$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/66c3ccdc-8e6c-32e6-9299-14efbc883724.roa File: 66c3ccdc-8e6c-32e6-9299-14efbc883724.roa (raw, json) Hash identifier: aKXmluge8HtSeZ+jLCj2P9nIUn3huJK/NfSYiT33UfI= Subject key identifier: B6:7F:E9:BB:11:9D:32:0A:C5:3E:37:D4:3D:15:88:79:33:70:80:3B Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584B41E71A0C83D6C7E8E7ACF340 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/66c3ccdc-8e6c-32e6-9299-14efbc883724.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 398823 IP address blocks: 107.148.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:1a:0c:83:d6:c7:e8:e7:ac:f3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=5c935730-2fff-484c-a2bd-d6fc5261b2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ae:96:72:dc:df:01:bd:83:7c:28:e2:03:7c: d0:df:6c:bb:4d:fb:5b:8f:65:1c:4d:8e:70:d1:59: de:df:86:a0:34:93:83:ca:b3:cc:3a:80:d6:7b:e6: f9:51:56:8d:dc:5e:da:64:2d:01:21:c2:d1:73:55: 94:25:fe:bb:c9:be:ba:7b:66:f6:27:68:c8:55:ae: 31:eb:63:a1:f2:0d:68:38:62:a9:d7:27:cd:c4:77: d8:89:62:4a:1f:68:5c:f8:a6:65:09:79:e6:83:94: d3:ac:d6:6a:c7:c5:0e:af:69:8a:f6:c3:41:38:b2: c6:d1:4d:25:65:78:1c:67:b2:a3:35:ee:c5:d0:b4: 0a:f8:4a:69:f4:20:c2:d2:61:b3:6f:64:18:cc:22: da:53:7d:15:b9:f5:ee:17:22:48:4e:d0:e5:08:7f: de:59:7d:13:11:1e:4c:7d:a2:a2:78:d1:b3:3e:b1: e7:4f:67:61:32:f3:a7:76:85:eb:4b:c1:98:06:c5: 4d:b4:39:b2:78:87:65:7d:7f:08:f7:5f:a3:7c:4d: b5:62:fc:e1:d2:82:9c:10:13:f2:12:60:dc:10:b1: 3d:3e:87:0d:08:70:eb:d3:19:97:a3:6a:fa:08:64: c1:21:6d:3f:83:97:4a:4c:af:ec:46:68:d4:11:18: bf:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7F:E9:BB:11:9D:32:0A:C5:3E:37:D4:3D:15:88:79:33:70:80:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/66c3ccdc-8e6c-32e6-9299-14efbc883724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d9:55:f2:36:0b:98:d5:16:e5:b2:b6:cc:e1:fa:f2:b1:b6: 69:a6:ea:34:e3:2c:eb:3c:c1:3a:ed:12:17:88:fa:48:16:4d: c5:b9:80:be:4b:d4:f7:4c:d2:b2:49:5d:49:93:d6:7c:50:c3: f1:db:5d:92:53:08:82:1c:a2:87:09:93:cc:35:43:db:11:02: dd:b4:32:c6:22:0a:b1:7a:73:c8:61:e5:d2:12:3b:f1:3a:81: 25:b6:c5:b8:6a:a9:d8:89:c5:13:45:75:e2:99:27:6b:f4:1e: 41:f2:8d:1f:88:6f:5a:e1:70:a3:88:3d:1a:e2:ff:c3:fb:7e: ef:9d:57:5a:42:5e:6e:a0:94:85:a9:55:21:b1:63:04:82:82: db:cf:32:77:42:aa:ce:65:3c:04:d1:99:f4:fe:ee:d9:6b:f6: 5e:79:45:d3:30:83:8b:2d:93:ae:85:b0:59:48:de:17:1a:58: 08:b0:d0:aa:d6:91:c3:2f:84:37:6d:37:c7:46:9f:9c:52:3c: a0:4c:e9:bc:d8:c0:7b:05:e9:82:0f:62:84:5d:0c:59:cc:67: 3e:e4:e5:b1:86:23:a1:0b:a1:d2:a5:62:6c:9a:e4:3f:75:94: 9f:a5:2e:52:80:fd:8c:72:79:fd:88:e9:7a:75:a6:40:cf:46: 54:bf:c2:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xoMg9bH6Oes80AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NWM5MzU3MzAtMmZmZi00ODRjLWEyYmQtZDZmYzUyNjFiMmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq6WctzfAb2DfCjiA3zQ32y7Tftbj2UcTY5w 0Vne34agNJODyrPMOoDWe+b5UVaN3F7aZC0BIcLRc1WUJf67yb66e2b2J2jIVa4x 62Oh8g1oOGKp1yfNxHfYiWJKH2hc+KZlCXnmg5TTrNZqx8UOr2mK9sNBOLLG0U0l ZXgcZ7KjNe7F0LQK+Epp9CDC0mGzb2QYzCLaU30VufXuFyJITtDlCH/eWX0TER5M faKieNGzPrHnT2dhMvOndoXrS8GYBsVNtDmyeIdlfX8I91+jfE21Yvzh0oKcEBPy EmDcELE9PocNCHDr0xmXo2r6CGTBIW0/g5dKTK/sRmjUERi/GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZ/6bsRnTIKxT431D0ViHkzcIA7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNjZjM2NjZGMtOGU2Yy0z MmU2LTkyOTktMTRlZmJjODgzNzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDa5QQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnZVfI2C5jVFuWytszh+vKxtmmm6jTjLOs8wTrtEheI+kgWTcW5gL5L 1PdM0rJJXUmT1nxQw/HbXZJTCIIcoocJk8w1Q9sRAt20MsYiCrF6c8hh5dISO/E6 gSW2xbhqqdiJxRNFdeKZJ2v0HkHyjR+Ib1rhcKOIPRri/8P7fu+dV1pCXm6glIWp VSGxYwSCgtvPMndCqs5lPATRmfT+7tlr9l55RdMwg4stk66FsFlI3hcaWAiw0KrW kcMvhDdtN8dGn5xSPKBM6bzYwHsF6YIPYoRdDFnMZz7k5bGGI6ELodKlYmya5D91 lJ+lLlKA/Yxyef2I6Xp1pkDPRlS/wiE= -----END CERTIFICATE-----Generated at Sat Oct 25 04:44:20 2025 by rpki-client