
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8ad7970-72e8-3a4d-9b23-efdb2d4459c4.roa
File: c8ad7970-72e8-3a4d-9b23-efdb2d4459c4.roa (raw, json)
Hash identifier: VG6il+f7GJWxGDYL5vupmlH1rTnleLKCpYEHT32jyUs=
Subject key identifier: D8:9C:03:63:4F:A5:28:9A:69:7B:56:F6:2D:0A:81:F0:7D:ED:82:EE
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584F4976AF9D3545C6D707939308
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8ad7970-72e8-3a4d-9b23-efdb2d4459c4.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 399195
IP address blocks: 107.148.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:af:9d:35:45:c6:d7:07:93:93:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=0ccc6d74-18de-4641-a349-d0a0cd032a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:02:ed:bb:58:e6:94:bc:26:d1:d4:61:92:17:
64:22:30:55:c3:96:5e:7b:40:ad:ea:24:9c:be:10:
1a:6a:3b:96:33:da:7c:33:aa:3e:a1:73:aa:4c:19:
9c:ce:67:43:3b:f5:eb:47:05:f6:59:f6:48:08:ce:
26:fc:41:c2:da:3b:b3:49:a9:f4:2d:2c:74:be:64:
ae:39:dc:1e:9a:31:2f:a0:c3:15:00:ee:a3:72:c4:
df:16:59:b8:37:b8:e1:43:c3:f4:9a:33:88:59:d2:
6d:53:6a:44:37:86:92:b7:bf:21:1c:ab:ac:33:64:
cf:fc:09:72:c8:af:46:2e:e6:76:24:90:d6:cb:10:
0a:bf:7d:08:2b:45:4b:ca:46:40:a0:85:e1:19:31:
d3:42:e8:f0:49:eb:bb:a9:89:1e:44:5a:4a:da:7d:
0c:a8:2e:8f:f4:b2:de:11:50:17:81:55:f7:5a:c0:
44:e9:3e:6b:ee:1b:5f:63:b3:d2:c4:e9:30:75:0a:
86:88:e4:bd:ae:a7:e2:d2:3c:ae:e5:f9:b6:bf:4a:
cd:17:ed:fe:05:2c:3e:e4:46:c1:2c:e6:dc:c5:c6:
00:86:87:41:5a:af:e9:81:8d:ec:a8:2b:56:8d:a2:
ba:90:01:f9:61:ec:cd:af:c1:3e:be:a8:04:5c:38:
a5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9C:03:63:4F:A5:28:9A:69:7B:56:F6:2D:0A:81:F0:7D:ED:82:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c8ad7970-72e8-3a4d-9b23-efdb2d4459c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:da:e3:00:63:42:7a:ac:5b:a9:93:7d:b5:67:17:7c:ea:9b:
fb:c7:d4:fc:f6:83:9b:ba:ec:64:1d:e5:27:1d:ed:8e:d9:b1:
58:71:57:6f:be:26:50:38:fa:0b:82:1c:32:98:d8:7a:b1:63:
12:09:95:eb:be:61:d7:df:8e:7d:b6:5e:b7:99:71:71:b8:f2:
e0:81:bf:7e:0c:1a:89:66:e8:21:96:4c:11:c7:97:8b:e0:d6:
9d:60:e2:04:a7:be:c9:72:bb:06:90:03:f8:93:5e:8a:0c:fb:
0f:c7:0f:69:dd:7c:44:9b:2d:13:76:a0:55:71:f1:ca:54:22:
a3:64:a1:39:c8:44:c9:a7:1f:5f:bf:99:ed:29:10:54:3e:15:
fc:fe:c0:8e:3b:ed:05:54:1b:f8:ad:1f:3b:b7:bd:ef:73:d5:
fa:87:48:0c:81:da:94:cc:62:78:a2:2f:18:8b:c8:33:ce:2e:
cf:fe:4e:f6:b2:1e:b6:44:0f:1d:b6:57:13:40:af:f6:6f:62:
e7:f0:e4:07:c0:ad:5a:69:3a:e9:4d:a1:25:44:3e:48:71:46:
5f:3a:0f:36:5b:b0:7d:ea:d8:e7:37:30:3b:80:4f:17:8c:6a:
a7:29:1c:eb:f5:71:c4:bc:ea:62:d0:d2:30:04:ee:63:db:9c:
26:02:5c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:04:12 2026 by rpki-client