$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0011c66e-a3a4-39de-b7ba-a4e9a03d5f3b.roa File: 0011c66e-a3a4-39de-b7ba-a4e9a03d5f3b.roa (raw, json) Hash identifier: khZRd6/2qTAD7sI86GTA8mOgHDnU5uuSQX2hwW/Iz/A= Subject key identifier: D0:E5:64:B2:D9:7D:C8:9B:67:D7:53:3C:2A:6F:B2:C9:B7:D3:63:5E Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584B41E71BC1769F629B3B8DA480 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0011c66e-a3a4-39de-b7ba-a4e9a03d5f3b.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 398478 IP address blocks: 107.148.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:1b:c1:76:9f:62:9b:3b:8d:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=c4a28717-5d80-42d1-8460-af6a7aadbd6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c0:17:15:65:eb:f3:bb:6d:da:af:84:6b:ef: 9b:93:81:0f:43:b1:e4:7e:d6:70:3c:7b:84:42:46: 4d:0b:9a:ac:f5:57:64:9c:72:9d:bb:ee:c9:22:49: 49:f1:12:fb:ca:cb:f7:7e:76:15:72:3c:93:8d:07: de:db:81:c2:2a:a2:5d:4a:df:16:aa:54:d4:c7:3a: a3:02:be:03:71:fd:6d:4f:27:b8:5b:2b:6b:34:10: 31:9e:cb:9b:1c:85:30:31:09:11:08:f3:6c:0a:c6: eb:a9:d9:f4:8f:4e:42:9f:99:ac:5b:23:5d:c1:33: d4:06:b7:8d:c6:d6:46:1d:dc:81:55:1b:2e:14:48: 78:99:54:21:6d:64:fb:47:21:40:4d:60:89:ca:41: 8a:ee:30:ef:a0:ad:c1:4c:b1:4a:e5:7f:8b:81:d9: e5:9e:17:1f:b5:47:25:3a:56:03:b4:31:29:15:df: 87:2e:e1:74:4d:ed:85:d0:8b:e4:d7:62:3d:d7:50: 71:31:d3:bf:75:06:58:47:27:ad:85:22:da:e1:c1: bf:80:f5:bc:f9:ff:fb:c6:60:93:89:a5:c9:53:c3: 14:c5:cd:cb:7f:9b:5a:3a:41:d9:29:6a:2f:3f:fa: a5:35:4c:98:bf:d2:81:38:b0:9b:a7:98:88:de:f8: db:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E5:64:B2:D9:7D:C8:9B:67:D7:53:3C:2A:6F:B2:C9:B7:D3:63:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0011c66e-a3a4-39de-b7ba-a4e9a03d5f3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:c9:62:a1:23:46:16:dc:12:04:4a:c2:9e:3f:dc:5c:cf:78: ca:f5:0b:00:6c:e0:05:35:c7:6b:be:75:03:0f:21:8a:5e:5f: 0b:a8:78:69:2c:e4:78:31:51:af:38:bb:83:ca:91:24:75:16: ee:31:0f:e5:78:2a:ec:3d:db:bd:c9:74:09:60:3f:c2:2f:7e: 98:af:5f:e5:94:1a:81:f6:dc:93:09:b9:c5:63:0e:71:7d:38: b3:1e:40:6b:53:1c:fa:99:5c:0e:2a:69:43:ca:4f:44:67:cb: cf:c8:34:a6:89:40:b3:e3:3a:d2:cb:3c:e3:cf:9d:2b:d0:19: 09:79:67:c7:b3:7c:cb:ff:f6:1e:cb:c6:26:ca:93:78:ae:9a: d7:a6:5a:50:f3:b2:1f:e8:b2:38:a0:8c:31:78:83:35:f6:19: 95:c4:d7:5e:ab:0d:b7:c6:f2:fd:56:ae:bc:ab:5f:7a:8d:9b: a3:f4:81:51:ee:fb:46:ce:78:1f:db:01:03:c4:6e:bc:f9:ce: 5a:01:d2:24:c8:71:2c:62:94:67:21:19:8b:a8:dd:d2:06:87: 7c:99:20:ce:25:36:58:44:a8:76:5e:c7:90:e2:93:26:8a:c8: 27:01:c6:d7:aa:1e:f2:3c:85:0b:7c:69:88:b1:99:e2:ea:d7: 39:1e:3d:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xvBdp9imzuNpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk YzRhMjg3MTctNWQ4MC00MmQxLTg0NjAtYWY2YTdhYWRiZDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucAXFWXr87tt2q+Ea++bk4EPQ7HkftZwPHuE QkZNC5qs9VdknHKdu+7JIklJ8RL7ysv3fnYVcjyTjQfe24HCKqJdSt8WqlTUxzqj Ar4Dcf1tTye4WytrNBAxnsubHIUwMQkRCPNsCsbrqdn0j05Cn5msWyNdwTPUBreN xtZGHdyBVRsuFEh4mVQhbWT7RyFATWCJykGK7jDvoK3BTLFK5X+LgdnlnhcftUcl OlYDtDEpFd+HLuF0Te2F0Ivk12I911BxMdO/dQZYRyethSLa4cG/gPW8+f/7xmCT iaXJU8MUxc3Lf5taOkHZKWovP/qlNUyYv9KBOLCbp5iI3vjb9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDlZLLZfcibZ9dTPCpvssm302NeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMDAxMWM2NmUtYTNhNC0z OWRlLWI3YmEtYTRlOWEwM2Q1ZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5SAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvJYqEjRhbcEgRKwp4/3FzPeMr1CwBs4AU1x2u+dQMPIYpeXwuoeGks 5HgxUa84u4PKkSR1Fu4xD+V4Kuw9273JdAlgP8IvfpivX+WUGoH23JMJucVjDnF9 OLMeQGtTHPqZXA4qaUPKT0Rny8/INKaJQLPjOtLLPOPPnSvQGQl5Z8ezfMv/9h7L xibKk3iumtemWlDzsh/osjigjDF4gzX2GZXE116rDbfG8v1WrryrX3qNm6P0gVHu +0bOeB/bAQPEbrz5zloB0iTIcSxilGchGYuo3dIGh3yZIM4lNlhEqHZex5DikyaK yCcBxteqHvI8hQt8aYixmeLq1zkePVs= -----END CERTIFICATE-----Generated at Mon Oct 20 04:38:45 2025 by rpki-client