
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3b538e76-c362-3df2-a412-04d8bec814b5.roa
File: 3b538e76-c362-3df2-a412-04d8bec814b5.roa (raw, json)
Hash identifier: NQYmSJiysC0onTBJcjrdqo2YpEjz+MaVc3HXy0WE8YY=
Subject key identifier: C9:6A:53:76:F3:7D:03:2D:8B:38:35:91:4B:AE:79:69:01:7F:56:9C
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584D0217AD66A3E8ECA28DB648C8
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3b538e76-c362-3df2-a412-04d8bec814b5.roa
Signing time: Sat 28 Feb 2026 02:00:32 +0000
ROA not before: Sat 28 Feb 2026 02:00:32 +0000
ROA not after: Fri 29 May 2026 01:00:32 +0000
asID: 398823
IP address blocks: 107.148.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:02:17:ad:66:a3:e8:ec:a2:8d:b6:48:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Feb 28 02:00:32 2026 GMT
Not After : May 29 01:00:32 2026 GMT
Subject: CN=329e786c-f502-4030-a12d-63f942269d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:61:4e:a2:8a:b0:ee:68:72:ba:5a:05:0f:2a:
74:bf:f4:01:6e:88:b1:61:7c:fe:4a:60:c7:92:0a:
f3:22:0c:a0:14:4e:d7:52:a4:4b:5a:a9:a6:73:d8:
3c:35:6c:12:85:0d:ed:59:f5:eb:0c:35:bd:55:ae:
d8:55:2b:23:39:84:f2:4b:b5:29:f5:20:c5:6c:3a:
00:4f:fc:8a:89:dd:56:d7:a4:38:aa:44:65:96:7b:
a7:59:71:da:24:91:38:ee:3c:74:21:0b:ec:e8:9a:
be:98:62:52:9a:53:5c:76:30:0e:f8:3e:46:de:e3:
99:df:1f:86:d8:45:1b:d7:09:69:b4:83:c6:05:aa:
6b:81:20:70:00:1a:bb:a3:4a:86:3a:73:98:d4:09:
44:da:17:25:ef:2e:3f:55:1b:5e:d8:cd:48:86:f5:
e6:d2:5d:da:84:21:6f:9e:83:88:78:b0:44:9f:62:
36:4e:35:f3:e6:2d:bf:c4:9b:5a:f5:63:42:a0:aa:
99:3e:96:61:61:a9:d2:94:02:20:d9:40:e2:af:e9:
f5:13:92:7b:48:84:4f:a3:65:10:1e:d9:4b:f2:14:
69:b3:fc:11:c8:32:59:84:2b:01:c7:9b:86:45:0a:
a9:76:75:0a:33:5e:4e:e3:01:ff:2b:97:b1:a0:f6:
e7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6A:53:76:F3:7D:03:2D:8B:38:35:91:4B:AE:79:69:01:7F:56:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3b538e76-c362-3df2-a412-04d8bec814b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:98:d5:72:57:18:85:81:39:2b:3b:11:78:ed:25:64:0b:b5:
84:78:67:c7:bd:ef:b1:0a:f2:39:4f:c0:91:da:61:e8:28:f0:
c3:8e:39:90:9a:fc:9c:4d:52:82:10:09:8a:01:cf:45:81:5f:
95:ae:76:46:93:e7:d0:7c:00:51:8b:94:0b:95:fc:fb:01:21:
05:c7:50:7c:43:5a:90:e3:73:79:47:6c:43:c9:e7:90:a4:00:
d1:46:2c:8c:ff:30:b0:65:d6:55:09:39:93:6a:53:b6:32:b0:
b5:de:04:89:b2:66:f9:c1:30:2f:0d:7c:19:fe:cf:d1:60:8e:
13:b7:40:30:dc:73:6a:b3:e8:f4:68:8d:c6:29:20:01:c0:d3:
47:ed:2a:87:46:d6:31:b7:3f:cb:b4:0a:bc:a3:eb:5a:27:f1:
be:ec:f3:f4:bb:46:87:37:ff:a8:1c:8b:ea:10:69:d3:a3:ca:
a3:05:f5:11:e7:9f:68:2b:8d:12:0c:1f:ff:53:69:73:32:2b:
81:81:cf:56:df:97:a2:66:ad:9d:9f:21:c0:6d:fd:76:2a:50:
25:1d:5a:8f:18:65:48:18:cc:a5:de:58:85:f6:3e:7a:2f:af:
22:33:c6:41:38:f9:02:e5:7f:1c:a7:a5:71:ad:63:19:94:55:
a7:93:06:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:43:40 2026 by rpki-client