$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a497ecbd-c3ae-3533-aba1-fa0bfa8a33aa.roa File: a497ecbd-c3ae-3533-aba1-fa0bfa8a33aa.roa (raw, json) Hash identifier: S8iug0irIf9X5KcW6IK67vJUPQwvXaKZC6ZEgCdF/pE= Subject key identifier: 92:5D:14:7B:C4:14:B8:7A:7E:F9:CA:56:AF:05:3E:0D:3E:6C:D8:2F Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584B41E71BD609E50CDFDD7BBC60 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a497ecbd-c3ae-3533-aba1-fa0bfa8a33aa.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 398823 IP address blocks: 107.148.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:1b:d6:09:e5:0c:df:dd:7b:bc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=2773f22d-0a7f-4b2c-9b68-02ffd3550019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:23:30:46:db:98:b7:a6:37:c9:cb:60:7e:95: 5c:8b:58:b9:d4:6e:55:e9:2a:11:ba:d5:42:9a:97: 98:98:61:1b:17:a9:d8:0f:d6:c3:1d:4a:0e:d0:33: 8d:17:5b:d8:10:10:01:fc:fd:bd:94:bf:28:f3:f2: f1:4f:d1:5b:df:2e:4f:1d:b2:6d:3d:73:9e:6f:70: ea:26:d8:b3:36:e0:b1:f9:57:1e:01:8f:51:5e:15: 86:ac:94:4b:ff:99:29:23:ae:c6:04:09:c3:a2:03: ef:94:13:43:5e:7d:4f:53:b8:bb:8c:ab:97:ae:75: 96:3e:c9:a7:66:51:28:c6:a3:e4:ca:59:1a:23:da: a3:8d:17:77:b7:1a:c3:43:4e:69:7f:cf:3d:66:bf: 04:a9:a2:0b:01:0e:b8:2b:94:1c:0e:dd:79:cc:83: c2:8b:f5:87:5c:94:65:24:27:e9:e3:02:08:d6:03: 72:10:f7:ad:d9:41:70:62:0a:97:5d:e4:50:76:ca: 59:d7:6a:ef:ad:c8:8b:cb:c0:2f:ec:4f:c9:2d:02: 22:26:11:dc:38:00:c8:a0:2c:21:b8:5c:74:a6:8d: 42:51:7d:78:d2:2c:da:5c:d4:09:36:51:6f:cb:6b: e5:7e:ca:95:34:08:7d:90:75:cf:84:56:e8:6f:5e: 7d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5D:14:7B:C4:14:B8:7A:7E:F9:CA:56:AF:05:3E:0D:3E:6C:D8:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a497ecbd-c3ae-3533-aba1-fa0bfa8a33aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:fe:25:fc:62:37:25:dc:ac:47:74:d4:65:0c:a6:22:41:96: d3:e4:e8:55:0a:b3:6d:9e:ba:c5:2d:5d:7a:00:49:5b:ac:1f: a3:88:23:5f:7d:c8:9d:a2:65:c9:06:5c:57:19:06:aa:98:1d: 21:4d:95:38:b4:0f:35:af:76:3f:87:2b:f3:49:42:e9:f7:0f: 32:e9:6f:99:89:68:f3:56:e8:82:1c:51:ba:e0:39:6f:94:e3: be:4a:97:28:1d:fa:d4:a7:4b:09:b3:17:db:6e:1a:1a:5b:df: f4:b8:6a:56:d5:76:6c:91:e5:ab:79:92:58:07:91:51:b3:96: 85:11:4c:3c:91:d6:0c:e9:01:b2:c0:15:fb:5c:73:32:3b:82: c2:37:df:74:26:d4:2e:16:05:23:95:63:1b:c1:6d:42:ad:d8: 40:c0:a1:4f:1e:e8:cc:44:1a:75:c3:2c:ec:c6:ff:02:4d:f8: c2:9a:6f:9d:f0:c7:4e:8e:18:68:ad:be:65:7e:10:7c:2e:19: d5:1e:6c:65:11:2b:76:2a:85:83:02:5e:f0:6c:72:0b:f5:a7: 2b:be:18:24:50:86:57:c9:07:18:b2:ba:5e:0b:f4:b2:29:df: 57:f8:54:5f:0b:dc:66:13:74:b5:a2:0b:49:25:7f:84:1c:6d: 41:24:f6:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xvWCeUM3917vGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk Mjc3M2YyMmQtMGE3Zi00YjJjLTliNjgtMDJmZmQzNTUwMDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySMwRtuYt6Y3yctgfpVci1i51G5V6SoRutVC mpeYmGEbF6nYD9bDHUoO0DONF1vYEBAB/P29lL8o8/LxT9Fb3y5PHbJtPXOeb3Dq JtizNuCx+VceAY9RXhWGrJRL/5kpI67GBAnDogPvlBNDXn1PU7i7jKuXrnWWPsmn ZlEoxqPkylkaI9qjjRd3txrDQ05pf889Zr8EqaILAQ64K5QcDt15zIPCi/WHXJRl JCfp4wII1gNyEPet2UFwYgqXXeRQdspZ12rvrciLy8Av7E/JLQIiJhHcOADIoCwh uFx0po1CUX140izaXNQJNlFvy2vlfsqVNAh9kHXPhFbob159fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJdFHvEFLh6fvnKVq8FPg0+bNgvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYTQ5N2VjYmQtYzNhZS0z NTMzLWFiYTEtZmEwYmZhOGEzM2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5SQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAD+JfxiNyXcrEd01GUMpiJBltPk6FUKs22eusUtXXoASVusH6OII199 yJ2iZckGXFcZBqqYHSFNlTi0DzWvdj+HK/NJQun3DzLpb5mJaPNW6IIcUbrgOW+U 475Klygd+tSnSwmzF9tuGhpb3/S4albVdmyR5at5klgHkVGzloURTDyR1gzpAbLA FftcczI7gsI333Qm1C4WBSOVYxvBbUKt2EDAoU8e6MxEGnXDLOzG/wJN+MKab53w x06OGGitvmV+EHwuGdUebGURK3YqhYMCXvBscgv1pyu+GCRQhlfJBxiyul4L9LIp 31f4VF8L3GYTdLWiC0klf4QcbUEk9tM= -----END CERTIFICATE-----Generated at Mon Oct 20 04:39:42 2025 by rpki-client