
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5cf1f111-e41d-37e8-898c-61939fe4a9bd.roa
File: 5cf1f111-e41d-37e8-898c-61939fe4a9bd.roa (raw, json)
Hash identifier: xvxcbLpgEgHZ1yzMCNS9MfIxcH0yEXb1VY6Krx0Q8Ts=
Subject key identifier: 48:30:C0:52:44:5F:E4:43:D5:9A:F3:E1:E6:F0:D7:18:9C:41:92:94
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584F9E987DF190432F3315F06E00
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5cf1f111-e41d-37e8-898c-61939fe4a9bd.roa
Signing time: Sun 25 Oct 2026 13:00:13 +0000
ROA not before: Sun 25 Oct 2026 13:00:13 +0000
ROA not after: Sat 23 Jan 2027 14:00:13 +0000
asID: 398823
IP address blocks: 107.148.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:9e:98:7d:f1:90:43:2f:33:15:f0:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Oct 25 13:00:13 2026 GMT
Not After : Jan 23 14:00:13 2027 GMT
Subject: CN=4c2083b1-66f0-4732-aa66-876595c36fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:4f:c5:2f:74:74:ee:49:bf:37:88:b3:40:
83:94:11:73:65:b1:ce:01:ba:cc:b8:6e:99:69:67:
1f:9a:42:c0:11:5a:64:8f:4b:ff:85:b1:08:18:ac:
3e:56:93:ea:7b:aa:d4:1a:ce:56:3c:44:3f:56:2c:
28:a5:a2:a2:42:36:f6:29:7f:5d:39:fa:2c:4e:0e:
5b:e0:6f:01:43:16:c8:55:68:0f:a7:6c:42:58:73:
7e:c2:f3:3b:31:14:34:fd:b7:2f:d6:0c:db:1d:12:
8b:29:d9:ac:12:84:4c:4f:c6:95:85:8d:66:a7:78:
30:a4:71:5e:c9:76:9e:a1:19:08:0f:53:f6:21:78:
be:1c:78:78:c4:59:94:84:1f:b9:e1:c7:25:9c:67:
07:2e:89:af:a7:bb:0e:63:47:c5:46:ca:15:d8:e1:
9d:5e:dc:a1:a3:a9:3b:61:69:07:7a:69:1d:4f:9d:
4f:41:ca:e4:d0:e7:98:05:ef:e8:b5:a2:71:4c:6b:
7c:1c:ac:36:36:98:ee:6a:9e:76:64:86:58:38:de:
8c:70:d9:f6:aa:3b:1b:7c:57:5e:6c:03:d5:70:7e:
e9:a0:c9:fb:f1:d7:f5:48:4b:bb:13:0f:1f:7d:be:
92:cc:3f:4c:96:41:22:eb:ad:ea:77:15:57:be:dd:
49:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:30:C0:52:44:5F:E4:43:D5:9A:F3:E1:E6:F0:D7:18:9C:41:92:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/5cf1f111-e41d-37e8-898c-61939fe4a9bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:b1:be:a1:f7:42:77:48:ad:d8:ba:bc:d1:cd:4c:98:4c:09:
b0:3c:92:2a:a8:1a:d6:03:12:44:fd:cc:fd:d6:dd:e1:91:f6:
7c:40:8b:f9:3f:bd:ea:dc:02:5d:4e:ac:cc:9b:78:74:1f:40:
c8:1b:0d:92:f1:d1:f8:cd:57:a7:68:ee:46:78:00:da:8a:08:
c2:db:35:81:19:2e:d4:4e:48:23:04:11:1a:3c:b3:bc:20:05:
70:37:1e:d6:10:5d:bd:0d:b2:0f:ba:f8:fd:da:83:a3:76:8f:
fc:36:d6:cd:a8:33:24:31:2d:0c:e0:ba:ef:82:e6:8f:ed:be:
19:30:91:c2:4c:b9:1d:7f:9e:d7:b9:47:95:61:e6:a1:f1:d0:
92:27:9c:fa:f9:28:c4:42:75:5d:30:f2:80:5d:8d:fd:eb:ab:
2b:a1:15:e2:28:28:13:a1:c8:7f:d9:47:93:06:39:39:2d:83:
90:75:b6:f1:be:47:ac:6d:03:86:17:77:45:a8:63:2d:bd:e8:
f1:6b:79:fc:6f:cb:45:f9:97:94:92:4e:0c:a6:3a:58:80:24:
12:34:85:63:bf:1e:53:c7:96:09:6f:9c:7d:c7:38:ee:80:dc:
ea:dc:65:01:59:4a:50:f4:82:f3:d0:9e:0a:dc:a4:b4:75:7a:
0b:5c:ab:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:02:34 2026 by rpki-client