
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/aaca5fa2-8430-3b93-a070-7695b9cbc458.roa
File: aaca5fa2-8430-3b93-a070-7695b9cbc458.roa (raw, json)
Hash identifier: ts90VB6QH5RYQJ7+QcwJtRkfxlPZd0tyfyUsT/5tcrU=
Subject key identifier: 97:FB:20:C7:0D:FC:FC:14:A9:DF:DB:FB:3B:76:0E:24:A1:5A:D4:8D
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584DB8EC3929412D41B873E38520
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/aaca5fa2-8430-3b93-a070-7695b9cbc458.roa
Signing time: Mon 04 May 2026 13:46:16 +0000
ROA not before: Mon 04 May 2026 13:46:16 +0000
ROA not after: Sun 02 Aug 2026 13:46:16 +0000
asID: 198588
IP address blocks: 107.149.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 09 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b8:ec:39:29:41:2d:41:b8:73:e3:85:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: May 4 13:46:16 2026 GMT
Not After : Aug 2 13:46:16 2026 GMT
Subject: CN=b8932b70-9405-4adf-aa0e-60586e51edcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5b:98:a0:f3:a7:b3:9b:d9:a3:69:34:ec:0b:
54:0c:9c:58:b9:de:99:68:7b:a8:dd:af:6e:c2:e7:
4b:ac:b0:77:fa:3d:6c:26:21:5a:82:1c:62:bb:87:
5c:5d:03:98:b7:8d:7a:31:f5:22:c4:42:e3:54:d9:
d1:8d:99:a3:e8:68:dd:db:28:09:96:0e:8f:cc:16:
cf:64:76:32:63:2b:92:df:36:14:d1:05:32:37:8e:
18:56:ed:01:b3:89:2d:41:cf:71:0c:c5:9e:79:ff:
98:85:e8:fd:bd:a0:59:ff:de:12:eb:e5:40:09:8e:
2d:5a:da:eb:73:5a:b1:44:61:31:58:31:13:4b:74:
13:ed:43:06:a5:1d:45:92:68:bf:84:e9:f9:ff:d4:
55:6a:1f:55:5a:85:83:a0:0a:cf:5e:e9:39:3e:aa:
de:d1:b0:c0:7d:fc:d3:9f:1c:3d:6a:4c:5b:72:83:
34:7f:49:54:b2:bc:a9:56:62:ff:6c:78:86:8f:eb:
b1:4d:ba:c1:1d:a0:f4:b4:e7:bf:32:a6:b3:b9:3d:
4a:16:6b:3f:bb:51:b4:ae:66:18:85:cf:1c:a4:a6:
b1:79:5d:b1:8e:89:81:da:f6:7a:4a:31:08:d1:15:
bf:56:2a:f9:2d:93:b8:fb:a0:bd:d4:c3:90:de:29:
26:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FB:20:C7:0D:FC:FC:14:A9:DF:DB:FB:3B:76:0E:24:A1:5A:D4:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/aaca5fa2-8430-3b93-a070-7695b9cbc458.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.149.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:40:b3:53:33:56:da:86:8c:39:96:32:88:a4:af:8d:66:9b:
ba:f7:7d:16:6b:1e:3e:8a:46:69:36:8a:ea:b1:ea:e2:c1:a3:
fd:fb:bb:4a:bc:10:29:e2:2e:74:bf:68:07:6b:16:1f:8f:ca:
f2:58:3d:0e:00:b4:1d:1a:5c:0f:e8:56:81:f8:79:2f:1c:78:
06:0e:65:4d:5a:f1:e6:3c:48:47:a3:f7:aa:93:7c:fb:54:14:
27:78:b6:eb:0f:0e:13:be:f7:07:43:0e:f3:69:96:fe:ab:92:
85:a6:66:68:4b:67:b0:04:2e:c3:1b:2b:56:eb:5e:61:5d:f3:
26:5d:5d:3d:ba:6b:cf:3c:98:f9:3a:ca:b0:fe:f3:6b:09:86:
31:fc:fd:9b:05:fe:81:15:67:97:19:87:ee:f9:fe:d9:68:01:
54:9e:9f:67:93:ce:3e:aa:69:1f:d5:24:d7:98:e2:28:e4:61:
6e:90:5b:05:1a:b8:e5:b6:1e:2c:8c:c1:ad:e0:19:87:3b:9e:
5e:05:9a:af:65:ee:7c:23:d4:5c:57:0a:ab:56:a6:0a:ba:2b:
54:54:25:8d:51:8c:85:e5:ca:91:f8:f1:13:47:f1:cd:fd:49:
d8:e8:f1:5d:33:ba:12:88:ce:aa:1c:c2:f4:34:f8:99:1d:8b:
6f:44:50:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 05:38:53 2026 by rpki-client