
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/2dda1db5-6491-3ca9-a837-a07fd3fdb3d9.roa
File: 2dda1db5-6491-3ca9-a837-a07fd3fdb3d9.roa (raw, json)
Hash identifier: o6aAPDI59LR/iy4r3F9TQJv3d+GuaxwUu4MpgiIJYmc=
Subject key identifier: F9:21:68:EF:A1:E5:7A:BF:9D:AA:7E:E4:F4:FF:72:F0:5E:58:BE:99
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584F4976AE48CEC2455B37F72600
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/2dda1db5-6491-3ca9-a837-a07fd3fdb3d9.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 36137
IP address blocks: 107.148.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:ae:48:ce:c2:45:5b:37:f7:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b141d394-4a3a-4ce1-9b40-96381709121c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:29:cf:7d:55:48:e2:4c:26:b8:8c:26:5e:30:
a9:f8:5f:f6:d9:ce:db:f0:fc:b7:b9:a0:69:95:de:
84:a0:d6:56:26:5b:ab:4b:f3:26:43:bb:ce:41:70:
c2:88:28:e8:bc:f0:e1:ee:2c:93:2c:cb:79:f9:a2:
56:9e:6c:dc:98:6e:13:3f:95:0b:6b:55:b9:76:be:
22:e7:87:e7:63:4e:3a:ea:cd:46:12:7e:e1:70:2f:
54:bf:8f:52:52:bf:6c:64:69:01:7a:18:67:3b:41:
3e:c2:14:69:79:b1:cd:9c:46:be:e8:94:cd:cc:7b:
04:e7:e8:d9:74:32:00:0a:47:c2:d9:23:3f:5a:90:
50:5e:a9:52:eb:5a:cf:7b:8d:b0:fb:ed:df:83:0a:
f1:af:e6:31:44:c3:f8:53:ff:f0:37:e1:74:de:64:
93:0f:04:10:b3:ac:31:af:4f:2c:e8:03:ff:ca:60:
a0:ae:3f:13:5d:d8:75:ad:10:16:f1:e7:86:83:bd:
43:24:87:58:77:57:96:36:cb:17:d5:9b:5e:a3:2e:
d1:c4:ef:21:d3:aa:4a:ee:36:53:70:2e:7e:e4:23:
5e:8b:ee:86:15:39:2d:76:1d:9e:80:c7:4d:09:2e:
20:1f:d5:30:39:28:35:71:85:cf:18:52:a0:6a:5e:
7b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:21:68:EF:A1:E5:7A:BF:9D:AA:7E:E4:F4:FF:72:F0:5E:58:BE:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/2dda1db5-6491-3ca9-a837-a07fd3fdb3d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.64.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:36:72:4c:37:15:75:0d:07:c2:0a:e1:f4:47:6b:93:5a:ef:
bf:17:3d:8b:1c:b1:3d:9c:01:b4:2b:46:fb:f5:39:f1:9a:35:
ff:15:f3:15:2d:6e:28:3a:53:0d:56:63:ff:0d:6b:3a:4f:e2:
18:aa:2c:a3:cc:89:ba:18:a7:84:46:5e:71:60:16:e1:ff:dc:
f5:7e:6c:44:49:86:0e:23:bd:b4:b6:79:e4:bb:f0:b4:32:ca:
2a:37:65:43:21:d7:2b:93:37:a8:67:45:a7:2f:78:fb:45:31:
01:1d:9a:cb:93:1a:3e:4e:c6:72:66:ce:23:2a:c5:36:df:26:
39:e3:48:d0:91:e9:ae:48:d8:fd:5e:48:7b:2e:d8:c0:f6:43:
d0:58:0a:1a:1f:c2:bb:4f:7d:b6:31:db:8f:62:80:1d:9e:c9:
67:75:dd:40:50:19:64:24:76:45:32:75:e5:d2:7e:d8:f8:04:
04:98:90:07:26:a4:de:c6:2a:3a:d1:be:c0:8f:02:a5:21:0f:
87:61:31:d6:60:21:eb:2d:9d:db:0a:a4:d3:58:09:c9:34:8e:
1a:56:7e:00:ab:c4:40:8f:f5:e3:75:87:2f:df:9b:13:96:9d:
48:4c:b0:1d:4f:c1:fb:98:46:f2:16:0b:c0:3b:f7:4d:a9:b2:
58:13:ae:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:20:11 2026 by rpki-client