$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7417a57c-e913-37b7-9927-680b14c85869.roa File: 7417a57c-e913-37b7-9927-680b14c85869.roa (raw, json) Hash identifier: XvfirajPhwrv7NgRIjgOArVs8kH92rSPOYLA5G4H8xI= Subject key identifier: 11:EA:7C:B1:7A:78:69:38:75:57:92:BC:4F:F9:7A:72:19:14:37:05 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584E74CF741E929FADEB0B5AB4C0 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7417a57c-e913-37b7-9927-680b14c85869.roa Signing time: Fri 10 Jul 2026 21:00:12 +0000 ROA not before: Fri 10 Jul 2026 21:00:12 +0000 ROA not after: Thu 08 Oct 2026 21:00:12 +0000 asID: 54600 IP address blocks: 107.149.84.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:74:cf:74:1e:92:9f:ad:eb:0b:5a:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Jul 10 21:00:12 2026 GMT Not After : Oct 8 21:00:12 2026 GMT Subject: CN=eb9fb7f6-0fcb-4e2d-9374-b83d71fd6627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:09:a9:45:c7:4e:6f:d6:f7:96:0a:ad:4d:df: 4a:bb:f4:dd:62:93:58:e9:d6:b7:bc:1e:a3:63:9a: aa:80:92:1e:e4:eb:db:f4:e6:d1:ba:a0:90:9f:9a: b3:e9:9c:e6:05:40:dd:55:f9:eb:ee:45:d9:ca:9e: aa:97:21:1b:bb:ba:cc:12:80:4a:2e:bd:c2:b0:da: ae:d7:5d:f9:64:87:63:78:9f:3c:78:b1:68:d2:6e: cb:d2:3d:50:6b:16:f0:46:47:17:a2:66:73:f0:b0: 77:b8:ff:2b:f7:38:2e:b6:e5:8c:93:7c:10:55:ae: b5:99:40:1e:f0:cc:d4:fd:2b:78:57:6e:0f:f1:f2: ff:2f:55:76:1e:58:a0:08:af:8b:36:f2:18:00:29: 23:1d:b7:12:3e:65:c4:5a:93:9b:76:cc:93:a4:91: 5c:b8:d8:77:21:77:fb:0b:a4:90:9f:61:cc:ef:bd: 5f:bd:18:6d:35:27:44:91:19:ce:bd:1d:71:41:38: 62:0a:51:01:9f:02:5b:4b:76:9b:81:20:42:c5:78: 29:4a:7b:4b:2e:4d:7d:e7:59:c6:cc:23:4d:0b:c4: c5:65:ac:aa:a8:5e:21:6c:f0:8c:f7:6b:68:74:7d: e0:bc:8a:95:f3:01:c1:be:35:53:76:fa:36:c1:7f: da:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EA:7C:B1:7A:78:69:38:75:57:92:BC:4F:F9:7A:72:19:14:37:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7417a57c-e913-37b7-9927-680b14c85869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:9a:36:a6:af:d3:8f:9e:c5:43:c0:2d:c8:7b:02:7e:7e:46: 0f:b4:3e:2e:bc:01:8d:13:e0:8e:05:17:d7:a8:be:f7:c2:4b: f0:41:03:c3:1b:f2:d3:3a:49:07:71:22:d7:8b:a7:44:3d:05: 04:e6:a1:57:dd:ad:87:39:ac:15:90:81:13:c3:0b:89:fa:5f: 69:76:a4:90:9c:15:1b:21:f7:67:bb:c5:5e:93:4d:46:ae:44: 5e:02:6c:c6:43:f3:78:8d:40:ac:0d:40:68:3b:2a:e5:d1:6f: 14:b8:b4:4c:64:f9:d8:9a:93:e6:30:a5:8e:88:1e:5e:3b:5e: 9e:62:44:28:6e:77:72:b6:25:51:28:03:58:ef:3f:7d:23:87: 74:1b:b1:d0:22:39:21:36:72:91:03:ed:bc:7a:a1:6d:9b:6f: ab:57:de:6d:63:a2:63:04:53:6d:5b:eb:33:a7:fe:fa:e4:d6: 75:62:95:58:8e:72:ef:aa:c8:a3:13:31:0b:5e:f3:37:01:8b: b7:a6:ba:f8:a1:3c:4c:a3:8b:06:c7:9f:80:da:3a:08:67:f7: 23:e5:89:7e:f7:ff:c1:22:a1:de:45:00:1e:db:35:95:89:56: 8f:40:99:3a:5a:2b:3d:9e:a1:4f:fe:46:6f:c1:8d:ee:74:ae: e8:7a:89:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE50z3Qekp+t6wtatMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI2MDcxMDIxMDAxMloXDTI2MTAwODIxMDAxMlowLzEtMCsGA1UEAxMk ZWI5ZmI3ZjYtMGZjYi00ZTJkLTkzNzQtYjgzZDcxZmQ2NjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgmpRcdOb9b3lgqtTd9Ku/TdYpNY6da3vB6j Y5qqgJIe5Ovb9ObRuqCQn5qz6ZzmBUDdVfnr7kXZyp6qlyEbu7rMEoBKLr3CsNqu 1135ZIdjeJ88eLFo0m7L0j1QaxbwRkcXomZz8LB3uP8r9zgutuWMk3wQVa61mUAe 8MzU/St4V24P8fL/L1V2HligCK+LNvIYACkjHbcSPmXEWpObdsyTpJFcuNh3IXf7 C6SQn2HM771fvRhtNSdEkRnOvR1xQThiClEBnwJbS3abgSBCxXgpSntLLk1951nG zCNNC8TFZayqqF4hbPCM92todH3gvIqV8wHBvjVTdvo2wX/aYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHqfLF6eGk4dVeSvE/5enIZFDcFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNzQxN2E1N2MtZTkxMy0z N2I3LTk5MjctNjgwYjE0Yzg1ODY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5VUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmaNqav04+exUPALch7An5+Rg+0Pi68AY0T4I4FF9eovvfCS/BBA8Mb 8tM6SQdxIteLp0Q9BQTmoVfdrYc5rBWQgRPDC4n6X2l2pJCcFRsh92e7xV6TTUau RF4CbMZD83iNQKwNQGg7KuXRbxS4tExk+diak+YwpY6IHl47Xp5iRChud3K2JVEo A1jvP30jh3QbsdAiOSE2cpED7bx6oW2bb6tX3m1jomMEU21b6zOn/vrk1nVilViO cu+qyKMTMQte8zcBi7emuvihPEyjiwbHn4DaOghn9yPliX73/8Eiod5FAB7bNZWJ Vo9AmTpaKz2eoU/+Rm/Bje50ruh6iXY= -----END CERTIFICATE-----Generated at Fri Jul 24 14:42:33 2026 by rpki-client