$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5dfeb917-a385-3099-9ea1-7fddca024267.roa File: 5dfeb917-a385-3099-9ea1-7fddca024267.roa (raw, json) Hash identifier: 7FEbVDE5jBpVvA2HYoPQk/FGrt7LEaIsS6zMqwCV+L8= Subject key identifier: 69:4A:C2:02:48:F2:17:49:A0:3B:84:27:BC:D0:4F:F4:4A:53:C8:58 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584D94945A10C0CB98522E1CD980 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5dfeb917-a385-3099-9ea1-7fddca024267.roa Signing time: Tue 21 Apr 2026 13:20:07 +0000 ROA not before: Tue 21 Apr 2026 13:20:07 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 54600 IP address blocks: 104.233.184.0/24 maxlen: 24 107.149.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:94:5a:10:c0:cb:98:52:2e:1c:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Apr 21 13:20:07 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=f52652a0-2460-4b68-9376-21850278892a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:06:f4:b9:d4:c6:39:ea:38:ce:f9:90:8e:ce: f1:a2:68:e7:80:8b:c4:49:f8:2f:82:9d:98:a3:49: 15:3a:ec:67:ef:1e:df:27:0f:5a:b8:9b:86:9e:69: 1b:35:25:23:97:4c:ea:8f:6a:d7:5c:f7:cd:73:d8: 5d:33:1e:60:d0:92:2e:2f:6e:60:34:7d:f1:1c:38: d2:90:95:f5:f0:c4:a5:4b:11:31:c6:d0:4a:fe:fb: 22:ea:fb:4d:82:83:3f:ef:5a:61:c5:f8:87:57:55: 6e:a7:2b:6d:3e:63:cb:72:27:82:87:74:1f:b5:14: bd:10:fe:be:d2:1a:3c:be:ee:87:c3:5c:ff:a4:76: 29:dc:7d:0f:5b:ba:ce:5c:7a:51:5f:12:e4:7d:33: 15:6b:c5:77:c8:d9:2f:b4:ce:10:b1:28:d1:49:1e: 80:3c:f4:85:49:30:24:de:2e:d1:9e:bc:2a:c4:26: 1a:3c:ab:23:64:12:d6:ae:09:bf:ed:49:27:80:38: 86:32:71:e6:2e:f1:5b:3f:62:e9:51:e8:c6:4b:e7: f0:43:e9:2e:05:72:d1:96:c9:74:1f:9b:6e:d2:cb: e5:a0:e8:8c:bd:80:5c:64:7e:2a:f4:b1:03:dc:ee: 6b:79:dc:eb:0a:74:43:04:76:a0:fd:6f:07:06:ab: be:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4A:C2:02:48:F2:17:49:A0:3B:84:27:BC:D0:4F:F4:4A:53:C8:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5dfeb917-a385-3099-9ea1-7fddca024267.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 104.233.184.0/24 107.149.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:9e:54:d5:42:cc:ba:90:a3:81:f7:46:a6:d3:aa:ee:b2:7b: c1:45:99:09:d0:9c:a1:e9:0b:41:2e:47:3d:76:1f:09:45:aa: 48:4b:c0:0b:4a:6a:51:c0:a8:6f:0b:b3:60:fe:b1:e0:cf:d4: 63:02:f5:b9:18:f2:2f:0d:76:0f:04:e1:41:40:4f:70:9a:22: fe:ce:d7:6c:35:e4:b4:d1:95:03:70:4b:d7:5e:bd:1f:a2:48: 65:08:05:73:20:3d:5f:66:3d:ad:c4:95:ac:e3:ee:de:02:23: ac:1f:90:28:75:9a:40:7e:d9:75:8c:53:eb:ae:27:1f:15:0d: 4d:db:83:b2:bd:df:62:a1:d6:37:1f:49:93:3c:d9:e1:a2:d7: c9:2f:ec:29:cb:9a:ea:d9:5d:6e:27:41:8c:48:db:de:c7:cc: a7:48:23:27:c7:a0:cc:92:a3:cd:b8:8b:76:a8:c9:4a:02:1f: aa:fc:5a:64:05:4b:17:5b:4b:e5:9d:fa:c7:c9:6f:ac:11:c0: 60:66:9a:02:a2:9d:78:bb:fb:89:d1:1f:62:cb:a7:da:ea:70: ac:b4:58:77:fe:92:f3:8d:4e:c3:0c:77:70:82:27:b7:a5:57: 45:66:58:bd:24:fd:2d:23:f4:3d:6f:99:83:83:8c:5b:79:15: ac:7a:58:01 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2UlFoQwMuYUi4c2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDQyMTEzMjAwN1oXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk ZjUyNjUyYTAtMjQ2MC00YjY4LTkzNzYtMjE4NTAyNzg4OTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAb0udTGOeo4zvmQjs7xomjngIvESfgvgp2Y o0kVOuxn7x7fJw9auJuGnmkbNSUjl0zqj2rXXPfNc9hdMx5g0JIuL25gNH3xHDjS kJX18MSlSxExxtBK/vsi6vtNgoM/71phxfiHV1VupyttPmPLcieCh3QftRS9EP6+ 0ho8vu6Hw1z/pHYp3H0PW7rOXHpRXxLkfTMVa8V3yNkvtM4QsSjRSR6APPSFSTAk 3i7RnrwqxCYaPKsjZBLWrgm/7UkngDiGMnHmLvFbP2LpUejGS+fwQ+kuBXLRlsl0 H5tu0svloOiMvYBcZH4q9LED3O5redzrCnRDBHag/W8HBqu+fQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGlKwgJI8hdJoDuEJ7zQT/RKU8hYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNWRmZWI5MTctYTM4NS0z MDk5LTllYTEtN2ZkZGNhMDI0MjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaOm4AwQA a5VXMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACGeVNVCzLqQo4H3RqbTqu6ye8FFmQnQnKHpC0EuRz12HwlF qkhLwAtKalHAqG8Ls2D+seDP1GMC9bkY8i8Ndg8E4UFAT3CaIv7O12w15LTRlQNw S9devR+iSGUIBXMgPV9mPa3Elazj7t4CI6wfkCh1mkB+2XWMU+uuJx8VDU3bg7K9 32Kh1jcfSZM82eGi18kv7CnLmurZXW4nQYxI297HzKdIIyfHoMySo824i3aoyUoC H6r8WmQFSxdbS+Wd+sfJb6wRwGBmmgKinXi7+4nRH2LLp9rqcKy0WHf+kvONTsMM d3CCJ7elV0VmWL0k/S0j9D1vmYODjFt5Fax6WAE= -----END CERTIFICATE-----Generated at Mon Apr 27 08:38:01 2026 by rpki-client