$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa File: 7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa (raw, json) Hash identifier: 3XMLD57wJtG33UvM2obdZzVK061KmaACwOECarEHT2E= Subject key identifier: 90:6F:0E:12:87:DF:7B:20:AB:BC:90:CF:A0:70:48:C7:0A:28:32:4B Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584B41E71C8638C4DF7B0C8BB280 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 398823 IP address blocks: 107.149.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:1c:86:38:c4:df:7b:0c:8b:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=0a5d87ca-60c6-4ac6-986e-080cc9dfcf8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f8:38:08:51:2e:ce:fa:52:ca:19:b5:1a:42: a3:43:41:a1:c7:e0:08:b5:71:af:03:e6:0f:fc:c2: cd:51:73:83:5e:6d:06:c5:ed:7b:fc:ba:48:47:8f: 74:0a:2e:07:49:ab:cf:d3:67:60:8e:73:6c:1e:5b: ad:e0:98:e4:82:1c:a3:77:c1:f5:78:7f:f2:e9:1e: a0:09:13:53:b0:ee:bf:0f:7b:cc:d9:6a:60:d4:fe: 06:25:ca:d6:7f:f7:b3:a3:cd:9a:87:9a:03:91:93: c9:54:b9:92:71:cf:52:cd:b8:c2:77:12:d9:78:e5: ce:df:25:fe:38:0b:aa:b4:ac:ac:34:22:e9:e5:c3: c1:26:b4:75:2f:d5:f9:f8:f2:ca:30:8f:5b:20:b7: e3:6a:38:6b:41:3d:d4:f3:c4:37:1e:b2:87:ba:56: b8:9a:4b:c3:d1:98:8d:f1:e1:4e:ed:64:ba:c8:fe: a0:69:b7:e8:ad:d4:aa:8f:5e:3e:4d:ef:b5:1c:97: 14:a7:da:70:dc:65:24:0e:99:9b:35:29:63:cb:0f: 2d:29:00:34:15:6f:72:1c:8a:68:bb:2d:8e:9b:57: b3:f7:8f:a0:23:5f:92:99:c0:90:a9:19:95:c9:b3: f9:37:c3:e5:95:4e:ac:5e:c9:1f:0d:f3:91:e7:96: 4f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6F:0E:12:87:DF:7B:20:AB:BC:90:CF:A0:70:48:C7:0A:28:32:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/7533f5cd-c8cf-3956-8cb8-5887a4c3e960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.149.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b8:2b:32:cb:57:54:d0:e5:ce:b2:95:b6:6e:60:82:e1:54: e7:f8:21:9f:68:a3:06:df:09:e9:4e:5a:1d:4d:05:4e:e3:9b: 49:1d:75:da:fd:68:63:b6:2d:d5:e7:62:68:5e:a3:ee:d0:59: 00:83:13:6b:ba:dd:22:ac:6c:96:02:3a:91:bb:f8:76:29:08: 79:bf:43:ee:b6:cb:6b:1a:2d:8a:d2:f4:20:ac:dc:8e:9c:b9: da:5e:93:7b:5c:b4:59:e8:7d:8d:22:96:ba:f9:21:23:80:63: 97:ab:bd:06:a2:f0:52:78:b3:e2:ed:4a:2f:30:73:67:47:eb: c7:f8:99:84:41:75:3c:c1:50:d2:6a:eb:c2:15:cf:fd:e0:e9: 85:ef:e8:9a:c9:de:db:bc:63:8a:ef:ca:72:dc:25:54:76:53: 26:80:da:f7:29:0a:49:7d:0e:fb:da:38:22:da:20:7d:82:34: 4b:9e:ef:b5:87:3b:27:fd:7b:9c:55:e4:21:c8:72:b4:6c:5e: cd:3e:e4:0f:66:04:24:ca:de:2e:07:8e:0a:b3:d6:95:95:f0: 24:69:9c:04:d7:dd:bd:29:54:7a:90:2c:1d:1a:f5:db:d3:c8: 05:8e:4f:6e:09:be:56:b8:4c:d2:22:da:89:19:5f:c9:9d:f4: 9e:1c:6d:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xyGOMTfewyLsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk MGE1ZDg3Y2EtNjBjNi00YWM2LTk4NmUtMDgwY2M5ZGZjZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vg4CFEuzvpSyhm1GkKjQ0Ghx+AItXGvA+YP /MLNUXODXm0Gxe17/LpIR490Ci4HSavP02dgjnNsHlut4Jjkghyjd8H1eH/y6R6g CRNTsO6/D3vM2Wpg1P4GJcrWf/ezo82ah5oDkZPJVLmScc9SzbjCdxLZeOXO3yX+ OAuqtKysNCLp5cPBJrR1L9X5+PLKMI9bILfjajhrQT3U88Q3HrKHula4mkvD0ZiN 8eFO7WS6yP6gabfordSqj14+Te+1HJcUp9pw3GUkDpmbNSljyw8tKQA0FW9yHIpo uy2Om1ez94+gI1+SmcCQqRmVybP5N8PllU6sXskfDfOR55ZPWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBvDhKH33sgq7yQz6BwSMcKKDJLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNzUzM2Y1Y2QtYzhjZi0z OTU2LThjYjgtNTg4N2E0YzNlOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5XMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJC4KzLLV1TQ5c6ylbZuYILhVOf4IZ9oowbfCelOWh1NBU7jm0kdddr9 aGO2LdXnYmheo+7QWQCDE2u63SKsbJYCOpG7+HYpCHm/Q+62y2saLYrS9CCs3I6c udpek3tctFnofY0ilrr5ISOAY5ervQai8FJ4s+LtSi8wc2dH68f4mYRBdTzBUNJq 68IVz/3g6YXv6JrJ3tu8Y4rvynLcJVR2UyaA2vcpCkl9DvvaOCLaIH2CNEue77WH Oyf9e5xV5CHIcrRsXs0+5A9mBCTK3i4Hjgqz1pWV8CRpnATX3b0pVHqQLB0a9dvT yAWOT24Jvla4TNIi2okZX8md9J4cbck= -----END CERTIFICATE-----Generated at Mon Oct 20 02:17:45 2025 by rpki-client