
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/538f37f8-040e-3e20-a524-0fbf425aebc9.roa
File: 538f37f8-040e-3e20-a524-0fbf425aebc9.roa (raw, json)
Hash identifier: xrw6xhyhiLP5WIXIXxCSCfiP7IJBYzEpI0Uw7dKHZ2E=
Subject key identifier: 0F:9B:D0:10:43:B4:11:59:B8:4C:32:03:2F:13:AA:77:85:4E:41:D8
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584D667A5872385B68087539AF00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/538f37f8-040e-3e20-a524-0fbf425aebc9.roa
Signing time: Sun 05 Apr 2026 01:00:24 +0000
ROA not before: Sun 05 Apr 2026 01:00:24 +0000
ROA not after: Sat 04 Jul 2026 01:00:24 +0000
asID: 54600
IP address blocks: 107.149.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:66:7a:58:72:38:5b:68:08:75:39:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Apr 5 01:00:24 2026 GMT
Not After : Jul 4 01:00:24 2026 GMT
Subject: CN=4bfcce7e-1277-40a4-ad43-04de3e18da13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:41:31:66:7a:7a:7b:a5:26:40:44:fe:85:1d:
52:00:7f:20:cb:a2:c0:83:d1:d0:c9:a3:67:21:51:
1e:51:03:f5:c8:af:76:44:2c:90:e0:2c:66:9d:dd:
32:37:40:6c:d2:66:28:7b:af:73:da:f3:5a:c7:8f:
1a:17:c7:fa:56:46:4f:42:b1:64:c8:dd:a9:71:f9:
e6:82:80:e4:a3:a3:cd:87:df:7c:56:2f:a2:65:f4:
65:34:f3:33:d6:05:eb:b8:37:c0:7d:eb:c7:bf:20:
f9:0b:3a:74:d3:d0:98:91:48:08:8c:e3:2c:a8:11:
a1:cd:a5:dc:ea:39:8c:86:1d:c6:f8:bb:5a:3b:e4:
2b:e7:b1:66:5f:a1:1e:90:30:59:d8:82:95:6b:ee:
8e:99:b9:d8:de:c3:d5:13:9d:58:85:d5:2e:a7:58:
79:1b:aa:a3:9b:79:5e:99:b7:b4:96:ed:b8:68:2e:
36:ac:63:02:d6:d7:01:1b:1f:ab:4b:1c:37:d4:e7:
bc:6a:cf:bc:1f:bd:1f:ae:2f:da:16:40:a9:fb:9c:
ae:1d:6b:44:93:70:2d:9f:e1:f3:24:77:a8:c4:a2:
2a:97:61:f2:d2:0b:bf:d0:81:e8:f4:f5:ae:82:80:
56:5c:c4:1f:cd:a6:fd:bb:37:d7:1f:fd:c9:98:8d:
e5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9B:D0:10:43:B4:11:59:B8:4C:32:03:2F:13:AA:77:85:4E:41:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/538f37f8-040e-3e20-a524-0fbf425aebc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.149.212.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:cc:40:4d:4c:c5:dc:29:b5:90:22:2e:32:ac:02:c5:7f:aa:
32:1e:62:f3:db:16:b2:e2:81:73:30:5d:93:18:68:e8:bd:43:
fd:84:23:61:fb:12:56:46:c2:42:82:08:07:27:f3:30:a7:e5:
cd:5f:25:a0:3c:8c:fd:43:fb:8c:33:63:d2:c1:d9:9a:ef:85:
ab:3d:f2:d4:85:76:2c:22:7c:ce:b8:49:4a:6c:c4:c9:af:fb:
57:68:c7:2b:95:00:6d:3b:9c:5f:74:0e:ee:ab:ae:ca:bb:1f:
6d:3f:9a:54:4b:e3:77:8e:dd:2b:6e:34:56:6d:9f:74:fd:c4:
98:41:82:ce:c1:c1:c5:8d:f8:bc:9d:45:a7:ef:87:a0:73:a1:
45:56:53:ad:79:0a:ce:16:b0:bf:1d:37:17:15:6c:b3:79:d6:
6d:df:f0:b5:81:b2:ed:ba:b5:9c:e8:35:a4:7f:7f:d9:95:2a:
94:01:b4:dd:b6:ce:bc:75:92:84:ed:57:5f:18:a1:66:c8:fc:
cd:fd:7f:5b:93:90:cf:e7:62:74:0c:77:29:16:2d:9d:ee:94:
bf:4f:a1:fd:55:26:b0:28:e9:e0:98:c0:36:1b:19:2a:5a:80:
0f:00:4e:bc:99:45:89:22:73:e8:f2:76:e9:48:0f:7e:86:c1:
28:7e:a1:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1melhyOFtoCHU5rwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk
NGJmY2NlN2UtMTI3Ny00MGE0LWFkNDMtMDRkZTNlMThkYTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUExZnp6e6UmQET+hR1SAH8gy6LAg9HQyaNn
IVEeUQP1yK92RCyQ4Cxmnd0yN0Bs0mYoe69z2vNax48aF8f6VkZPQrFkyN2pcfnm
goDko6PNh998Vi+iZfRlNPMz1gXruDfAfevHvyD5Czp009CYkUgIjOMsqBGhzaXc
6jmMhh3G+LtaO+Qr57FmX6EekDBZ2IKVa+6OmbnY3sPVE51YhdUup1h5G6qjm3le
mbe0lu24aC42rGMC1tcBGx+rSxw31Oe8as+8H70fri/aFkCp+5yuHWtEk3Atn+Hz
JHeoxKIql2Hy0gu/0IHo9PWugoBWXMQfzab9uzfXH/3JmI3lAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA+b0BBDtBFZuEwyAy8TqneFTkHYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvNTM4ZjM3ZjgtMDQwZS0z
ZTIwLWE1MjQtMGZiZjQyNWFlYmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBa5XUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE3MQE1MxdwptZAiLjKsAsV/qjIeYvPbFrLigXMwXZMYaOi9Q/2EI2H7
ElZGwkKCCAcn8zCn5c1fJaA8jP1D+4wzY9LB2Zrvhas98tSFdiwifM64SUpsxMmv
+1doxyuVAG07nF90Du6rrsq7H20/mlRL43eO3StuNFZtn3T9xJhBgs7BwcWN+Lyd
Rafvh6BzoUVWU615Cs4WsL8dNxcVbLN51m3f8LWBsu26tZzoNaR/f9mVKpQBtN22
zrx1koTtV18YoWbI/M39f1uTkM/nYnQMdykWLZ3ulL9Pof1VJrAo6eCYwDYbGSpa
gA8ATryZRYkic+jydulID36GwSh+oVs=
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:51:06 2026 by rpki-client