
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/23ef6a8a-49c4-35d0-863e-47ca609dac8a.roa
File: 23ef6a8a-49c4-35d0-863e-47ca609dac8a.roa (raw, json)
Hash identifier: 2l8vifMR/o9KF1/coR7htKgXQWFR/7kyGQ+8jJi49oY=
Subject key identifier: C1:3E:07:70:BB:62:4B:A4:6F:BD:F2:7B:26:3E:BE:37:1C:65:5F:00
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584CD4091C22B329AED98B589E40
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/23ef6a8a-49c4-35d0-863e-47ca609dac8a.roa
Signing time: Wed 11 Feb 2026 14:04:22 +0000
ROA not before: Wed 11 Feb 2026 14:04:22 +0000
ROA not after: Tue 12 May 2026 13:04:22 +0000
asID: 211281
IP address blocks: 107.149.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d4:09:1c:22:b3:29:ae:d9:8b:58:9e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Feb 11 14:04:22 2026 GMT
Not After : May 12 13:04:22 2026 GMT
Subject: CN=7f222241-e5b0-4772-85a9-827839b8b820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a1:1b:c1:f4:4e:af:06:69:d7:31:bc:8a:2b:
8f:30:31:f8:e2:f0:44:87:3c:ca:84:a0:9c:fc:d3:
c7:87:9f:a0:99:dc:ab:8d:0d:63:53:52:58:9e:1e:
8e:d6:d9:e7:88:a5:1f:02:ae:84:71:93:a4:04:fb:
47:20:0c:bb:ab:a0:75:ed:7a:d2:99:d4:09:9e:37:
cb:14:05:00:e5:b4:92:b3:4b:83:a4:6b:44:03:25:
4c:5e:79:b4:60:d5:23:b9:e7:ce:e2:48:fa:0a:d7:
92:28:3d:77:a1:ad:42:e4:5d:1a:36:c8:78:16:c9:
d8:48:3f:d1:21:46:3a:5c:48:1b:20:d4:0d:6d:3c:
bb:14:87:14:7d:26:84:65:b1:e8:e7:51:0d:86:f7:
43:9f:ba:5f:7d:d9:e1:66:50:7d:46:a2:db:f5:5c:
a0:2b:00:71:4c:53:76:bb:b9:b0:c2:0c:fc:7a:0e:
6c:e6:f1:ed:97:c1:10:b9:a9:13:8c:a7:a9:74:f7:
9f:08:03:98:92:e8:09:b4:2a:3c:ad:29:c6:d4:ff:
ed:43:3f:19:4b:5c:c4:cc:c2:45:6e:d5:e1:7d:32:
ff:aa:12:0a:87:6b:d5:ca:d0:48:d5:5e:09:f0:42:
94:6c:e1:55:20:3a:80:83:8c:15:8e:e4:9d:df:8e:
e4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3E:07:70:BB:62:4B:A4:6F:BD:F2:7B:26:3E:BE:37:1C:65:5F:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/23ef6a8a-49c4-35d0-863e-47ca609dac8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.149.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:75:e3:19:4c:60:31:14:42:a8:b8:9c:13:47:c0:86:78:eb:
e5:43:f0:4a:3d:6b:dd:47:db:28:eb:c9:e2:45:38:5c:86:5e:
0c:4b:f9:cb:80:fe:57:c2:96:96:97:79:33:39:99:83:73:47:
15:71:f5:b9:41:07:64:ca:ed:7b:a7:66:80:3b:16:e0:6b:37:
4a:3a:41:8b:50:90:a6:e0:e4:7a:94:37:ea:ee:9c:0f:f4:12:
07:43:7a:4a:ce:35:a0:81:28:46:85:05:be:2d:f2:c6:f4:db:
38:bb:4d:ed:26:ac:53:4b:ca:8f:f7:00:f2:90:73:07:df:6b:
55:70:fd:22:08:5e:23:7e:41:4b:ad:d3:3d:21:b2:66:c5:7d:
62:ff:71:9a:2c:2f:f9:0b:71:09:3c:87:c9:f8:37:c5:96:98:
0a:22:fd:9f:11:dd:cb:6f:89:66:23:b6:ed:d4:38:4f:59:5e:
10:78:53:93:51:55:24:2d:13:cd:2e:ee:5d:01:2a:b2:a9:4f:
fa:77:f0:3a:45:c7:54:49:9f:8d:87:f8:69:68:99:13:56:96:
e4:d5:08:6b:a3:65:43:f8:0a:51:f3:db:e5:81:56:01:1f:33:
91:fd:3f:c8:65:d2:9b:61:b0:76:f8:01:6a:7d:64:d5:cf:e7:
92:c6:2d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:35:45 2026 by rpki-client