$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ca53fbdf-403c-3b72-8f1d-e8416534fe3a.roa File: ca53fbdf-403c-3b72-8f1d-e8416534fe3a.roa (raw, json) Hash identifier: njMFPVPTPNJUm3IiPqt+4FN9aCgof+zZj2OcD2dfpcE= Subject key identifier: A6:5B:4E:A4:AE:22:32:44:41:53:17:98:45:96:42:11:43:4F:AD:EB Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584D11C692C682C63AA95E22A6C0 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ca53fbdf-403c-3b72-8f1d-e8416534fe3a.roa Signing time: Thu 05 Mar 2026 16:50:25 +0000 ROA not before: Thu 05 Mar 2026 16:50:25 +0000 ROA not after: Wed 03 Jun 2026 15:50:25 +0000 asID: 402047 IP address blocks: 107.148.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:c6:92:c6:82:c6:3a:a9:5e:22:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Mar 5 16:50:25 2026 GMT Not After : Jun 3 15:50:25 2026 GMT Subject: CN=2caf414f-b747-4b9a-9c1f-e944ca79d414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:26:bc:bf:a5:f6:f7:e8:86:36:16:8b:96:fa: 90:76:7f:59:ee:ad:31:0a:cc:95:48:ac:88:7d:6c: 05:37:a7:4c:89:d3:09:af:f7:02:47:84:fe:f5:82: 6c:5c:f7:5d:ae:b3:f2:ce:a5:0d:23:7b:23:87:61: b3:b9:60:6a:d2:12:12:d9:a7:dc:d6:a6:05:0b:5b: dd:f1:9b:c0:73:32:95:e6:a3:83:10:db:1b:4f:60: ed:c7:b1:49:25:8f:91:10:50:d5:c3:88:61:13:86: e4:8d:1b:f3:7b:ea:16:ab:35:47:81:a7:3e:ec:b8: ef:63:7c:1f:30:af:42:61:b1:86:65:05:e5:f9:f7: 87:e9:49:72:0b:0c:7a:ad:bc:69:9b:b8:a7:b4:4c: 2a:a6:fa:f0:39:ed:47:d5:38:0b:6b:9d:c9:4a:b2: 51:47:69:da:82:1b:19:a6:b7:45:31:24:ef:04:cc: f5:f2:c3:42:bd:93:a5:18:37:95:bb:27:04:71:b9: 38:32:fa:f8:4b:3c:57:94:a1:96:b4:74:7d:36:92: 8d:b5:a8:73:f0:f1:e5:d6:d5:a9:14:d0:8b:e6:59: f9:42:ff:a9:38:93:42:df:0f:52:5d:b9:23:99:fe: 41:9d:58:6a:f3:f4:60:90:79:62:f3:a1:3c:31:06: 4e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:5B:4E:A4:AE:22:32:44:41:53:17:98:45:96:42:11:43:4F:AD:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ca53fbdf-403c-3b72-8f1d-e8416534fe3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:76:54:fb:c3:17:50:05:1c:62:16:6b:5f:17:fb:15:87:4b: 4d:08:06:7d:39:31:93:22:fd:64:d9:a1:80:5e:1d:d6:ad:71: e4:81:e9:0f:1d:5a:d8:7e:f3:f9:49:2b:89:23:db:46:e9:e9: d1:6b:c5:7b:4a:70:43:94:92:c1:01:fa:f1:9d:e2:f2:ea:29: 15:c6:84:ff:19:0a:ee:f9:81:07:72:3c:a7:9e:33:4a:77:35: 1d:91:5b:15:4a:7a:fb:bd:e5:d2:76:8c:9e:d6:42:2a:6e:17: e7:71:9d:5f:5a:cb:b8:3a:75:55:8d:3d:01:d6:aa:ae:68:e8: 41:2c:47:a3:a2:39:8b:6a:34:90:90:57:08:3c:d8:b3:87:64: c8:87:13:8a:96:90:0b:e0:a7:da:f9:23:82:d2:19:91:84:35: a5:78:c0:4f:71:7a:e2:0c:94:fa:5c:4a:51:6c:12:8d:99:44: 66:d3:58:f4:61:9a:93:43:d4:0f:70:a2:33:a3:e7:2e:d5:91: 73:8b:8a:1e:34:80:37:01:99:4d:ca:f8:7c:36:2a:55:44:52: 21:25:7f:8a:db:d2:74:d8:a5:3e:ee:96:68:6c:a4:c5:6f:9f: 5b:ee:6d:bd:07:69:08:cf:fb:7a:a9:39:98:37:6c:cc:df:89: a7:2d:29:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0RxpLGgsY6qV4ipsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDMwNTE2NTAyNVoXDTI2MDYwMzE1NTAyNVowLzEtMCsGA1UEAxMk MmNhZjQxNGYtYjc0Ny00YjlhLTljMWYtZTk0NGNhNzlkNDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCa8v6X29+iGNhaLlvqQdn9Z7q0xCsyVSKyI fWwFN6dMidMJr/cCR4T+9YJsXPddrrPyzqUNI3sjh2GzuWBq0hIS2afc1qYFC1vd 8ZvAczKV5qODENsbT2Dtx7FJJY+REFDVw4hhE4bkjRvze+oWqzVHgac+7LjvY3wf MK9CYbGGZQXl+feH6UlyCwx6rbxpm7intEwqpvrwOe1H1TgLa53JSrJRR2naghsZ prdFMSTvBMz18sNCvZOlGDeVuycEcbk4Mvr4SzxXlKGWtHR9NpKNtahz8PHl1tWp FNCL5ln5Qv+pOJNC3w9SXbkjmf5BnVhq8/RgkHli86E8MQZOpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZbTqSuIjJEQVMXmEWWQhFDT63rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvY2E1M2ZiZGYtNDAzYy0z YjcyLThmMWQtZTg0MTY1MzRmZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5T5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB52VPvDF1AFHGIWa18X+xWHS00IBn05MZMi/WTZoYBeHdatceSB6Q8d Wth+8/lJK4kj20bp6dFrxXtKcEOUksEB+vGd4vLqKRXGhP8ZCu75gQdyPKeeM0p3 NR2RWxVKevu95dJ2jJ7WQipuF+dxnV9ay7g6dVWNPQHWqq5o6EEsR6OiOYtqNJCQ Vwg82LOHZMiHE4qWkAvgp9r5I4LSGZGENaV4wE9xeuIMlPpcSlFsEo2ZRGbTWPRh mpND1A9wojOj5y7VkXOLih40gDcBmU3K+Hw2KlVEUiElf4rb0nTYpT7ulmhspMVv n1vubb0HaQjP+3qpOZg3bMzfiactKfs= -----END CERTIFICATE-----Generated at Thu Mar 12 12:21:53 2026 by rpki-client