$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6a80ea3e-db9e-347a-9ed1-11489e83291e.roa File: 6a80ea3e-db9e-347a-9ed1-11489e83291e.roa (raw, json) Hash identifier: cqQuPktYlJm80oH49+xFzNaHQ31aHhFDDesn7D0ZpzE= Subject key identifier: 89:1E:98:C6:5F:C9:25:58:E2:47:F2:C8:22:76:EC:CC:50:E5:AB:E8 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584D949186469C90C93FDD4A6980 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6a80ea3e-db9e-347a-9ed1-11489e83291e.roa Signing time: Tue 21 Apr 2026 13:14:25 +0000 ROA not before: Tue 21 Apr 2026 13:14:25 +0000 ROA not after: Mon 20 Jul 2026 13:14:25 +0000 asID: 398478 IP address blocks: 107.149.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:91:86:46:9c:90:c9:3f:dd:4a:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Apr 21 13:14:25 2026 GMT Not After : Jul 20 13:14:25 2026 GMT Subject: CN=4fa0ca36-242f-4539-9797-2ec94e2da6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:41:6d:21:9b:d2:3b:2c:c9:61:f2:12:da:50: ea:30:c8:e9:82:26:2b:ed:a4:03:95:f6:29:e1:ba: 90:67:aa:d9:70:ba:4a:87:fe:8a:b8:bf:1f:0b:e7: 75:2d:d0:13:b3:1a:80:1d:35:76:e6:8b:16:6d:64: 48:5a:91:da:70:3c:5a:02:bb:aa:26:53:55:53:55: 4f:05:fd:fe:01:3a:7c:f4:b5:78:5c:dc:f7:fd:05: d5:5d:14:17:be:b1:e8:c9:14:24:be:b2:46:55:5f: 64:33:6a:52:ff:de:3b:e9:c6:6f:49:2d:fb:90:be: 85:a8:11:2c:83:31:ab:9f:67:e9:d3:fe:db:2d:ca: 80:77:7c:fd:ff:bc:1f:35:c9:73:6b:2d:3a:14:a4: 2f:12:17:00:c8:f7:9a:c4:98:dd:66:10:19:93:0f: 0d:51:ff:8d:1a:62:78:95:1b:01:16:71:32:b0:04: 77:3e:82:a7:0f:df:2f:74:f5:b6:d4:e4:d1:06:af: 07:ba:47:b3:76:c5:ff:37:db:67:a5:be:0d:a6:d4: f7:16:28:a6:d3:e6:ff:f3:c4:6b:17:a6:b7:ef:12: 23:fd:10:67:eb:7f:3c:e8:37:a5:d8:00:87:da:c1: 06:91:c2:af:5e:78:2b:78:af:8a:cf:7d:18:a8:a0: 5b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1E:98:C6:5F:C9:25:58:E2:47:F2:C8:22:76:EC:CC:50:E5:AB:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/6a80ea3e-db9e-347a-9ed1-11489e83291e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:22:b8:26:6e:8b:c9:ee:1f:4c:ed:9f:52:b4:c1:7e:cf:e9: 86:8e:03:2a:5f:e8:cb:29:57:3c:15:cd:a9:c9:73:2e:c2:5e: e0:8c:2a:fa:68:d7:1d:ee:ef:b6:79:77:ce:2b:12:db:25:d8: ee:60:77:9d:01:20:26:5d:dc:f0:e2:78:90:80:0a:29:3c:f4: 0b:72:76:5c:9b:0e:43:b9:0c:95:2d:57:4a:4a:54:67:31:0c: 57:9c:12:b9:67:01:25:f2:27:e7:89:85:c8:b4:ff:d7:a1:a6: 92:84:34:9c:8b:49:9c:23:87:5a:f2:ec:ad:ff:b9:9b:19:04: 11:3d:85:44:52:50:a9:85:84:79:e4:75:25:d3:1f:50:77:96: d6:ac:6f:01:06:c0:6a:10:05:74:a8:44:fb:e8:1b:5d:ec:b8: b4:11:38:08:55:3c:b2:65:27:79:53:13:66:9c:61:fc:1e:c0: 73:08:83:58:ce:64:51:b4:93:2b:09:80:d7:a7:d4:e7:87:6d: df:f0:bb:38:c1:80:84:f4:aa:0d:0b:60:a6:81:2d:4b:33:1a: 7a:38:72:c1:1a:9d:fa:1d:ad:78:f3:a2:c5:0f:bf:93:96:df: 81:7b:a7:7e:4d:29:f7:7d:93:4a:57:51:fe:2d:a2:a3:51:88: 29:1b:69:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UkYZGnJDJP91KaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDQyMTEzMTQyNVoXDTI2MDcyMDEzMTQyNVowLzEtMCsGA1UEAxMk NGZhMGNhMzYtMjQyZi00NTM5LTk3OTctMmVjOTRlMmRhNmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkFtIZvSOyzJYfIS2lDqMMjpgiYr7aQDlfYp 4bqQZ6rZcLpKh/6KuL8fC+d1LdATsxqAHTV25osWbWRIWpHacDxaAruqJlNVU1VP Bf3+ATp89LV4XNz3/QXVXRQXvrHoyRQkvrJGVV9kM2pS/9476cZvSS37kL6FqBEs gzGrn2fp0/7bLcqAd3z9/7wfNclzay06FKQvEhcAyPeaxJjdZhAZkw8NUf+NGmJ4 lRsBFnEysAR3PoKnD98vdPW21OTRBq8HukezdsX/N9tnpb4NptT3Fiim0+b/88Rr F6a37xIj/RBn63886Del2ACH2sEGkcKvXngreK+Kz30YqKBbbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkemMZfySVY4kfyyCJ27MxQ5avoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNmE4MGVhM2UtZGI5ZS0z NDdhLTllZDEtMTE0ODllODMyOTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5VWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8iuCZui8nuH0ztn1K0wX7P6YaOAypf6MspVzwVzanJcy7CXuCMKvpo 1x3u77Z5d84rEtsl2O5gd50BICZd3PDieJCACik89AtydlybDkO5DJUtV0pKVGcx DFecErlnASXyJ+eJhci0/9ehppKENJyLSZwjh1ry7K3/uZsZBBE9hURSUKmFhHnk dSXTH1B3ltasbwEGwGoQBXSoRPvoG13suLQROAhVPLJlJ3lTE2acYfwewHMIg1jO ZFG0kysJgNen1OeHbd/wuzjBgIT0qg0LYKaBLUszGno4csEanfodrXjzosUPv5OW 34F7p35NKfd9k0pXUf4toqNRiCkbab4= -----END CERTIFICATE-----Generated at Mon Apr 27 08:34:08 2026 by rpki-client