
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/66c3ccdc-8e6c-32e6-9299-14efbc883724.roa
File: 66c3ccdc-8e6c-32e6-9299-14efbc883724.roa (raw, json)
Hash identifier: 77JWoAKKbSnHVQqyLrOf9BL0t7oxiH3/66YCsR7/aAA=
Subject key identifier: D7:BF:89:52:68:DF:98:D9:82:49:24:A1:35:B3:B3:13:02:BE:A2:52
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584F4976AD7A44331C2FC180AF00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/66c3ccdc-8e6c-32e6-9299-14efbc883724.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 398823
IP address blocks: 107.148.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:ad:7a:44:33:1c:2f:c1:80:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b4f8975f-37ec-4910-a61a-faee0aea1f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:df:89:08:b3:f6:58:5e:35:88:45:7f:bb:
d9:78:31:4e:32:2f:56:91:e9:cc:af:52:66:ed:87:
06:40:76:73:91:84:05:33:a0:88:d8:8d:85:bb:0a:
99:ac:1d:db:39:d3:b6:16:e5:45:73:b1:a5:c8:23:
10:44:ad:90:7d:20:35:27:5b:a4:63:bf:c2:ca:80:
a7:55:27:de:b0:eb:17:a2:ab:b2:6b:5a:5c:03:b0:
4b:19:ca:1f:c6:4c:a9:1d:8f:84:36:79:02:11:b9:
81:d3:9d:38:82:90:58:f2:f4:71:75:bf:db:5c:59:
d8:90:0f:b7:3b:ce:a4:97:47:a4:7d:ef:62:59:31:
7e:a7:b2:8f:1f:0f:a2:00:6e:4f:b3:98:98:20:8c:
5f:9f:88:f1:d3:cb:53:0e:92:e6:35:1f:a1:ce:aa:
ae:3b:3c:6a:5d:84:7c:35:23:61:94:3b:60:da:be:
40:fd:84:3e:56:13:60:68:36:8b:f5:7f:7e:a3:7c:
2f:2c:a9:65:50:44:8b:bc:89:88:f4:38:6a:b1:4a:
8e:8d:b5:c5:e2:3f:d2:bd:d0:ba:bf:ee:72:8b:39:
22:8b:6a:db:bb:0e:7c:ee:7f:0a:27:d4:60:06:01:
69:47:a4:d0:14:92:de:da:64:2b:98:57:1e:da:e1:
b1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BF:89:52:68:DF:98:D9:82:49:24:A1:35:B3:B3:13:02:BE:A2:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/66c3ccdc-8e6c-32e6-9299-14efbc883724.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:e7:91:e0:96:de:62:97:53:9d:01:6a:5e:34:2f:e8:c0:39:
b6:9b:2c:22:fb:4b:aa:0f:dc:00:69:b5:41:36:5a:81:62:14:
ec:7b:b8:ab:9b:56:e7:90:c5:20:99:53:cc:a0:88:56:15:90:
90:c8:ba:ed:24:19:75:6d:b2:75:09:f4:8f:ad:49:73:2d:86:
f9:8b:7e:da:bc:1f:0f:ca:b6:a4:d8:eb:ab:cf:32:59:f5:5e:
aa:db:fd:a9:70:3d:b6:36:2f:44:34:55:5c:93:0f:82:38:be:
5f:91:25:85:e5:f1:da:59:f8:96:ea:73:3e:5a:bb:1b:d4:af:
72:7b:4e:cb:61:95:9d:f0:4e:a5:4c:c4:be:46:ba:c1:21:b4:
0c:85:4b:86:72:21:a2:07:2b:a0:19:be:81:e4:7a:c1:5e:0a:
d6:fb:52:aa:15:1d:d7:7e:3c:97:83:7c:d9:94:5b:35:e8:5a:
bc:f9:f8:ed:2e:08:39:f2:5a:d8:6a:49:57:68:db:17:f4:fc:
79:ce:d8:c5:9e:d7:d2:ad:53:95:41:3f:5a:c1:33:aa:52:6d:
7b:0d:b9:6b:59:06:db:d1:0b:19:00:46:09:3d:95:b3:cb:e6:
67:44:16:1f:f2:a3:d8:6a:0c:c8:51:7f:10:b8:90:eb:46:6c:
dc:fc:e7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:44:13 2026 by rpki-client