
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/099ac0e8-7b46-35d1-862b-680dd51daae5.roa
File: 099ac0e8-7b46-35d1-862b-680dd51daae5.roa (raw, json)
Hash identifier: /+hcXryHkdolAt2/OVX55W/3YmxzYoaSf+GBMotl0nw=
Subject key identifier: D7:C2:99:F6:7A:7C:C9:18:37:8E:52:E5:07:19:3E:DA:06:F0:46:A9
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584D0217AD848087B9E0FC6D0980
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/099ac0e8-7b46-35d1-862b-680dd51daae5.roa
Signing time: Sat 28 Feb 2026 02:00:32 +0000
ROA not before: Sat 28 Feb 2026 02:00:32 +0000
ROA not after: Fri 29 May 2026 01:00:32 +0000
asID: 398823
IP address blocks: 107.148.94.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:02:17:ad:84:80:87:b9:e0:fc:6d:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Feb 28 02:00:32 2026 GMT
Not After : May 29 01:00:32 2026 GMT
Subject: CN=573b26a9-7009-4277-b0d8-23a204c4e477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1f:fc:ce:d8:3c:30:63:02:0b:ae:63:05:c8:
91:6c:40:21:5f:99:c5:be:6e:de:d5:5a:d2:d8:e9:
da:89:e9:c1:e9:c2:ab:8e:d6:b4:37:70:d4:55:bd:
77:6e:02:74:4e:ef:dc:e6:d8:53:29:d8:af:c7:17:
72:4b:0b:c0:03:92:6d:5d:16:40:40:de:fa:6d:56:
03:d8:49:46:72:cc:96:8c:50:c4:16:84:fb:71:2a:
42:cd:3e:2a:ab:31:fb:ce:9a:67:1c:72:70:29:10:
eb:2f:f1:9e:57:f3:81:a0:29:47:7e:24:95:25:a5:
4c:af:59:c0:94:ad:4b:73:7c:ae:b8:ce:98:b5:22:
c2:fc:30:ef:e6:0d:a7:28:71:fe:8a:cb:41:eb:22:
f2:00:7f:25:72:9a:11:04:62:26:6d:75:b0:eb:02:
95:31:29:a6:db:4d:72:91:a2:c2:6f:db:e7:eb:2e:
35:dd:f5:29:36:bd:b6:96:6e:ee:74:f4:e4:27:5f:
64:d3:a5:df:dd:5c:73:b3:7d:ec:59:75:ed:a0:dd:
03:b1:f5:3a:44:53:63:39:6e:43:4e:bf:aa:92:83:
4c:64:41:14:c9:6e:76:c8:c7:8c:ed:18:c8:e8:2e:
9f:af:f5:4b:8b:a6:99:3e:b6:82:ed:c4:e8:9b:19:
4e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C2:99:F6:7A:7C:C9:18:37:8E:52:E5:07:19:3E:DA:06:F0:46:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/099ac0e8-7b46-35d1-862b-680dd51daae5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.94.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:f4:2f:d9:1c:59:da:48:28:77:6b:38:cd:93:3c:1e:97:dc:
72:fe:f2:22:d8:65:eb:2f:5c:08:75:db:e1:9b:57:33:60:b9:
21:e0:a1:a0:0e:d5:7a:38:0d:45:87:89:f5:6c:66:d4:39:e3:
73:19:93:79:b8:5c:37:99:e8:97:33:a9:ba:af:80:22:3d:d6:
ab:a6:21:eb:48:72:c8:d9:7d:3b:7a:a1:16:38:c8:4c:36:24:
b8:1d:47:bc:04:17:1b:b8:09:be:3f:df:4a:76:0b:28:e3:6c:
f3:b0:47:4a:a2:f4:78:75:a1:2f:49:cb:61:19:98:b4:25:5a:
ce:3b:d5:4f:0e:5a:0d:ec:19:a0:b0:78:ec:a2:7c:2a:7a:f1:
67:e9:c9:1d:1d:65:bc:94:ed:98:b1:93:11:58:9c:b1:7b:90:
8a:88:63:74:05:dd:d0:95:00:a9:e1:e9:82:83:87:8c:d9:61:
63:d1:04:74:18:e4:7f:3a:4d:9b:40:4f:2c:41:38:26:1e:98:
0a:d9:34:c5:58:77:42:7b:49:60:34:8b:82:e8:4f:b3:f8:53:
ee:40:32:75:ea:cf:24:82:f6:da:a4:51:d1:67:07:84:0d:37:
85:a4:c2:3a:5c:54:66:ba:6a:53:71:b2:a6:47:21:3d:ec:ef:
64:f0:56:28
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0CF62EgIe54PxtCYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NTczYjI2YTktNzAwOS00Mjc3LWIwZDgtMjNhMjA0YzRlNDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6h/8ztg8MGMCC65jBciRbEAhX5nFvm7e1VrS
2OnaienB6cKrjta0N3DUVb13bgJ0Tu/c5thTKdivxxdySwvAA5JtXRZAQN76bVYD
2ElGcsyWjFDEFoT7cSpCzT4qqzH7zppnHHJwKRDrL/GeV/OBoClHfiSVJaVMr1nA
lK1Lc3yuuM6YtSLC/DDv5g2nKHH+istB6yLyAH8lcpoRBGImbXWw6wKVMSmm201y
kaLCb9vn6y413fUpNr22lm7udPTkJ19k06Xf3Vxzs33sWXXtoN0DsfU6RFNjOW5D
Tr+qkoNMZEEUyW52yMeM7RjI6C6fr/VLi6aZPraC7cTomxlOzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNfCmfZ6fMkYN45S5QcZPtoG8EapMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvMDk5YWMwZTgtN2I0Ni0z
NWQxLTg2MmItNjgwZGQ1MWRhYWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5ReMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHH0L9kcWdpIKHdrOM2TPB6X3HL+8iLYZesvXAh12+GbVzNguSHgoaAO
1Xo4DUWHifVsZtQ543MZk3m4XDeZ6JczqbqvgCI91qumIetIcsjZfTt6oRY4yEw2
JLgdR7wEFxu4Cb4/30p2CyjjbPOwR0qi9Hh1oS9Jy2EZmLQlWs471U8OWg3sGaCw
eOyifCp68WfpyR0dZbyU7ZixkxFYnLF7kIqIY3QF3dCVAKnh6YKDh4zZYWPRBHQY
5H86TZtATyxBOCYemArZNMVYd0J7SWA0i4LoT7P4U+5AMnXqzySC9tqkUdFnB4QN
N4WkwjpcVGa6alNxsqZHIT3s72TwVig=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:41 2026 by rpki-client