
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a8b847d2-79c6-3d14-a620-95bfc723b95c.roa
File: a8b847d2-79c6-3d14-a620-95bfc723b95c.roa (raw, json)
Hash identifier: weTlfJpPT7L0+tFn+66lDw4OIaToT32vsch+++Pmzhk=
Subject key identifier: 97:23:3F:79:A3:A2:90:7F:94:5F:77:EA:21:F2:43:DE:B2:4A:03:86
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584F0DDB57A5E29AE782171C4100
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a8b847d2-79c6-3d14-a620-95bfc723b95c.roa
Signing time: Thu 03 Sep 2026 16:42:54 +0000
ROA not before: Thu 03 Sep 2026 16:42:54 +0000
ROA not after: Wed 02 Dec 2026 17:42:54 +0000
asID: 13335
IP address blocks: 108.186.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0d:db:57:a5:e2:9a:e7:82:17:1c:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Sep 3 16:42:54 2026 GMT
Not After : Dec 2 17:42:54 2026 GMT
Subject: CN=2acbf78f-f9bd-480e-8a59-00affd6023f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:be:d6:55:fd:5b:25:81:18:99:ee:af:71:92:
f1:5a:b8:df:14:09:e3:d5:a1:d2:67:93:a8:50:51:
8c:49:58:19:bb:70:0a:21:ef:b1:ab:1d:49:62:d1:
c3:7f:57:46:b5:99:fa:10:82:0b:3c:e6:82:19:e8:
00:65:19:3c:a0:8f:a9:79:40:4c:2c:f6:d4:80:b4:
91:db:d2:58:13:79:4a:7b:9e:ae:ca:93:3a:a4:e1:
2c:2e:53:4e:eb:47:5b:19:ca:18:f9:02:f1:8d:01:
c2:e7:7b:73:f5:00:00:23:33:bd:a5:34:de:aa:80:
c4:50:a5:ae:d0:fe:83:69:c6:76:31:b9:3d:80:70:
f3:e9:d5:a8:9b:df:57:22:9d:25:2d:6b:20:a8:64:
d7:43:ab:80:86:d7:31:37:9a:2b:38:cd:69:71:4a:
9d:da:f2:41:2c:7a:8f:ce:b3:67:bb:d4:dd:ab:2c:
a6:90:96:47:27:7b:f2:ae:31:d7:86:52:85:10:52:
6b:8a:75:74:e6:1c:47:0f:1e:5c:7a:7f:19:27:3d:
a5:04:a1:9c:35:2f:40:5d:1c:9f:ca:be:6b:fe:da:
80:3a:d9:22:64:bd:d9:9e:94:05:cf:4a:cb:ec:78:
6a:2d:c1:56:b5:de:33:6b:32:cf:f0:ca:da:56:1d:
c0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:23:3F:79:A3:A2:90:7F:94:5F:77:EA:21:F2:43:DE:B2:4A:03:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/a8b847d2-79c6-3d14-a620-95bfc723b95c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
108.186.43.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:a2:12:8c:00:90:8f:9b:ff:db:1a:6c:e2:09:01:3b:c8:b9:
4c:a2:f9:6f:70:c8:92:46:3c:e2:b0:35:ee:3d:84:de:d3:c9:
1d:75:d1:67:1b:38:05:bd:00:fa:0e:fc:7f:06:0e:f5:8f:45:
90:94:d8:40:b9:e0:17:47:85:60:42:17:02:16:ff:e1:1c:46:
59:46:72:85:b3:b2:9e:91:aa:63:ac:17:4f:31:63:2a:db:4d:
d4:da:01:f3:9a:5b:83:dd:37:06:47:a7:ff:68:79:04:7c:e3:
18:78:d6:24:1c:db:4f:49:59:5f:99:38:a5:21:bd:60:fc:62:
bb:44:e1:8e:50:44:c5:82:8b:fe:2c:96:60:15:92:64:6f:23:
11:11:46:8b:6f:9b:40:51:ce:0d:93:f7:58:2b:0d:02:a0:36:
0b:18:69:a4:0a:ea:56:92:e6:41:e0:b0:63:32:70:be:80:7d:
15:c3:21:e2:ff:2e:68:48:70:53:b9:06:f4:c3:05:63:4b:1e:
9a:b6:60:59:88:f9:b2:6d:a6:b9:89:44:04:c2:49:8a:4e:8a:
8c:c5:14:c4:23:57:2d:ea:62:44:32:65:83:53:6e:05:39:ac:
73:61:d8:54:bb:30:44:75:74:72:8b:16:a5:94:ee:bc:5f:d0:
6b:fa:1f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:48 2026 by rpki-client