$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/cd9323ff-f047-3401-9f55-1a93af17856a.roa File: cd9323ff-f047-3401-9f55-1a93af17856a.roa (raw, json) Hash identifier: 3wlDkouCQ4B6pIMVJ1oO23Wh6c5Gwv9xQFcX8eofpsQ= Subject key identifier: 4F:57:75:E0:2D:36:EC:10:3D:48:CF:0F:CB:54:E2:39:4E:12:60:C5 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584B41E716540B606F6524338840 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/cd9323ff-f047-3401-9f55-1a93af17856a.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 398823 IP address blocks: 107.148.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:16:54:0b:60:6f:65:24:33:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=5e71345d-1be2-45eb-8b86-4b9ad7263fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b5:71:06:8b:fb:e4:5c:ba:1c:b5:2c:44:be: 74:84:92:97:89:d1:ee:63:42:bc:e9:d6:2f:cb:4a: eb:2e:a9:66:33:0c:2e:18:bc:37:78:a9:60:b0:5e: 64:07:7d:50:99:c1:a6:4b:1b:0a:c2:5c:10:25:79: b2:26:15:9a:9f:f7:82:de:41:95:db:32:43:9a:3d: b9:a6:61:2c:bc:97:7a:27:45:46:50:95:73:ca:a2: 5a:64:6f:de:1d:67:6f:95:82:1d:6a:c5:6f:69:7b: 08:ba:89:ea:c3:d6:3d:f7:f3:2e:79:a2:04:38:d9: 29:bd:43:14:5a:b5:2f:3a:90:94:15:3f:9d:88:dd: d2:b1:e8:2b:e4:92:f0:3a:8e:fe:ce:d0:6d:af:17: 7e:25:c4:21:ca:a1:b2:73:bf:c2:42:11:5e:c0:6a: 8d:7a:5c:ae:30:65:1f:fb:19:e2:46:b9:e2:be:2e: f9:27:e9:64:1e:5c:e5:f3:e6:4e:8c:09:1a:36:ce: bd:81:de:89:f4:b0:4d:64:5a:00:91:6c:3a:c3:a4: d8:e1:b2:ae:1a:60:65:ef:82:0b:0c:68:2b:8f:1b: de:0b:70:79:81:7f:df:ed:8b:44:94:82:a0:d9:75: ec:6f:59:a1:d3:73:5f:38:67:5e:00:68:ba:ca:ff: d7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:57:75:E0:2D:36:EC:10:3D:48:CF:0F:CB:54:E2:39:4E:12:60:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/cd9323ff-f047-3401-9f55-1a93af17856a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:3d:ed:d3:ba:5b:44:a7:53:0b:db:05:75:75:da:1b:2e:79: 75:de:a9:10:22:bc:2b:1c:db:ba:7e:94:0d:4c:8c:5a:c6:52: d0:df:ea:f6:37:6b:b1:2d:e4:62:8c:fd:19:ec:0c:1c:33:9a: 7c:51:87:44:af:2e:75:a5:6c:0e:8b:36:b0:9b:f7:31:cd:b5: f6:66:6f:53:7f:4f:85:19:9c:8f:b9:e5:81:3a:55:c7:23:87: 30:b3:20:d1:8e:f4:bc:dd:47:01:72:c9:ae:1d:0a:19:7e:25: ed:3e:d6:98:61:04:f5:09:90:6e:78:80:5b:21:c6:5e:7e:b0: 35:55:15:bc:47:a9:7e:63:eb:4a:76:4e:62:6d:c1:07:5c:c3: 9a:e2:40:da:0c:b6:8f:ea:60:9b:c2:f7:d4:cd:8d:3a:15:ac: ad:28:f9:ad:e0:45:fb:a9:d1:81:09:c7:08:19:6b:c4:1b:5a: db:d6:3e:f7:29:e3:d9:de:9c:e7:4f:1e:46:a6:7e:1c:2b:61: 2b:28:1d:39:52:58:e4:d1:73:74:32:6b:59:ed:69:77:f7:fb: 42:f1:61:92:d9:77:cc:06:9b:44:09:1d:4e:ec:bd:72:db:07: 9b:d2:6c:49:25:8c:4d:4b:bd:7d:64:e6:18:23:0e:b9:5b:65: ed:73:12:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xZUC2BvZSQziEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NWU3MTM0NWQtMWJlMi00NWViLThiODYtNGI5YWQ3MjYzZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7VxBov75Fy6HLUsRL50hJKXidHuY0K86dYv y0rrLqlmMwwuGLw3eKlgsF5kB31QmcGmSxsKwlwQJXmyJhWan/eC3kGV2zJDmj25 pmEsvJd6J0VGUJVzyqJaZG/eHWdvlYIdasVvaXsIuonqw9Y99/MueaIEONkpvUMU WrUvOpCUFT+diN3Ssegr5JLwOo7+ztBtrxd+JcQhyqGyc7/CQhFewGqNelyuMGUf +xniRrnivi75J+lkHlzl8+ZOjAkaNs69gd6J9LBNZFoAkWw6w6TY4bKuGmBl74IL DGgrjxveC3B5gX/f7YtElIKg2XXsb1mh03NfOGdeAGi6yv/XDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9XdeAtNuwQPUjPD8tU4jlOEmDFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvY2Q5MzIzZmYtZjA0Ny0z NDAxLTlmNTUtMWE5M2FmMTc4NTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5QqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs97dO6W0SnUwvbBXV12hsueXXeqRAivCsc27p+lA1MjFrGUtDf6vY3 a7Et5GKM/RnsDBwzmnxRh0SvLnWlbA6LNrCb9zHNtfZmb1N/T4UZnI+55YE6Vccj hzCzINGO9LzdRwFyya4dChl+Je0+1phhBPUJkG54gFshxl5+sDVVFbxHqX5j60p2 TmJtwQdcw5riQNoMto/qYJvC99TNjToVrK0o+a3gRfup0YEJxwgZa8QbWtvWPvcp 49nenOdPHkamfhwrYSsoHTlSWOTRc3Qya1ntaXf3+0LxYZLZd8wGm0QJHU7svXLb B5vSbEkljE1LvX1k5hgjDrlbZe1zEp8= -----END CERTIFICATE-----Generated at Sat Oct 25 04:44:21 2025 by rpki-client