$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a5c5c6f1-e29b-38c0-82f1-8cf1a9092900.roa File: a5c5c6f1-e29b-38c0-82f1-8cf1a9092900.roa (raw, json) Hash identifier: yooFXbHzfMpEbMXJqoEfTqrVW7E3BDGEYoXp8wBd5R8= Subject key identifier: 42:83:A7:B6:8A:44:22:BF:22:03:87:3E:45:FC:8A:90:3D:C1:38:E8 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584B3986F82A3B8F9D7A13C1EC00 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a5c5c6f1-e29b-38c0-82f1-8cf1a9092900.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 398993 IP address blocks: 107.148.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:86:f8:2a:3b:8f:9d:7a:13:c1:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=539e0054-f1d7-4c72-a34f-0a1b47c7d498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:78:7e:88:9e:09:6d:4f:03:a5:4a:73:ab:88: 51:5c:0f:92:a5:32:31:61:a5:05:7e:33:ad:a0:b3: 85:b3:b4:19:4e:07:19:10:fc:d4:b3:18:a3:9b:e1: da:13:ee:9e:85:cf:df:d3:b7:f7:bc:4a:0e:28:74: 90:18:97:3f:27:6e:32:63:7b:79:96:82:b0:0e:73: 54:21:ef:9e:b1:6b:bb:b5:5a:31:42:9c:93:1f:4c: 2b:3a:cf:21:63:6f:e0:f7:c0:61:a6:6c:5e:4d:50: 47:dd:3e:74:37:2a:f5:d4:57:5c:2f:65:92:c1:06: 0d:f6:85:ef:c3:91:a9:01:22:68:51:2c:c4:b6:1e: 28:a4:37:27:6d:d7:04:92:9b:6d:85:24:93:5e:26: 58:ad:78:a5:ed:4f:44:97:e8:fb:72:04:be:43:6c: c4:6b:39:c2:ff:06:b9:b7:41:75:7a:95:32:7f:e1: 64:16:98:73:54:fe:58:4b:ce:22:1a:28:2e:30:b9: 62:f8:0b:ad:23:c7:7c:a9:08:a5:35:eb:66:5c:a6: 89:59:8f:cc:4c:82:80:37:df:31:46:11:dc:ea:2e: 72:4b:f5:9a:6a:d4:b3:e6:eb:ee:9f:47:ff:89:3f: 5d:1a:5a:3f:d3:61:57:9b:c7:5d:11:ee:ce:37:ed: a0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:83:A7:B6:8A:44:22:BF:22:03:87:3E:45:FC:8A:90:3D:C1:38:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a5c5c6f1-e29b-38c0-82f1-8cf1a9092900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:72:de:cb:bd:a5:a2:07:9d:73:23:4d:e0:5a:6a:c9:32:a8: cf:ba:06:fa:12:85:d1:1c:9c:ec:52:4f:c9:c2:75:1c:70:7f: 9c:02:74:d8:1f:0b:21:f2:e8:a8:26:f0:b3:a0:33:7b:43:5c: b5:6a:4b:09:91:65:84:33:81:20:8e:54:4c:bb:f3:96:e3:64: 9a:4d:f1:5a:9e:50:ec:57:7a:76:6d:05:8d:2b:48:43:82:b3: ff:de:57:52:89:58:6f:0b:a3:05:ba:b2:b8:ab:72:59:eb:09: bc:6d:f1:38:84:7a:68:a9:8b:bd:6b:09:a9:29:a2:ed:02:2c: 38:3d:e4:c4:4b:3b:6c:25:fc:3d:15:74:c0:af:91:11:ca:20: 67:c0:8e:15:c6:e6:c1:f1:35:48:17:1a:ef:97:57:09:d6:f3: f4:44:b6:af:e6:36:af:9c:92:17:a6:80:87:91:8e:5c:07:1a: 4c:fd:c6:7d:b2:06:38:05:73:f5:e0:97:85:91:ff:89:e6:16: d4:ca:2b:d3:7d:c9:86:d0:71:77:ff:f7:4c:70:4e:6f:8a:8a: aa:5a:9c:57:c8:92:9c:f2:db:2a:34:a9:e3:dc:b1:47:27:d0: 19:65:5e:33:f3:ad:a4:80:5e:86:1a:67:1a:8c:f2:31:b2:be: a1:33:a4:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hvgqO4+dehPB7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk NTM5ZTAwNTQtZjFkNy00YzcyLWEzNGYtMGExYjQ3YzdkNDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHh+iJ4JbU8DpUpzq4hRXA+SpTIxYaUFfjOt oLOFs7QZTgcZEPzUsxijm+HaE+6ehc/f07f3vEoOKHSQGJc/J24yY3t5loKwDnNU Ie+esWu7tVoxQpyTH0wrOs8hY2/g98BhpmxeTVBH3T50Nyr11FdcL2WSwQYN9oXv w5GpASJoUSzEth4opDcnbdcEkptthSSTXiZYrXil7U9El+j7cgS+Q2zEaznC/wa5 t0F1epUyf+FkFphzVP5YS84iGiguMLli+AutI8d8qQilNetmXKaJWY/MTIKAN98x RhHc6i5yS/WaatSz5uvun0f/iT9dGlo/02FXm8ddEe7ON+2gnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKDp7aKRCK/IgOHPkX8ipA9wTjoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYTVjNWM2ZjEtZTI5Yi0z OGMwLTgyZjEtOGNmMWE5MDkyOTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5QCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNy3su9paIHnXMjTeBaaskyqM+6BvoShdEcnOxST8nCdRxwf5wCdNgf CyHy6Kgm8LOgM3tDXLVqSwmRZYQzgSCOVEy785bjZJpN8VqeUOxXenZtBY0rSEOC s//eV1KJWG8LowW6srirclnrCbxt8TiEemipi71rCakpou0CLDg95MRLO2wl/D0V dMCvkRHKIGfAjhXG5sHxNUgXGu+XVwnW8/REtq/mNq+ckhemgIeRjlwHGkz9xn2y BjgFc/Xgl4WR/4nmFtTKK9N9yYbQcXf/90xwTm+KiqpanFfIkpzy2yo0qePcsUcn 0BllXjPzraSAXoYaZxqM8jGyvqEzpKQ= -----END CERTIFICATE-----Generated at Mon Oct 20 01:11:09 2025 by rpki-client