
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3d216775-1ad8-37ce-9988-48bac3b0b375.roa
File: 3d216775-1ad8-37ce-9988-48bac3b0b375.roa (raw, json)
Hash identifier: 4LIG1lFPs4XjlYYe9DjPk552asDB6DtzYoGqwnTv1+o=
Subject key identifier: CE:97:3E:F6:33:3A:14:28:7E:0B:93:DA:17:6D:CE:BF:BF:47:01:9B
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584F0575EAEEC1AB0A4F39D114C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3d216775-1ad8-37ce-9988-48bac3b0b375.roa
Signing time: Mon 31 Aug 2026 16:32:05 +0000
ROA not before: Mon 31 Aug 2026 16:32:05 +0000
ROA not after: Sun 29 Nov 2026 17:32:05 +0000
asID: 16509
IP address blocks: 107.149.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:05:75:ea:ee:c1:ab:0a:4f:39:d1:14:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Aug 31 16:32:05 2026 GMT
Not After : Nov 29 17:32:05 2026 GMT
Subject: CN=984884a0-96f1-4f93-82d8-01e06d341da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:c2:b5:9b:b2:2f:0c:c1:f4:e4:9e:6c:ff:
86:0a:2c:d8:a9:f0:0d:50:4f:bd:94:e8:59:e6:db:
55:6a:a0:7c:35:42:d0:41:a8:5e:e0:04:f0:ff:07:
17:05:9c:06:34:1f:c1:a7:00:f4:a5:7e:12:71:05:
e4:03:d1:7d:df:4b:94:aa:ce:4c:2a:e5:3b:81:ff:
10:4a:28:55:fa:c5:4e:58:3a:3d:be:28:1a:a6:5a:
e1:34:ea:02:10:58:63:6e:79:37:96:ce:33:5e:67:
db:05:c9:c2:55:cc:c3:de:3e:4f:da:ab:a4:41:8f:
15:be:26:ef:be:56:68:d1:67:68:fb:27:87:b6:84:
2a:1c:04:cd:a4:59:b6:a6:52:ef:07:ea:bc:74:08:
ca:68:59:ba:61:05:4a:27:f3:62:51:03:45:f5:fa:
f0:36:97:8f:9b:01:63:ea:bc:63:d5:e4:a8:90:3c:
4e:e1:57:8f:38:9d:0b:be:34:b0:2b:82:0f:19:2d:
4b:5a:ef:a8:2d:b0:95:3e:5c:1a:10:d0:32:40:8d:
60:91:85:51:32:64:cb:f2:9d:c5:49:63:87:a9:f7:
85:17:ad:55:e6:2c:22:2c:08:60:94:69:81:66:68:
be:3f:9e:0c:bc:e2:90:94:e6:f8:cd:83:0a:76:57:
40:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:97:3E:F6:33:3A:14:28:7E:0B:93:DA:17:6D:CE:BF:BF:47:01:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/3d216775-1ad8-37ce-9988-48bac3b0b375.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.149.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:07:01:b5:c4:bc:4c:c5:61:fb:83:07:70:29:8c:75:c8:db:
79:4b:67:28:97:ea:aa:f0:04:9b:be:94:17:8a:3e:59:ba:91:
0b:3e:e4:40:b6:c2:37:9d:cd:9e:9d:85:ba:92:2d:d2:1e:d3:
dc:41:aa:b3:83:d0:4b:41:3e:ea:87:44:eb:ce:e8:5c:b7:32:
1f:e9:2b:f5:9e:09:98:ce:12:c3:0c:7c:91:50:cf:5e:00:ee:
f1:31:0c:e0:ac:fb:c6:39:99:fa:73:94:90:fe:9b:7a:2f:9e:
71:db:40:a1:9e:bf:9c:f0:bd:14:22:54:e1:3c:17:8f:61:40:
3c:37:54:8d:ce:64:81:d4:11:4a:03:ef:79:a9:8f:84:d6:b1:
6d:aa:87:41:c1:df:47:bc:20:e8:6c:32:75:83:96:62:28:65:
c9:88:0a:76:2b:78:ff:06:1d:a8:05:45:38:5f:2f:03:03:c4:
bb:24:e6:bd:5a:ab:51:20:c4:90:e7:9f:17:ad:d9:a5:f1:7c:
7d:c8:23:81:e8:e7:41:3d:bf:e2:41:b4:7c:09:72:e8:0c:93:
39:34:70:a6:a2:64:eb:97:95:53:02:26:67:66:07:f7:b4:db:
26:cd:62:30:82:7a:21:e4:8b:9e:dd:52:7e:5f:f7:50:8d:de:
fb:9a:11:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:54:13 2026 by rpki-client