$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bc5293f9-eec2-3e58-9702-949d7af46509.roa File: bc5293f9-eec2-3e58-9702-949d7af46509.roa (raw, json) Hash identifier: spPQHbcFBondqGDLpbIsnQANLotgDLPySA8swMeMOOQ= Subject key identifier: 5D:71:80:BD:13:79:6D:1C:3A:12:B5:39:C0:1B:39:34:F6:80:0F:1C Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584EA793BEE3837AAC5C8E16A780 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bc5293f9-eec2-3e58-9702-949d7af46509.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 398823 IP address blocks: 107.149.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:be:e3:83:7a:ac:5c:8e:16:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8fe08dcb-c6c7-40ec-b102-7274ba430f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:10:7f:f3:d2:cb:74:4e:24:09:03:f1:61:2d: 13:48:38:b8:fe:f0:74:19:c5:f6:85:de:6d:e9:55: c1:b8:36:23:55:79:6b:32:d4:87:af:e3:4d:dc:29: 63:c9:ba:e2:c1:51:4c:9a:b0:e0:f0:7b:c4:64:83: 88:2b:4d:f8:b8:22:79:e2:58:bc:f1:58:57:c6:01: 33:79:2e:2c:41:aa:04:e3:47:79:60:02:5c:69:0b: 1b:4b:f6:81:09:ce:ca:88:34:88:81:80:d4:82:bf: e1:6e:e9:d8:b6:89:6f:5f:fc:c5:7f:58:e9:53:72: 73:d8:6a:39:49:e9:aa:fa:46:6f:6d:4f:dd:ce:52: a6:e7:48:7d:25:de:86:e6:19:3c:c9:f7:e1:7b:0b: 51:d2:b3:c8:ac:7b:e7:a8:2c:26:bd:30:aa:d2:42: da:5e:ba:67:de:27:e5:30:84:21:84:ed:a3:00:69: 53:99:15:21:b1:64:c3:2f:21:14:48:6b:d8:f0:6a: 41:a6:b6:1c:41:79:ab:83:d6:99:29:65:86:a5:3a: d1:23:c2:a6:46:fb:55:c0:2c:72:cd:92:cf:c8:3f: 78:4a:7e:78:6f:3a:f5:40:0c:73:a6:2b:f6:9a:24: f9:28:f2:4a:64:f1:3e:50:03:d0:41:a4:ec:07:b7: 71:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:71:80:BD:13:79:6D:1C:3A:12:B5:39:C0:1B:39:34:F6:80:0F:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/bc5293f9-eec2-3e58-9702-949d7af46509.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:93:69:f5:71:09:b7:71:4c:e8:f0:9e:ef:c4:29:16:c5:bd: d4:d5:d9:6c:b9:10:b3:a5:11:10:08:7d:75:c7:53:9b:86:43: 20:b4:57:07:34:0d:40:0b:8c:d6:42:f5:27:11:d9:48:bd:e1: 4b:22:ed:f8:01:2a:1a:7d:dd:7d:8a:c2:23:5e:51:f6:9f:fe: 40:6b:6b:1b:ec:92:e3:0b:4d:47:cb:71:fa:a3:dc:c0:14:24: b0:f3:6a:39:dd:4b:ed:26:76:56:3c:28:25:39:35:b0:e2:cc: 27:45:c2:cc:97:25:42:34:0c:8c:1f:0a:29:75:13:07:24:9b: 7b:04:6b:98:b7:00:ec:fb:9a:1b:83:cb:05:27:4e:91:1b:8b: 6a:c5:2e:2d:0c:c8:8e:d8:68:ee:85:41:63:4b:25:5e:ee:94: 06:c8:5a:4a:cc:29:d3:5c:44:93:a4:a4:0f:ad:0f:b2:dc:a0: 95:86:fa:f6:32:91:92:72:3c:5a:09:cf:ac:79:82:0f:ad:b7: 88:b0:3f:44:1d:12:c9:98:4d:02:46:c5:d4:cb:19:5b:70:9e: 39:29:9b:ec:e4:07:db:91:b7:96:15:b8:02:8f:58:53:2b:ea: 8a:f6:16:c4:b3:61:b1:4f:91:4a:27:c3:e5:36:89:d9:02:f7: b6:51:ba:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk77jg3qsXI4Wp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGZlMDhkY2ItYzZjNy00MGVjLWIxMDItNzI3NGJhNDMwZjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hB/89LLdE4kCQPxYS0TSDi4/vB0GcX2hd5t 6VXBuDYjVXlrMtSHr+NN3CljybriwVFMmrDg8HvEZIOIK034uCJ54li88VhXxgEz eS4sQaoE40d5YAJcaQsbS/aBCc7KiDSIgYDUgr/hbunYtolvX/zFf1jpU3Jz2Go5 Semq+kZvbU/dzlKm50h9Jd6G5hk8yffhewtR0rPIrHvnqCwmvTCq0kLaXrpn3ifl MIQhhO2jAGlTmRUhsWTDLyEUSGvY8GpBprYcQXmrg9aZKWWGpTrRI8KmRvtVwCxy zZLPyD94Sn54bzr1QAxzpiv2miT5KPJKZPE+UAPQQaTsB7dxhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1xgL0TeW0cOhK1OcAbOTT2gA8cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYmM1MjkzZjktZWVjMi0z ZTU4LTk3MDItOTQ5ZDdhZjQ2NTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5XuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+TafVxCbdxTOjwnu/EKRbFvdTV2Wy5ELOlERAIfXXHU5uGQyC0Vwc0 DUALjNZC9ScR2Ui94Usi7fgBKhp93X2KwiNeUfaf/kBraxvskuMLTUfLcfqj3MAU JLDzajndS+0mdlY8KCU5NbDizCdFwsyXJUI0DIwfCil1Ewckm3sEa5i3AOz7mhuD ywUnTpEbi2rFLi0MyI7YaO6FQWNLJV7ulAbIWkrMKdNcRJOkpA+tD7LcoJWG+vYy kZJyPFoJz6x5gg+tt4iwP0QdEsmYTQJGxdTLGVtwnjkpm+zkB9uRt5YVuAKPWFMr 6or2FsSzYbFPkUonw+U2idkC97ZRuuM= -----END CERTIFICATE-----Generated at Thu Sep 10 11:00:51 2026 by rpki-client