$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa File: 7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa (raw, json) Hash identifier: lrYZbAJ9OhqmCWOJ609ghd/au/CTvTFJYRGDPMUAk3k= Subject key identifier: 21:7B:B9:29:6B:55:D1:44:F6:71:6E:EE:C9:7F:FC:3C:9F:0B:FC:0B Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584DE2B5EBDADFB6B5CF4DC94C40 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 398823 IP address blocks: 107.149.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:eb:da:df:b6:b5:cf:4d:c9:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=8b8f142c-d0b3-4a75-b0e0-c88e8d0da98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4b:44:4a:14:05:5b:93:21:1d:cf:24:0a:a8: 3a:5d:aa:c4:27:3c:b9:de:0c:7d:cf:89:fe:36:29: b5:04:c0:b8:f5:8b:07:0d:7b:b6:50:ec:d5:56:d2: e8:f5:9a:13:fc:d4:04:64:05:2a:bb:d2:c4:27:a0: 3b:31:c5:2f:db:75:15:ad:60:b1:ed:eb:b6:52:8e: 93:c7:6a:f6:c8:ee:25:32:a5:b3:40:af:67:76:bb: 2f:68:4f:04:66:7e:a8:fb:e0:22:23:a4:58:56:c4: 5e:56:67:14:58:dc:f9:0d:04:7d:11:0f:df:36:4d: 4c:70:f7:f5:c2:a6:53:89:17:53:7c:8e:1b:16:c6: ba:53:11:d7:31:8f:6a:e6:7c:c6:7e:b6:4c:2f:ea: 84:d0:54:6e:f5:9d:0a:7a:15:df:3a:e6:45:54:89: d2:9b:9b:2a:a1:37:ba:2e:5f:ed:ec:a6:36:8e:ad: f1:1a:85:aa:6f:c6:70:42:7d:86:14:22:a5:55:92: 7e:2a:4d:43:9b:ff:d8:5c:2f:ed:ec:1b:85:0f:af: 74:13:58:9a:55:d9:03:80:85:8d:15:6b:59:d8:90: d8:6f:88:15:a4:38:62:a7:19:a5:54:7d:04:14:83: e1:eb:d5:ac:4c:3e:ee:ec:b7:d5:b6:5c:40:01:87: f5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7B:B9:29:6B:55:D1:44:F6:71:6E:EE:C9:7F:FC:3C:9F:0B:FC:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:8f:ae:c0:db:6e:87:b1:92:62:a5:a9:09:30:35:bc:d3:d9: 37:4b:9e:91:5d:53:3f:0c:6f:ef:f4:4a:e0:ce:5b:cf:d9:83: ba:a3:5d:aa:e1:02:f1:e4:58:1f:57:65:b1:0c:06:27:e8:1e: e5:a1:a2:2e:fe:80:12:aa:76:27:b8:3b:17:57:00:76:da:c1: 9b:7e:7e:01:e7:1f:3d:50:53:03:b0:b7:e9:c9:65:03:ee:db: 83:46:6c:cc:6c:25:66:88:3a:d7:c2:7f:d6:32:15:e5:98:5f: 6d:be:2a:a8:e0:90:a7:7b:ea:49:98:21:48:f6:48:e4:9a:80: a6:5c:cd:0d:49:d1:92:70:80:4b:29:10:c5:90:c2:47:0a:21: 69:52:4e:9c:c7:fe:f8:a6:4e:44:26:11:29:e3:21:ca:87:49: 75:2f:4b:ac:b3:bf:d2:7f:18:22:78:13:66:ac:66:e3:4a:54: 15:50:fe:ea:bb:6f:3e:f5:c6:f3:38:c1:7a:c3:a6:79:5c:0f: 8b:2d:c0:b2:ef:99:9d:2b:32:db:ed:1f:1c:7d:7e:c2:f4:e9: 5e:bc:29:e5:7a:84:3c:57:34:cd:97:ce:af:42:15:73:69:a4: 1f:69:e0:71:a0:7d:d4:37:ea:73:a3:9d:db:44:84:a2:34:37: 60:4b:bd:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3iteva37a1z03JTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk OGI4ZjE0MmMtZDBiMy00YTc1LWIwZTAtYzg4ZThkMGRhOThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50tEShQFW5MhHc8kCqg6XarEJzy53gx9z4n+ Nim1BMC49YsHDXu2UOzVVtLo9ZoT/NQEZAUqu9LEJ6A7McUv23UVrWCx7eu2Uo6T x2r2yO4lMqWzQK9ndrsvaE8EZn6o++AiI6RYVsReVmcUWNz5DQR9EQ/fNk1McPf1 wqZTiRdTfI4bFsa6UxHXMY9q5nzGfrZML+qE0FRu9Z0KehXfOuZFVInSm5sqoTe6 Ll/t7KY2jq3xGoWqb8ZwQn2GFCKlVZJ+Kk1Dm//YXC/t7BuFD690E1iaVdkDgIWN FWtZ2JDYb4gVpDhipxmlVH0EFIPh69WsTD7u7LfVtlxAAYf1sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCF7uSlrVdFE9nFu7sl//DyfC/wLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNzUzM2Y1Y2QtYzhjZi0z OTU2LThjYjgtNTg4N2E0YzNlOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5XMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISPrsDbboexkmKlqQkwNbzT2TdLnpFdUz8Mb+/0SuDOW8/Zg7qjXarh AvHkWB9XZbEMBifoHuWhoi7+gBKqdie4OxdXAHbawZt+fgHnHz1QUwOwt+nJZQPu 24NGbMxsJWaIOtfCf9YyFeWYX22+KqjgkKd76kmYIUj2SOSagKZczQ1J0ZJwgEsp EMWQwkcKIWlSTpzH/vimTkQmESnjIcqHSXUvS6yzv9J/GCJ4E2asZuNKVBVQ/uq7 bz71xvM4wXrDpnlcD4stwLLvmZ0rMtvtHxx9fsL06V68KeV6hDxXNM2Xzq9CFXNp pB9p4HGgfdQ36nOjndtEhKI0N2BLvQk= -----END CERTIFICATE-----Generated at Thu Jun 11 14:25:26 2026 by rpki-client