
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3905e242-41f7-346c-95b8-b9f9059f425b.roa
File: 3905e242-41f7-346c-95b8-b9f9059f425b.roa (raw, json)
Hash identifier: 4SLSOlonF4g93xcxaK4XmJG1/TCnx3nrXWvDlNsEEkw=
Subject key identifier: FC:4F:93:4F:A5:44:6B:BB:46:70:15:81:E8:07:E4:46:73:74:C7:54
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584D0217AD543D8FE30C19955380
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3905e242-41f7-346c-95b8-b9f9059f425b.roa
Signing time: Sat 28 Feb 2026 02:00:32 +0000
ROA not before: Sat 28 Feb 2026 02:00:32 +0000
ROA not after: Fri 29 May 2026 01:00:32 +0000
asID: 398823
IP address blocks: 107.148.86.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:02:17:ad:54:3d:8f:e3:0c:19:95:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Feb 28 02:00:32 2026 GMT
Not After : May 29 01:00:32 2026 GMT
Subject: CN=e2bd6d30-27ee-48cf-88a0-a8a8fd629201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:33:3b:c2:5f:34:01:e1:66:80:ca:16:ea:fb:
7b:85:e2:6d:da:10:fe:bd:43:0f:29:27:4d:17:5f:
ad:2d:9c:b1:27:8b:2a:46:12:a8:4d:0d:f5:e7:8c:
6e:1a:65:03:30:1d:50:8e:4c:7f:c6:7e:aa:fd:db:
ac:d7:71:fe:3d:cf:c8:c5:11:86:38:23:d1:50:b4:
69:c4:29:b8:bd:1d:e7:41:47:94:8f:af:c7:4e:43:
c0:12:fb:de:8c:7f:01:f3:15:a3:36:88:8f:aa:e2:
4b:fa:46:da:f1:ed:26:f7:9d:d4:11:b0:71:41:a0:
97:a9:3a:88:37:c0:bd:0b:cb:bb:2a:3e:7f:d4:2f:
22:66:d5:45:98:70:6a:a8:06:62:02:ca:f6:27:92:
35:f5:e4:e5:d9:5c:9f:7e:b7:08:11:b3:ca:f6:bc:
a8:33:70:4a:d7:e5:28:53:66:ec:3a:da:6f:94:71:
a2:0d:aa:e9:22:fb:a9:a2:72:66:ee:6e:4a:53:32:
e6:b0:6f:8d:05:b2:be:86:ff:0a:0e:59:98:86:98:
dd:68:e5:2b:fe:69:da:3e:4f:8c:eb:41:b8:8d:1e:
af:f7:f6:69:58:f1:f8:8f:d3:90:49:db:4a:98:2b:
47:0c:3c:1e:b7:90:c2:89:0c:a9:71:de:af:22:9c:
f0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4F:93:4F:A5:44:6B:BB:46:70:15:81:E8:07:E4:46:73:74:C7:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3905e242-41f7-346c-95b8-b9f9059f425b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:4b:67:d2:20:a9:f3:3d:d4:10:fe:49:a3:d7:3a:0b:ac:03:
51:82:aa:77:c0:aa:4b:c0:2d:30:58:a4:c3:66:f5:8d:3e:9f:
2d:f6:24:d3:57:59:64:d8:d9:eb:f1:69:ea:b4:e6:11:52:31:
3f:fb:67:d0:c0:53:9f:99:83:f7:00:52:5d:ce:58:ef:77:c8:
a7:1a:4b:79:bc:9b:02:2a:1d:43:79:17:b0:37:6f:44:02:22:
0c:64:f6:03:75:c8:50:27:55:09:13:af:e7:ba:b1:da:54:81:
b1:03:60:aa:4b:2e:2a:7c:42:df:8f:96:70:7a:78:7d:f0:2c:
eb:e7:52:c1:1a:db:09:69:80:1d:31:e1:11:3e:18:72:72:df:
db:ee:32:39:15:64:66:a5:34:35:c1:03:d9:86:d3:29:d1:5d:
c7:76:69:a2:d3:9a:cd:29:af:02:8b:91:3a:f2:ce:e4:8d:85:
19:0e:16:04:02:d4:15:3c:3e:71:95:9d:5e:36:cb:8b:8f:46:
b0:70:f2:a8:e4:1d:71:17:b8:91:01:69:22:a7:5a:85:cb:60:
f2:a9:c8:b9:72:01:2b:a9:bf:54:30:1b:10:1a:93:47:a4:54:
5c:b2:3d:d6:93:31:bd:52:42:0a:e6:2f:26:e8:ca:02:78:53:
dd:03:68:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:25:18 2026 by rpki-client