$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7b10d37a-00eb-3ace-a9bb-b938fee706f0.roa File: 7b10d37a-00eb-3ace-a9bb-b938fee706f0.roa (raw, json) Hash identifier: xKXPqCfD2odS8R0N60+e5i2NC21l1kT3GKJjr5gcebo= Subject key identifier: D9:E4:BE:32:85:CC:45:87:C7:69:F6:12:39:F7:85:8B:B5:3A:43:36 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584E41F90BAF11BEB92331225400 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7b10d37a-00eb-3ace-a9bb-b938fee706f0.roa Signing time: Mon 22 Jun 2026 15:57:51 +0000 ROA not before: Mon 22 Jun 2026 15:57:51 +0000 ROA not after: Sun 20 Sep 2026 15:57:51 +0000 asID: 2914 IP address blocks: 107.149.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:f9:0b:af:11:be:b9:23:31:22:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jun 22 15:57:51 2026 GMT Not After : Sep 20 15:57:51 2026 GMT Subject: CN=a17d9fc1-febc-44b7-b5d5-108624b58ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:da:0a:f5:ad:3b:56:ef:53:42:14:9a:4f:f2: d8:36:ed:61:c5:3f:1e:f8:e1:d1:06:8e:cd:71:67: f7:52:6d:ce:8d:c1:72:5c:05:8c:55:f5:1d:a1:fa: 94:4b:3c:6a:2a:9d:fc:eb:32:69:cc:96:f0:2a:30: d1:6a:0f:34:f5:57:7e:1c:e2:0f:5b:44:b3:c6:a8: 03:47:27:02:b9:b4:fc:e8:40:34:2a:50:8c:66:55: 81:27:8d:61:6e:dd:0d:b7:68:bb:26:ed:1f:4a:6e: 1b:9d:c7:5a:b6:e9:a4:59:31:bb:50:2e:23:f7:6b: 30:5d:d9:c5:44:7c:22:c9:a8:a1:d6:51:2c:d8:6a: 60:4b:d1:f6:08:57:a4:d7:65:3c:dc:14:d6:c4:12: 2c:8d:d5:7c:b3:f6:0d:bf:c6:6a:9a:9d:13:47:76: 38:4f:49:1b:ba:5b:bc:df:df:b0:46:5b:1f:15:b5: 4c:e5:04:fe:c4:eb:84:94:aa:59:96:c1:29:db:2e: 98:96:b2:c0:12:c8:fa:91:76:c6:ba:8f:53:67:c7: 66:f0:d5:aa:a1:38:a4:6e:20:db:e2:97:16:a9:06: de:ba:4b:02:51:e5:0a:1f:a5:b1:55:a4:c3:2a:39: d1:0a:52:95:1b:8f:92:10:09:a8:34:7c:03:de:dd: 6f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E4:BE:32:85:CC:45:87:C7:69:F6:12:39:F7:85:8B:B5:3A:43:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7b10d37a-00eb-3ace-a9bb-b938fee706f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:5e:a7:7d:9c:87:04:1f:9a:dc:43:17:f8:78:15:bd:0b:f5: 61:68:18:9b:04:3e:ba:2e:4b:a3:b5:26:55:f7:12:0e:15:04: b5:cb:b9:2f:87:d7:2a:cb:cc:d1:56:a5:4a:38:12:1e:14:42: ef:ac:d9:90:4b:ba:c9:5f:c5:90:19:19:ac:db:fb:20:a5:c1: 27:4a:db:7f:6e:f4:a4:6c:57:39:68:fe:51:e9:b6:9f:2f:d4: 3b:c7:81:b3:c9:f3:12:2b:32:bf:35:b2:ae:c3:4c:f7:02:d3: e3:fb:c3:c1:a6:73:93:74:1b:96:96:c8:33:b3:d2:ec:f1:5a: cc:da:cb:45:31:78:b6:9e:a3:78:50:86:ca:c6:04:47:ed:00: d4:37:e3:01:40:21:b2:3e:4e:d7:7d:25:4e:de:80:85:e7:83: 94:e3:75:90:49:c7:01:44:70:db:c1:f5:95:00:73:eb:08:0c: 3d:5b:ac:d6:8a:f3:33:ab:2d:ef:87:ec:1c:64:38:2d:41:bf: 44:7e:dc:8e:60:34:5f:4c:2a:4e:a2:87:c6:08:e2:ba:ac:c7: b1:d3:d5:0f:e7:d9:8f:0d:ae:6d:a7:35:51:0c:6a:30:f8:9b: b6:b0:54:43:b1:67:45:dd:4a:7b:97:b2:ff:11:bb:30:4a:6c: 94:11:03:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5B+QuvEb65IzEiVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDYyMjE1NTc1MVoXDTI2MDkyMDE1NTc1MVowLzEtMCsGA1UEAxMk YTE3ZDlmYzEtZmViYy00NGI3LWI1ZDUtMTA4NjI0YjU4ZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9oK9a07Vu9TQhSaT/LYNu1hxT8e+OHRBo7N cWf3Um3OjcFyXAWMVfUdofqUSzxqKp386zJpzJbwKjDRag809Vd+HOIPW0SzxqgD RycCubT86EA0KlCMZlWBJ41hbt0Nt2i7Ju0fSm4bncdatumkWTG7UC4j92swXdnF RHwiyaih1lEs2GpgS9H2CFek12U83BTWxBIsjdV8s/YNv8Zqmp0TR3Y4T0kbulu8 39+wRlsfFbVM5QT+xOuElKpZlsEp2y6YlrLAEsj6kXbGuo9TZ8dm8NWqoTikbiDb 4pcWqQbeuksCUeUKH6WxVaTDKjnRClKVG4+SEAmoNHwD3t1vWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnkvjKFzEWHx2n2Ejn3hYu1OkM2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvN2IxMGQzN2EtMDBlYi0z YWNlLWE5YmItYjkzOGZlZTcwNmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5WdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRep32chwQfmtxDF/h4Fb0L9WFoGJsEProuS6O1JlX3Eg4VBLXLuS+H 1yrLzNFWpUo4Eh4UQu+s2ZBLuslfxZAZGazb+yClwSdK239u9KRsVzlo/lHptp8v 1DvHgbPJ8xIrMr81sq7DTPcC0+P7w8Gmc5N0G5aWyDOz0uzxWszay0UxeLaeo3hQ hsrGBEftANQ34wFAIbI+Ttd9JU7egIXng5TjdZBJxwFEcNvB9ZUAc+sIDD1brNaK 8zOrLe+H7BxkOC1Bv0R+3I5gNF9MKk6ih8YI4rqsx7HT1Q/n2Y8Nrm2nNVEMajD4 m7awVEOxZ0XdSnuXsv8RuzBKbJQRA/Q= -----END CERTIFICATE-----Generated at Tue Jul 7 22:10:50 2026 by rpki-client