
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ecdcf9fb-2729-3b19-8236-475461ab7fb3.roa
File: ecdcf9fb-2729-3b19-8236-475461ab7fb3.roa (raw, json)
Hash identifier: R9kRjWGnIsTROvlVk0ne8oaKWXgdG8HHJjW3YQD0tDE=
Subject key identifier: 84:04:17:42:EA:8D:22:93:03:D6:D0:13:87:E6:76:A1:E1:DF:C9:00
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584E8FDAA832806C888577B505C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ecdcf9fb-2729-3b19-8236-475461ab7fb3.roa
Signing time: Mon 20 Jul 2026 13:29:40 +0000
ROA not before: Mon 20 Jul 2026 13:29:40 +0000
ROA not after: Sun 18 Oct 2026 13:29:40 +0000
asID: 984
IP address blocks: 107.149.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:8f:da:a8:32:80:6c:88:85:77:b5:05:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Jul 20 13:29:40 2026 GMT
Not After : Oct 18 13:29:40 2026 GMT
Subject: CN=486c894a-2128-4059-84f0-c137e0ed2c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a9:b4:6a:8f:70:e4:e5:ba:0b:a9:fc:c1:98:
5c:72:25:26:46:ee:bc:04:14:9e:8d:38:88:ed:dc:
3b:bc:83:c5:85:81:60:7c:f5:21:13:75:a6:a3:96:
dd:a7:0a:71:cf:a7:47:75:8d:02:97:f5:33:9b:71:
dc:ab:8f:46:91:72:70:19:6b:ec:8b:18:16:b6:ec:
1b:bd:6e:e7:dd:1e:d4:71:a8:a2:6b:da:7a:bf:82:
a8:28:27:bb:08:6e:d5:fc:d2:89:e5:4f:93:e3:8c:
63:5c:7c:8e:f9:13:64:e8:16:a8:5d:e8:84:e3:b2:
4e:f7:08:14:a6:2f:f8:ac:f0:d2:c1:df:f1:77:61:
88:56:ab:7e:52:83:16:d8:3e:db:5a:d3:c2:70:cb:
cd:d7:b5:3d:38:ac:d5:0c:56:55:32:39:dc:83:de:
36:3e:91:a5:4e:c1:49:5d:2d:f1:64:4b:b1:98:a4:
2b:db:9b:87:d7:7b:54:53:8e:81:ed:55:2d:9d:ac:
80:81:c1:63:8d:49:39:2b:52:a0:bf:79:18:d9:8f:
cb:85:f8:9f:94:60:34:88:bf:89:8e:81:5d:1a:63:
99:5c:a0:a0:2e:58:84:2d:b6:36:33:24:dc:13:ca:
ac:31:ed:d6:df:6e:68:6d:f3:14:f6:6b:83:cb:15:
f1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:04:17:42:EA:8D:22:93:03:D6:D0:13:87:E6:76:A1:E1:DF:C9:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/ecdcf9fb-2729-3b19-8236-475461ab7fb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.149.27.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:fa:66:07:e7:d3:b4:c1:9c:fe:3e:d3:4d:0e:7f:10:05:c4:
66:87:1c:47:72:ec:41:69:01:bf:07:c8:39:6b:8d:99:60:fc:
9b:00:75:41:05:c2:20:88:44:ea:86:c1:ce:f7:d3:d4:6d:f5:
85:0c:c5:b2:b5:de:17:77:14:66:a6:06:f8:ba:c8:7b:87:e8:
ec:24:83:6f:47:1c:41:9d:f9:4e:45:d7:c4:c7:d8:2e:fb:65:
36:a1:92:47:ba:0d:4b:5b:53:67:a5:27:f7:32:a6:a2:92:70:
b4:1d:72:60:14:7a:3c:0c:6d:3c:f4:3c:05:79:11:24:0c:19:
ad:ec:fe:92:00:16:8f:5a:30:d6:19:9a:9c:3e:a7:08:b9:ea:
39:14:bb:2c:e2:95:a8:11:fe:1d:e1:23:7f:9c:24:34:ef:af:
4f:3c:56:b8:75:23:1d:3a:b3:0a:55:2b:59:65:04:3b:77:21:
17:ad:f8:45:80:84:6c:2c:38:13:a5:43:8f:0e:49:48:a9:a3:
05:56:2e:0c:7b:22:64:d1:de:d9:dc:1c:6c:ca:61:6c:7a:8d:
05:61:3e:a2:9f:2d:71:84:75:4e:f0:98:ba:10:77:62:97:e0:
fd:c2:5c:21:2d:54:18:d3:33:dc:6f:90:37:c8:44:80:53:a0:
f8:81:a3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:24:30 2026 by rpki-client