$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/43627d65-21de-3688-84e7-b273f1fe8e1a.roa File: 43627d65-21de-3688-84e7-b273f1fe8e1a.roa (raw, json) Hash identifier: Ya4y7RwW4a35RPMRsLJMI5BEVK7iic8rSIdLKR0zN1k= Subject key identifier: 32:77:11:BF:F6:51:47:50:C2:A0:CF:B9:1B:DF:54:E9:C0:48:34:A2 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584E6EC8221F58C58F40A3BEC500 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/43627d65-21de-3688-84e7-b273f1fe8e1a.roa Signing time: Wed 08 Jul 2026 17:10:40 +0000 ROA not before: Wed 08 Jul 2026 17:10:40 +0000 ROA not after: Tue 06 Oct 2026 17:10:40 +0000 asID: 22773 IP address blocks: 107.149.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6e:c8:22:1f:58:c5:8f:40:a3:be:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jul 8 17:10:40 2026 GMT Not After : Oct 6 17:10:40 2026 GMT Subject: CN=5db46e43-d71e-4a28-8163-b7df9bb0f5db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ad:92:ce:45:ee:d0:d4:83:37:de:58:a3:df: ed:b4:56:70:be:06:1b:86:68:0a:79:8c:66:4d:2e: ec:bc:8b:1c:1b:bd:8e:27:3a:1a:cd:88:76:94:e0: b9:90:c4:f8:77:ab:15:df:32:86:8b:2d:1c:cd:9a: 04:72:13:ea:25:e7:82:d1:ac:c8:1f:31:0f:19:be: ad:c8:3a:df:d6:a1:ac:ac:f7:09:63:76:1b:2b:a7: 72:7a:12:27:e6:30:61:99:9e:b5:46:81:ff:f3:fa: 12:25:70:60:0e:23:6c:10:5e:bd:0b:e7:72:52:ce: f5:c9:f2:0b:97:32:b4:94:00:56:9c:3c:9e:5f:c0: 50:c5:5c:00:8b:d9:00:80:d5:c1:06:2b:69:cd:4f: 05:dc:9e:c2:29:34:d9:b6:a1:21:0e:da:41:22:5f: 26:33:14:2a:4e:1a:4f:2e:b7:7e:19:17:a6:18:4f: 48:1e:7b:58:f3:11:5f:59:d8:98:e7:21:ce:38:3e: 5a:fd:dd:59:59:64:b3:ec:98:8d:04:dc:1c:19:5a: 20:c6:24:ae:ff:33:98:e8:81:1b:9a:46:5e:52:56: 0b:4f:6f:41:7d:84:33:45:d7:2d:a5:03:76:a2:9d: a7:3c:7d:fd:9b:04:8c:e6:48:67:c9:00:bd:3c:78: ce:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:77:11:BF:F6:51:47:50:C2:A0:CF:B9:1B:DF:54:E9:C0:48:34:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/43627d65-21de-3688-84e7-b273f1fe8e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:12:7e:d9:00:ca:ca:80:48:5e:41:af:24:a8:c6:32:5d:28: 46:9b:03:b0:7d:ae:31:12:a6:b1:26:41:6b:c3:c1:a1:8f:1c: 9d:36:58:f4:d6:b3:b7:67:0f:b1:b0:0e:ff:01:48:31:ba:de: 0b:0e:b6:03:28:7e:8b:aa:e7:81:0e:11:f6:0b:59:29:ff:85: fe:2b:72:56:dc:4e:d0:c2:1d:5c:89:af:b1:7e:63:d1:f5:d8: 7b:1c:53:3f:b4:f0:40:6e:24:d7:8d:0c:ac:fb:5e:d1:c0:89: a9:24:b7:52:f5:e9:83:67:4b:54:43:a5:d5:48:09:f2:74:94: 88:30:a0:bd:65:41:2a:36:37:c1:9f:58:7d:24:83:ed:01:30: cb:cf:27:29:72:2f:07:47:3f:71:6d:99:75:02:03:b8:05:9d: 8e:0f:3a:5d:fe:61:f8:b0:69:aa:80:6d:7d:81:80:d6:24:85: b5:6b:8b:32:bf:d7:f0:ec:51:9a:77:10:b8:9a:11:5d:d3:5b: ad:64:ea:46:fe:83:71:67:36:75:55:47:01:dd:ca:28:f4:fc: d8:f3:69:bf:9d:a5:33:a1:84:81:25:65:8c:ca:61:0e:69:6f: 63:1f:8f:b7:58:96:0c:96:98:a7:33:40:87:33:bb:ad:af:37: 41:10:d7:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5uyCIfWMWPQKO+xQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDcwODE3MTA0MFoXDTI2MTAwNjE3MTA0MFowLzEtMCsGA1UEAxMk NWRiNDZlNDMtZDcxZS00YTI4LTgxNjMtYjdkZjliYjBmNWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK2SzkXu0NSDN95Yo9/ttFZwvgYbhmgKeYxm TS7svIscG72OJzoazYh2lOC5kMT4d6sV3zKGiy0czZoEchPqJeeC0azIHzEPGb6t yDrf1qGsrPcJY3YbK6dyehIn5jBhmZ61RoH/8/oSJXBgDiNsEF69C+dyUs71yfIL lzK0lABWnDyeX8BQxVwAi9kAgNXBBitpzU8F3J7CKTTZtqEhDtpBIl8mMxQqThpP Lrd+GRemGE9IHntY8xFfWdiY5yHOOD5a/d1ZWWSz7JiNBNwcGVogxiSu/zOY6IEb mkZeUlYLT29BfYQzRdctpQN2op2nPH39mwSM5khnyQC9PHjO5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJ3Eb/2UUdQwqDPuRvfVOnASDSiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNDM2MjdkNjUtMjFkZS0z Njg4LTg0ZTctYjI3M2YxZmU4ZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5UvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8SftkAysqASF5BrySoxjJdKEabA7B9rjESprEmQWvDwaGPHJ02WPTW s7dnD7GwDv8BSDG63gsOtgMofouq54EOEfYLWSn/hf4rclbcTtDCHVyJr7F+Y9H1 2HscUz+08EBuJNeNDKz7XtHAiakkt1L16YNnS1RDpdVICfJ0lIgwoL1lQSo2N8Gf WH0kg+0BMMvPJylyLwdHP3FtmXUCA7gFnY4POl3+YfiwaaqAbX2BgNYkhbVrizK/ 1/DsUZp3ELiaEV3TW61k6kb+g3FnNnVVRwHdyij0/Njzab+dpTOhhIElZYzKYQ5p b2Mfj7dYlgyWmKczQIczu62vN0EQ1/k= -----END CERTIFICATE-----Generated at Fri Jul 24 13:24:29 2026 by rpki-client