$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8ad7970-72e8-3a4d-9b23-efdb2d4459c4.roa File: c8ad7970-72e8-3a4d-9b23-efdb2d4459c4.roa (raw, json) Hash identifier: V0NMxIKwfXXGAuYxwKbZYNygdgzjq3kelf4JME4hCeQ= Subject key identifier: 65:8B:0D:BF:8C:6D:7C:B4:69:EC:03:42:58:4C:C3:3F:E3:AD:2B:A3 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584B41E71BE7EEF6FBF279DA09C0 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8ad7970-72e8-3a4d-9b23-efdb2d4459c4.roa Signing time: Sat 20 Sep 2025 13:00:41 +0000 ROA not before: Sat 20 Sep 2025 13:00:41 +0000 ROA not after: Fri 19 Dec 2025 14:00:41 +0000 asID: 399195 IP address blocks: 107.148.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:41:e7:1b:e7:ee:f6:fb:f2:79:da:09:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Sep 20 13:00:41 2025 GMT Not After : Dec 19 14:00:41 2025 GMT Subject: CN=6e077177-9215-4411-8cba-de39cf539fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6d:bb:fb:36:7d:9e:ab:36:05:41:4e:a6:fa: e3:da:4e:2a:03:91:97:e0:83:b2:c6:b7:e2:83:d4: 5a:04:c0:33:2b:6d:d9:37:63:35:18:07:14:55:e4: a1:54:0d:4c:9e:69:97:16:30:e5:2f:59:b5:50:4d: 5e:38:10:b8:84:ef:31:1b:9c:18:2e:96:8f:30:85: 12:ca:b0:cb:06:eb:70:dd:ae:0c:b2:83:8d:ab:d4: 9c:1e:ee:2f:5f:0f:41:7e:e1:ae:a3:6f:b0:be:88: 80:61:53:96:8f:6f:fb:54:2a:db:69:ee:dd:35:88: c3:fb:82:25:8c:04:79:1f:ba:a5:38:ad:83:9f:f2: 6e:08:2d:5b:76:ad:e9:42:18:24:32:b2:0e:18:de: 07:62:49:1f:67:1d:a0:3f:ae:e0:bc:81:94:a1:1e: 3e:69:13:47:8e:1e:1e:66:fb:47:e3:a9:db:01:fb: f5:bb:20:ec:62:ff:bf:b0:65:9e:7d:42:2a:db:54: 16:c8:e8:b2:4e:02:05:3c:22:aa:cb:8d:cb:56:8e: 7b:15:0c:10:d4:64:a6:a6:54:85:ad:31:d1:42:b9: b5:12:5e:23:d8:a4:e2:80:ba:2c:8f:06:a1:c1:7f: b4:43:78:49:63:d8:ca:a9:f2:3d:8c:27:e9:d4:bf: d2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8B:0D:BF:8C:6D:7C:B4:69:EC:03:42:58:4C:C3:3F:E3:AD:2B:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8ad7970-72e8-3a4d-9b23-efdb2d4459c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:5c:47:dd:42:01:5a:8e:52:fa:b8:4b:bc:4f:00:a1:99:41: 9d:4b:6a:37:6a:31:72:fc:21:d3:73:c3:c2:73:cd:22:49:c8: 7f:1f:63:6a:a3:70:f4:a5:53:7b:ff:73:ce:a7:f3:9f:14:ab: 28:92:38:79:90:ee:f9:89:7c:8f:0d:78:40:20:ee:87:f1:39: 68:63:94:cc:98:63:c0:9c:d8:19:81:51:7d:c3:bf:14:f1:de: 82:4c:51:db:f6:d6:68:59:58:d2:e8:80:29:24:12:d5:56:31: 56:d7:24:82:73:3a:b6:d1:d7:48:8b:40:2c:d6:dd:86:02:79: 3b:ee:5d:08:76:86:c0:11:99:bd:ef:1f:ac:23:04:7d:15:1e: f0:57:60:8c:1c:f1:22:e2:d8:17:15:ec:82:7e:15:02:29:c0: c2:29:4b:ea:cf:1e:21:50:1f:0c:d2:e6:f3:f3:97:b8:de:12: 5c:df:06:18:e5:1b:22:4a:1c:f6:67:73:92:f2:a8:54:b1:fd: 18:9b:e3:56:2b:bc:6f:39:8d:6a:9c:03:65:89:d4:16:b4:95: de:82:e9:78:c1:a3:0d:3f:b9:fb:0d:2f:b4:30:fd:41:f6:fc: b4:1c:0f:e6:e5:89:37:e8:a0:9c:4f:20:e0:71:af:37:f9:86: d4:6b:5f:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xvn7vb78nnaCcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk NmUwNzcxNzctOTIxNS00NDExLThjYmEtZGUzOWNmNTM5ZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW27+zZ9nqs2BUFOpvrj2k4qA5GX4IOyxrfi g9RaBMAzK23ZN2M1GAcUVeShVA1MnmmXFjDlL1m1UE1eOBC4hO8xG5wYLpaPMIUS yrDLButw3a4MsoONq9ScHu4vXw9BfuGuo2+wvoiAYVOWj2/7VCrbae7dNYjD+4Il jAR5H7qlOK2Dn/JuCC1bdq3pQhgkMrIOGN4HYkkfZx2gP67gvIGUoR4+aRNHjh4e ZvtH46nbAfv1uyDsYv+/sGWefUIq21QWyOiyTgIFPCKqy43LVo57FQwQ1GSmplSF rTHRQrm1El4j2KTigLosjwahwX+0Q3hJY9jKqfI9jCfp1L/SNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWLDb+MbXy0aewDQlhMwz/jrSujMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvYzhhZDc5NzAtNzJlOC0z YTRkLTliMjMtZWZkYjJkNDQ1OWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5SUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFcR91CAVqOUvq4S7xPAKGZQZ1LajdqMXL8IdNzw8JzzSJJyH8fY2qj cPSlU3v/c86n858UqyiSOHmQ7vmJfI8NeEAg7ofxOWhjlMyYY8Cc2BmBUX3DvxTx 3oJMUdv21mhZWNLogCkkEtVWMVbXJIJzOrbR10iLQCzW3YYCeTvuXQh2hsARmb3v H6wjBH0VHvBXYIwc8SLi2BcV7IJ+FQIpwMIpS+rPHiFQHwzS5vPzl7jeElzfBhjl GyJKHPZnc5LyqFSx/Rib41YrvG85jWqcA2WJ1Ba0ld6C6XjBow0/ufsNL7Qw/UH2 /LQcD+bliTfooJxPIOBxrzf5htRrXwQ= -----END CERTIFICATE-----Generated at Mon Oct 20 00:52:20 2025 by rpki-client