
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c0b24489-852f-36e4-8bfb-88f702345814.roa
File: c0b24489-852f-36e4-8bfb-88f702345814.roa (raw, json)
Hash identifier: nsEGkqCmIKVUDEANv4/v/FWKcnANYn9EAvWM7vB1hAE=
Subject key identifier: F2:F7:1E:42:79:68:E5:F5:28:5C:17:08:B4:8A:54:D8:4F:47:24:14
Certificate issuer: /CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Certificate serial: 010D0C9F4328584B9E07B5EAF6320411073C33C0
Authority key identifier: 13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c0b24489-852f-36e4-8bfb-88f702345814.roa
Signing time: Thu 23 Oct 2025 13:00:38 +0000
ROA not before: Thu 23 Oct 2025 13:00:38 +0000
ROA not after: Wed 21 Jan 2026 14:00:38 +0000
asID: 21859
IP address blocks: 107.148.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 27 Oct 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:9e:07:b5:ea:f6:32:04:11:07:3c:33:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=995e7a71-2c36-4c5f-ac69-4f56c23e944f
Validity
Not Before: Oct 23 13:00:38 2025 GMT
Not After : Jan 21 14:00:38 2026 GMT
Subject: CN=0dc3f11d-6839-42ed-95ee-ecc225860f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3c:9e:25:76:9c:1f:e0:52:b4:9d:3d:20:47:
dd:29:1f:f0:da:89:42:a4:49:15:df:d4:6f:74:bc:
91:66:8c:e9:4b:ff:1a:67:99:1d:c1:4c:b1:db:3e:
3f:6c:44:40:31:a4:ca:25:ec:ba:6e:fb:8e:ef:ca:
ab:ec:98:3b:7c:e7:bd:a3:99:87:6f:75:d1:7d:9e:
f8:f1:ce:69:0c:a4:04:04:75:05:c1:44:04:c4:25:
ba:19:9b:9d:06:3c:74:2e:aa:28:ba:99:71:c7:ca:
94:f3:52:d9:89:e8:01:94:e8:6c:69:fb:81:40:40:
f2:10:f9:1e:11:3f:21:0a:c6:72:50:9c:96:24:fb:
9a:a2:c5:06:97:37:4c:a2:cb:4a:56:14:aa:10:a2:
6a:be:20:77:c5:a7:a0:be:20:f2:62:22:41:cc:00:
68:9b:5c:9a:31:b4:f1:9c:b7:dc:2f:c1:e8:dd:29:
04:70:70:05:90:cc:ef:57:31:f8:ed:8f:d5:98:42:
1b:a6:aa:9f:fa:7b:98:2b:a4:60:3e:bb:50:c2:84:
29:e4:b4:47:87:22:9c:ed:1b:33:6d:3f:ac:19:0c:
0f:1c:f2:55:f6:b2:5a:6c:c6:76:a9:12:f1:77:33:
8f:3c:49:eb:c0:52:73:4c:ee:d0:a1:78:b8:c0:02:
7c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F7:1E:42:79:68:E5:F5:28:5C:17:08:B4:8A:54:D8:4F:47:24:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/c0b24489-852f-36e4-8bfb-88f702345814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f/995e7a71-2c36-4c5f-ac69-4f56c23e944f.crl
X509v3 Authority Key Identifier:
keyid:13:26:AE:87:73:E9:D3:79:8B:BF:F9:47:C6:0A:FB:8C:DD:E0:98:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/995e7a71-2c36-4c5f-ac69-4f56c23e944f.cer
sbgp-ipAddrBlock: critical
IPv4:
107.148.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:3e:aa:3f:45:30:4c:da:e3:3b:d8:25:66:51:67:09:a0:9b:
1f:9b:a5:8b:90:f3:f0:74:d1:45:8a:24:33:06:95:46:c4:89:
55:8d:fd:df:83:2b:cc:3e:4f:62:1c:44:e9:18:11:5a:b1:fd:
c1:fb:5d:75:53:76:6f:46:a4:ef:81:72:da:07:9b:7a:af:3b:
3b:a0:75:c9:dc:6f:68:6b:72:66:87:f0:1c:b3:74:ce:c2:bb:
63:cd:ab:13:77:89:38:7b:00:ad:4d:10:28:df:ac:be:4d:13:
99:50:b2:2f:6a:3e:b2:ca:5d:27:07:b6:56:9d:31:4d:cb:29:
c7:27:2e:b1:ea:ae:ea:f8:a7:42:48:33:7b:49:06:7d:db:3e:
79:62:ea:47:6f:63:63:42:55:c8:7c:3e:80:6c:d4:62:70:bd:
37:3c:91:8f:88:dd:0c:63:4b:ed:a3:bf:b1:43:2b:55:ec:78:
27:64:22:1f:ea:51:9f:bd:5b:07:46:95:ec:38:bf:e6:dd:c1:
23:a7:4c:4a:94:c0:0f:67:d9:9b:e3:1f:4e:67:4d:4d:a5:f8:
d9:87:c4:9d:c9:1b:31:e3:56:a2:b6:60:c0:2a:19:d3:c7:12:
04:43:bc:db:be:ff:0b:8b:2c:bf:12:ea:7a:3d:c2:ce:f0:a3:
0b:46:76:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 04:49:38 2025 by rpki-client