
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d0ce1dd3-90a7-3e12-8e95-6abd3aa984a6.roa
File: d0ce1dd3-90a7-3e12-8e95-6abd3aa984a6.roa (raw, json)
Hash identifier: pSB3nd8fIabJ2F5y/vR7etXxYEtBBN9yA5MwUaUkxHA=
Subject key identifier: C8:61:C3:C0:C0:61:88:9D:DD:EC:A6:A5:E5:8E:6F:99:43:78:9A:04
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584D5DEF28EB2A98B0645D67C800
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d0ce1dd3-90a7-3e12-8e95-6abd3aa984a6.roa
Signing time: Wed 01 Apr 2026 23:33:38 +0000
ROA not before: Wed 01 Apr 2026 23:33:38 +0000
ROA not after: Tue 30 Jun 2026 23:33:38 +0000
asID: 16509
IP address blocks: 107.148.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5d:ef:28:eb:2a:98:b0:64:5d:67:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Apr 1 23:33:38 2026 GMT
Not After : Jun 30 23:33:38 2026 GMT
Subject: CN=ae83d970-50b7-458c-a557-da760234c820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:5c:c3:a6:45:b8:2a:0b:49:5e:0e:42:e8:
ff:60:8f:c6:1d:79:97:aa:21:16:82:fc:62:04:5e:
5a:08:dc:6d:94:ef:08:ae:e1:86:0d:92:38:f3:b8:
86:d9:6d:04:51:23:1c:b7:38:e2:2a:94:9a:af:26:
91:10:8d:30:09:d0:02:75:6c:8d:72:fe:a0:29:6c:
f8:b1:c2:8a:2f:da:c0:98:90:ce:d0:5f:c1:0a:c9:
14:cc:00:07:60:1c:ad:c0:2a:78:99:9c:2c:2a:b1:
6a:eb:67:d8:05:c8:e5:6f:aa:10:d3:d0:1f:24:69:
9f:59:b5:07:b7:29:a1:2c:a0:24:05:5e:e1:52:ba:
77:29:78:09:45:b8:ff:17:5e:67:f8:b0:69:6c:d8:
46:2e:c9:82:c3:48:96:d6:6b:06:bb:a6:9a:2f:27:
17:42:a3:6e:d9:1c:7d:d5:e1:23:4c:ba:11:47:ff:
48:99:ad:de:60:dd:1f:36:b2:23:e7:47:a6:15:73:
e0:da:d6:4b:aa:c6:95:2a:b3:06:ce:d0:97:4d:5f:
d7:b7:c1:21:3f:7d:72:86:9e:fd:58:8c:1e:e0:20:
cf:fc:06:57:9a:6b:f4:1e:cd:c0:d0:bd:9f:1f:ed:
81:de:77:e6:ad:96:ab:74:f0:68:4c:5e:60:96:13:
c5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:61:C3:C0:C0:61:88:9D:DD:EC:A6:A5:E5:8E:6F:99:43:78:9A:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/d0ce1dd3-90a7-3e12-8e95-6abd3aa984a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:cf:b4:b1:12:33:2f:ab:d1:46:50:76:e9:07:25:c4:3c:48:
c4:b4:a6:1c:03:18:a7:1d:61:7c:b6:32:4f:fd:38:ef:11:79:
bc:9d:5a:eb:9b:04:6b:aa:34:4d:4f:31:e2:01:80:c1:3b:c6:
69:6f:da:51:fc:fe:88:90:c3:ce:44:45:8d:2b:49:e8:1f:4b:
d6:77:93:9c:6a:01:a4:e3:a0:95:06:63:09:5c:1a:85:33:63:
04:b0:d4:7d:b7:ca:f0:5a:c7:98:f8:7b:f9:08:5f:26:d5:31:
1a:ef:26:9f:b4:1f:7c:21:ec:19:26:97:3c:b0:21:ea:c8:c8:
09:97:f3:14:b2:84:a7:e9:ba:0e:86:c2:11:97:45:dd:5a:49:
b0:0c:5b:e3:bd:f0:4f:59:d2:99:3d:2c:1b:75:d0:47:b3:dd:
7d:55:11:18:76:1b:0c:b8:13:47:c3:4e:05:9a:40:20:0b:03:
b5:f4:73:52:c4:31:d4:4b:30:71:bf:d4:ef:95:bf:83:c9:9b:
bb:03:5d:42:6f:b2:c2:50:7c:42:6e:7a:9f:7a:85:00:11:4f:
4d:6c:e2:f6:6c:00:e2:79:48:4f:ce:84:43:6a:5f:f1:59:c9:
e7:a7:42:0a:9d:89:06:83:e7:7e:b4:4d:80:15:fa:3f:25:88:
45:13:76:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1d7yjrKpiwZF1nyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI2MDQwMTIzMzMzOFoXDTI2MDYzMDIzMzMzOFowLzEtMCsGA1UEAxMk
YWU4M2Q5NzAtNTBiNy00NThjLWE1NTctZGE3NjAyMzRjODIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPdcw6ZFuCoLSV4OQuj/YI/GHXmXqiEWgvxi
BF5aCNxtlO8IruGGDZI487iG2W0EUSMctzjiKpSaryaREI0wCdACdWyNcv6gKWz4
scKKL9rAmJDO0F/BCskUzAAHYBytwCp4mZwsKrFq62fYBcjlb6oQ09AfJGmfWbUH
tymhLKAkBV7hUrp3KXgJRbj/F15n+LBpbNhGLsmCw0iW1msGu6aaLycXQqNu2Rx9
1eEjTLoRR/9Ima3eYN0fNrIj50emFXPg2tZLqsaVKrMGztCXTV/Xt8EhP31yhp79
WIwe4CDP/AZXmmv0Hs3A0L2fH+2B3nfmrZardPBoTF5glhPFgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMhhw8DAYYid3eympeWOb5lDeJoEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvZDBjZTFkZDMtOTBhNy0z
ZTEyLThlOTUtNmFiZDNhYTk4NGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa5QHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJfPtLESMy+r0UZQdukHJcQ8SMS0phwDGKcdYXy2Mk/9OO8RebydWuub
BGuqNE1PMeIBgME7xmlv2lH8/oiQw85ERY0rSegfS9Z3k5xqAaTjoJUGYwlcGoUz
YwSw1H23yvBax5j4e/kIXybVMRrvJp+0H3wh7BkmlzywIerIyAmX8xSyhKfpug6G
whGXRd1aSbAMW+O98E9Z0pk9LBt10Eez3X1VERh2Gwy4E0fDTgWaQCALA7X0c1LE
MdRLMHG/1O+Vv4PJm7sDXUJvssJQfEJuep96hQART01s4vZsAOJ5SE/OhENqX/FZ
yeenQgqdiQaD5360TYAV+j8liEUTdlM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:38:15 2026 by rpki-client