
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7cc8eb1-fb18-374a-936c-09033e157e0f.roa
File: a7cc8eb1-fb18-374a-936c-09033e157e0f.roa (raw, json)
Hash identifier: 2RrrzfAOtJh+/p1+9nGqJO1DBSJDVoTlISVHoEOTnHg=
Subject key identifier: 3A:C9:A2:B5:7F:92:56:56:52:08:05:6C:6C:DE:D7:78:A1:3C:CA:05
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E22E5F030C3622E5F2E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7cc8eb1-fb18-374a-936c-09033e157e0f.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 107.3.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:22:e5:f0:30:c3:62:2e:5f:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=ff72dc25-1507-4b26-82b6-dc8c5c4539e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4e:df:05:98:4d:dc:be:52:a1:13:a1:ce:e9:
e5:0d:67:a1:08:a2:63:de:40:52:cb:8c:a5:3e:a0:
22:01:94:90:b9:01:45:c0:ba:91:5a:fe:8b:0f:f2:
a3:9c:b0:85:d2:72:22:89:71:23:e5:6a:d0:58:06:
cf:be:56:86:b7:8f:29:63:40:46:38:41:cf:03:ba:
a1:b5:99:6c:69:c2:d5:c5:7b:d6:10:2f:df:89:80:
4a:2c:6a:be:08:0c:27:b4:3f:78:44:b6:14:96:f5:
48:a1:df:a2:67:fb:75:bf:50:d8:45:78:29:57:6c:
80:8c:3e:7b:3f:12:80:e2:6f:4c:50:ce:f8:66:91:
6e:80:bc:68:0e:01:4c:b2:a6:8b:0c:52:0e:0d:7c:
b0:86:d9:55:d2:7c:93:37:4a:97:36:47:44:10:65:
b5:0c:1a:4c:3b:cc:0e:ae:0f:90:2e:2a:0d:ff:8f:
86:b6:3a:f8:82:a2:92:c1:de:ef:fd:b7:43:70:0d:
86:c7:6f:62:b0:67:83:1d:32:6f:59:5e:1f:2f:3f:
13:4f:13:40:cb:1e:6e:51:e8:fd:ab:05:4a:5b:e1:
0b:8f:52:b8:a7:d9:a7:e0:6a:31:64:6f:2c:48:57:
3b:9a:b9:db:e1:5c:81:a6:ab:b9:9d:77:51:a5:0f:
99:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C9:A2:B5:7F:92:56:56:52:08:05:6C:6C:DE:D7:78:A1:3C:CA:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7cc8eb1-fb18-374a-936c-09033e157e0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
107.3.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:1b:47:1b:e3:d8:74:2b:54:57:41:94:c9:e1:1f:22:1c:86:
08:29:00:4f:34:9d:0b:03:d1:7a:57:bf:b0:65:ec:6c:a7:02:
29:27:6f:a5:66:d7:bf:4b:79:5c:d4:f5:03:12:58:89:1a:5a:
c4:b2:20:b3:7f:18:1d:84:d1:cd:4e:ba:b6:05:3e:16:eb:f2:
8a:a3:18:7a:d5:d5:c4:1f:d3:aa:6e:45:25:4a:d9:71:c3:bd:
ba:1a:49:b1:4b:33:4a:9d:ce:38:56:c5:25:22:cd:09:94:77:
f1:73:c7:b4:32:f6:35:2c:51:c1:d6:66:c4:de:fe:5e:72:27:
bb:4c:39:e9:d2:30:67:5a:1d:ba:9f:aa:37:a2:03:46:d1:6b:
6d:d0:65:e3:1c:96:8f:0e:7b:b5:f1:df:81:3c:77:d9:7e:39:
fa:a6:5a:36:c8:59:77:38:2c:9d:0a:b0:83:60:8a:63:df:f2:
03:88:2e:af:ce:16:ac:f6:ef:3d:a3:f6:a4:c0:dd:39:10:c4:
52:83:9f:6e:54:06:65:9a:e8:6d:30:5e:b3:69:9e:19:8b:3a:
49:fa:d6:6b:b5:49:f9:c3:ee:9b:11:3f:48:43:b8:81:1f:c2:
d0:af:bc:06:45:b8:7d:07:b5:4e:03:f1:76:ce:fa:d8:49:92:
0c:94:08:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:16:10 2026 by rpki-client