027 14:00:12 +0000 asID: 54600 IP address blocks: 107.149.212.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8b:0d:a0:13:78:9e:4c:9c:cc:1e:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Oct 18 13:00:12 2026 GMT Not After : Jan 16 14:00:12 2027 GMT Subject: CN=75811c13-1df7-4fcd-8dce-3ec287e60e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:04:24:8f:81:2e:ba:1a:1c:fe:84:f6:16:31: 0e:fb:64:53:1e:b2:b2:0a:4e:fe:08:76:bc:b3:a5: ff:0b:3a:3f:cf:f9:c1:39:ee:ed:eb:f0:05:d5:42: e4:2e:2a:5e:65:3c:1a:7b:0b:01:23:27:56:7d:8b: 20:42:12:28:b1:05:7e:b9:aa:5a:5e:20:f2:93:fa: 89:8b:42:50:89:27:73:27:cd:54:d7:36:54:e2:6e: 5e:09:d1:e6:c8:4c:e7:02:ab:bb:60:70:5f:a0:b3: 65:fd:42:8d:a7:99:9e:ec:12:c1:9d:f3:e3:2c:6e: 59:31:06:fa:c6:c9:d5:75:9e:4d:c4:b2:e3:95:5c: 47:5a:1c:4a:f9:2d:f7:a7:b6:bc:45:4a:9c:cb:2b: 69:10:18:44:5d:62:f6:3d:f6:82:d7:32:71:ea:cc: 3b:bd:3c:ae:01:ef:75:06:83:e8:84:d7:04:27:f2: 36:6c:de:b8:16:ba:71:4e:01:e6:9a:08:35:a2:b3: 5a:f9:51:b0:42:2a:c8:d9:55:d9:71:4a:6e:cd:e9: 78:7b:75:0f:6d:74:93:99:1d:a4:ce:89:24:1e:af: 93:1e:51:c6:40:13:0f:fe:9c:79:20:af:d4:dc:b4: 08:ac:ab:44:0f:2d:73:e2:cd:07:b9:0c:55:0f:68: 1e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5A:9A:60:8E:22:9C:7B:92:E9:20:BE:D5:CF:15:0F:AC:0D:AC:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/538f37f8-040e-3e20-a524-0fbf425aebc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:a1:55:c3:a2:e6:3c:d2:c2:5c:25:39:ae:35:af:fd:7d:a6: c9:1b:d7:f2:71:d9:67:82:38:64:54:2d:b1:6f:f6:4c:18:89: f1:93:c7:3c:0a:18:a2:d9:12:23:81:21:86:9f:b4:5b:24:0e: 42:38:45:38:e1:53:6a:09:df:be:5b:3e:6e:76:33:d4:5f:b3: 92:b5:f3:66:18:23:c1:73:b8:cb:37:12:e9:1a:10:0f:c8:fd: 8a:b8:09:fd:1b:5c:8b:01:c7:18:f0:67:e2:c3:19:f9:b4:2d: 36:3d:d6:79:2c:49:3c:e5:40:a8:37:fb:75:92:db:09:55:6c: 70:d9:20:0b:44:0f:7a:fc:62:7f:d0:c1:0e:e8:ae:cd:2f:27: 33:05:a1:a0:12:5d:41:9d:e0:86:b0:0d:46:c8:e0:f4:b9:ef: 5c:22:e4:6f:76:b6:58:1f:0e:bf:28:fa:59:56:27:f2:8f:fa: 24:90:a9:07:4f:26:5b:9e:3f:a1:42:b4:db:40:5d:bc:b7:de: 39:d5:db:19:1e:32:e3:c9:bc:9a:5c:25:db:4a:2c:2c:21:42: ae:c2:02:28:1c:de:5b:b9:d8:0b:f6:74:7a:be:5c:94:de:22: 01:e3:3d:bd:0c:9d:0d:b8:29:b0:bf:cb:ed:a3:0a:22:45:34: 1e:54:2b:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+LDaATeJ5MnMwe3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MTAxODEzMDAxMloXDTI3MDExNjE0MDAxMlowLzEtMCsGA1UEAxMk NzU4MTFjMTMtMWRmNy00ZmNkLThkY2UtM2VjMjg3ZTYwZTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAQkj4Euuhoc/oT2FjEO+2RTHrKyCk7+CHa8 s6X/Czo/z/nBOe7t6/AF1ULkLipeZTwaewsBIydWfYsgQhIosQV+uapaXiDyk/qJ i0JQiSdzJ81U1zZU4m5eCdHmyEznAqu7YHBfoLNl/UKNp5me7BLBnfPjLG5ZMQb6 xsnVdZ5NxLLjlVxHWhxK+S33p7a8RUqcyytpEBhEXWL2PfaC1zJx6sw7vTyuAe91 BoPohNcEJ/I2bN64FrpxTgHmmgg1orNa+VGwQirI2VXZcUpuzel4e3UPbXSTmR2k zokkHq+THlHGQBMP/px5IK/U3LQIrKtEDy1z4s0HuQxVD2geGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNammCOIpx7kukgvtXPFQ+sDawpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNTM4ZjM3ZjgtMDQwZS0z ZTIwLWE1MjQtMGZiZjQyNWFlYmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5XUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2hVcOi5jzSwlwlOa41r/19pskb1/Jx2WeCOGRULbFv9kwYifGTxzwK GKLZEiOBIYaftFskDkI4RTjhU2oJ375bPm52M9Rfs5K182YYI8FzuMs3EukaEA/I /Yq4Cf0bXIsBxxjwZ+LDGfm0LTY91nksSTzlQKg3+3WS2wlVbHDZIAtED3r8Yn/Q wQ7ors0vJzMFoaASXUGd4IawDUbI4PS571wi5G92tlgfDr8o+llWJ/KP+iSQqQdP JlueP6FCtNtAXby33jnV2xkeMuPJvJpcJdtKLCwhQq7CAigc3lu52Av2dHq+XJTe IgHjPb0MnQ24KbC/y+2jCiJFNB5UKzI= -----END CERTIFICATE-----Generated at Mon Oct 26 11:42:27 2026 by rpki-client