$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dcdf034d-188f-3206-97be-ba08dd8291f3.roa File: dcdf034d-188f-3206-97be-ba08dd8291f3.roa (raw, json) Hash identifier: NFXO0KA+Pn23qUBP13WyViJHxEb04uONfrrB7PR8J8U= Subject key identifier: BA:75:90:40:14:BB:34:AF:C4:36:EF:75:08:CF:AC:BD:CD:EE:79:D5 Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Certificate serial: 010D0C9F4328584ADECBB285B0C695B062981990 Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dcdf034d-188f-3206-97be-ba08dd8291f3.roa Signing time: Sat 16 Aug 2025 01:00:33 +0000 ROA not before: Sat 16 Aug 2025 01:00:33 +0000 ROA not after: Fri 14 Nov 2025 02:00:33 +0000 asID: 40065 IP address blocks: 107.148.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:de:cb:b2:85:b0:c6:95:b0:62:98:19:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f Validity Not Before: Aug 16 01:00:33 2025 GMT Not After : Nov 14 02:00:33 2025 GMT Subject: CN=aa25f631-a5ce-4e6b-8268-99d35751cbaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:80:5d:6b:eb:67:7d:27:e9:f0:7f:e3:97:2c: dd:b6:8f:18:8b:54:cb:64:95:7b:5c:28:a7:71:18: c9:f6:b4:70:1b:1d:7a:fa:b3:99:c4:50:ef:58:7a: ff:86:e4:45:7f:fb:50:58:6b:ed:90:89:95:9d:6c: ff:28:4d:ef:db:ab:9c:24:84:a6:61:a7:b0:5b:b7: f2:cb:8a:d0:35:56:d2:c7:15:f4:7d:23:a2:62:b1: 0f:4b:79:94:37:c1:f9:23:0b:b1:fc:28:69:dd:37: fc:d4:4c:2c:fd:7b:22:b2:7c:d2:60:8c:e7:9c:35: 89:9a:0d:e6:b2:5e:fb:da:08:bc:5f:6e:2a:cf:43: 61:a6:e2:49:58:7d:8c:bd:21:20:d7:99:72:9b:78: 2d:b8:88:ba:d6:32:bf:bd:87:69:b6:4e:3d:64:18: 7e:13:25:08:02:0f:25:0c:f2:d2:69:56:65:4a:e2: e5:03:24:42:3d:65:42:4a:00:c0:fe:41:11:4b:23: 2c:e2:61:24:1b:51:dc:fd:4b:6b:f0:72:58:d5:67: cf:2d:3a:89:5f:c7:ea:32:dd:58:ad:cd:0d:3c:9d: 27:67:27:68:62:73:4c:b4:f5:ed:bd:6f:68:4c:2b: 74:2d:1e:21:3e:e5:f3:27:d2:0e:c3:87:4f:1a:03: 47:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:75:90:40:14:BB:34:AF:C4:36:EF:75:08:CF:AC:BD:CD:EE:79:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/dcdf034d-188f-3206-97be-ba08dd8291f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl X509v3 Authority Key Identifier: keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer sbgp-ipAddrBlock: critical IPv4: 107.148.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:bf:a5:ca:15:2c:05:43:9e:c7:63:43:76:45:0d:32:28:ca: d7:80:ef:81:03:64:64:48:b1:5a:4b:1c:cb:89:be:3a:e8:2c: 4b:01:34:72:b2:e7:26:c1:1c:28:f4:43:cc:70:f0:f9:0d:ed: 36:2a:59:7e:43:cd:08:eb:f5:cc:61:3d:04:35:b4:58:56:33: d6:2b:bc:22:c9:e7:ee:a8:e9:dc:ca:25:ec:57:0e:f8:72:2c: cb:b2:f3:24:c4:61:db:e0:5e:bc:d8:9e:15:05:eb:7a:91:1d: c8:0a:64:36:0c:bb:13:79:60:c3:35:4b:0b:67:d9:56:0d:d3: 19:e0:dc:12:48:03:a6:47:3a:28:bb:d0:57:1e:26:d8:13:61: c4:c3:92:d7:32:25:4f:c0:bc:98:71:c4:54:d3:fd:20:2a:72: 18:5b:a3:30:a5:ab:08:bd:81:30:17:4f:7d:0e:ad:04:1c:ba: e6:c8:31:21:06:c2:69:cb:68:71:2c:70:63:e5:c2:c4:84:c9: 5b:91:91:d5:f8:52:4b:c5:09:24:18:cb:37:dc:cf:46:ee:92: 71:29:b3:38:9e:80:b4:84:57:75:27:c7:af:7f:79:15:61:66: 75:21:f2:b4:c0:d1:0b:4a:c3:3a:50:24:c3:97:b2:59:d4:19: 6e:49:d9:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey7KFsMaVsGKYGZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5 NDRmMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk YWEyNWY2MzEtYTVjZS00ZTZiLTgyNjgtOTlkMzU3NTFjYmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Bda+tnfSfp8H/jlyzdto8Yi1TLZJV7XCin cRjJ9rRwGx16+rOZxFDvWHr/huRFf/tQWGvtkImVnWz/KE3v26ucJISmYaewW7fy y4rQNVbSxxX0fSOiYrEPS3mUN8H5Iwux/Chp3Tf81Ews/XsisnzSYIznnDWJmg3m sl772gi8X24qz0NhpuJJWH2MvSEg15lym3gtuIi61jK/vYdptk49ZBh+EyUIAg8l DPLSaVZlSuLlAyRCPWVCSgDA/kERSyMs4mEkG1Hc/Utr8HJY1WfPLTqJX8fqMt1Y rc0NPJ0nZydoYnNMtPXtvW9oTCt0LR4hPuXzJ9IOw4dPGgNHYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLp1kEAUuzSvxDbvdQjPrL3N7nnVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvZGNkZjAzNGQtMTg4Zi0z MjA2LTk3YmUtYmEwOGRkODI5MWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2 YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5SgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABm/pcoVLAVDnsdjQ3ZFDTIoyteA74EDZGRIsVpLHMuJvjroLEsBNHKy 5ybBHCj0Q8xw8PkN7TYqWX5DzQjr9cxhPQQ1tFhWM9YrvCLJ5+6o6dzKJexXDvhy LMuy8yTEYdvgXrzYnhUF63qRHcgKZDYMuxN5YMM1Swtn2VYN0xng3BJIA6ZHOii7 0FceJtgTYcTDktcyJU/AvJhxxFTT/SAqchhbozClqwi9gTAXT30OrQQcuubIMSEG wmnLaHEscGPlwsSEyVuRkdX4UkvFCSQYyzfcz0buknEpsziegLSEV3Unx69/eRVh ZnUh8rTA0QtKwzpQJMOXslnUGW5J2eM= -----END CERTIFICATE-----Generated at Sat Aug 23 16:02:00 2025 by rpki-client