
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0a42edbc-40bf-3af9-9a7d-46261c33a241.roa
File: 0a42edbc-40bf-3af9-9a7d-46261c33a241.roa (raw, json)
Hash identifier: 2nlrmaBfU37T7uikbFjB2PmJJUxxeI6Lim2VEo/E708=
Subject key identifier: FC:A8:F3:C3:E9:7C:C4:33:A6:7E:D6:6A:5E:A4:37:11:55:F3:B7:27
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584D0217AE0D16AA412F95598C40
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0a42edbc-40bf-3af9-9a7d-46261c33a241.roa
Signing time: Sat 28 Feb 2026 02:00:32 +0000
ROA not before: Sat 28 Feb 2026 02:00:32 +0000
ROA not after: Fri 29 May 2026 01:00:32 +0000
asID: 398823
IP address blocks: 107.149.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:02:17:ae:0d:16:aa:41:2f:95:59:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Feb 28 02:00:32 2026 GMT
Not After : May 29 01:00:32 2026 GMT
Subject: CN=d5346b9f-0572-418f-82de-a7865d6dba41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:28:9f:b7:6d:40:18:d6:87:c6:53:e6:6c:
68:c9:30:a8:91:cd:36:4b:66:52:b2:0a:6f:9a:fa:
61:d0:42:f1:ad:f7:4d:e5:4d:07:d1:83:d8:63:b1:
d3:a5:50:ee:45:4d:a1:59:27:da:f7:aa:76:39:9f:
1a:c0:03:02:8a:80:16:e8:47:b9:b4:75:50:ba:c2:
fb:6b:59:94:88:45:60:e1:ff:55:c2:4a:46:3d:8a:
37:48:33:f7:71:3f:a8:6c:37:77:69:69:c3:05:17:
dc:86:b1:bd:66:46:a4:08:8b:c8:c1:96:31:b6:10:
a9:dd:bb:ae:35:59:9a:db:db:ff:b7:aa:33:9c:39:
d1:02:e4:a5:dd:5c:84:e1:65:02:86:4c:9b:d1:6a:
72:d6:88:c4:36:3b:b4:84:41:5d:92:ea:6b:b4:3b:
18:06:13:c1:6b:2f:59:11:f2:81:f0:57:a4:bb:11:
20:1c:47:a2:c1:ef:13:4c:d5:34:5b:83:0a:f5:0c:
6b:bf:04:1c:01:5e:06:35:db:07:d6:bd:f3:f9:47:
27:2d:22:1f:3d:8c:4a:36:ac:3d:2a:7f:9e:64:58:
0d:d1:1a:bc:d8:ce:25:e8:4f:21:cf:21:75:02:72:
fa:0b:b3:47:5a:83:b1:83:02:1c:d9:ef:1a:41:26:
9f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A8:F3:C3:E9:7C:C4:33:A6:7E:D6:6A:5E:A4:37:11:55:F3:B7:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/0a42edbc-40bf-3af9-9a7d-46261c33a241.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.149.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:5e:24:53:8a:57:ba:50:7e:c3:77:f4:2e:d6:4e:65:80:0f:
2f:96:d3:f0:a1:0c:1c:cb:5b:1c:06:80:21:7b:28:37:02:e8:
9f:d5:f4:6c:33:36:e4:5c:d8:28:b0:86:58:a5:a1:35:6d:08:
54:41:7b:e7:94:6b:6a:b0:0f:46:15:c9:2a:e1:92:00:af:d8:
2a:c0:c4:8f:3d:52:64:98:55:4f:9a:97:95:3b:11:e4:ab:81:
68:d6:13:28:60:38:cd:d9:48:0e:00:90:53:51:9b:3a:b1:f8:
b1:f9:39:31:17:cf:89:3b:ca:53:82:c5:64:d7:5f:35:7a:48:
73:cf:4e:39:aa:3d:9d:91:c1:e2:4a:05:c8:f8:0a:34:4f:be:
dc:a8:83:8b:4f:a0:0c:06:18:19:6b:b6:5e:9c:26:cf:79:50:
08:ee:01:6a:29:b5:af:43:c9:09:ee:79:01:17:b4:e3:57:81:
23:13:69:b6:b8:f7:02:af:7e:6c:d6:db:f3:ac:ef:70:c4:9a:
aa:22:8a:9c:5b:5e:d6:35:b3:23:cb:2a:7f:70:ab:d2:cc:26:
f7:e3:48:a5:7b:30:33:65:7c:6a:62:12:a5:f4:ec:81:68:b9:
bd:8c:8d:65:fd:ed:d9:32:dc:41:b8:6a:99:6e:b2:b4:3d:bc:
73:22:0d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:23:58 2026 by rpki-client