
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/05c905c8-792e-345e-843c-6d8fb75cd78d.roa
File: 05c905c8-792e-345e-843c-6d8fb75cd78d.roa (raw, json)
Hash identifier: jPFmJA0R8uTNuVotlBM108b+m0aIE4rs0HR5bGNNaQU=
Subject key identifier: 2A:68:5A:46:64:49:0A:05:B0:5B:94:A6:CF:E8:ED:BE:7A:85:68:FE
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584BAA97A6C72C48FEAA1EE17C80
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/05c905c8-792e-345e-843c-6d8fb75cd78d.roa
Signing time: Tue 28 Oct 2025 01:00:31 +0000
ROA not before: Tue 28 Oct 2025 01:00:31 +0000
ROA not after: Mon 26 Jan 2026 02:00:31 +0000
asID: 398478
IP address blocks: 107.149.224.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:aa:97:a6:c7:2c:48:fe:aa:1e:e1:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Oct 28 01:00:31 2025 GMT
Not After : Jan 26 02:00:31 2026 GMT
Subject: CN=c2039afe-19f5-4099-b9c7-795c67f93258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:63:b6:95:f5:93:8f:a8:e4:20:cc:b2:18:
8c:d0:b4:42:87:51:cc:a2:aa:9b:a5:d5:cd:01:b7:
79:24:c0:b4:7d:17:ce:52:4a:f3:12:f1:f3:14:57:
03:5d:af:46:70:1b:e8:6d:de:60:71:8e:d4:09:dc:
23:34:b9:f7:8f:49:1a:b8:eb:7f:85:b3:8d:ae:8d:
c5:d5:e5:e1:23:31:3b:09:2a:a4:e6:82:67:d8:59:
7b:85:b5:eb:45:05:70:6f:2f:b4:f0:7c:3f:86:6d:
9d:97:6b:ff:f6:fd:b2:06:d3:b8:49:20:71:05:99:
b7:2b:4a:e0:f6:88:88:ea:40:14:f1:5f:3d:47:44:
f4:93:70:85:d0:41:fb:e5:42:eb:8e:aa:67:bb:6a:
29:7b:11:c2:41:cd:21:e7:bf:b7:3f:2a:c3:84:d3:
eb:9e:37:01:07:5b:e4:f5:e4:63:b8:33:85:a4:03:
91:ee:ec:c2:d2:e9:bd:4c:b5:c0:76:be:5f:33:8b:
cf:d5:f3:3c:17:bc:22:ec:1f:c7:f5:28:60:e8:a9:
9f:5d:9f:96:05:1a:e3:c4:e2:b6:fb:4e:d5:e0:c6:
4a:d9:df:22:cf:1f:6e:90:a2:0a:4f:bd:0c:66:d5:
e0:fb:1b:2b:21:89:09:51:65:d2:1e:05:b4:df:1e:
b0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:68:5A:46:64:49:0A:05:B0:5B:94:A6:CF:E8:ED:BE:7A:85:68:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/05c905c8-792e-345e-843c-6d8fb75cd78d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.149.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:84:e4:f8:f0:86:8a:d7:96:4c:5e:d0:63:34:26:16:80:c2:
0d:eb:56:9b:17:72:7a:0e:8e:ca:8d:dd:51:24:c2:23:7f:82:
61:38:b2:f4:02:5e:78:57:0c:45:ce:77:c2:6e:e1:be:4d:04:
9a:cb:c0:ff:7f:54:04:a3:b9:82:76:b6:1f:57:3d:28:31:62:
b9:07:fc:30:7c:5e:00:7b:a4:9c:fa:d8:06:9b:4e:54:e6:b4:
ae:89:6f:53:34:25:10:10:f0:16:6f:2a:98:60:b3:b7:03:44:
6d:78:57:08:bb:bb:84:57:a1:84:fc:36:58:4c:53:95:c1:20:
d6:40:83:c1:b4:d8:12:b2:65:dc:3b:f1:45:87:ac:46:20:7d:
e5:4f:d0:b7:c3:9a:43:80:75:84:80:f8:f8:23:05:bf:d2:fd:
da:23:d0:02:46:65:4b:c2:d9:66:7e:8e:8d:a8:6f:24:76:e8:
e9:0b:b6:72:a2:57:98:74:4a:7d:84:3f:72:21:04:f6:42:47:
d5:6a:a5:38:fe:b2:56:63:f8:57:be:5b:47:8f:23:11:46:19:
ab:f6:83:2f:14:a5:79:83:8f:20:8e:1a:72:06:29:21:17:dc:
37:61:6c:14:89:d5:1c:11:84:93:e1:cd:39:90:60:15:a9:13:
38:42:94:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:35:24 2025 by rpki-client