$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/95b85783-cbe9-3b13-ad90-3c4a3afac42c.roa File: 95b85783-cbe9-3b13-ad90-3c4a3afac42c.roa (raw, json) Hash identifier: SicitOi1jxhzfqe9ED+Z/WQDLmXGiCMx4BifxCPynU4= Subject key identifier: D9:44:E6:0C:45:7A:3A:12:1F:CE:1D:12:09:E4:F2:7A:F8:7F:B7:DB Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584D948B23F6BBF3AAECE5DCA500 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/95b85783-cbe9-3b13-ad90-3c4a3afac42c.roa Signing time: Tue 21 Apr 2026 13:01:34 +0000 ROA not before: Tue 21 Apr 2026 13:01:34 +0000 ROA not after: Mon 20 Jul 2026 13:01:34 +0000 asID: 54600 IP address blocks: 107.149.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:8b:23:f6:bb:f3:aa:ec:e5:dc:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Apr 21 13:01:34 2026 GMT Not After : Jul 20 13:01:34 2026 GMT Subject: CN=38d19358-8d2a-4ae7-897d-16431523bb58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ee:aa:d2:31:60:7c:5c:3e:70:5b:51:12:00: 04:06:45:19:bb:fb:c7:07:82:00:b2:6c:1c:87:b3: 73:73:86:97:07:64:4a:ca:e1:f8:1d:78:a0:75:17: e2:da:c6:cd:3e:66:f7:e8:69:76:1c:a8:b1:d9:a0: 78:a5:fd:ff:8c:0c:ad:a2:05:c3:d7:cc:fe:3e:15: c4:cf:9f:7c:b6:f5:09:e2:81:06:d6:d4:79:9d:1a: f4:5f:24:67:e2:f9:4b:68:4e:16:08:08:a5:ee:67: 4a:29:b4:45:0c:7d:40:33:9d:dd:16:9c:30:65:3c: 40:69:43:79:a5:d0:62:3d:e0:18:bf:f7:55:07:e2: 60:e7:e5:03:56:a8:24:13:e4:1d:05:de:17:94:77: fa:7b:a5:b7:24:aa:c4:d2:74:fd:c8:d3:c2:7a:f9: a1:c8:2c:59:84:16:5b:ee:e7:ca:6e:b3:a6:f4:81: 26:46:70:8f:ab:c4:d2:fb:43:90:35:c6:bb:7b:73: 63:6f:cd:e6:54:33:b0:a3:d3:4a:30:e5:21:1a:ab: f6:82:02:24:a4:c5:48:9e:a5:63:06:32:b1:3b:1d: 64:4a:79:50:60:b9:2e:5a:d4:8c:a5:fb:a9:60:e2: 53:e2:75:55:51:a5:48:18:50:5f:5d:3b:13:f7:cb: 84:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:44:E6:0C:45:7A:3A:12:1F:CE:1D:12:09:E4:F2:7A:F8:7F:B7:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/95b85783-cbe9-3b13-ad90-3c4a3afac42c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:50:ff:53:bc:1c:1a:93:ad:d8:f9:0c:91:a0:1b:99:a4:84: f5:89:b9:77:05:53:05:b3:93:7a:81:e0:d7:2d:94:dd:5e:a4: 07:4d:59:f9:2e:aa:a5:37:48:b0:98:c9:68:07:ae:4c:88:4c: ff:9c:57:80:24:c6:cc:70:7f:c3:16:c7:24:14:4b:fa:52:5c: 7b:48:3e:db:f6:8c:8d:8e:7f:ca:01:75:69:94:46:fc:b8:7f: 81:bf:3d:a8:ba:92:84:09:5e:9b:99:5f:dc:77:7c:d6:69:9f: 31:e6:79:ed:49:ff:a5:cb:fd:3b:7f:77:a0:71:2f:4c:a2:f2: df:c2:37:39:8e:c9:fe:0c:de:cf:71:57:d7:6b:0b:40:7e:72: 91:f9:7d:6d:3e:e9:42:6f:bd:0d:b0:2f:bf:7e:ec:06:27:e6: 8f:ed:a3:b6:4d:7f:ed:9b:48:4a:23:c3:82:dc:92:0b:fa:a4: de:0a:07:72:50:b6:7b:b6:21:87:73:3d:63:a0:5e:f3:93:b4: 89:9c:37:3e:51:69:52:85:0b:ce:14:3e:0a:b1:92:e6:c3:2c: 49:1b:0f:88:fe:09:32:70:77:68:d6:33:87:61:67:36:59:b1: 15:06:50:2d:34:fc:20:f4:d2:33:91:ec:a2:4d:bd:d0:ae:4a: e1:fe:92:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2UiyP2u/Oq7OXcpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDQyMTEzMDEzNFoXDTI2MDcyMDEzMDEzNFowLzEtMCsGA1UEAxMk MzhkMTkzNTgtOGQyYS00YWU3LTg5N2QtMTY0MzE1MjNiYjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+6q0jFgfFw+cFtREgAEBkUZu/vHB4IAsmwc h7Nzc4aXB2RKyuH4HXigdRfi2sbNPmb36Gl2HKix2aB4pf3/jAytogXD18z+PhXE z598tvUJ4oEG1tR5nRr0XyRn4vlLaE4WCAil7mdKKbRFDH1AM53dFpwwZTxAaUN5 pdBiPeAYv/dVB+Jg5+UDVqgkE+QdBd4XlHf6e6W3JKrE0nT9yNPCevmhyCxZhBZb 7ufKbrOm9IEmRnCPq8TS+0OQNca7e3Njb83mVDOwo9NKMOUhGqv2ggIkpMVInqVj BjKxOx1kSnlQYLkuWtSMpfupYOJT4nVVUaVIGFBfXTsT98uE+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlE5gxFejoSH84dEgnk8nr4f7fbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvOTViODU3ODMtY2JlOS0z YjEzLWFkOTAtM2M0YTNhZmFjNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5V4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItQ/1O8HBqTrdj5DJGgG5mkhPWJuXcFUwWzk3qB4NctlN1epAdNWfku qqU3SLCYyWgHrkyITP+cV4Akxsxwf8MWxyQUS/pSXHtIPtv2jI2Of8oBdWmURvy4 f4G/Pai6koQJXpuZX9x3fNZpnzHmee1J/6XL/Tt/d6BxL0yi8t/CNzmOyf4M3s9x V9drC0B+cpH5fW0+6UJvvQ2wL79+7AYn5o/to7ZNf+2bSEojw4Lckgv6pN4KB3JQ tnu2IYdzPWOgXvOTtImcNz5RaVKFC84UPgqxkubDLEkbD4j+CTJwd2jWM4dhZzZZ sRUGUC00/CD00jOR7KJNvdCuSuH+kjU= -----END CERTIFICATE-----Generated at Mon Apr 27 08:34:14 2026 by rpki-client