$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4d9661b0-d439-3429-8984-ed7897559eaf.roa File: 4d9661b0-d439-3429-8984-ed7897559eaf.roa (raw, json) Hash identifier: H0Rrqq6IuqQvtU1jfy8J5IkM0mPU7p5X9tkthyrvswk= Subject key identifier: 1B:5C:2F:C2:55:40:11:D8:E6:34:5A:1C:3A:92:0E:DB:DC:9F:78:4A Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584DB1DADACDA4A9F96FFA3202A0 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4d9661b0-d439-3429-8984-ed7897559eaf.roa Signing time: Sat 02 May 2026 01:00:24 +0000 ROA not before: Sat 02 May 2026 01:00:24 +0000 ROA not after: Fri 31 Jul 2026 01:00:24 +0000 asID: 398993 IP address blocks: 107.148.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b1:da:da:cd:a4:a9:f9:6f:fa:32:02:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: May 2 01:00:24 2026 GMT Not After : Jul 31 01:00:24 2026 GMT Subject: CN=031e8085-8aa0-4487-9ec1-af267146d356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9b:b9:dd:95:80:b9:73:80:b5:b2:dd:bc:56: 44:f9:dc:06:d3:f1:1f:7c:6e:8c:25:b9:7e:f1:f0: 4b:b6:e1:47:7f:2d:f5:98:3a:8a:ba:f3:0e:4c:52: 34:32:10:25:15:d5:30:76:a2:e7:b9:4d:97:85:f3: 6f:2f:53:a7:45:d2:a7:03:84:5d:90:6f:0b:d5:23: ac:1c:e9:53:2d:d6:de:a3:08:7b:68:79:c9:15:1e: 44:48:df:bb:9d:97:99:72:c5:e5:b7:25:a7:23:17: 64:f5:fe:9c:d2:ed:ec:be:66:5c:1d:2c:ce:d3:38: 13:be:de:69:46:80:96:7d:3f:b4:c0:bb:8b:4c:c2: a9:24:f8:22:d7:c3:b6:41:67:83:31:f6:52:ea:25: 4c:6c:76:2a:30:45:9e:3d:ed:16:c2:11:86:40:17: 68:cf:73:67:53:d6:04:85:14:43:2c:33:59:84:91: 74:5b:12:f8:8d:32:fe:66:79:77:e9:cd:a0:d0:51: e0:8c:38:5c:57:66:d0:2c:f4:b1:e1:3b:27:df:d3: 46:f7:6d:7b:a3:ea:3a:66:a1:f9:47:62:41:ce:00: 1a:4a:e3:ec:28:ab:f1:1d:bb:02:a8:7e:a3:5d:ca: 8e:77:98:6f:21:95:9e:ad:ab:ef:16:00:36:4b:81: 4b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5C:2F:C2:55:40:11:D8:E6:34:5A:1C:3A:92:0E:DB:DC:9F:78:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4d9661b0-d439-3429-8984-ed7897559eaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:3b:5a:cb:91:cd:e6:26:3a:11:eb:21:7a:4d:3d:1d:16:b5: 45:1e:15:a1:16:49:bc:f9:46:89:b7:8b:bd:61:2f:1f:11:6b: 2e:d0:af:22:1e:2e:68:8c:b6:87:c8:3b:b2:cd:67:e7:40:c7: a6:b4:f8:63:8d:2c:5b:1a:e6:3d:a3:76:b0:da:01:ff:00:16: 56:00:f9:ad:68:3a:6c:1e:bf:d3:44:57:78:7e:7c:d5:68:19: 0b:40:32:38:58:9e:05:b8:b7:a8:c3:b9:df:e2:33:bf:87:4f: 9a:0d:94:d6:35:32:8d:21:d3:c0:47:37:3f:c4:b4:3d:0a:b3: f6:9a:51:c0:34:72:15:1b:47:f6:42:8e:b3:ee:11:e0:a9:5c: 5e:70:89:fa:63:f1:be:b1:f3:0d:69:85:41:5c:27:d7:a6:0f: 93:58:11:da:5d:e4:3a:17:c5:90:f2:4a:dd:a8:1a:86:1b:56: 2c:31:13:3c:a7:22:46:b4:ec:70:51:2f:b6:50:0e:29:b3:b6: 6f:68:f0:1e:13:49:55:fa:64:36:f1:c5:5c:64:7d:e9:ef:ed: c9:05:c9:b9:42:55:a9:d6:76:78:3d:36:0b:d5:0e:ab:27:cd: e2:78:45:c9:62:96:cd:58:c4:ef:e6:d0:95:18:b8:82:03:04: 17:97:95:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2x2trNpKn5b/oyAqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDUwMjAxMDAyNFoXDTI2MDczMTAxMDAyNFowLzEtMCsGA1UEAxMk MDMxZTgwODUtOGFhMC00NDg3LTllYzEtYWYyNjcxNDZkMzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZu53ZWAuXOAtbLdvFZE+dwG0/EffG6MJbl+ 8fBLtuFHfy31mDqKuvMOTFI0MhAlFdUwdqLnuU2XhfNvL1OnRdKnA4RdkG8L1SOs HOlTLdbeowh7aHnJFR5ESN+7nZeZcsXltyWnIxdk9f6c0u3svmZcHSzO0zgTvt5p RoCWfT+0wLuLTMKpJPgi18O2QWeDMfZS6iVMbHYqMEWePe0WwhGGQBdoz3NnU9YE hRRDLDNZhJF0WxL4jTL+Znl36c2g0FHgjDhcV2bQLPSx4Tsn39NG9217o+o6ZqH5 R2JBzgAaSuPsKKvxHbsCqH6jXcqOd5hvIZWeravvFgA2S4FLTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtcL8JVQBHY5jRaHDqSDtvcn3hKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNGQ5NjYxYjAtZDQzOS0z NDI5LTg5ODQtZWQ3ODk3NTU5ZWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEa5RwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIg7WsuRzeYmOhHrIXpNPR0WtUUeFaEWSbz5Rom3i71hLx8Ray7QryIe LmiMtofIO7LNZ+dAx6a0+GONLFsa5j2jdrDaAf8AFlYA+a1oOmwev9NEV3h+fNVo GQtAMjhYngW4t6jDud/iM7+HT5oNlNY1Mo0h08BHNz/EtD0Ks/aaUcA0chUbR/ZC jrPuEeCpXF5wifpj8b6x8w1phUFcJ9emD5NYEdpd5DoXxZDySt2oGoYbViwxEzyn Ika07HBRL7ZQDimztm9o8B4TSVX6ZDbxxVxkfenv7ckFyblCVanWdng9NgvVDqsn zeJ4Rclils1YxO/m0JUYuIIDBBeXlVY= -----END CERTIFICATE-----Generated at Wed May 13 15:27:56 2026 by rpki-client