$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3acc875-a509-3b7a-b1bf-996d362e2ead.roa File: a3acc875-a509-3b7a-b1bf-996d362e2ead.roa (raw, json) Hash identifier: zRtVB1VM4SKHJk/LT+ThdZXPK8FNhI1qyn0QVLKsCWs= Subject key identifier: EB:FE:C8:7F:70:4C:E7:10:17:10:99:B4:9B:9D:D0:8D:86:9D:7A:8B Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584DE2B5EC263919C441092F5E80 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3acc875-a509-3b7a-b1bf-996d362e2ead.roa Signing time: Tue 19 May 2026 13:00:32 +0000 ROA not before: Tue 19 May 2026 13:00:32 +0000 ROA not after: Mon 17 Aug 2026 13:00:32 +0000 asID: 399195 IP address blocks: 107.149.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e2:b5:ec:26:39:19:c4:41:09:2f:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: May 19 13:00:32 2026 GMT Not After : Aug 17 13:00:32 2026 GMT Subject: CN=158ed898-03b0-4c1b-93b5-ee0fb5671b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d1:d8:a8:84:8b:ed:51:24:72:db:de:ba:b6: ff:ba:4d:0c:79:e1:ef:fc:09:df:a8:a0:f1:2f:1b: 2a:50:06:8b:32:b5:47:09:fe:91:a1:a7:04:fa:1c: 3b:5f:a9:fe:98:a8:05:78:dc:ab:4f:d5:fc:17:0d: 65:12:a8:7f:7f:ba:0b:21:1b:fc:96:9f:9b:f9:f4: 25:0c:68:46:69:a7:26:eb:9a:f4:6a:a4:45:03:71: 07:f9:ac:83:ec:26:fe:67:6d:63:b1:b9:bc:1d:ab: 89:05:a6:da:6e:65:ab:fe:27:1c:2f:50:06:2d:a6: 15:af:e1:34:2a:60:d3:22:86:b6:31:25:f8:08:60: 6a:b5:db:7a:3b:ba:d8:19:46:b6:c3:19:15:8a:ab: ca:c3:d7:22:0f:66:8e:a9:95:50:db:c0:8a:28:47: 53:a3:f9:0a:9b:e2:0f:91:64:11:0c:f0:7b:af:3e: d1:06:34:d1:3e:67:c9:9a:a9:35:df:05:f5:76:78: 37:83:f3:d2:d8:b6:f1:98:0f:2f:50:8a:42:b1:41: cf:1c:78:6d:b4:f8:e1:75:df:48:06:d0:74:30:74: ac:13:9b:2d:57:85:77:d4:c6:3a:e3:32:7b:e7:f6: 12:15:a8:b0:63:ce:f0:2e:b5:f5:d2:86:d8:9e:be: b3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FE:C8:7F:70:4C:E7:10:17:10:99:B4:9B:9D:D0:8D:86:9D:7A:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a3acc875-a509-3b7a-b1bf-996d362e2ead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d6:a1:3a:e2:7f:8f:c5:66:4d:c0:3f:d2:4a:d5:8f:a5:05: 85:db:4c:dc:59:31:d3:f3:5a:4d:d8:1b:5b:e9:73:fa:11:65: 92:ab:b3:b4:f0:b1:94:be:28:40:cb:6b:b0:de:b7:d2:28:98: 5f:19:90:a3:81:60:97:47:13:51:83:d5:95:0b:43:0c:be:9d: 44:7f:89:33:b2:69:05:16:66:0e:41:9d:6b:da:60:cf:07:db: 7a:a2:72:cc:ae:95:c8:7b:83:c0:cc:94:4f:71:41:67:2e:5a: bb:18:60:ee:79:fd:62:af:61:8e:1a:2f:39:18:67:be:2b:13: 80:e0:f5:43:cc:e4:b4:dd:a3:d4:d0:b1:b0:7a:25:12:e5:10: 39:39:61:90:0b:d7:e1:97:27:4e:c8:75:06:e3:ad:8f:d3:bc: de:cf:6e:d9:16:d4:d8:13:6a:0e:6e:e2:cc:c3:6c:41:76:fe: 4c:b7:11:d1:4c:fb:92:1f:ff:62:f9:cc:83:58:00:c1:c6:64: 8d:54:66:33:98:d2:32:cd:94:09:25:46:8d:ea:06:dc:8c:47: c9:57:2e:00:0c:8e:07:9c:4e:39:67:a6:ba:fc:42:cb:1a:52: 00:45:16:be:ff:66:04:bd:0d:64:e2:15:97:e7:25:8b:ff:60: 50:b9:91:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3itewmORnEQQkvXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk MTU4ZWQ4OTgtMDNiMC00YzFiLTkzYjUtZWUwZmI1NjcxYjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9HYqISL7VEkctveurb/uk0MeeHv/AnfqKDx LxsqUAaLMrVHCf6RoacE+hw7X6n+mKgFeNyrT9X8Fw1lEqh/f7oLIRv8lp+b+fQl DGhGaacm65r0aqRFA3EH+ayD7Cb+Z21jsbm8HauJBababmWr/iccL1AGLaYVr+E0 KmDTIoa2MSX4CGBqtdt6O7rYGUa2wxkViqvKw9ciD2aOqZVQ28CKKEdTo/kKm+IP kWQRDPB7rz7RBjTRPmfJmqk13wX1dng3g/PS2LbxmA8vUIpCsUHPHHhttPjhdd9I BtB0MHSsE5stV4V31MY64zJ75/YSFaiwY87wLrX10obYnr6zXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOv+yH9wTOcQFxCZtJud0I2GnXqLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYTNhY2M4NzUtYTUwOS0z YjdhLWIxYmYtOTk2ZDM2MmUyZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5X4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfWoTrif4/FZk3AP9JK1Y+lBYXbTNxZMdPzWk3YG1vpc/oRZZKrs7Tw sZS+KEDLa7Det9IomF8ZkKOBYJdHE1GD1ZULQwy+nUR/iTOyaQUWZg5BnWvaYM8H 23qicsyulch7g8DMlE9xQWcuWrsYYO55/WKvYY4aLzkYZ74rE4Dg9UPM5LTdo9TQ sbB6JRLlEDk5YZAL1+GXJ07IdQbjrY/TvN7PbtkW1NgTag5u4szDbEF2/ky3EdFM +5If/2L5zINYAMHGZI1UZjOY0jLNlAklRo3qBtyMR8lXLgAMjgecTjlnprr8Qssa UgBFFr7/ZgS9DWTiFZfnJYv/YFC5kXE= -----END CERTIFICATE-----Generated at Thu Jun 11 14:25:51 2026 by rpki-client