$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c978bb35-59fb-371f-b799-039bff207386.roa File: c978bb35-59fb-371f-b799-039bff207386.roa (raw, json) Hash identifier: YkASxnrtJMEWa2w4Y5JcIuv8WCOamDZeOyor6cLiv/k= Subject key identifier: CF:1F:1D:0F:68:99:EE:DE:60:2D:83:76:45:44:52:B0:44:A3:B1:B3 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584B196C14343BA8041A3063C190 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c978bb35-59fb-371f-b799-039bff207386.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 398823 IP address blocks: 107.149.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:14:34:3b:a8:04:1a:30:63:c1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=4daf4ee5-4f8c-404f-918b-5e7cad2553dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:eb:f2:4c:05:00:19:c4:42:93:d1:8f:d2:84: de:cf:37:a5:85:58:70:31:a1:29:e3:33:95:81:2d: fd:35:9a:e7:ca:55:3a:50:f2:d5:2d:78:4f:ea:18: d5:f1:4b:f8:c7:c8:9b:d1:31:8e:4d:5b:b7:41:34: 26:f7:51:0a:32:e7:30:a2:f4:29:1a:00:07:aa:82: dc:c1:5f:5c:e3:23:e5:b7:fe:eb:8e:9a:89:56:cb: c8:97:a8:95:9b:c2:52:32:c2:fe:6b:3b:15:a4:f0: eb:c0:81:01:b4:a5:bc:93:92:11:10:0d:07:b4:45: 83:7b:bb:63:94:9b:ba:29:da:f7:c2:dc:e0:d5:db: 52:a9:34:ff:15:cd:2b:64:56:20:f5:0b:fb:ac:e1: bb:00:e9:1a:88:4b:5b:e1:fa:f9:10:b5:da:a3:1c: 01:13:5a:e8:a3:50:f3:0b:18:41:69:2d:43:65:ce: f3:fc:be:f7:b2:67:33:97:f0:6f:4c:e5:c3:fc:92: 5f:05:78:e3:56:4f:58:ba:e0:d6:9c:24:df:10:0b: db:cb:1e:bf:93:a2:22:7b:57:bd:7d:94:c1:2c:73: f4:4e:0e:18:fd:ab:0f:44:b0:57:d7:9e:ed:a4:3e: a0:80:57:0e:a2:74:2b:d1:1f:5b:58:46:9c:8f:d5: dd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1F:1D:0F:68:99:EE:DE:60:2D:83:76:45:44:52:B0:44:A3:B1:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c978bb35-59fb-371f-b799-039bff207386.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:e2:c1:2b:3f:d0:16:6b:56:0e:2b:bd:34:cc:99:73:4b:74: 4a:4b:c0:44:cf:08:fb:40:65:39:ca:80:6e:44:1a:f7:66:d7: 43:92:08:1d:e7:4b:36:12:6e:ff:38:e9:07:0c:40:ee:ab:94: e9:8f:80:29:35:90:ce:1b:31:8a:50:d5:73:b4:30:0e:b5:e3: d0:69:09:74:74:c8:94:b2:be:eb:f4:cd:86:45:9c:18:23:f4: 97:92:c4:10:80:bd:a9:4b:28:85:ac:ee:b4:ba:06:cd:8d:df: d0:dd:fa:10:97:28:1a:80:28:ba:b2:82:b6:40:8e:6d:3e:de: 10:5d:e1:6b:74:51:cf:96:06:47:dc:9b:3b:7a:c1:c2:3b:6f: 73:89:89:49:10:b5:25:92:06:19:c5:2c:37:c3:99:94:cd:5e: bd:ab:0a:67:09:02:f8:92:a7:c2:ab:b5:2d:e2:12:15:d8:9d: 3f:aa:f4:27:b6:df:17:19:be:24:50:11:df:3b:f5:ec:89:7f: 75:e8:c1:32:dc:f7:f1:bb:96:7c:de:61:73:fb:ca:f7:4d:49: e4:6d:95:63:c6:f2:9e:c3:2d:46:e1:18:06:95:4c:50:33:17: f0:7e:bc:ff:d7:0a:04:3a:6e:71:8c:7a:12:1f:37:39:19:a7: d0:be:c2:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbBQ0O6gEGjBjwZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk NGRhZjRlZTUtNGY4Yy00MDRmLTkxOGItNWU3Y2FkMjU1M2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuvyTAUAGcRCk9GP0oTezzelhVhwMaEp4zOV gS39NZrnylU6UPLVLXhP6hjV8Uv4x8ib0TGOTVu3QTQm91EKMucwovQpGgAHqoLc wV9c4yPlt/7rjpqJVsvIl6iVm8JSMsL+azsVpPDrwIEBtKW8k5IREA0HtEWDe7tj lJu6Kdr3wtzg1dtSqTT/Fc0rZFYg9Qv7rOG7AOkaiEtb4fr5ELXaoxwBE1roo1Dz CxhBaS1DZc7z/L73smczl/BvTOXD/JJfBXjjVk9YuuDWnCTfEAvbyx6/k6Iie1e9 fZTBLHP0Tg4Y/asPRLBX157tpD6ggFcOonQr0R9bWEacj9XdmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8fHQ9ome7eYC2DdkVEUrBEo7GzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYzk3OGJiMzUtNTlmYi0z NzFmLWI3OTktMDM5YmZmMjA3Mzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5WeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTiwSs/0BZrVg4rvTTMmXNLdEpLwETPCPtAZTnKgG5EGvdm10OSCB3n SzYSbv846QcMQO6rlOmPgCk1kM4bMYpQ1XO0MA6149BpCXR0yJSyvuv0zYZFnBgj 9JeSxBCAvalLKIWs7rS6Bs2N39Dd+hCXKBqAKLqygrZAjm0+3hBd4Wt0Uc+WBkfc mzt6wcI7b3OJiUkQtSWSBhnFLDfDmZTNXr2rCmcJAviSp8KrtS3iEhXYnT+q9Ce2 3xcZviRQEd879eyJf3XowTLc9/G7lnzeYXP7yvdNSeRtlWPG8p7DLUbhGAaVTFAz F/B+vP/XCgQ6bnGMehIfNzkZp9C+wuw= -----END CERTIFICATE-----Generated at Sun Sep 7 14:56:57 2025 by rpki-client