
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/16ffe55d-f170-30de-b74c-1cce947857e6.roa
File: 16ffe55d-f170-30de-b74c-1cce947857e6.roa (raw, json)
Hash identifier: GonAGcVMuK2nyFylpFTJ132blGK2vMqvqgGvLs5K3z4=
Subject key identifier: E9:2D:70:AE:CB:4C:C6:D5:57:C5:96:32:0A:7B:D6:A5:65:A2:7A:C0
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584D5732C57B5243A7DC01898520
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/16ffe55d-f170-30de-b74c-1cce947857e6.roa
Signing time: Mon 30 Mar 2026 13:39:12 +0000
ROA not before: Mon 30 Mar 2026 13:39:12 +0000
ROA not after: Sun 28 Jun 2026 13:39:12 +0000
asID: 212238
IP address blocks: 107.149.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:57:32:c5:7b:52:43:a7:dc:01:89:85:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Mar 30 13:39:12 2026 GMT
Not After : Jun 28 13:39:12 2026 GMT
Subject: CN=26f8f394-5166-4343-a901-221aa1b4bb20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:51:1c:31:1d:ed:66:c7:53:3c:6f:81:93:3e:
37:9c:c9:b5:57:cc:ff:9b:d9:4d:15:be:90:d7:39:
0c:3f:27:31:af:d4:ed:76:86:a4:48:27:d8:a0:da:
ef:10:35:fb:dc:f4:3c:69:2e:74:84:32:a5:aa:f2:
b2:32:40:42:ca:db:e0:d3:a3:80:5e:2b:34:b1:18:
a9:27:9e:64:a5:47:33:4d:f1:45:a8:84:9f:e0:b7:
7f:84:62:68:99:4e:64:45:18:b7:68:e1:4b:3a:7f:
d0:ea:96:24:02:12:4c:6a:9d:e7:a2:a8:d6:d6:07:
fd:d8:6c:07:0c:56:8f:ef:f1:b7:af:2b:bf:ab:dd:
90:e8:48:9d:35:0c:7a:ab:a4:e0:e2:cd:87:ab:ab:
b0:07:08:04:30:17:a0:62:d3:50:0a:d1:c2:af:61:
eb:2e:9e:ed:d6:c5:4d:53:15:19:91:66:aa:fd:75:
6c:a5:b6:2e:7e:44:ec:7c:0e:89:98:f3:0b:54:d3:
97:44:ac:8e:3b:52:90:18:9d:67:8c:28:87:f9:7e:
a6:f4:fa:ab:e9:2d:37:fd:85:81:90:89:79:28:9e:
cb:9c:98:8c:8b:97:67:31:bc:eb:39:a8:bf:f4:72:
c4:68:dc:8c:65:fa:91:39:8d:c5:c9:b5:f1:7d:56:
b8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2D:70:AE:CB:4C:C6:D5:57:C5:96:32:0A:7B:D6:A5:65:A2:7A:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/16ffe55d-f170-30de-b74c-1cce947857e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.149.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:75:e6:43:b3:06:29:32:f4:b2:64:ca:d4:df:07:e8:fe:97:
33:61:22:ac:ba:51:17:cf:80:b3:f1:60:7e:fe:31:6c:40:26:
29:8e:63:de:8b:ee:15:92:11:2b:d7:45:1f:16:0e:0c:9e:e8:
a9:45:ff:15:00:da:51:25:67:d5:38:5b:4c:9f:a6:12:98:50:
8c:14:e0:52:52:ce:ec:a2:44:b9:d2:7a:66:db:cb:f0:27:f5:
a4:a4:62:d5:09:20:f0:0c:0b:98:a6:3d:0f:c3:8d:bc:c3:28:
ec:24:b7:6e:dd:7e:82:14:52:25:d2:91:0c:7f:bf:97:c7:77:
80:a9:5a:81:50:b2:e5:13:b9:bc:df:f4:16:3e:b1:e2:6a:f3:
30:ae:94:27:46:b8:77:63:db:35:fb:99:15:b7:ae:0a:ce:7e:
52:ca:26:a4:a0:14:cf:de:12:63:6e:74:1d:9d:78:90:c8:99:
21:f2:c6:73:82:07:d4:34:15:6a:aa:8f:0e:46:37:e8:d7:76:
14:fa:2a:67:3e:9f:69:e1:26:a8:ad:4f:aa:07:9e:aa:18:bb:
ec:7a:f8:1e:26:9e:5d:fe:a9:82:3a:b4:80:2b:f9:03:13:2a:
8d:20:e5:c2:26:e3:2f:94:de:2c:2e:99:9b:62:97:d7:1a:68:
ea:0b:fe:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:09:49 2026 by rpki-client