
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/8e2655be-04b8-36ad-894f-889a069e37c3.roa
File: 8e2655be-04b8-36ad-894f-889a069e37c3.roa (raw, json)
Hash identifier: 13IiRWMwkMi+fVHMSug+Yo38yJyv4bJPH/BcieW6xOM=
Subject key identifier: B9:A0:E7:86:5E:07:63:5E:48:66:E6:44:5C:9A:D0:E5:DA:DA:9E:E8
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584B41E71CE5219820E64BED9B80
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/8e2655be-04b8-36ad-894f-889a069e37c3.roa
Signing time: Sat 20 Sep 2025 13:00:41 +0000
ROA not before: Sat 20 Sep 2025 13:00:41 +0000
ROA not after: Fri 19 Dec 2025 14:00:41 +0000
asID: 398478
IP address blocks: 107.149.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:41:e7:1c:e5:21:98:20:e6:4b:ed:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Sep 20 13:00:41 2025 GMT
Not After : Dec 19 14:00:41 2025 GMT
Subject: CN=2f738fdb-3b2a-4aef-9cad-9ce2a809540e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8f:db:ac:f8:3d:09:ce:a0:3a:4d:75:ee:9a:
3e:6c:e0:33:2b:12:e7:11:d4:13:93:67:55:a9:ec:
a3:bf:6e:af:2e:46:69:55:dc:7f:fc:af:75:65:22:
be:f6:99:29:ea:cf:ee:54:b5:a8:7e:d6:cd:ff:96:
60:ca:87:77:96:48:44:1b:d5:b0:96:0d:55:98:8d:
c3:d1:76:75:a2:e2:6a:a3:fd:9f:dd:27:47:49:9c:
fd:a9:4b:9a:83:28:3b:99:40:2f:97:c1:8a:72:7d:
5f:9a:99:d7:ca:fd:4c:3c:06:b2:18:be:f0:c6:b5:
11:70:5e:ae:11:e2:4a:b3:5e:6f:6d:1f:14:b8:ab:
b4:fa:2f:72:7b:e3:86:6f:0f:f9:97:12:df:ae:55:
84:f1:59:a6:2b:b1:44:00:01:24:9d:4d:e9:51:9c:
41:6c:a7:56:a5:52:49:e8:21:ee:9d:37:45:ac:ef:
d4:3f:80:c4:66:36:85:a5:91:67:dd:a6:d8:db:bb:
74:46:c6:bb:4e:33:e0:7d:76:b2:58:51:55:fe:b7:
1a:60:1e:2c:21:88:05:f3:2a:1d:8c:eb:be:8d:63:
5f:f5:55:ee:99:78:9d:b4:26:5e:28:d5:6b:26:fa:
2b:fd:3a:50:02:af:d3:ea:bb:29:a4:af:90:71:8c:
a3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A0:E7:86:5E:07:63:5E:48:66:E6:44:5C:9A:D0:E5:DA:DA:9E:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/8e2655be-04b8-36ad-894f-889a069e37c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.149.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:da:fd:75:32:29:69:2d:59:62:27:da:dd:d1:ad:90:58:f4:
92:0c:a6:2f:41:60:6e:4f:54:f5:1f:31:1a:c6:d2:ca:53:7d:
98:dd:47:ee:2b:93:80:13:d1:2a:6c:5c:b9:f6:40:ea:9f:29:
30:9e:9a:fe:5f:4c:27:45:9a:44:2e:b4:64:19:7c:a5:86:a6:
f1:51:da:c8:f9:c5:01:6d:2d:e8:11:e6:7c:7e:2b:83:05:86:
16:af:51:39:73:fe:d6:b4:95:30:30:fa:54:19:26:f2:e4:ff:
0e:19:cb:50:c7:9b:09:ab:27:14:0b:a3:18:19:cf:6a:3a:24:
7d:47:90:74:59:08:23:0b:a8:14:57:4e:c8:5d:a6:07:3c:20:
be:ce:e9:bf:78:19:69:19:4b:6c:d5:61:84:a6:ba:34:6e:96:
80:55:0f:e0:97:77:d9:dc:85:dc:52:c8:7a:85:9c:fa:68:d1:
73:a6:dc:ad:80:d0:f4:74:b2:15:ca:9d:40:56:5c:85:70:52:
ec:f9:fc:5b:b4:c9:01:08:a8:15:8d:e3:06:5b:49:05:57:88:
51:b5:de:a7:31:40:f3:62:ce:96:25:b7:7a:83:94:3c:9f:47:
91:a1:44:47:53:f7:a4:59:c2:5b:fa:57:2c:ce:da:3f:b2:3f:
1a:28:02:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtB5xzlIZgg5kvtm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk1ZTdhNzEtMmMzNi00YzVmLWFjNjktNGY1NmMyM2U5
NDRmMB4XDTI1MDkyMDEzMDA0MVoXDTI1MTIxOTE0MDA0MVowLzEtMCsGA1UEAxMk
MmY3MzhmZGItM2IyYS00YWVmLTljYWQtOWNlMmE4MDk1NDBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo/brPg9Cc6gOk117po+bOAzKxLnEdQTk2dV
qeyjv26vLkZpVdx//K91ZSK+9pkp6s/uVLWoftbN/5Zgyod3lkhEG9Wwlg1VmI3D
0XZ1ouJqo/2f3SdHSZz9qUuagyg7mUAvl8GKcn1fmpnXyv1MPAayGL7wxrURcF6u
EeJKs15vbR8UuKu0+i9ye+OGbw/5lxLfrlWE8VmmK7FEAAEknU3pUZxBbKdWpVJJ
6CHunTdFrO/UP4DEZjaFpZFn3abY27t0Rsa7TjPgfXayWFFV/rcaYB4sIYgF8yod
jOu+jWNf9VXumXidtCZeKNVrJvor/TpQAq/T6rsppK+QcYyjfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLmg54ZeB2NeSGbmRFya0OXa2p7oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85OTVl
N2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2YzIzZTk0NGYvOGUyNjU1YmUtMDRiOC0z
NmFkLTg5NGYtODg5YTA2OWUzN2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTk1ZTdhNzEtMmMzNi00YzVmLWFj
NjktNGY1NmMyM2U5NDRmLzk5NWU3YTcxLTJjMzYtNGM1Zi1hYzY5LTRmNTZjMjNl
OTQ0Zi5jcmwwHwYDVR0jBBgwFoAUEyauh3Pp03mLv/lHxgr7jN3gmH4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85OTVlN2E3MS0yYzM2LTRjNWYtYWM2OS00ZjU2
YzIzZTk0NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa5XwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTa/XUyKWktWWIn2t3RrZBY9JIMpi9BYG5PVPUfMRrG0spTfZjdR+4r
k4AT0SpsXLn2QOqfKTCemv5fTCdFmkQutGQZfKWGpvFR2sj5xQFtLegR5nx+K4MF
hhavUTlz/ta0lTAw+lQZJvLk/w4Zy1DHmwmrJxQLoxgZz2o6JH1HkHRZCCMLqBRX
Tshdpgc8IL7O6b94GWkZS2zVYYSmujRuloBVD+CXd9nchdxSyHqFnPpo0XOm3K2A
0PR0shXKnUBWXIVwUuz5/Fu0yQEIqBWN4wZbSQVXiFG13qcxQPNizpYlt3qDlDyf
R5GhREdT96RZwlv6VyzO2j+yPxooAps=
-----END CERTIFICATE-----
Generated at Sat Oct 25 04:44:20 2025 by rpki-client