$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dac1279e-4db5-3a39-820d-8c8f477759b0.roa File: dac1279e-4db5-3a39-820d-8c8f477759b0.roa (raw, json) Hash identifier: aZULQvrwVNwSyc1JaG048WQFKdcyadoqsoFpbGU6SEM= Subject key identifier: A0:08:2A:DA:83:11:E8:9E:5A:BD:A3:59:2B:40:D8:1F:0A:DB:91:53 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584EB2B19C32AED523F6BEACE200 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dac1279e-4db5-3a39-820d-8c8f477759b0.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 212238 IP address blocks: 107.149.164.0/24 maxlen: 24 108.186.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:9c:32:ae:d5:23:f6:be:ac:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=9fa196bb-6ef1-49b7-82db-6477f0c4c0d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:c0:8d:de:ec:d1:5c:71:e8:10:d7:2c:88: 43:04:b0:d1:3a:5e:ce:e6:42:1e:b5:a3:2b:2b:4d: 6e:ce:d3:c8:84:11:5a:c3:4d:38:c9:dc:f5:ca:9a: ee:30:90:71:38:9f:4c:d8:a4:7f:20:43:1f:07:e0: f8:fa:ce:ed:0b:73:fb:d5:db:91:3a:bd:f7:56:3a: 50:34:ef:f7:55:80:f9:5c:a9:20:a8:14:f1:51:ea: 00:a7:9d:ef:b8:a1:0e:31:b6:c8:de:b2:c4:5d:c3: 13:20:a6:ec:09:79:33:43:cb:87:72:f2:8e:c7:63: b4:97:25:36:c4:fc:a8:e2:44:26:31:66:06:31:92: 70:e6:49:64:f8:35:f9:d4:a5:0b:ac:ec:68:bd:05: ba:79:16:f8:bf:20:fe:14:7b:9c:60:f5:01:08:5b: 5a:dc:6e:85:1e:00:e8:01:27:60:47:4b:f6:5f:25: 90:cc:a8:02:55:d1:d4:f0:63:17:27:b0:2d:db:43: 09:f8:93:a4:51:37:c8:cb:19:26:43:8a:cc:7b:48: 0c:ba:ad:d1:b3:38:4a:2b:ce:bd:0e:5c:02:e8:1c: 6b:91:62:5a:ba:cf:22:fe:da:64:9a:fe:da:8b:2b: c4:04:e6:82:2c:14:d7:77:8a:92:62:15:a5:66:41: fb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:08:2A:DA:83:11:E8:9E:5A:BD:A3:59:2B:40:D8:1F:0A:DB:91:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dac1279e-4db5-3a39-820d-8c8f477759b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.164.0/24 108.186.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:6d:ff:50:90:97:56:1b:6c:86:10:77:0b:43:3f:60:be:58: 0a:97:9f:0e:1c:a6:ec:be:02:1a:bb:b7:74:a1:9d:28:d6:18: 7d:d2:15:90:b5:0c:1e:4e:ab:bf:2e:a7:37:05:5b:bf:96:7c: e8:fe:74:51:86:01:ca:56:1c:bc:ea:d0:eb:5b:1c:bd:1d:8e: 71:25:b4:94:53:14:6a:5f:d3:61:46:9c:20:c7:1b:bc:f2:59: 60:6d:40:4c:59:fb:c9:61:54:ea:a4:f4:a0:ec:01:32:6e:25: 79:3c:60:a4:19:e6:a0:2c:53:2e:8c:02:24:81:6c:d4:18:63: 2c:bf:9d:3d:3a:d1:c3:ad:02:5e:0e:34:37:96:74:6b:c3:74: 40:89:ed:c8:d4:79:f7:33:bf:26:b7:c7:84:d6:79:af:46:d6: f4:04:de:e7:b8:8b:a6:7e:21:c9:9b:36:cf:cd:ee:85:2d:d5: 14:d9:f0:d9:65:c1:02:62:89:6c:07:0f:ba:f8:25:13:4a:a0: 5a:e1:b2:e6:10:08:90:ad:f3:a2:5e:33:02:41:9a:ba:db:94: 4c:4d:74:50:86:74:71:a4:22:18:70:0f:ca:7c:c7:5b:b4:91: 12:4c:60:d7:63:e7:d4:e4:ea:fa:e2:e4:f8:7e:ab:c4:98:9f: 6a:9d:38:a4 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6ysZwyrtUj9r6s4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk OWZhMTk2YmItNmVmMS00OWI3LTgyZGItNjQ3N2YwYzRjMGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnTAjd7s0Vxx6BDXLIhDBLDROl7O5kIetaMr K01uztPIhBFaw004ydz1ypruMJBxOJ9M2KR/IEMfB+D4+s7tC3P71duROr33VjpQ NO/3VYD5XKkgqBTxUeoAp53vuKEOMbbI3rLEXcMTIKbsCXkzQ8uHcvKOx2O0lyU2 xPyo4kQmMWYGMZJw5klk+DX51KULrOxovQW6eRb4vyD+FHucYPUBCFta3G6FHgDo ASdgR0v2XyWQzKgCVdHU8GMXJ7At20MJ+JOkUTfIyxkmQ4rMe0gMuq3RszhKK869 DlwC6BxrkWJaus8i/tpkmv7aiyvEBOaCLBTXd4qSYhWlZkH70wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKAIKtqDEeieWr2jWStA2B8K25FTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvZGFjMTI3OWUtNGRiNS0z YTM5LTgyMGQtOGM4ZjQ3Nzc1OWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAa5WkAwQA bLr6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC1t/1CQl1YbbIYQdwtDP2C+WAqXnw4cpuy+Ahq7t3ShnSjW GH3SFZC1DB5Oq78upzcFW7+WfOj+dFGGAcpWHLzq0OtbHL0djnEltJRTFGpf02FG nCDHG7zyWWBtQExZ+8lhVOqk9KDsATJuJXk8YKQZ5qAsUy6MAiSBbNQYYyy/nT06 0cOtAl4ONDeWdGvDdECJ7cjUefczvya3x4TWea9G1vQE3ue4i6Z+IcmbNs/N7oUt 1RTZ8NllwQJiiWwHD7r4JRNKoFrhsuYQCJCt86JeMwJBmrrblExNdFCGdHGkIhhw D8p8x1u0kRJMYNdj59Tk6vri5Ph+q8SYn2qdOKQ= -----END CERTIFICATE-----Generated at Thu Sep 10 09:40:34 2026 by rpki-client