$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/99179237-bd52-3c93-960f-f8a1b476ee19.roa File: 99179237-bd52-3c93-960f-f8a1b476ee19.roa (raw, json) Hash identifier: un3QVz9K4eaZLylqWHhXJOh9FFOG02hQb4rILPsT024= Subject key identifier: 18:DE:07:9E:00:42:45:90:C3:D4:62:37:D9:BB:DB:56:B6:7A:6A:B2 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584F9E987DFD77F0B803A7E66120 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/99179237-bd52-3c93-960f-f8a1b476ee19.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 398823 IP address blocks: 107.148.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:7d:fd:77:f0:b8:03:a7:e6:61:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=5ca2fb50-4c08-49f5-b872-0b8dd248de81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:41:83:2c:f6:79:ea:58:e6:83:42:fb:04:69: 56:57:f6:3f:f3:74:ff:72:65:cc:a4:95:9c:33:b1: 30:85:cc:6a:6f:31:9c:ca:b8:cd:40:6b:6d:22:ab: 59:b6:5d:31:ea:3e:a9:79:b7:88:fb:7e:cb:32:00: c7:76:be:44:90:8c:ba:7b:cb:c2:8a:fa:77:50:2a: 91:68:16:c5:a6:7c:22:59:6f:07:d7:a1:af:a4:d7: 2d:84:09:71:e5:b7:de:b7:93:be:1d:e7:29:8c:45: b0:ab:d3:6a:5d:ab:a3:e8:13:2e:3a:43:81:57:42: 00:ea:06:05:73:ee:5b:57:f7:22:5e:d0:09:f8:31: 8c:1e:97:dd:93:03:f1:76:47:fe:62:85:29:27:69: 5c:42:77:fb:62:82:28:1e:24:b4:4d:02:8b:f6:c1: ba:98:97:87:72:0d:af:6d:ee:29:74:ed:9d:5e:60: e8:e1:d1:18:d7:13:e6:65:23:25:93:07:71:4f:77: ec:6a:23:9c:d1:ff:37:12:f5:76:c7:33:d0:1b:92: d1:fd:60:44:70:9a:0b:ba:47:7a:f9:83:a7:66:47: 93:ec:25:01:19:24:c8:7e:78:0b:86:9c:bc:d0:92: a9:b8:75:6b:07:46:4e:98:37:35:79:6b:4c:8e:cc: 44:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DE:07:9E:00:42:45:90:C3:D4:62:37:D9:BB:DB:56:B6:7A:6A:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/99179237-bd52-3c93-960f-f8a1b476ee19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:17:93:bc:52:af:11:22:93:18:4f:4e:b6:7a:93:33:c2:c3: 2f:e6:47:71:b8:34:27:71:12:ea:a8:d0:65:7b:dd:33:c0:21: c6:48:8e:2b:f2:fa:b7:e5:a8:23:3e:27:6d:d4:e9:1e:f7:03: 3f:67:cc:c8:0d:13:1c:74:4a:ec:4e:71:e9:bd:a3:92:05:76: d1:1d:3d:47:be:7a:b6:5f:d8:1f:12:bc:63:3b:8e:d8:fc:3a: b9:8f:78:be:a0:97:16:51:97:43:09:aa:b0:e5:e3:e5:1b:5e: b0:cc:e9:a9:8b:38:4d:a3:98:6d:62:80:54:ca:9d:0f:84:f0: 5f:0c:0d:f4:43:e3:b9:bf:bf:96:8e:fd:01:9e:4f:4a:bd:b6: 81:dc:c7:31:e1:32:2e:45:a8:5c:be:4f:de:67:b5:49:e3:f4: fc:58:fb:8c:27:ce:8f:7a:db:28:e3:cf:71:ec:c5:46:e0:79: 39:07:6f:ef:8b:75:69:a6:d7:db:52:89:4c:14:01:c6:9b:54: 1c:f9:ba:e1:7e:4c:23:37:1c:d5:d8:f6:61:48:93:cc:5c:dc: 20:55:0d:42:2a:d1:dd:13:06:6c:c2:a0:5d:19:ce:40:56:b3: b6:2e:31:7d:4a:d5:ec:b1:15:23:59:06:f6:c5:b7:15:2f:1f: 15:e1:fe:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+emH39d/C4A6fmYSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk NWNhMmZiNTAtNGMwOC00OWY1LWI4NzItMGI4ZGQyNDhkZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEGDLPZ56ljmg0L7BGlWV/Y/83T/cmXMpJWc M7EwhcxqbzGcyrjNQGttIqtZtl0x6j6pebeI+37LMgDHdr5EkIy6e8vCivp3UCqR aBbFpnwiWW8H16GvpNcthAlx5bfet5O+HecpjEWwq9NqXauj6BMuOkOBV0IA6gYF c+5bV/ciXtAJ+DGMHpfdkwPxdkf+YoUpJ2lcQnf7YoIoHiS0TQKL9sG6mJeHcg2v be4pdO2dXmDo4dEY1xPmZSMlkwdxT3fsaiOc0f83EvV2xzPQG5LR/WBEcJoLukd6 +YOnZkeT7CUBGSTIfngLhpy80JKpuHVrB0ZOmDc1eWtMjsxEPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBjeB54AQkWQw9RiN9m721a2emqyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvOTkxNzkyMzctYmQ1Mi0z YzkzLTk2MGYtZjhhMWI0NzZlZTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5SEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUXk7xSrxEikxhPTrZ6kzPCwy/mR3G4NCdxEuqo0GV73TPAIcZIjivy +rflqCM+J23U6R73Az9nzMgNExx0SuxOcem9o5IFdtEdPUe+erZf2B8SvGM7jtj8 OrmPeL6glxZRl0MJqrDl4+UbXrDM6amLOE2jmG1igFTKnQ+E8F8MDfRD47m/v5aO /QGeT0q9toHcxzHhMi5FqFy+T95ntUnj9PxY+4wnzo962yjjz3HsxUbgeTkHb++L dWmm19tSiUwUAcabVBz5uuF+TCM3HNXY9mFIk8xc3CBVDUIq0d0TBmzCoF0ZzkBW s7YuMX1K1eyxFSNZBvbFtxUvHxXh/qs= -----END CERTIFICATE-----Generated at Wed Oct 28 19:29:52 2026 by rpki-client