
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/653e0f06-0d5b-31a4-bc94-bbea3c0ddcf9.roa
File: 653e0f06-0d5b-31a4-bc94-bbea3c0ddcf9.roa (raw, json)
Hash identifier: HyG6LEHNLVmXJbKiuUHbjryOTgrAhzMK9Xnei0UNdIw=
Subject key identifier: FD:DE:EE:A5:C1:B5:00:3D:D6:44:CC:73:DA:D5:7D:FC:F6:45:36:49
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584D0217AE40944DB855BC5B1A00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/653e0f06-0d5b-31a4-bc94-bbea3c0ddcf9.roa
Signing time: Sat 28 Feb 2026 02:00:32 +0000
ROA not before: Sat 28 Feb 2026 02:00:32 +0000
ROA not after: Fri 29 May 2026 01:00:32 +0000
asID: 398478
IP address blocks: 107.149.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:02:17:ae:40:94:4d:b8:55:bc:5b:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Feb 28 02:00:32 2026 GMT
Not After : May 29 01:00:32 2026 GMT
Subject: CN=517d4f6f-a3f9-4557-a29e-5e484b7ae58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5d:45:60:b4:d5:d9:f5:06:2c:6c:15:64:39:
77:9f:9b:68:4a:68:80:03:83:6a:63:df:90:e2:ff:
5f:c2:16:04:73:fd:d1:19:09:ec:e8:e2:18:e4:66:
2c:07:05:37:44:1a:8f:be:8e:0c:2f:7a:0c:d3:2a:
7e:00:ce:da:64:d2:7b:d6:17:80:73:66:f0:52:d5:
d1:cf:77:80:81:48:95:b0:cd:e0:aa:d7:42:64:36:
61:74:60:b9:1c:c6:01:bc:47:0b:40:c0:83:96:e5:
41:30:47:aa:52:5d:69:6d:3f:26:a1:4a:b3:30:8b:
40:e0:a9:a8:bf:84:b6:b5:4c:a4:bf:e0:54:d4:d2:
03:d8:e3:c1:f0:74:c4:10:b3:ce:4b:24:9f:01:25:
64:6c:da:0a:8d:14:45:75:de:37:b7:fa:ab:cd:c7:
72:c6:9d:2e:cb:b6:b6:27:71:b7:bb:80:86:d3:d4:
59:b2:9b:1e:48:5a:88:de:bf:13:bd:54:be:8d:35:
9c:f7:cd:01:e8:0e:ba:8a:8e:3d:4d:6e:5f:9e:6c:
08:7d:7c:39:02:c2:41:50:26:56:42:ad:b1:7e:be:
6a:7e:f3:6e:6b:1c:a3:af:15:9b:95:71:2e:ef:f4:
bf:64:51:4e:54:0b:f4:05:ed:c4:39:1a:38:05:6a:
37:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DE:EE:A5:C1:B5:00:3D:D6:44:CC:73:DA:D5:7D:FC:F6:45:36:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/653e0f06-0d5b-31a4-bc94-bbea3c0ddcf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.149.214.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:6a:44:e2:56:46:22:dd:eb:ef:69:db:ef:6a:d9:2f:e4:46:
88:f6:89:c3:02:1f:a4:df:dd:ff:cb:dc:ff:89:71:63:9d:b8:
02:b2:ed:f9:9c:b9:fe:c8:af:2f:c2:cf:21:ed:6a:63:d1:3b:
f7:0c:02:10:55:b1:b9:72:4f:72:f1:90:45:9c:36:6c:f7:43:
c1:70:66:91:2d:a0:a2:fc:5c:7c:96:f3:56:d1:f2:68:d3:c4:
ce:a0:d4:af:ab:bc:ee:ef:0e:04:8f:1f:01:66:1a:25:f7:8e:
ba:2f:98:17:28:8b:54:db:e2:37:8c:92:cc:ed:26:20:59:2f:
03:30:cf:22:89:56:05:2f:f9:7d:ed:2a:3f:8a:c2:63:3a:bc:
d1:81:5c:9b:e9:fe:7d:8d:c7:17:c6:cc:0b:e8:0a:25:c2:f5:
4d:d2:d5:8e:36:e9:0a:29:77:7b:9c:d0:11:ac:b7:ba:e8:75:
23:b4:5e:f4:43:46:b8:c3:99:0b:d6:cd:c8:e3:eb:af:68:7c:
06:7f:e3:e9:5d:d5:3f:54:b9:15:98:3d:81:63:c2:0b:65:69:
00:bb:cc:3f:44:12:5a:87:98:2d:d8:82:a0:df:19:7d:6c:43:
2c:04:32:6f:df:35:26:3d:1f:21:cd:b4:7e:0d:4f:e4:9b:f2:
04:1c:64:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:41 2026 by rpki-client