
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/57e59a80-25de-3a88-8329-a612aabbf07a.roa
File: 57e59a80-25de-3a88-8329-a612aabbf07a.roa (raw, json)
Hash identifier: jIKKDxNe86uIrFUUBhJ190v0tqHgFAQGdZPyA7hjdVQ=
Subject key identifier: FC:2C:3D:54:C8:86:09:49:C3:1C:63:88:0F:32:9C:0A:63:F0:7B:E7
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584B41E71CC1DC13F5059ED312A0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/57e59a80-25de-3a88-8329-a612aabbf07a.roa
Signing time: Sat 20 Sep 2025 13:00:41 +0000
ROA not before: Sat 20 Sep 2025 13:00:41 +0000
ROA not after: Fri 19 Dec 2025 14:00:41 +0000
asID: 398478
IP address blocks: 107.149.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:41:e7:1c:c1:dc:13:f5:05:9e:d3:12:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Sep 20 13:00:41 2025 GMT
Not After : Dec 19 14:00:41 2025 GMT
Subject: CN=7696d92c-1a2f-4051-b7c8-b4f195750749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bb:f0:92:eb:b0:4b:2e:a7:fd:69:02:69:cb:
39:bf:1f:40:de:45:2e:77:e3:c2:21:88:3a:65:8f:
ea:57:8b:86:06:63:ea:2e:e3:27:12:67:95:48:3f:
58:22:ab:00:af:0f:61:3d:96:71:8a:03:fb:36:ac:
61:ff:c3:7b:1a:c4:3e:4b:f5:06:38:ee:7f:16:b5:
28:88:a2:84:e3:7f:56:76:88:bc:87:3f:e6:1d:01:
50:1c:82:07:3c:b6:2c:17:81:f6:8e:ff:b4:77:2e:
7c:89:24:25:9d:7e:20:3c:fb:d2:2f:b2:e3:bd:82:
6c:89:50:4e:d9:eb:6d:18:9a:5b:d9:a0:8c:ca:4b:
d4:39:14:08:70:86:96:25:0a:d0:cf:29:ef:83:ab:
5c:dc:80:2f:1d:7c:e4:f9:c2:1c:3a:4d:a5:55:96:
9b:61:3f:15:5c:73:1c:a6:44:ea:8f:a2:b2:77:1c:
22:af:51:06:92:23:fd:f2:a5:c5:c1:c1:1b:48:bf:
d3:4f:2a:58:4f:28:bf:6d:ba:a4:50:7e:58:7c:29:
1d:af:b8:a6:c6:50:ef:2f:4a:98:5a:15:c8:43:5b:
93:b8:d7:bf:e5:96:bb:ba:15:5d:4d:9a:eb:18:32:
6c:f0:9c:48:76:97:d0:cc:48:b1:42:77:a8:4f:f5:
55:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2C:3D:54:C8:86:09:49:C3:1C:63:88:0F:32:9C:0A:63:F0:7B:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/57e59a80-25de-3a88-8329-a612aabbf07a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.149.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:22:ad:30:bf:5e:d3:d9:f4:fe:3a:93:a7:ad:9d:72:50:d0:
0f:13:6e:70:ef:a7:38:22:1b:0e:e2:a4:b6:ec:5c:97:dd:12:
e3:4c:75:6a:b8:bf:bf:bd:d8:ae:55:5c:be:31:75:91:7f:f2:
8a:ab:2e:c8:ac:f7:fa:6d:95:46:fc:1c:21:55:af:4c:a4:52:
b6:f6:74:56:43:d3:4d:ab:ab:b9:3c:6a:33:c5:e6:75:84:c6:
8a:8e:4c:25:cd:7a:0d:60:01:86:09:a8:f7:72:2f:19:3a:97:
41:82:49:cc:ff:a8:2b:67:4e:6e:67:54:1b:3c:b6:42:2f:5c:
e6:87:63:ad:bd:33:4f:45:04:b6:78:d6:7a:19:dc:7a:34:6e:
bb:76:ce:0f:80:5b:d1:04:ed:4c:d8:b7:5e:6d:b8:f1:df:6a:
0d:9b:77:10:4a:c9:dc:1a:5a:b5:d2:ff:fd:99:60:76:95:7b:
19:ee:28:be:8c:47:ec:5e:a4:c7:7d:ab:0b:05:10:45:b5:42:
db:50:5b:5f:74:2a:af:00:59:2f:84:b5:08:c1:bc:d6:79:e8:
a2:54:91:6e:60:bc:94:6b:a6:14:0a:73:e4:98:01:72:a9:d2:
c8:07:d4:e4:32:e9:3f:35:3a:82:2c:d8:9a:34:37:d2:80:0f:
60:a5:f2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 04:46:06 2025 by rpki-client