
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4733db16-2efb-3e7c-a7a8-fe62ff1c96c0.roa
File: 4733db16-2efb-3e7c-a7a8-fe62ff1c96c0.roa (raw, json)
Hash identifier: pYzLDN1ca0JiE2W/yt8cp3nTPzL/dyPDw6bE4W6pGnw=
Subject key identifier: 1B:C7:60:47:00:F1:0C:C1:F3:27:0D:1E:DE:84:8F:31:D0:C8:8E:81
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584F62931BB564BA64B84541C280
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4733db16-2efb-3e7c-a7a8-fe62ff1c96c0.roa
Signing time: Sun 04 Oct 2026 01:00:13 +0000
ROA not before: Sun 04 Oct 2026 01:00:13 +0000
ROA not after: Sat 02 Jan 2027 02:00:13 +0000
asID: 8796
IP address blocks: 107.149.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 30 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:62:93:1b:b5:64:ba:64:b8:45:41:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Oct 4 01:00:13 2026 GMT
Not After : Jan 2 02:00:13 2027 GMT
Subject: CN=fce29c19-9b0a-4022-9aeb-fd5caedd243b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:d2:d3:1e:2a:da:e2:20:1b:65:98:37:da:
c2:66:03:1a:91:ff:d8:49:7d:1b:a6:ce:67:b1:d8:
71:92:da:75:ce:54:3d:09:e0:9f:3d:e2:b5:93:94:
6d:06:9d:d9:58:37:77:35:2b:b1:d5:22:c4:89:9d:
a0:7d:de:63:49:75:8a:31:59:99:db:50:c7:4d:8d:
fa:4e:bd:82:ce:39:37:57:46:ff:4a:5d:dc:c7:48:
66:27:54:b3:9d:ff:3d:41:a9:4e:39:1f:b9:bc:db:
cd:f9:c7:81:a4:64:8c:0b:67:9a:12:f8:77:2f:ca:
c4:d6:f8:46:ef:59:f3:e8:1a:6c:cf:9e:93:a6:e4:
f7:98:a0:bf:ab:5a:b2:9b:96:83:90:b1:78:65:7b:
1d:11:f0:51:4c:d3:66:25:70:e8:88:b3:2a:0d:07:
20:af:5f:00:39:a7:10:f4:d8:39:9c:e5:06:05:5e:
e9:a5:5a:22:9f:34:a2:58:b6:b6:e3:9d:48:df:0f:
79:e6:ef:b3:86:be:ec:65:b3:fc:85:b5:bc:33:17:
23:00:ec:a2:82:cb:2f:6e:ee:9b:c5:eb:88:16:c2:
e5:fa:78:28:21:ea:b5:c9:32:44:f8:0a:19:cf:c6:
b2:1c:ee:f8:ec:55:15:a0:8d:e9:09:fe:78:6e:c3:
50:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C7:60:47:00:F1:0C:C1:F3:27:0D:1E:DE:84:8F:31:D0:C8:8E:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/4733db16-2efb-3e7c-a7a8-fe62ff1c96c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.149.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:ca:7c:52:ae:86:53:7a:fc:b8:b7:d2:af:26:f1:8e:fd:ff:
d4:59:12:d1:63:60:2a:24:fb:06:04:20:2f:3c:5b:35:0d:a8:
e1:97:3d:99:c1:16:6d:71:e8:02:63:5b:bc:72:8d:5f:19:c5:
4b:4b:d1:e4:ae:e3:d2:b8:c9:47:22:b3:13:09:e0:58:28:ff:
02:d6:68:70:32:9e:c2:09:dd:65:4f:de:88:e3:c7:ab:21:08:
3e:07:a0:12:72:36:39:2a:be:ff:ed:4b:69:46:e8:73:66:e6:
c3:08:2e:f9:9c:ef:a8:5b:e0:21:42:1c:84:8e:b4:e5:ba:75:
e7:29:c2:71:4c:66:55:78:61:1d:5a:01:0b:da:8d:d2:b2:2d:
ad:b1:e1:87:20:5d:97:35:c9:d3:98:d2:80:04:ae:cb:27:5d:
79:7b:c2:24:a7:ad:b3:3a:c3:34:16:82:68:a7:97:a9:3c:66:
ce:8c:66:fa:41:82:a5:88:02:49:e1:7c:1e:ed:45:bd:fc:7a:
31:67:4e:7a:80:7f:1c:40:cd:d6:56:d6:2f:f2:16:79:7e:b0:
ce:4f:ed:e0:39:c3:f4:05:21:d8:d5:d7:08:5b:6d:f0:a0:3c:
b9:41:60:79:a6:b3:57:3a:33:c0:18:11:62:16:0d:26:5e:48:
14:41:18:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:38:32 2026 by rpki-client